- Table of Contents
- Related Documents
-
Title | Size | Download |
---|---|---|
05-MPLS L3VPN Commands | 448.26 KB |
Contents
MPLS L3VPN configuration commands
default local-preference (BGP-VPNv4/BGP-VPNv6 subaddress family view)
default med (BGP-VPNv4/BGP-VPNv6 subaddress family view)
description (VPN instance view)
display bgp vpnv4 all routing-table
display bgp vpnv4 peer received ip-prefix
display bgp vpnv4 route-distinguisher routing-table
display bgp vpnv4 routing-table label
display bgp vpnv4 vpn-instance routing-table
display bgp vpnv6 all routing-table
display bgp vpnv6 route-distinguisher routing-table
display bgp vpnv6 vpn-instance peer
display bgp vpnv6 vpn-instance routing-table
display fib vpn-instance ip-address
display ipv6 fib vpn-instance ipv6-address
filter-policy export (BGP-VPNv4 subaddress family view)
filter-policy export (BGP-VPNv6 subaddress family view)
filter-policy import (BGP-VPNv4 subaddress family view)
filter-policy import (BGP-VPNv6 subaddress family view)
ipv4-family (VPN instance view)
ipv6-family (VPN instance view)
peer advertise-community (BGP-VPNv4 subaddress family view)
peer as-path-acl (BGP-VPNv4 subaddress family view)
peer capability-advertise orf ip-prefix (BGP-VPNv4 subaddress family view)
peer default-route-advertise vpn-instance
peer filter-policy (BGP-VPNv4/BGP-VPNv6 subaddress family view)
peer ip-prefix (BGP-VPNv4 subaddress family view)
peer ipv6-prefix (BGP-VPNv6 subaddress family view)
peer label-route-capability (BGP view, BGP VPN instance view)
peer next-hop-invariable (BGP-VPNv4 subaddress family view)
peer preferred-value (BGP-VPNv4/BGP-VPNv6 subaddress family view)
peer public-as-only (BGP-VPNv4/BGP-VPNv6 subaddress family view)
peer route-policy (BGP-VPNv4/BGP-VPNv6 subaddress family view)
peer vpn-instance route-policy import
reserve-vlan (VPN instance view)
reset bgp vpn-instance dampening
reset bgp vpn-instance flap-info
route-distinguisher (VPN instance view)
tnl-policy (VPN instance view/IPv4 VPN view/IPv6 VPN view)
vpn-instance-capability simple
vpn-target (VPN instance view/IPv4 VPN view/IPv6 VPN view)
For information about the VPLS address family, see MPLS Configuration Guide.
default local-preference (BGP-VPNv4/BGP-VPNv6 subaddress family view)
Syntax
default local-preference value
undo default local-preference
View
BGP-VPNv4 subaddress family view, BGP-VPNv6 subaddress family view
Default level
2: System level
Parameters
value: Default value for the local preference, in the range of 0 to 4294967295. A greater value represents a higher priority.
Description
Use default local-preference to set the default value of the local preference.
Use undo default local-preference to restore the default.
By default, the default value of the local preference is 100.
Examples
# Devices A and B are connected to the outside AS. In BGP-VPNv4 subaddress family view of Device B, set the default local preference of Device B to 180, so that when a destination in the outside AS can be reached through both A and B, the BGP VPN-IPv4 route going through B to the destination is preferred.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] ipv4-family vpnv4
[Sysname-bgp-af-vpnv4] default local-preference 180
# Devices A and B are connected to the outside AS. In BGP-VPNv6 subaddress family of Device B, set the default local preference of device B to 180, so that when a destination in the outside AS can be reached through both A and B, the BGP VPN-IPv6 route going through B to the destination is preferred.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] ipv6-family vpnv6
[Sysname-bgp-af-vpnv6] default local-preference 180
default med (BGP-VPNv4/BGP-VPNv6 subaddress family view)
Syntax
default med med-value
undo default med
View
BGP-VPNv4 subaddress family view, BGP-VPNv6 subaddress family view
Default level
2: System level
Parameters
med-value: Default value of the Multi-Exit-Discriminator (MED), in the range of 0 to 4294967295.
Description
Use default med to set the default value of the system MED.
Use undo default med to restore the default.
By default, the default system MED value is 0.
With other criteria the same, the system selects the route with a smaller MED value as the AS external route.
Examples
# Set the default MED to 10 in BGP-VPNv4 subaddress family view.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] ipv4-family vpnv4
[Sysname-bgp-af-vpnv4] default med 10
# Set the default MED to 10 in BGP-VPNv6 subaddress family view.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] ipv6-family vpnv6
[Sysname-bgp-af-vpnv6] default med 10
description (VPN instance view)
Syntax
description text
undo description
View
VPN instance view
Default level
2: System level
Parameters
text: Description for the VPN instance, a string of 1 to 80 characters.
Description
Use description to configure a description for a VPN instance.
Use undo description to delete the description.
Examples
# Configure the description of VPN instance vpn1.
<Sysname> system-view
[Sysname] ip vpn-instance vpn1
[Sysname-vpn-instance-vpn1] description This is vpn1
display bgp vpnv4 all routing-table
Syntax
display bgp vpnv4 all routing-table [ [ network-address [ { mask | mask-length } [ longer-prefixes ] ] | as-path-acl as-path-acl-number | cidr | community [ aa:nn ]&<1-13> [ no-advertise | no-export | no-export-subconfed ] * [ whole-match ] | community-list { { basic-community-list-number | comm-list-name } [ whole-match ] | adv-community-list-number } | different-origin-as | peer ip-address { advertised-routes | received-routes } [ statistic ] | statistic ] [ | { begin | exclude | include } regular-expression ] | regular-expression as-regular-expression ]
View
Any view
Default level
1: Monitor level
Parameters
network-address: IP address of the destination segment.
mask: Network mask, in dotted decimal notation.
mask-length: Length of the network mask, in the range of 0 to 32.
longer-prefixes: Displays each routing entry that meets the following conditions:
1. Its destination IP address ANDed with the specified prefix equals the specified destination IP address ANDed with the specified prefix.
2. Its prefix length is shorter than or equal to the specified prefix length.
3. Its prefix length is the longest among the entries meeting the above two conditions.
as-path-acl as-path-acl-number: Filters routing information using the specified AS_PATH list. The as-path-acl-number argument is in the range of 1 to 256.
cidr: Displays Classless Inter-Domain Routing (CIDR) information.
community: Displays routing information for the specified BGP community in the routing table.
aa:nn&<1-13>: Community number. Both the aa and nn parameters range from 0 to 65535. &<1-13> means that you can enter the parameter combination up to 13 times.
no-advertise: A route with this attribute is not advertised to any other BGP peer.
no-export: A route with this attribute is not advertised out of the local AS or, if existing, the confederation. However, it is advertised to the other sub-ASs in the confederation.
no-export-subconfed: A route with this attribute is not advertised out of the local AS or to the other sub-ASs in the confederation.
whole-match: Performs exact match.
community-list: Displays routing information for the specified BGP community list in the routing table.
basic-community-list-number: Basic community list number in the range of 1 to 99.
comm-list-name: Name of a community attribute list, a string of 1 to 31 characters that contains at least one non-digit character.
adv-community-list-number: Advanced community list number in the range of 100 to 199.
different-origin-as: Displays information about routes with different AS origins.
peer ip-address: Specifies a peer by its IP address.
advertised-routes: Specifies the routing information sent to the specified peer.
received-routes: Specifies the routing information received from the specified peer.
statistic: Displays BGP VPNv4 route statistics.
|: Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide.
begin: Displays the first line that matches the specified regular expression and all lines that follow.
exclude: Displays all lines that do not match the specified regular expression.
include: Displays all lines that match the specified regular expression.
regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.
regular-expression as-regular-expression: Displays routing information matching the specified AS_PATH regular expression.
Description
Use display bgp vpnv4 all routing-table to display all BGP VPNv4 routing information.
Examples
# Display all BGP VPNv4 routing information.
<Sysname> display bgp vpnv4 all routing-table
BGP Local router ID is 2.2.2.2
Status codes: * - valid, ^ - VPN best, > - best, d - damped,
h - history, i - internal, s - suppressed, S - Stale
Origin : i - IGP, e - EGP, ? - incomplete
Total number of routes from all PE: 2
Route Distinguisher: 100:1
Network NextHop In/Out Label MED LocPrf
* i 10.0.0.0 1.1.1.1 1025 /NULL 0 100
*^ i 123.1.1.1/32 1.1.1.1 1024 /NULL 0 100
Total routes of vpn-instance vpn1: 5
Network NextHop In/Out Label MED LocPrf
*^>i 10.0.0.0 1.1.1.1 0 100
* > 10.1.1.0/24 0.0.0.0 NULL /1025 0
* > 20.0.0.0 10.1.1.1 NULL /1026 0
* >i 123.1.1.1/32 1.1.1.1 0 100
* > 124.1.1.1/32 0.0.0.0 NULL /1024 0
# Display detailed information about the BGP VPNv4 routes with prefix 1.1.1.2 /32.
<Sysname> display bgp vpnv4 all routing-table 1.1.1.2 32
BGP local router ID : 3.3.3.9
Local AS number : 100
Route Distinguisher: 100:1
Paths: 1 available, 0 best, 1 VPN best
BGP routing table entry information of 1.1.1.2/32:
Label information (Received/Applied): 1034/NULL
From : 1.1.1.9 (1.1.1.9)
Original nexthop: 1.1.1.9
Ext-Community : <RT: 111:1>
AS-path : 65410
Origin : incomplete
Attribute value : MED 0, localpref 100, pref-val 0, pre 255
State : valid, internal, VPN best,
Not advertised to any peers yet
Total Number of Routes: 1(vpna)
Paths: 1 available, 1 best, 0 VPN best
BGP routing table entry information of 1.1.1.2/32:
From : 1.1.1.9 (1.1.1.9)
Relay Nexthop : 0.0.0.0
Original nexthop: 1.1.1.9
Ext-Community : <RT: 111:1>
AS-path : 65410
Origin : incomplete
Attribute value : MED 0, localpref 100, pref-val 0, pre 255
State : valid, internal, best,
Not advertised to any peers yet
Not advertised to any VPN peers yet
Field |
Description |
BGP Local router ID |
Router ID of the local BGP router. |
Status codes |
Route status codes. Valid values include: · * - valid—Valid route. · ^ - VPN best—VPN best route. · > - best—Common best route. · d - damped—Route damped for route flap. · h - history—History route. · i - internal—Internal route. · s - suppressed—Suppressed route. · S - Stale—Stale route. |
Origin |
Route origin codes. Valid values include: · i -– IGP—Learned from within the AS. · e -– EGP—Learned through EGP. · ? -– incomplete—Learned in any other way. |
Total number of routes from all PE |
Total number of VPNv4 routes from all PEs. |
Network |
Network address. |
NextHop |
Address of the next hop. |
In/Out Label |
Incoming and outgoing labels. |
MED |
Metric associated with the destination network. |
LocPrf |
Local preference value. |
Paths |
Counts of routes: · available—Number of available routes. · best—Number of best routes. |
Label information |
Route label information. · Received—Received label information. · Applied—Locally generated label information. |
Ext-Community |
Extended community attribute. |
AS-path |
The route's AS path attribute (AS_PATH), which records all ASs the route has passed, and can avoid route loops. |
Attribute value |
BGP routing attribute information. |
localpref |
Local precedence. |
pref-val |
Preference value. |
pre |
Protocol priority. |
State |
Route status: · valid—Valid route. · internal—Internal route. · external—External route. · local—Locally generated route. · synchronize—Synchronized route. · best—Best route. |
display bgp vpnv4 group
Syntax
display bgp vpnv4 { all | vpn-instance vpn-instance-name } group [ group-name ] [ | { begin | exclude | include } regular-expression ]
View
Any view
Default level
1: Monitor level
Parameters
all: Specifies all VPNv4 peers.
vpn-instance vpn-instance-name: Displays information about the specified VPN. vpn-instance-name is the instance name of an MPLS L3VPN, a case-sensitive string of 1 to 31 characters.
group-name: Name of the peer group, a case-sensitive string of 1 to 47 characters.
|: Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide.
begin: Displays the first line that matches the specified regular expression and all lines that follow.
exclude: Displays all lines that do not match the specified regular expression.
include: Displays all lines that match the specified regular expression.
regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.
Description
Use display bgp vpnv4 group to display information about a specific BGP VPNv4 peer group or all BGP VPNv4 peer groups.
Examples
# Display information about the BGP VPNv4 peer group a for the VPN instance vpn1.
<Sysname> display bgp vpnv4 vpn-instance vpn1 group a
BGP peer-group is a
remote AS number not specified
Type : external
Maximum allowed prefix number: 150000
Threshold: 75%
Configured hold timer value: 180
Keepalive timer value: 60
Minimum time between advertisement runs is 30 seconds
Optional capabilities:
ORF advertise capability based on Prefix(type 64):
Local : both
Peer Preferred Value: 99
No routing policy is configured
Members:
Peer AS MsgRcvd MsgSent OutQ PrefRcv Up/Down State
10.1.1.1 200 18 21 0 1 00:12:58 Established
Table 2 Command output
Field |
Description |
BGP peer-group |
Name of the BGP peer group. |
remote AS number |
Number of the remote AS. |
Type |
Type of the BGP peer group. |
Maximum allowed prefix number |
Maximum number of routes that can be learned from the peers in the peer group. |
Threshold |
Threshold for warning. When the percentage of the number of the received route prefixes to the maximum number of routes supported reaches this value, the switch generates a prompt. |
Configured hold timer value |
Setting of the hold timer. |
Keepalive timer value |
Keepalive interval. |
Optional capabilities |
Optional extended capabilities enabled for the peer group. |
ORF advertise capability |
Outbound Route Filtering (ORF) capability supported by the peer group. |
Local |
Indicates whether the local device supports sending and receiving Route-refresh packets with ORF information. The value can be: · Both—Supports sending and receiving Route-refresh messages with ORF information. · Send—Supports sending Route-refresh messages with ORF information. · Receive—Supports receiving Route-refresh messages with ORF information. |
Peer Preferred Value |
Preference value configured for routes received from the peer. |
Peer |
IP address of the peer. |
AS |
AS number of the peer group. |
MsgRcvd |
Number of messages received. |
MsgSent |
Number of messages sent. |
OutQ |
Number of messages waiting to be sent to the peer. |
PrefRcv |
Number of prefixes received. |
Up/Down |
Duration of the BGP session in the current state. |
State |
Status of the peer. |
display bgp vpnv4 network
Syntax
display bgp vpnv4 { all | vpn-instance vpn-instance-name } network [ | { begin | exclude | include } regular-expression ]
View
Any view
Default level
1: Monitor level
Parameters
all: Specifies all VPNv4 peers.
vpn-instance vpn-instance-name: Displays information about the specified VPN. vpn-instance-name is the instance name of an MPLS L3VPN, a case-sensitive string of 1 to 31 characters.
|: Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide.
begin: Displays the first line that matches the specified regular expression and all lines that follow.
exclude: Displays all lines that do not match the specified regular expression.
include: Displays all lines that match the specified regular expression.
regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.
Description
Use display bgp vpnv4 network to display information about BGP VPNv4 routes injected into a specific VPN instance or all VPN instances.
Examples
# Display information about BGP VPNv4 routes injected into VPN instance vpn1.
<Sysname> display bgp vpnv4 vpn-instance vpn1 network
BGP Local Router ID is 1.1.1.1.
Local AS Number is 100.
Network Mask Route-policy Short-cut
10.0.0.0 255.0.0.0
Table 3 Command output
Field |
Description |
BGP Local Router ID |
Router ID of the local BGP router. |
Network |
Advertised network route. |
Mask |
Mask of the advertised network route. |
Route-policy |
Routing policy configured. |
Short-cut |
Whether this route is a short-cut route. |
display bgp vpnv4 paths
Syntax
display bgp vpnv4 { all | vpn-instance vpn-instance-name } paths [ as-regular-expression | { | { begin | exclude | include } regular-expression } ]
View
Any view
Default level
1: Monitor level
Parameters
all: Specifies all VPNv4 peers.
vpn-instance vpn-instance-name: Displays information about the specified VPN. vpn-instance-name is the instance name of an MPLS L3VPN, a case-sensitive string of 1 to 31 characters.
as-regular-expression: Regular expression for filtering the AS path information to be displayed.
|: Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide.
begin: Displays the first line that matches the specified regular expression and all lines that follow.
exclude: Displays all lines that do not match the specified regular expression.
include: Displays all lines that match the specified regular expression.
regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.
Description
Use display bgp vpnv4 paths to display the BGP VPNv4 AS path information.
Examples
# Display the BGP VPNv4 AS path information for VPN instance vpn1.
<Sysname> display bgp vpnv4 vpn-instance vpn1 paths
Address Hash Refcount MED Path/Origin
0x6E72D18 0 1 0 200?
0x6E72E50 0 1 0 i
0x6E72B78 1 1 0 ?
0x6E72BE0 1 2 0 ?
# Display all BGP VPNv4 AS path information.
<Sysname> display bgp vpnv4 all paths
Address Hash Refcount MED Path/Origin
0x6E72D80 4 1 0 200?
0x6E72CB0 15 2 0 ?
Table 4 Command output
Field |
Description |
Address |
Routing address in the local database. |
Hash |
Hash bucket for storing routes. |
Refcount |
Number of times that the path is referenced. |
MED |
Metric for routes. |
Path/Origin |
AS_PATH and origin attributes of the route. For more information, see Table 1. |
display bgp vpnv4 peer
Syntax
display bgp vpnv4 all peer [ ip-address verbose | verbose ] [ | { begin | exclude | include } regular-expression ]
display bgp vpnv4 vpn-instance vpn-instance-name peer [ group-name log-info | ip-address { log-info | verbose } | verbose ] [ | { begin | exclude | include } regular-expression ]
View
Any view
Default level
1: Monitor level
Parameters
all: Specifies all VPNv4 peers.
vpn-instance vpn-instance-name: Displays information about the specified VPN. vpn-instance-name is the instance name of an MPLS L3VPN, a case-sensitive string of 1 to 31 characters.
group-name: Name of the peer group, a case-sensitive string of 1 to 47 characters.
log-info: Displays log information.
ip-address: IP address of the peer.
verbose: Displays detailed information.
|: Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide.
begin: Displays the first line that matches the specified regular expression and all lines that follow.
exclude: Displays all lines that do not match the specified regular expression.
include: Displays all lines that match the specified regular expression.
regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.
Description
Use display bgp vpnv4 peer to display information about BGP VPNv4 peers.
Examples
# Display information about BGP VPNv4 peers of VPN instance vpn1.
<Sysname> display bgp vpnv4 vpn-instance vpn1 peer
BGP local router ID : 2.2.2.2
Local AS number : 100
Total number of peers : 1 Peers in established state : 1
Peer AS MsgRcvd MsgSent OutQ PrefRcv Up/Down State
10.1.1.1 200 24 29 0 1 00:18:47 Established
Table 5 Command output
Field |
Description |
BGP Local router ID |
Router ID of the local BGP router. |
Peers in established state |
Number of peers in the state of established. |
Peer |
IP address of the peer. |
AS |
AS number of the peer group. |
MsgRcvd |
Number of messages received. |
MsgSent |
Number of messages sent. |
OutQ |
Number of messages waiting to be sent to the peer. |
PrefRcv |
Number of received prefixes. |
Up/Down |
Duration of the BGP session in the current state. |
State |
Status of the peer. |
# Display detailed information about BGP VPNv4 peers of VPN instance vpn1.
<Sysname> display bgp vpnv4 vpn-instance vpn1 peer verbose
Peer: 10.1.1.1 Local: 2.2.2.2
Type: EBGP link
BGP version 4, remote router ID 10.1.1.1
BGP current state: Established, Up for 00h19m26s
BGP current event: KATimerExpired
BGP last state: OpenConfirm
Port: Local - 179 Remote - 1025
Configured: Active Hold Time: 180 sec Keepalive Time:60 sec
Received : Active Hold Time: 180 sec
Negotiated: Active Hold Time: 180 sec
Peer optional capabilities:
Peer support bgp multi-protocol extended
Peer support bgp route refresh capability
Address family IPv4 Unicast: advertised and received
Received: Total 25 messages, Update messages 1
Sent: Total 30 messages, Update messages 4
Maximum allowed prefix number: 150000
Threshold: 75%
Minimum time between advertisement runs is 30 seconds
Optional capabilities:
ORF advertise capability based on Prefix(type 64):
Local: both
Negotiated: send
Peer Preferred Value: 99
BFD: Enabled
Routing policy configured:
No routing policy is configured
Table 6 Command output
Field |
Description |
Peer |
IP address of the peer. |
Local |
IP address of the local router. |
Type |
BGP type. |
BGP version |
Version of BGP that the peer runs. |
remote router ID |
Router ID of the remote router. |
BGP current state |
Current state of the BGP session. |
Up for |
Duration since the peer is established. |
BGP current event |
Current event of the BGP session. |
BGP last state |
State that the BGP session was in before transitioning to the current state. |
Port |
Local and remote ports of the BGP session. |
Configured |
Settings of the local timers, including the active hold interval and keepalive interval. |
Received |
Received active hold interval. |
Negotiated |
Negotiated active hold interval. |
Peer optional capabilities |
Optional capabilities of the peer. |
Peer support bgp multi-protocol extended |
The peer supports multiprotocol extension. |
Peer support bgp route refresh capability |
The peer supports route refresh capability. |
Address family IPv4 Unicast |
IPv4 unicast family capability. |
Received |
Total number of received messages and the number of received update messages. |
Sent |
Total number of sent messages and the number of sent update messages. |
Maximum allowed prefix number |
Maximum number of routes that can be learned from the peer. |
Threshold |
Threshold for warning. When the percentage of the number of the received route prefixes to the maximum number of routes supported reaches this value, the switch generates a prompt. |
Optional capabilities |
Local optional capabilities. |
ORF advertise capability based on prefix (type 64): |
The ORF address prefix capability is supported. The capability value is 64. |
Local |
Indicates whether the local device supports sending and receiving Route-refresh packets with ORF information. The value can be: · both—Supports sending and receiving Route-refresh messages with ORF information. · send—Supports sending Route-refresh messages with ORF information. · receive—Supports receiving Route-refresh messages with ORF information. |
Negotiated |
ORF capability negotiated by the local and remote peers. The value can be: · send—The local peer can send Route-refresh messages with ORF information and the remote peer can receive Route-refresh messages with ORF information. · receive—The local peer can receive Route-refresh messages with ORF information and the remote peer can send Route-refresh messages with ORF information. This field is displayed only when the ORF capability negotiation is successful. |
Peer Preferred Value |
Preference value configured for the routes from the peer. |
BFD |
Whether BFD is enabled for the peer. |
# Display all BGP VPNv4 peer information.
<Sysname> display bgp vpnv4 all peer
BGP local router ID : 2.2.2.2
Local AS number : 100
Total number of peers : 1 Peers in established state : 1
Peer AS MsgRcvd MsgSent OutQ PrefRcv Up/Down State
1.1.1.1 100 51 64 0 2 00:45:16 Established
Table 7 Command output
Field |
Description |
Peer |
IP address of the peer. |
AS |
AS number. |
MsgRcvd |
Number of messages received. |
MsgSent |
Number of messages sent. |
OutQ |
Number of messages waiting to be sent to the peer. |
Up/Down |
Duration of the BGP session in the current state. |
State |
Status of the peer. |
# Display detailed information about BGP VPNv4 peer 1.1.1.1.
<Sysname> display bgp vpnv4 all peer 1.1.1.1 verbose
Peer: 1.1.1.1 Local: 2.2.2.2
Type: IBGP link
BGP version 4, remote router ID 1.1.1.1
BGP current state: Established, Up for 00h46m01s
BGP current event: RecvKeepalive
BGP last state: OpenConfirm
Port: Local - 1039 Remote - 179
Configured: Active Hold Time: 180 sec Keepalive Time:60 sec
Received : Active Hold Time: 180 sec
Negotiated: Active Hold Time: 180 sec
Peer optional capabilities:
Peer support bgp multi-protocol extended
Peer support bgp route refresh capability
Address family IPv4 Unicast: advertised and received
Address family VPNv4: advertised and received
Received: Total 52 messages, Update messages 2
Sent: Total 65 messages, Update messages 5
Maximum allowed prefix number: 150000
Threshold: 75%
Minimum time between advertisement runs is 15 seconds
Optional capabilities:
ORF advertise capability based on Prefix(type 64):
Local: both
Negotiated: send
Connect-interface has been configured
Peer Preferred Value: 0
BFD: Enabled
Routing policy configured:
No routing policy is configured
Table 8 Command output
Field |
Description |
Peer |
IP address of the peer. |
Local |
IP address of the local router. |
Type |
BGP type. |
BGP version |
Version of BGP that the peer runs. |
remote router ID |
Router ID of the remote router. |
BGP current state |
Current status of BGP. |
Up for |
Duration since the peer is established. |
BGP current event |
Current event of the peer. |
BGP last state |
State that BGP was in before transitioning to the current status. |
Port |
Local and remote BGP port numbers. |
Configured |
Settings of the local timers, including the active hold interval and keepalive interval. |
Received |
Received active hold interval. |
Negotiated |
Negotiated active hold interval. |
Peer optional capabilities |
Optional capabilities of the peer. |
Peer support bgp multi-protocol extended |
The peer supports multiprotocol extension. |
Peer support bgp route refresh capability |
The peer supports route refresh capability. |
Address family IPv4 Unicast |
IPv4 unicast family capability. |
Address family VPNv4 |
IPv4 address group VPNv4 capability. |
Received |
Total number of received messages and the number of received update messages. |
Sent |
Total number of sent messages and the number of sent update messages. |
Maximum allowed prefix number |
Maximum number of routes that can be learned from the peer. |
Threshold |
Threshold for warning. When the percentage of the number of the received route prefixes to the maximum number of routes supported reaches this value, the switch generates a prompt. |
Optional capabilities |
Local optional capabilities. |
ORF advertise capability based on prefix (type 64): |
The ORF address prefix capability is supported. The capability value is 64. |
Local |
Indicates whether the local device supports sending and receiving Route-refresh packets with ORF information. The value can be: · both—Supports sending and receiving Route-refresh messages with ORF information. · send—Supports sending Route-refresh messages with ORF information. · receive—Supports receiving Route-refresh messages with ORF information. |
Negotiated |
ORF capability negotiated by the local and remote peers. The value can be: · send—The local peer can send Route-refresh messages with ORF information and the remote peer can receive Route-refresh messages with ORF information. · receive—The local peer can receive Route-refresh messages with ORF information and the remote peer can send Route-refresh messages with ORF information. This field is displayed only when the ORF capability negotiation is successful. |
Connect-interface |
Whether a source interface is configured for TCP connection establishment. |
Peer Preferred Value |
Preference value configured for routes from the peer. |
BFD |
Whether BFD is enabled for the peer. |
# Display the log information for the BGP VPNv4 peer whose address is 1.1.1.1.
<sysname> display bgp vpnv4 vpn-instance vpn1 peer 1.1.1.1 log-info
Peer : 1.1.1.1
Date Time State Notification
Error/SubError
10-Jul-2008 15:46:17 Down Send Notification with Error 1/1
Message Header Error/Connection Not Synchronized
10-Jul-2008 09:23:00 Up
10-Jul-2008 07:46:17 Down Receive Notification with Error 3/2
UPDATE Message Error/Unsupported optional Parameter
10-Jul-2008 06:23:00 Up
10-Jul-2008 05:46:17 Down Send Notification with Error 6/4
Administrative Reset
Table 9 Command output
Field |
Description |
Peer |
IPv4 address of the peer. |
Date |
Date when the notification message is sent or received. |
Time |
Time when the notification message is sent or received. |
State |
Connection state of the peer: · Up—The BGP session is in the Established state. · Down—The BGP session has been cut down. |
Notification |
Notification message. |
Error/SubError |
Error: Notification message error code, which specifies the error type. |
SubError: Notification message's error subcode, which specifies detailed information about the error. |
display bgp vpnv4 peer received ip-prefix
Syntax
display bgp vpnv4 { all | vpn-instance vpn-instance-name } peer ip-address received ip-prefix [ | { begin | exclude | include } regular-expression ]
View
Any view
Default level
1: Monitor level
Parameters
all: Specifies all VPNv4 peers.
vpn-instance vpn-instance-name: Displays information about the specified VPN. vpn-instance-name is the instance name of an MPLS L3VPN, a case-sensitive string of 1 to 31 characters.
ip-address: IP address of the BGP peer.
|: Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide.
begin: Displays the first line that matches the specified regular expression and all lines that follow.
exclude: Displays all lines that do not match the specified regular expression.
include: Displays all lines that match the specified regular expression.
regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.
Description
Use display bgp vpnv4 peer received ip-prefix to display the IP prefix information for the ORF packets received from the specified BGP peer.
Example
# Display the ORF IP prefix information received from BGP peer 10.110.25.20.
<Sysname> display bgp vpnv4 all peer 10.110.25.20 received ip-prefix
ORF ip-prefix entries: 2
ge: greater-equal le: less-equal
index rule prefix ge le
10 permit 111.111.111.0/24 26 32
20 deny 2.1.1.0/24 26 32
Table 10 Command output
Field |
Description |
ORF ip-prefix entries |
Number of ORF IP prefix entries. |
index |
Index of the IP prefix. |
rule |
Matching rule of the IP prefix. |
ge |
greater-equal, which means the mask length is greater than or equal to the displayed value. |
le |
less-equal, which means the mask length is less than or equal to the displayed value. |
display bgp vpnv4 route-distinguisher routing-table
Syntax
display bgp vpnv4 route-distinguisher route-distinguisher routing-table [ [ network-address [ mask | mask-length ] | as-path-acl as-path-acl-number | cidr | community [ aa:nn ]&<1-13> [ no-advertise | no-export | no-export-subconfed ] * [ whole-match ] | community-list { { basic-community-list-number | comm-list-name } [ whole-match ] | adv-community-list-number } | different-origin-as ] [ | { begin | exclude | include } regular-expression ] | regular-expression as-regular-expression ]
View
Any view
Default level
1: Monitor level
Parameters
route-distinguisher: Route distinguisher (RD).
network-address: IP address of the destination segment.
mask: Network mask, in the format of X.X.X.X.
mask-length: Length of the network mask, in the range of 0 to 32.
as-path-acl as-path-acl-number: Filters routing information using the specified AS_PATH list. The as-path-acl-number argument is in the range of 1 to 256.
cidr: Displays Classless Interdomain Routing (CIDR) information.
community: Displays routing information for the specified BGP community in the routing table.
aa:nn&<1-13>: Community number. Both the aa and nn parameters range from 0 to 65535. &<1-13> means that you can enter the parameter combination up to 13 times.
no-advertise: A route with this attribute is not advertised to any other BGP peer.
no-export: A route with this attribute is not advertised out of the local AS or, if existing, the confederation. However, it is advertised to the other sub-ASs in the confederation.
no-export-subconfed: A route with this attribute is not advertised out of the local AS or to the other sub-ASs in the confederation.
whole-match: Performs exact matching.
community-list: Displays routing information for the specified BGP community list.
basic-community-list-number: Basic community list number in the range of 1 to 99.
comm-list-name: Name of a community attribute list, a string of 1 to 31 characters that contains at least one non-digit character.
adv-community-list-number: Advanced community list number in the range of 100 to 199.
different-origin-as: Displays information about routes with different AS origins.
|: Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide.
begin: Displays the first line that matches the specified regular expression and all lines that follow.
exclude: Displays all lines that do not match the specified regular expression.
include: Displays all lines that match the specified regular expression.
regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.
regular-expression as-regular-expression: Displays routing information matching the specified AS regular expression.
Description
Use display bgp vpnv4 route-distinguisher routing-table to display the BGP VPNv4 routes with a specific RD.
Related commands: route-distinguisher.
Examples
# Display the BGP VPNv4 routes with the RD 100:1.
<Sysname> display bgp vpnv4 route-distinguisher 100:1 routing-table
BGP Local router ID is 2.2.2.2
Status codes: * - valid, ^ - VPN best, > - best, d - damped,
h - history, i - internal, s - suppressed, S - Stale
Origin : i - IGP, e - EGP, ? - incomplete
Route Distinguisher: 100:1
Total number of routes: 2
Network NextHop In/Out Label MED LocPrf
* i 10.0.0.0 1.1.1.1 1025 /NULL 0 100
*^ i 123.1.1.1/32 1.1.1.1 1024 /NULL 0 100
Total routes of vpn-instance vpn1: 5
Network NextHop In/Out Label MED LocPrf
*^>i 10.0.0.0 1.1.1.1 0 100
* > 10.1.1.0/24 0.0.0.0 NULL /1025 0
* > 20.0.0.0 10.1.1.1 NULL /1026 0
* >i 123.1.1.1/32 1.1.1.1 0 100
* > 124.1.1.1/32 0.0.0.0 NULL /1024 0
# Display the BGP VPNv4 routing information with the RD 100:1 and IP address 1.1.1.2.
<Sysname> display bgp vpnv4 route-distinguisher 100:1 routing-table 1.1.1.2 32
BGP local router ID : 3.3.3.9
Local AS number : 100
Route Distinguisher: 100:1
Paths: 1 available, 0 best, 1 VPN best
BGP routing table entry information of 1.1.1.2/32:
Label information (Received/Applied): 1034/NULL
From : 1.1.1.9 (1.1.1.9)
Original nexthop: 1.1.1.9
Ext-Community : <RT: 111:1>
AS-path : 65410
Origin : incomplete
Attribute value : MED 0, localpref 100, pref-val 0, pre 255
State : valid, internal, VPN best,
Not advertised to any peers yet
Total Number of Routes: 1(vpna)
Paths: 1 available, 1 best, 0 VPN best
BGP routing table entry information of 1.1.1.2/32:
From : 1.1.1.9 (1.1.1.9)
Relay Nexthop : 0.0.0.0
Original nexthop: 1.1.1.9
Ext-Community : <RT: 111:1>
AS-path : 65410
Origin : incomplete
Attribute value : MED 0, localpref 100, pref-val 0, pre 255
State : valid, internal, best,
Not advertised to any peers yet
Table 11 Command output
Field |
Description |
|
BGP Local router ID |
Router ID of the local BGP router. |
|
Status codes |
Route status codes. For valid values, see Table 1. |
|
Origin |
Route origin codes. For valid values, see Table 1. |
|
Network |
Network address. |
|
NextHop |
Address of the next hop. |
|
In/Out Label |
Incoming/outgoing label. |
|
MED |
Metric associated with the destination network. |
|
LocPrf |
Local preference value. |
|
Paths |
Counts of routes: · available—Number of available routes. · best—Number of best routes. |
|
Label information |
Route label information: · Received—Received label information. · Applied—Locally generated label information. |
|
Ext-Community |
Extended community attribute. |
|
AS-path |
The route’s AS path attribute (AS_PATH), which records all ASs the route has passed to avoid route loops. |
|
Attribute value |
BGP routing attribute information. |
|
localpref |
Local preference value. |
|
pref-val |
Preference value of the route. |
|
pre |
Protocol priority. |
|
State |
Current state of the route, which can be valid, internal, external, local, synchronize, or best. |
|
# Display the BGP VPNv4 routing information with RD being 100:1 and the network segment address being 10.0.0.0.
<Sysname> display bgp vpnv4 route-distinguisher 100:1 routing-table 10.0.0.0 255.0.0.0
BGP Local router ID is 2.2.2.2
Status codes: * - valid, ^ - VPN best, > - best, d - damped,
h - history, i - internal, s - suppressed, S - Stale
Origin : i - IGP, e - EGP, ? - incomplete
Route Distinguisher: 100:1
Total number of routes: 1
Network NextHop In/Out Label MED LocPrf
*^ i 10.0.0.0 1.1.1.1 1025 /NULL 0 100
Total Number of Routes: 1(vpn1)
Network NextHop In/Out Label MED LocPrf
* >i 10.0.0.0 1.1.1.1 0 100
Table 12 Command output
Field |
Description |
BGP Local router ID |
Router ID of the local BGP router. |
Status codes |
Route status codes. For valid values, see Table 1. |
Origin |
Route origin codes. For valid values, see Table 1. |
Network |
Network address in the BGP routing table. |
NextHop |
Address of the next hop. |
In/Out Label |
Incoming/outgoing label. |
MED |
Metric associated with the destination network. |
LocPrf |
Local preference value. |
Total Number of Routes |
Total number of routes of the specified VPN instance. |
display bgp vpnv4 routing-table label
Syntax
display bgp vpnv4 { all | vpn-instance vpn-instance-name } routing-table label [ | { begin | exclude | include } regular-expression ]
View
Any view
Default level
1: Monitor level
Parameters
all: Specifies all VPNv4 peers.
vpn-instance vpn-instance-name: Displays information about the specified VPN. vpn-instance-name is the instance name of an MPLS L3VPN, a case-sensitive string of 1 to 31 characters.
|: Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide.
begin: Displays the first line that matches the specified regular expression and all lines that follow.
exclude: Displays all lines that do not match the specified regular expression.
include: Displays all lines that match the specified regular expression.
regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.
Description
Use display bgp vpnv4 routing-table label to display information about labeled routes in the BGP routing table.
Examples
# Display information about labeled routes in the BGP routing table.
<Sysname> display bgp vpnv4 all routing-table label
BGP Local router ID is 2.2.2.2
Status codes: * - valid, ^ - VPN best, > - best, d - damped,
h - history, i - internal, s - suppressed, S - Stale
Origin : i - IGP, e - EGP, ? - incomplete
Total number of routes from all PE: 1
Route Distinguisher: 100:1
Network NextHop In/Out Label
*>i 123.1.1.1 1.1.1.1 NULL/1024
Total routes of vpn-instance vpn1: 4
Network NextHop In/Out Label
*> 10.1.1.0 0.0.0.0 1025/NULL
*> 20.0.0.0 0.0.0.0 1026/NULL
*>i 123.1.1.1 1.1.1.1 NULL/1024
*> 124.1.1.1 0.0.0.0 1024/NULL
Table 13 Command output
Field |
Description |
BGP Local router ID |
Router ID of the local BGP router. |
Status |
Route status codes. For valid values, see Table 1. |
Origin |
Route origin codes. For valid values, see Table 1. |
Route Distinguisher |
RD. |
Network |
Network address. |
NextHop |
Address of the next hop. |
In/Out Label |
Incoming/outgoing label. exp-null indicates an explicit null label. |
display bgp vpnv4 vpn-instance routing-table
Syntax
display bgp vpnv4 vpn-instance vpn-instance-name routing-table [ [ network-address [ { mask | mask-length } [ longer-prefixes ] ] | as-path-acl as-path-acl-number | cidr | community [ aa:nn ]&<1-13> [ no-advertise | no-export | no-export-subconfed ] * [ whole-match ] | community-list { { basic-community-list-number | comm-list-name } [ whole-match ] | adv-community-list-number } | dampened | dampening parameter | different-origin-as | flap-info [ network-address [ { mask | mask-length } [ longer-match ] ] | as-path-acl as-path-acl-number ] | peer ip-address { advertised-routes | received-routes } | statistic ] [ | { begin | exclude | include } regular-expression ] | [ flap-info ] regular-expression as-regular-expression ]
View
Any view
Default level
1: Monitor level
Parameters
vpn-instance-name: VPN instance name, a case-sensitive string of 1 to 31 characters.
network-address: IP address of the destination segment.
mask: Network mask, in the format of X.X.X.X.
mask-length: Length of the network mask, in the range of 0 to 32.
longer-prefixes: Displays each routing entry that meets the following conditions:
1. Its destination IP address ANDed with the specified prefix equals the specified destination IP address ANDed with the specified prefix.
2. Its prefix length is shorter than or equal to the specified prefix length.
3. Its prefix length is the longest among the entries meeting the above two conditions.
as-path-acl as-path-acl-number: Filters routing information using the specified AS_PATH list. The as-path-acl-number argument is in the range of 1 to 256.
cidr: Displays Classless Interdomain Routing (CIDR) information.
community: Displays routing information for the specified BGP community in the routing table.
aa:nn&<1-13>: Community number. Both the aa and nn parameters range from 0 to 65535. &<1-13> means that you can enter the parameter combination up to 13 times.
no-advertise: A route with this attribute is not advertised to any other BGP peer.
no-export: A route with this attribute is not advertised out of the local AS or, if existing, the confederation. However, it is advertised to the other sub-ASs in the confederation.
no-export-subconfed: A route with this attribute is not advertised out of the local AS or to the other sub-ASs in the confederation.
whole-match: Performs exact match.
community-list: Displays routing information for the specified BGP community list.
basic-community-list-number: Basic community list number in the range of 1 to 99.
comm-list-name: Name of a community attribute list, a string of 1 to 31 characters that contains at least one non-digit character.
adv-community-list-number: Advanced community list number in the range of 100 to 199.
dampened: Displays information about dampened BGP VPNv4 routes.
dampening parameter: Displays information about configured BGP VPNv4 route dampening parameters.
different-origin-as: Displays information about routes with different AS origins.
flap-info: Displays BGP VPNv4 route flap statistics.
longer-match: Displays flap statistics for routes with masks longer than that specified by the network-address { mask | mask-length } combination.
peer ip-address: Specifies a peer by its IP address.
advertised-routes: Displays routing information sent to the specified peer.
received-routes: Displays routing information received from the specified peer.
statistic: Displays BGP VPNv4 route statistics.
|: Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide.
begin: Displays the first line that matches the specified regular expression and all lines that follow.
exclude: Displays all lines that do not match the specified regular expression.
include: Displays all lines that match the specified regular expression.
regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.
regular-expression as-regular-expression: Displays routing information matching the specified AS regular expression.
Description
Use display bgp vpnv4 vpn-instance routing-table to display the BGP VPNv4 routing information for a VPN.
Examples
# Display the BGP VPNv4 routing information for VPN instance vpn1.
<Sysname> display bgp vpnv4 vpn-instance vpn1 routing-table
Total Number of Routes: 5
BGP Local router ID is 2.2.2.2
Status codes: * - valid, ^ - VPN best, > - best, d - damped,
h - history, i - internal, s - suppressed, S - Stale
Origin : i - IGP, e - EGP, ? - incomplete
Network NextHop MED LocPrf PrefVal Path/Ogn
*^>i 10.0.0.0 1.1.1.1 0 100 0 i
* > 10.1.1.0/24 0.0.0.0 0 0 ?
* > 20.0.0.0 10.1.1.1 0 99 200?
* >i 123.1.1.1/32 1.1.1.1 0 100 0 ?
* > 124.1.1.1/32 0.0.0.0 0 0 ?
Table 14 Command output
Field |
Description |
BGP Local router ID |
ID of the BGP-enabled local router. |
Status codes |
Route status codes. For valid values, see Table 1. |
Origin |
Route origin codes. For valid values, see Table 1. |
Network |
Network address in the BGP routing table. |
NextHop |
Address of the next hop. |
MED |
Metric associated with the destination network. |
LocPrf |
Local preference value. |
PrefVal |
Preference value of the route. |
Path/Ogn |
AS_PATH attribute/route origin of the route, see Table 1. |
display bgp vpnv6 all peer
Syntax
display bgp vpnv6 all peer [ ipv4-address verbose | verbose ] [ | { begin | exclude | include } regular-expression ]
View
Any view
Default level
1: Monitor
Parameters
ipv4-address: Specifies a peer by its IPv4 address.
verbose: Displays the detailed information.
|: Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide.
begin: Displays the first line that matches the specified regular expression and all lines that follow.
exclude: Displays all lines that do not match the specified regular expression.
include: Displays all lines that match the specified regular expression.
regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.
Description
Use display bgp vpnv6 all peer to display information about the BGP VPNv6 peers established between PEs.
If you do not specify any parameter, the command displays brief information about all peers.
Examples
# Display brief information about all BGP VPNv6 peers.
<Sysname> display bgp vpnv6 all peer
BGP local router ID : 192.168.1.40
Local AS number : 200
Total number of peers : 1 Peers in established state : 0
Peer AS MsgRcvd MsgSent OutQ PrefRcv Up/Down State
192.168.1.40 100 0 0 0 0 00:02:10 Active
Table 15 Command output
Field |
Description |
Peer |
IP address of the peer. |
AS |
AS number of the peer. |
MsgRcvd |
Number of messages received. |
MsgSent |
Number of messages sent. |
OutQ |
Number of messages to be sent to the peer. |
PrefRcv |
Number of prefixes received. |
Up/Down |
Duration of the BGP session in the current state. |
State |
Current state of the peer. |
# Display detailed information about the BGP VPNv6 peer 1.1.1.1.
<Sysname> display bgp vpnv6 all peer 1.1.1.1 verbose
Peer: 1.1.1.1 Local: 2.2.2.2
Type: IBGP link
BGP version 4, remote router ID 1.1.1.1
BGP current state: Established, Up for 00h46m01s
BGP current event: RecvKeepalive
BGP last state: OpenConfirm
Port: Local - 1039 Remote - 179
Configured: Active Hold Time: 180 sec Keepalive Time:60 sec
Received : Active Hold Time: 180 sec
Negotiated: Active Hold Time: 180 sec
Peer optional capabilities:
Peer support bgp multi-protocol extended
Peer support bgp route refresh capability
Address family IPv4 Unicast: advertised and received
Address family VPNv6: advertised and received
Received: Total 52 messages, Update messages 2
Sent: Total 65 messages, Update messages 5
Maximum allowed prefix number: 150000
Threshold: 75%
Minimum time between advertisement runs is 15 seconds
Optional capabilities:
ORF advertise capability based on Prefix(type 64):
Local: both
Negotiated: send
Connect-interface has been configured
Peer Preferred Value: 0
BFD: Enabled
Routing policy configured:
No routing policy is configured
Table 16 Command output
Field |
Description |
Peer |
IP address of the peer. |
Local |
IP address of the local router. |
Type |
BGP type. |
BGP version |
Version of BGP that the peer runs. |
remote router ID |
Router ID of the remote router. |
BGP current state |
Current state of the BGP session. |
Up for |
Duration since the peer is established. |
BGP current event |
Current event of the BGP session. |
BGP last state |
State that the BGP session was in before transitioning to the current state. |
Port |
Local and remote ports of the BGP session. |
Configured |
Settings of the local timers, including the active hold interval and keepalive interval. |
Received |
Received active hold interval. |
Negotiated |
Negotiated active hold interval. |
Peer optional capabilities |
Optional capabilities of the peer. |
Peer support bgp multi-protocol extended |
The peer supports multiprotocol extension. |
Peer support bgp route refresh capability |
The peer supports route refreshing. |
Address family IPv4 Unicast |
IPv4 unicast family capability. |
Address family VPNv6 |
VPNv6 address family capability. |
Received |
Total number of received messages and the number of received update messages. |
Sent |
Total number of sent messages and the number of sent update messages. |
Maximum allowed prefix number |
Maximum number of routes that can be learned from the peer. |
Threshold |
Threshold for warning. When the percentage of the number of the received route prefixes to the maximum number of routes supported reaches this value, the switch generates a prompt. |
Minimum time between advertisement runs |
Minimum interval between route advertisements. |
Optional capabilities |
Local optional capabilities. |
ORF advertise capability based on prefix (type 64): |
Supports the ORF address prefix capability and the capability value is 64. |
Local |
Indicates whether the local device supports sending and receiving Route-refresh packets with ORF information. The value can be: · both—Supports sending and receiving Route-refresh messages with ORF information. · send—Supports sending Route-refresh messages with ORF information. · receive—Supports receiving Route-refresh messages with ORF information. |
Negotiated |
ORF capability negotiated by the local and remote peers. The value can be: · send—The local peer can send Route-refresh messages with ORF information and the remote peer can receive Route-refresh messages with ORF information. · receive—The local peer can receive Route-refresh messages with ORF information and the remote peer can send Route-refresh messages with ORF information. This field is displayed only when the ORF capability negotiation is successful. |
Connect-interface |
Indicates whether a source interface is configured for TCP connection establishment. |
Peer Preferred Value |
Preference value configured for the routes from the peer. |
BFD |
Whether BFD is enabled for the peer. |
display bgp vpnv6 all routing-table
Syntax
display bgp vpnv6 all routing-table [ network-address prefix-length [ longer-prefixes ] | peer ip-address { advertised-routes | received-routes } [ statistic ] | statistic ] [ | { begin | exclude | include } regular-expression ]
View
Any view
Default level
1: Monitor
Parameters
network-address: IPv6 address of the destination network segment.
prefix-length: Length of the prefix, in the range of 0 to 128.
longer-prefixes: Displays each routing entry that meets the following conditions:
1. Its destination IPv6 address ANDed with the specified prefix equals the specified destination IPv6 address ANDed with the specified prefix.
2. Its prefix length is shorter than or equal to the specified prefix length.
3. Its prefix length is the longest among the entries meeting the above two conditions.
peer ip-address: Displays the routing information sent to or received from the specified peer. ip-address is the IPv4 address of the peer.
advertised-routes: Displays the routing information sent to the specified peer.
received-routes: Displays the routing information received from the specified peer.
statistic: Displays BGP VPNv6 route statistics.
|: Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide.
begin: Displays the first line that matches the specified regular expression and all lines that follow.
exclude: Displays all lines that do not match the specified regular expression.
include: Displays all lines that match the specified regular expression.
regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.
Description
Use display bgp vpnv6 all routing-table to display all BGP VPNv6 routing information.
Examples
# Display all BGP VPNv6 routing information.
<Sysname> display bgp vpnv6 all routing-table
BGP Local router ID is 30.30.30.1
Status codes: * - valid, ^ - VPN best, > - best, d - damped,
h - history, i - internal, s - suppressed, S - Stale
Origin : i - IGP, e - EGP, ? - incomplete
Total number of routes from all PE: 1
Route Distinguisher: 100:1
*^ i Network : 30:30:: PrefixLen : 64
NextHop : ::FFFF:101:102 LocPrf : 100
PrefVal : 0 Label : 1024
MED : 0
Path/Ogn: ?
Total routes of vpn-instance vpn1: 1
*^> Network : 30:30:: PrefixLen : 128
NextHop : ::FFFF:101:102 LocPrf : 100
PrefVal : 0 Label : 1024
MED : 0
Path/Ogn: ?
Table 17 Command output
Field |
Description |
BGP Local router ID |
Router ID of the local BGP router. |
Status codes |
Route status codes. For more information, see Table 1. |
Origin |
Route origin codes. For more information, see Table 1. |
Total number of routes from all PE |
Total number of VPNv6 routes from all PEs. |
Network |
Destination network address. |
PrefixLen |
Prefix length of the destination network address. |
NextHop |
IPv6 address of the next hop. |
LocPrf |
Local preference value. |
PrefVal |
Preference value of the route. |
Label |
Received label. |
MED |
Metric associated with the destination network. |
Path/Ogn |
AS_PATH attribute/route origin of the route. |
# Display all BGP VPNv6 route statistics.
<Sysname> display bgp vpnv6 all routing-table statistic
Total number of routes from all PE: 1
Total routes of vpn-instance vpn1: 2
Table 18 Command output
Field |
Description |
Total number of routes from all PE |
Total number of VPNv6 routes from all PEs. |
display bgp vpnv6 route-distinguisher routing-table
Syntax
display bgp vpnv6 route-distinguisher route-distinguisher routing-table [ network-address prefix-length ] [ | { begin | exclude | include } regular-expression ]
View
Any view
Default level
1: Monitor level
Parameters
route-distinguisher: Route distinguisher (RD).
network-address: IPv6 address of the destination segment.
prefix-length: Prefix length in the range of 0 to 128.
|: Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide.
begin: Displays the first line that matches the specified regular expression and all lines that follow.
exclude: Displays all lines that do not match the specified regular expression.
include: Displays all lines that match the specified regular expression.
regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.
Description
Use display bgp vpnv6 route-distinguisher routing-table to display the BGP VPNv6 routing information for a specific RD.
Related commands: route-distinguisher.
Examples
# Display the BGP VPNv6 routing information for RD 100:1.
<Sysname> display bgp vpnv6 route-distinguisher 100:1 routing-table
BGP Local router ID is 30.30.30.1
Status codes: * - valid, ^ - VPN best, > - best, d - damped,
h - history, i - internal, s - suppressed, S - Stale
Origin : i - IGP, e - EGP, ? - incomplete
*^ i Network : 30:30:: PrefixLen : 64
NextHop : ::FFFF:101:102 LocPrf : 100
PrefVal : 0 Label : 1025
MED : 0
Path/Ogn: ?
Table 19 Command output
Field |
Description |
BGP Local router ID |
Router ID of the local BGP router. |
Status codes |
Route status codes. For more information, see Table 1. |
Origin |
Route origin codes. For more information, see Table 1. |
Network |
Destination network address. |
PrefixLen |
Prefix length of the destination network address. |
NextHop |
IPv6 address of the next hop. |
LocPrf |
Local preference value. |
PrefVal |
Preference value of the route. |
Label |
Received label. |
MED |
Metric associated with the destination network. |
Path/Ogn |
AS_PATH attribute/route origin of the route. |
display bgp vpnv6 vpn-instance peer
Syntax
display bgp vpnv6 vpn-instance vpn-instance-name peer [ ipv6-address verbose | verbose ] [ | { begin | exclude | include } regular-expression ]
View
Any view
Default level
1: Monitor
Parameters
vpn-instance-name: Name of a VPN instance, a case-sensitive string of 1 to 31 characters.
ipv6-address: IPv6 address of a peer.
verbose: Displays the detailed information.
|: Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide.
begin: Displays the first line that matches the specified regular expression and all lines that follow.
exclude: Displays all lines that do not match the specified regular expression.
include: Displays all lines that match the specified regular expression.
regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.
Description
Use display bgp vpnv6 vpn-instance peer to display information about the IPv6 BGP peers in the specified VPN instance.
If you do not specify any optional parameters, the command displays brief information about all IPv6 BGP peers.
Examples
# Display brief information about the IPv6 BGP peers in the VPN instance vpn1.
<Sysname> display bgp vpnv6 vpn-instance vpn1 peer
BGP local router ID : 2.2.2.2
Local AS number : 100
Total number of peers : 1 Peers in established state : 1
Peer AS MsgRcvd MsgSent OutQ PrefRcv Up/Down State
2001::1 200 4 6 0 2 00:00:09 Established
Table 20 Command output
Field |
Description |
BGP local router ID |
Router ID of the local BGP router. |
Peer |
IPv6 address of the peer. |
AS |
AS number of the peer. |
MsgRcvd |
Number of messages received. |
MsgSent |
Number of messages sent. |
OutQ |
Number of messages to be sent to the peer. |
PrefRcv |
Number of prefixes received. |
Up/Down |
Duration of the BGP session in the current state. |
State |
Current state of the peer. |
# Display detailed information about the IPv6 BGP peers in the VPN instance vpn1.
<Sysname> display bgp vpnv6 vpn-instance vpn1 peer verbose
BGP Peer is 2001::1, remote AS 200,
Type: EBGP link
BGP version 4, remote router ID 2.2.2.2
BGP current state: Established, Up for 00h00m54s
BGP current event: RecvUpdate
BGP last state: OpenConfirm
Port: Local - 179 Remote - 1024
Configured: Active Hold Time: 180 sec Keepalive Time: 60 sec
Received : Active Hold Time: 180 sec
Negotiated: Active Hold Time: 180 sec Keepalive Time:60 sec
Peer optional capabilities:
Peer support bgp multi-protocol extended
Peer support bgp route refresh capability
Address family IPv6 Unicast: advertised and received
Received: Total 4 messages, Update messages 2
Sent: Total 6 messages, Update messages 3
Maximum allowed prefix number: 4294967295
Threshold: 75%
Minimum time between advertisement runs is 30 seconds
Optional capabilities:
Route refresh capability has been enabled
Peer Preferred Value: 0
Routing policy configured:
No routing policy is configured
Table 21 Command output
Field |
Description |
BGP Peer |
IPv6 address of the BGP peer. |
remote AS |
AS number of the peer. |
Type |
BGP type. |
BGP version |
Version of BGP that the peer runs. |
remote router ID |
Router ID of the peer. |
BGP current state |
Current state of the BGP session. |
Up for |
Duration since the peer is established. |
BGP current event |
Current event of the BGP session. |
BGP last state |
State that the BGP session was in before transitioning to the current state. |
Port |
Local and remote ports of the BGP session. |
Configured |
Settings of the local timers, including the active hold interval and keepalive interval. |
Received |
Received active hold interval. |
Negotiated |
Negotiated active hold interval. |
Peer optional capabilities |
Optional capabilities of the peer. |
Peer support bgp multi-protocol extended |
The peer supports multiprotocol extension. |
Peer support bgp route refresh capability |
The peer supports route refreshing. |
Address family IPv6 Unicast |
IPv6 unicast family capability. |
Received |
Total number of received messages and the number of received update messages. |
Sent |
Total number of sent messages and the number of sent update messages. |
Maximum allowed prefix number |
Maximum number of routes can be learned from the peer. |
Threshold |
Threshold for warning. When the percentage of the number of the received route prefixes to the maximum number of routes supported reaches this value, the switch generates a prompt. |
Minimum time between advertisement runs |
Minimum interval between route advertisements. |
Optional capabilities |
Local optional capabilities. |
Route refresh capability |
Whether route refreshing is enabled. |
Peer Preferred Value |
Preference value specified for routes from the peer. |
display bgp vpnv6 vpn-instance routing-table
Syntax
display bgp vpnv6 vpn-instance vpn-instance-name routing-table [ network-address prefix-length [ longer-prefixes ] | peer ipv6-address { advertised-routes | received-routes } ] [ | { begin | exclude | include } regular-expression ]
View
Any view
Default level
1: Monitor level
Parameters
vpn-instance-name: VPN instance name, a case-sensitive string of 1 to 31 characters.
network-address: IPv6 address of the destination network segment.
prefix-length: Length of the prefix, in the range of 0 to 128.
longer-prefixes: Displays each routing entry that meets the following conditions:
1. Its destination IPv6 address ANDed with the specified prefix equals the specified destination IPv6 address ANDed with the specified prefix.
2. Its prefix length is shorter than or equal to the specified prefix length.
3. Its prefix length is the longest among the entries meeting the above two conditions.
peer ipv6-address: Displays the routing information sent to or received from the specified BGP VPNv6 peer. ipv6-address is the IPv6 address of the peer.
advertised-routes: Displays the routing information sent to the specified peer.
received-routes: Displays the routing information received from the specified peer.
|: Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide.
begin: Displays the first line that matches the specified regular expression and all lines that follow.
exclude: Displays all lines that do not match the specified regular expression.
include: Displays all lines that match the specified regular expression.
regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.
Description
Use display bgp vpnv6 vpn-instance routing-table to display the BGP VPNv6 routing information for the specified VPN.
Examples
# Display the BGP VPNv6 routing information for VPN instance vpn1.
<Sysname> display bgp vpnv6 vpn-instance vpn1 routing-table
BGP Local router ID is 1.1.1.1
Status codes: * - valid, ^ - VPN best, > - best, d - damped,
h - history, i - internal, s - suppressed, S - Stale
Origin : i - IGP, e - EGP, ? - incomplete
Total routes of vpn-instance vpn1: 1
*^> Network : 324:: PrefixLen : 64
NextHop : 100::2 LocPrf : 100
PrefVal : 0 Label : NULL
MED : 0
Path/Ogn: ?
Table 22 Command output
Field |
Description |
BGP Local router ID |
Router ID of the local BGP router. |
Status codes |
Route status codes. For more information, see Table 1. |
Origin |
Route origin codes. For more information, see Table 1. |
Network |
Destination network address. |
PrefixLen |
Prefix length of the destination network address. |
NextHop |
IPv6 address of the next hop. |
LocPrf |
Local preference value. |
PrefVal |
Preference value of the route. |
Label |
Received label. |
MED |
Metric associated with the destination network. |
Path/Ogn |
AS_PATH attribute/route origin of the route. For more information, see Table 1. |
display fib vpn-instance
Syntax
display fib vpn-instance vpn-instance-name [ acl acl-number | ip-prefix ip-prefix-name ] [ | { begin | exclude | include } regular-expression ]
View
Any view
Default level
1: Monitor level
Parameters
vpn-instance-name: VPN instance name, a case-sensitive string of 1 to 31 characters.
acl acl-number: Displays the FIB information for the VPN instance permitted by the specified ACL. acl-number is the ACL number in the range of 2000 to 2999. If the specified ACL does not exist, the command displays all FIB information for the VPN instance.
ip-prefix ip-prefix-name: Displays the FIB information for the VPN instance permitted by the specified IP prefix list. ip-prefix-name is the name of the IP prefix list, a case-sensitive string of 1 to 19 characters. If the specified IP prefix list does not exist, the command displays all FIB information for the VPN instance.
|: Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide.
begin: Displays the first line that matches the specified regular expression and all lines that follow.
exclude: Displays all lines that do not match the specified regular expression.
include: Displays all lines that match the specified regular expression.
regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.
Description
Use display fib vpn-instance to display the FIB information for a VPN.
If no parameter is specified, this command displays all FIB information for the VPN.
Examples
# Display all FIB information for VPN instance vpn1.
<Sysname> display fib vpn-instance vpn1
FIB entry count: 4
Flag:
U:Useable G:Gateway H:Host B:Blackhole D:Dynamic S:Static
Destination/Mask Nexthop Flag OutInterface InnerLabel Token
10.2.0.0/16 10.2.1.1 U Vlan10 Null Invalid
10.2.1.1/32 127.0.0.1 UH InLoop0 Null Invalid
127.0.0.0/8 127.0.0.1 U InLoop0 Null Invalid
127.0.0.1/32 127.0.0.1 UH InLoop0 Null Invalid
# Display the FIB information for VPN instance vpn1 that begins with the line containing the string 127.
<Sysname> display fib vpn-instance vpn1 | begin 127
Flag:
U:Useable G:Gateway H:Host B:Blackhole D:Dynamic S:Static
Destination/Mask Nexthop Flag OutInterface InnerLabel Token
10.2.1.1/32 127.0.0.1 UH InLoop0 Null Invalid
127.0.0.0/8 127.0.0.1 U InLoop0 Null Invalid
127.0.0.1/32 127.0.0.1 UH InLoop0 Null Invalid
# Display the FIB information for VPN instance vpn1 that is permitted by ACL 2000.
<Sysname> system-view
[Sysname] acl number 2000
[Sysname-acl-basic-2000] rule permit source 10.2.0.0 0.0.255.255
[Sysname-acl-basic-2000] display fib vpn-instance vpn1 acl 2000
FIB entry count: 2
Flag:
U:Useable G:Gateway H:Host B:Blackhole D:Dynamic S:Static
Destination/Mask Nexthop Flag OutInterface InnerLabel Token
10.2.0.0/16 10.2.1.1 U Vlan10 Null Invalid
10.2.1.1/32 127.0.0.1 UH InLoop0 Null Invalid
# Display the FIB information for VPN instance vpn1 that is permitted by the IP prefix abc0.
<Sysname> system-view
[Sysname] ip ip-prefix abc0 permit 10.2.0.0 16
[Sysname] display fib vpn-instance vpn1 ip-prefix abc0
FIB entry count: 1
Flag:
U:Useable G:Gateway H:Host B:Blackhole D:Dynamic S:Static
Destination/Mask Nexthop Flag OutInterface InnerLabel Token
10.2.0.0/16 10.2.1.1 U Vlan10 Null Invalid
Field |
Description |
FIB entry count |
Number of entries in the FIB. |
Destination/Mask |
Destination address/mask length. |
Nexthop |
Address of the next hop. |
Flag |
Flag of the route. Possible values are: · U—Available route. · G—Gateway route. · H—Host route. · B—Blackhole route. · D—Dynamic route. · S—Static route. |
OutInterface |
Forwarding interface. |
Token |
LSP index number, used to associate an Next Hop Label Forwarding Entry (NHLFE) entry. |
display fib vpn-instance ip-address
Syntax
display fib vpn-instance vpn-instance-name ip-address [ mask | mask-length ] [ | { begin | exclude | include } regular-expression ]
View
Any view
Default level
1: Monitor level
Parameters
vpn-instance-name: VPN instance name, a case-sensitive string of 1 to 31 characters.
ip-address: Destination IP address, in dotted decimal format.
mask: Mask of the IP address, in dotted decimal format.
mask-length: Length of the IP address mask, in the range of 0 to 32.
|: Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide.
begin: Displays the first line that matches the specified regular expression and all lines that follow.
exclude: Displays all lines that do not match the specified regular expression.
include: Displays all lines that match the specified regular expression.
regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.
Description
Use display fib vpn-instance ip-address to display the FIB information for the specified VPN that matches the specified destination IP address.
If neither the mask nor the mask-length argument is specified, the command displays the FIB information for the specified VPN that matches the specified destination IP address and has the longest mask. Otherwise, the command displays the FIB information for the specified VPN that exactly matches the specified destination IP address and mask.
Examples
# Display the FIB information for VPN instance vpn1 that matches the destination IP address 10.2.1.1.
<Sysname> display fib vpn-instance vpn1 10.2.1.1
FIB entry count: 1
Flag:
U:Useable G:Gateway H:Host B:Blackhole D:Dynamic S:Static
Destination/Mask Nexthop Flag OutInterface InnerLabel Token
10.2.1.1/32 127.0.0.1 UH InLoop0 Null Invalid
For information about the command output, see Table 23.
display ip vpn-instance
Syntax
display ip vpn-instance [ instance-name vpn-instance-name ] [ | { begin | exclude | include } regular-expression ]
View
Any view
Default level
1: Monitor level
Parameters
instance-name vpn-instance-name: Displays information about the specified VPN instance. vpn-instance-name represents the VPN instance name, a case-sensitive string of 1 to 31 characters.
|: Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide.
begin: Displays the first line that matches the specified regular expression and all lines that follow.
exclude: Displays all lines that do not match the specified regular expression.
include: Displays all lines that match the specified regular expression.
regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.
Description
Use display ip vpn-instance to display information about a VPN instance or all VPN instances.
If you do not specify any parameter, the command displays brief information about all VPN instances.
Examples
# Display information about all VPN instances.
<Sysname> display ip vpn-instance
Total VPN-Instances configured : 2
VPN-Instance Name RD Create Time
vpn1 22:1 2008/10/13 09:32:45
vpn2 33:3 2008/10/13 09:42:59
Table 24 Command output
Field |
Description |
VPN-Instance Name |
Name of the VPN instance. |
RD |
RD of the VPN instance. |
Create Time |
Time when the VPN instance was created. |
# Display detailed information about a VPN instance.
<Sysname> display ip vpn-instance instance-name vpn1
VPN-Instance Name and ID : vpn1, 1
Create time : 2010/08/16 05:27:29
Up time : 0 days, 00 hours, 01 minutes and 39 seconds
Route Distinguisher : 101:1
Description : This is vpn1
Export VPN Targets : 1:1
Import VPN Targets : 1:1
Import Route Policy : policy3
Export Route Policy : policy2
Tunnel Policy : policy1
Maximum Routes Limit : 600
IPv6 Export VPN Targets : 1:1
IPv6 Import VPN Targets : 1:1
IPv6 Import Route Policy : policy4
IPv6 Export Route Policy : policy1
IPv6 Tunnel Policy : policy1
IPv6 Maximum Routes Limit : 600
Interfaces : Vlan-interface1000
Table 25 Command output
Field |
Description |
VPN-Instance Name and ID |
Name and ID of the VPN instance. |
Create time |
Time when the VPN instance was created. |
Up time |
Duration of the VPN instance. |
Route Distinguisher |
RD of the VPN instance. |
Description |
Description of the VPN instance. |
Export VPN Targets |
Export target attribute of the IPv4 VPN. |
Import VPN Targets |
Import target attribute of the IPv4 VPN. |
Import Route Policy |
Import routing policy of the IPv4 VPN. |
Export Route Policy |
Export routing policy of the IPv4 VPN. |
Tunnel Policy |
Tunneling policy of the IPv4 VPN. |
Maximum Routes Limit |
Maximum number of IPv4 VPN routes. |
IPv6 Export VPN Targets |
Export target attribute of the IPv6 VPN. |
IPv6 Import VPN Targets |
Import target attribute of the IPv6 VPN. |
IPv6 Import Route Policy |
Import routing policy of the IPv6 VPN. |
IPv6 Export Route Policy |
Export routing policy of the IPv6 VPN. |
IPv6 Tunnel Policy |
Tunneling policy of the IPv6 VPN. |
IPv6 Maximum Routes Limit |
Maximum number of IPv6 VPN routes. |
Interfaces |
Interface to which the VPN instance is bound. |
display ipv6 fib vpn-instance
Syntax
display ipv6 fib vpn-instance vpn-instance-name [ acl6 acl6-number | ipv6-prefix ipv6-prefix-name ] [ | { begin | exclude | include } regular-expression ]
View
Any view
Default level
1: Monitor level
Parameters
vpn-instance-name: VPN instance name, a case-sensitive string of 1 to 31 characters.
acl6 acl6-number: Displays the IPv6 FIB information for the VPN instance permitted by the specified ACL. acl6-number is the ACL number in the range of 2000 to 2999. If the specified ACL does not exist, the command displays all IPv6 FIB information for the VPN instance.
ipv6-prefix ipv6-prefix-name: Displays the IPv6 FIB information for the VPN instance permitted by the specified prefix list. ipv6-prefix-name is the name of the IPv6 prefix list, a case-sensitive string of 1 to 19 characters. If the specified IPv6 prefix list does not exist, the command displays all IPv6 FIB information for the VPN instance.
|: Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide.
begin: Displays the first line that matches the specified regular expression and all lines that follow.
exclude: Displays all lines that do not match the specified regular expression.
include: Displays all lines that match the specified regular expression.
regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.
Description
Use display ipv6 fib vpn-instance to display the IPv6 FIB information for the specified VPN.
If you do not specify any optional parameters, the command displays all IPv6 FIB information for the VPN.
Examples
# Display all IPv6 FIB information for VPN instance vpn1.
<Sysname> display ipv6 fib vpn-instance vpn1
FIB Table:
Total number of Routes : 1
Flag:
U:Useable G:Gateway H:Host B:Blackhole D:Dynamic S:Static
Destination: ::1 PrefixLength : 128
NextHop : ::1 Flag : UH
Label : Null Token : Invalid
Interface : InLoopBack0
Table 26 Command output
Field |
Description |
Total number of Routes |
Total number of matched routes in the FIB. |
Flag |
Flag of the route. Possible values are: · U—Usable route. · G—Gateway route. · H—Host route. · B—Blackhole route. · D—Dynamic route. · S—Static route. |
Label |
Label value added to a packet. |
Token |
LSP index, used to associate an NHLFE entry. |
Interface |
Outgoing interface of packets. |
display ipv6 fib vpn-instance ipv6-address
Syntax
display ipv6 fib vpn-instance vpn-instance-name ipv6-address [ prefix-length ] [ | { begin | exclude | include } regular-expression ]
View
Any view
Default level
1: Monitor level
Parameters
vpn-instance-name: VPN instance name, a case-sensitive string of 1 to 31 characters.
ipv6-address: Destination IPv6 address.
prefix-length: Prefix length of the destination IPv6 address, in the range of 0 to 128.
|: Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide.
begin: Displays the first line that matches the specified regular expression and all lines that follow.
exclude: Displays all lines that do not match the specified regular expression.
include: Displays all lines that match the specified regular expression.
regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.
Description
Use display ipv6 fib vpn-instance ipv6-address to display a VPN's IPv6 FIB information that matches a destination IPv6 address.
If you do not specify the prefix length, the command displays the matched IPv6 FIB information that has the longest prefix. If you specify the prefix length, the command displays the matched IPv6 FIB information that has the exact prefix length.
Examples
# Displays the IPv6 FIB information with the destination address of ::1 in the VPN instance vpn1.
<Sysname> display ipv6 fib vpn-instance vpn1 ::1
FIB Table:
Total number of Routes : 1
Flag:
U:Useable G:Gateway H:Host B:Blackhole D:Dynamic S:Static
Destination: ::1 PrefixLength : 128
NextHop : ::1 Flag : UH
Label : Null Token : Invalid
Interface : InLoopBack0
Table 27 Command output
Field |
Description |
Total number of Routes |
Total number of matched routes in the FIB. |
Flag |
Flag of the route. Possible values are: · U—Usable route. · G—Gateway route. · H—Host route. · B—Blackhole route. · D—Dynamic route. · S—Static route. |
Label |
Label value added to a packet. |
Token |
LSP index, used to associate an NHLFE entry. |
Interface |
Outgoing interface of packets. |
display mpls ldp vpn-instance
Syntax
display mpls ldp vpn-instance vpn-instance-name [ | { begin | exclude | include } regular-expression ]
View
Any view
Default level
1: Monitor view
Parameters
vpn-instance-name: Name of the VPN instance, a case-sensitive string of 1 to 31 characters.
|: Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide.
begin: Displays the first line that matches the specified regular expression and all lines that follow.
exclude: Displays all lines that do not match the specified regular expression.
include: Displays all lines that match the specified regular expression.
regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 80 characters.
Description
Use display mpls ldp vpn-instance to display information about an LDP instance.
Related commands: mpls ldp vpn-instance.
Examples
# Display information about the LDP instance named vpn1.
<Sysname> display mpls ldp vpn-instance vpn1
LDP Global Information
--------------------------------------------------------------------
Protocol Version : V1 Neighbor Liveness : 60 Sec
Graceful Restart : Off FT Reconnect Timer : 60 Sec
MTU Signaling : Off Recovery Timer : 60 Sec
LDP Instance Information
--------------------------------------------------------------------
Instance ID : 1 VPN-Instance : vpn1
Instance Status : Active LSR ID : 1.1.1.9
Hop Count Limit : 32 Path Vector Limit : 32
Loop Detection : Off
DU Re-advertise Timer : 30 Sec DU Re-advertise Flag : On
DU Explicit Request : Off Request Retry Flag : On
Label Distribution Mode : Ordered Label Retention Mode : Liberal
Table 28 Command output
Field |
Description |
Protocol Version |
Version of the LDP protocol. |
Neighbor Liveness |
Neighbor liveness timer of LDP GR. |
Graceful Restart |
Whether GR is enabled for LDP. |
FT Reconnect Timer |
FT reconnect timer of LDP GR. |
MTU Signaling |
Whether MTU signaling is supported. The switch does not support MTU signaling. |
Recovery Timer |
Recover timer of LDP GR. |
VPN-Instance |
Name of the LDP-enabled VPN instance. |
Loop Detection |
Whether loop detection is enabled. |
DU Re-advertise Timer |
Label re-advertisement timer for DU mode. |
DU Re-advertise Flag |
Whether label re-advertisement is enabled for DU mode. |
DU Explicit Request |
Whether explicit request transmission is enabled for DU mode. |
Request Retry Flag |
Whether request retransmission is enabled. |
Label Distribution Mode |
Label distribution control mode of the instance, Ordered or Independent. |
Label Retention Mode |
Label retention mode of the instance. The switch supports only the Liberal mode. |
display ospf sham-link
Syntax
display ospf [ process-id ] sham-link [ area area-id ] [ | { begin | exclude | include } regular-expression ]
View
Any view
Default level
1: Monitor level
Parameters
process-id: OSPF process ID in the range of 1 to 65535.
area area-id: Specifies an OSPF area by the area ID, which can be an integer in the range of 0 to 4294967295 or in the format of an IPv4 address.
|: Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide.
begin: Displays the first line that matches the specified regular expression and all lines that follow.
exclude: Displays all lines that do not match the specified regular expression.
include: Displays all lines that match the specified regular expression.
regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.
Description
Use display ospf sham-link to display information about sham links.
With neither process ID nor area ID specified, the command displays information about all configured sham links.
Related commands: sham-link.
Examples
# Display information about all OSPF sham links.
<Sysname> display ospf sham-link
OSPF Process 100 with Router ID 100.1.1.2
Sham Link:
Area NeighborId Source-IP Destination-IP State Cost
0.0.0.1 120.1.1.2 3.3.3.3 5.5.5.5 P-2-P 10
Table 29 Command output
Field |
Description |
Area |
OSPF area to which the sham link belongs. |
NeighborId |
Router ID of the sham link neighbor. |
Source-IP |
Source IP address of the sham link. |
Destination-IP |
Destination IP address of the sham link. |
State |
Status of the sham link interface. |
Cost |
Cost of the sham link. |
# Display information about OSPF sham links in area 1.
<Sysname> display ospf sham-link area 1
OSPF Process 100 with Router ID 100.1.1.2
Sham-Link: 3.3.3.3 --> 5.5.5.5
Neighbor ID: 120.1.1.2 State: Full
Area: 0.0.0.1
Cost: 10 State: P-2-P Type: Sham
Timers: Hello 10, Dead 40, Retransmit 5, Transmit Delay 1
MD5 authentication enabled.
The last key is 3.
The rollover is in progress, 1 neighbor(s) left.
Table 30 Command output
Field |
Description |
Sham-Link |
Sham link expressed in the format of source IP address to destination IP address. |
Neighbor ID |
Router ID of the sham link neighbor. |
State |
Status of the sham link neighbor. |
Area |
Destination IP address of the sham link. |
Cost |
Cost of the sham link. |
State |
Status of the sham link. |
Type |
Type of the sham link. |
Timers |
Timers of the sham link. |
MD5 authentication enabled |
Authentication mode of the sham link. |
The last key |
Most recent key ID. |
neighbor(s) left |
Number of neighbors that have not completed MD5 key rollover. |
display tunnel-policy
Syntax
display tunnel-policy { all | policy-name tunnel-policy-name } [ | { begin | exclude | include } regular-expression ]
View
Any view
Default level
1: Monitor level
Parameters
all: Specifies all tunneling policies.
tunnel-policy-name: Name of a tunneling policy, a string of 1 to 19 characters.
|: Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide.
begin: Displays the first line that matches the specified regular expression and all lines that follow.
exclude: Displays all lines that do not match the specified regular expression.
include: Displays all lines that match the specified regular expression.
regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.
Description
Use display tunnel-policy to display information about a tunneling policy or all tunneling policies.
Related commands: tunnel-policy and tunnel select-seq.
Examples
# Display all tunneling policies.
<Sysname>display tunnel-policy all
Tunnel Policy Name Select-Seq Load balance No
------------------------------------------------------
t LSP 1
aaa LSP CR-LSP 1
bbb LSP 1
# Display tunneling policy aaa.
<Sysname>display tunnel-policy policy-name aaa
Tunnel Policy Name Select-Seq Load balance No
------------------------------------------------------
aaa LSP CR-LSP 1
Table 31 Command output
Field |
Description |
Tunnel Policy Name |
Name of the tunneling policy. |
Select-Seq |
Preference order for tunnel selection. |
Load balance No |
Number of tunnels for load balancing. |
display vpn label operation
Syntax
display vpn label operation [ | { begin | exclude | include } regular-expression ]
View
Any view
Default level
1: Monitor level
Parameters
|: Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide.
begin: Displays the first line that matches the specified regular expression and all lines that follow.
exclude: Displays all lines that do not match the specified regular expression.
include: Displays all lines that match the specified regular expression.
regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.
Description
Use display vpn label operation to display the VPN label processing mode on an egress PE.
Examples
# Display the VPN label processing mode.
<Sysname> display vpn label operation
Pop VPN label and forward.
The above output indicates that the VPN label processing mode on the current egress PE is outbound interface based forwarding.
# Display the VPN label processing mode.
<Sysname> display vpn label operation
Pop VPN label and look up FIB entry.
The above output indicates that the VPN label processing mode on the current egress PE is FIB based forwarding.
domain-id
Syntax
domain-id domain-id [ secondary ]
undo domain-id [ domain-id ]
View
OSPF view
Default level
2: System level
Parameters
domain-id: OSPF domain ID, which can be in one of the following formats:
· Integer, in the range of 0 to 4294967295. For example, 1.
· Dotted decimal notation. For example, 0.0.0.1.
· Dotted decimal notation:16-bit user-defined number in the range of 0 to 65535. For example, 0.0.0.1:512.
secondary: Uses the domain ID as secondary. With this keyword not specified, the domain ID configured is primary.
Description
Use domain-id to configure an OSPF domain ID.
Use undo domain-id to restore the default.
By default, the OSPF domain ID is 0.
With no parameter specified, the undo domain-id command deletes all domain IDs.
Usually, routes injected from PEs are advertised as External-LSAs. However, routes to different destinations in the same OSPF domain must be advertised as Type-3 LSAs. Therefore, you must use the same domain ID for an OSPF domain.
Examples
# Configure the OSPF domain ID.
<Sysname> system-view
[Sysname] ospf 100
[Sysname-ospf-100] domain-id 234
export route-policy
Syntax
export route-policy route-policy
undo export route-policy
View
VPN instance view, IPv4 VPN view, IPv6 VPN view
Default level
2: System level
Parameters
route-policy: Name of an export routing policy, a case-sensitive string of 1 to 63 characters.
Description
Use export route-policy to apply an export routing policy to a VPN instance, an IPv4 VPN, or an IPv6 VPN.
Use undo export route-policy to remove the application.
By default, no policy is applied to filter the routes to be advertised.
You can specify an export routing policy when the VPN route advertisement control provided by the extended community attributes is not enough.
· An export routing policy specified in VPN instance view is applicable to both the IPv4 VPN and the IPv6 VPN.
· An export routing policy specified in IPv4 VPN view is applicable to only the IPv4 VPN.
· An export routing policy specified in IPv6 VPN view is applicable to only the IPv6 VPN.
· An export routing policy specified in IPv4 VPN view or IPv6 VPN view takes precedence over that specified in VPN instance view. If you specify an export routing policy in both IPv4 VPN view (or IPv6 VPN view) and VPN instance view, the policy specified in IPv4 VPN view (or IPv6 VPN view) is applied to the IPv4 VPN (or IPv6 VPN).
Examples
# Apply export routing policy poly-1 to VPN instance vpn1.
<Sysname> system-view
[Sysname] ip vpn-instance vpn1
[Sysname-vpn-instance-vpn1] export route-policy poly-1
# Apply export routing policy poly-2 to the IPv4 VPN of VPN instance vpn2.
<Sysname> system-view
[Sysname] ip vpn-instance vpn2
[Sysname-vpn-instance-vpn2] ipv4-family
[Sysname-vpn-ipv4-vpn2] export route-policy poly-2
# Apply export routing policy poly-3 to the IPv6 VPN of VPN instance vpn3.
<Sysname> system-view
[Sysname] ip vpn-instance vpn3
[Sysname-vpn-instance-vpn3] ipv6-family
[Sysname-vpn-ipv6-vpn3] export route-policy poly-3
ext-community-type
Syntax
ext-community-type { domain-id type-code1 | router-id type-code2 | route-type type-code3 }
undo ext-community-type { domain-id | router-id | route-type }
View
OSPF view
Default level
2: System level
Parameters
domain-id type-code1: Specifies the type code for the OSPF extended community attribute of Domain ID. Valid values are 0x0005, 0x0105, 0x0205, and 0x8005.
router-id type-code2: Specifies the type code for the OSPF extended community attribute of Router ID. Valid values are 0x0107 and 0x8001.
router-type type-code3: Specifies the type code for the OSPF extended community attribute of Route Type. Valid values are 0x0306 and 0x8000.
Description
Use ext-community-type to configure the type code of an OSPF extended community attribute.
Use undo ext-community-type to restore the default.
By default, the type codes for the OSPF extended community attributes of Domain ID, Router ID, and Route Type are 0x0005, 0x0107, and 0x0306.
Examples
# Configure the type codes of OSPF extended community attributes Domain ID, Router ID, and Route Type as 0x8005, 0x8001, and 0x8000 for OSPF process 100.
<Sysname> system-view
[Sysname] ospf 100
[Sysname-ospf-100] ext-community-type domain-id 8005
[Sysname-ospf-100] ext-community-type router-id 8001
[Sysname-ospf-100] ext-community-type route-type 8000
filter-policy export (BGP-VPNv4 subaddress family view)
Syntax
filter-policy { acl-number | ip-prefix ip-prefix-name } export [ direct | isis process-id | ospf process-id | rip process-id | static ]
undo filter-policy export [ direct | isis process-id | ospf process-id | rip process-id | static ]
View
BGP-VPNv4 subaddress family view
Default level
2: System level
Parameters
acl-number: IP ACL number in the range of 2000 to 3999.
ip-prefix ip-prefix-name: Specifies an IP address prefix list by its name, a string of 1 to 19 characters.
direct: Filters direct routes to be advertised.
isis process-id: Filters ISIS routes to be advertised that are from a specific ISIS process. The process-id argument is in the range of 1 to 65535.
ospf process-id: Filters OSPF routes to be advertised that are from a specific OSPF process. The process-id argument is in the range of 1 to 65535.
rip process-id: Filters RIP routes to be advertised that are from a specific RIP process. The process-id argument is in the range of 1 to 65535.
static: Filters static routes to be advertised.
Description
Use filter-policy export to filter all or certain types of routes to be advertised.
Use undo filter-policy export to remove the configuration.
If you specify no routing protocol parameters for the filter-policy export command, all routes to be advertised will be filtered.
By default, MP-BGP does not filter routes to be advertised.
Only routes that survive the filtering are advertised by MP-BGP.
Examples
# In BGP-VPNv4 subaddress family view, use ACL 2555 to filter routes to be advertised by MP-BGP.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] ipv4-family vpnv4
[Sysname-bgp-af-vpnv4] filter-policy 2555 export
filter-policy export (BGP-VPNv6 subaddress family view)
Syntax
filter-policy { acl6-number | ipv6-prefix ipv6-prefix-name } export [ direct | isisv6 process-id | ospfv3 process-id | ripng process-id | static ]
undo filter-policy export [ direct | isisv6 process-id | ospfv3 process-id | ripng process-id | static ]
View
BGP-VPNv6 subaddress family view
Default level
2: System level
Parameters
acl6-number: IPv6 ACL number in the range of 2000 to 3999.
ipv6-prefix ipv6-prefix-name: Specifies an IPv6 address prefix list by its name, a string of 1 to 19 characters.
direct: Filters direct routes to be advertised.
isisv6 process-id: Filters IPv6 ISIS routes to be advertised that are from a specific IPv6 ISIS process. The process-id argument is in the range of 1 to 65535.
ospfv3 process-id: Filters OSPFv3 routes to be advertised that are from a specific OSPFv3 process. The process-id argument is in the range of 1 to 65535.
ripng process-id: Filters RIPng routes to be advertised that are from a specific RIPng process. The process-id argument is in the range of 1 to 65535.
static: Filters static routes to be advertised.
Description
Use filter-policy export to filter all or certain types of routes to be advertised.
Use undo filter-policy export to remove the configuration.
By default, MP-BGP does not filter routes to be advertised.
Only routes that survive the filtering are advertised by MP-BGP.
If you specify no routing protocol parameters for the filter-policy export command, all routes to be advertised are filtered.
Examples
# In BGP-VPNv6 subaddress family view, use ACL 2555 to filter routes to be advertised by MP-BGP.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] ipv6-family vpnv6
[Sysname-bgp-af-vpnv6] filter-policy 2555 export
filter-policy import (BGP-VPNv4 subaddress family view)
Syntax
filter-policy { acl-number | ip-prefix ip-prefix-name } import
undo filter-policy import
View
BGP-VPNv4 subaddress family view
Default level
2: System level
Parameters
acl-number: IP ACL number in the range of 2000 to 3999.
ip-prefix ip-prefix-name: Specifies an IP address prefix list by its name, a string of 1 to 19 characters.
Description
Use filter-policy import to filter received routes.
Use undo filter-policy import to remove the configuration.
By default, received routes are not filtered.
Only routes that survive the filtering are added into the BGP routing table.
Examples
# In BGP-VPNv4 subaddress family view, use ACL 2255 to filter received routes.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] ipv4-family vpnv4
[Sysname-bgp-af-vpnv4] filter-policy 2255 import
filter-policy import (BGP-VPNv6 subaddress family view)
Syntax
filter-policy { acl6-number | ipv6-prefix ipv6-prefix-name } import
undo filter-policy import
View
BGP-VPNv6 subaddress family view
Default level
2: System level
Parameters
acl6-number: IPv6 ACL number in the range of 2000 to 3999.
ipv6-prefix ipv6-prefix-name: Specifies an IPv6 address prefix list by its name, a string of 1 to 19 characters.
Description
Use filter-policy import to filter received routes.
Use undo filter-policy import to remove the configuration.
By default, received routes are not filtered.
Only routes that survive the filtering are added into the BGP routing table.
Examples
# In BGP-VPNv6 subaddress family view, use ACL 2255 to filter received routes.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] ipv6-family vpnv6
[Sysname-bgp-af-vpnv6] filter-policy 2255 import
import route-policy
Syntax
import route-policy route-policy
undo import route-policy
View
VPN instance view, IPv4 VPN view, IPv6 VPN view
Default level
2: System level
Parameters
route-policy: Name of an import routing policy, a case-sensitive string of 1 to 63 characters.
Description
Use import route-policy to apply an import routing policy to a VPN instance, an IPv4 VPN or an IPv6 VPN.
Use undo import route-policy to remove the application.
By default, all routes permitted by the import target attribute are accepted.
You can specify an import routing policy when the route redistribution control provided by the extended community attributes is not enough.
· An import routing policy specified in VPN instance view is applicable to both the IPv4 VPN and the IPv6 VPN.
· An import routing policy specified in IPv4 VPN view is applicable to only the IPv4 VPN.
· An import routing policy specified in IPv6 VPN view is applicable to only the IPv6 VPN.
· An import routing policy specified in IPv4 VPN view or IPv6 VPN view takes precedence over that specified in VPN instance view. If you specify an import routing policy in both IPv4 VPN view (or IPv6 VPN view) and VPN instance view, the policy specified in IPv4 VPN view (or IPv6 VPN view) is applied to the IPv4 VPN (or IPv6 VPN).
Examples
# Apply import routing policy poly-1 to VPN instance vpn1.
<Sysname> system-view
[Sysname] ip vpn-instance vpn1
[Sysname-vpn-instance-vpn1] import route-policy poly-1
# Apply import routing policy poly-2 to the IPv4 VPN of VPN instance vpn2.
<Sysname> system-view
[Sysname] ip vpn-instance vpn2
[Sysname-vpn-instance-vpn2] ipv4-family
[Sysname-vpn-ipv4-vpn2] import route-policy poly-2
# Apply import routing policy poly-3 to the IPv6 VPN of VPN instance vpn3.
<Sysname> system-view
[Sysname] ip vpn-instance vpn3
[Sysname-vpn-instance-vpn3] ipv6-family
[Sysname-vpn-ipv6-vpn3] import route-policy poly-3
ip binding vpn-instance
Syntax
ip binding vpn-instance vpn-instance-name
undo ip binding vpn-instance vpn-instance-name
View
Interface view
Default level
2: System level
Parameters
vpn-instance-name: Name of the VPN instance to be associated, a case-sensitive string of 1 to 31 characters.
Description
Use ip binding vpn-instance to associate an interface with a VPN instance.
Use undo ip binding vpn-instance to remove the association.
By default, an interface is associated with no VPN instance; it belongs to the public network.
When configured on an interface, the ip binding vpn-instance command clears the IP address of the interface. You must re-configure the IP address of the interface after configuring the command.
|
CAUTION: If you configure an IPv6 address for an interface associated with a VPN, the number of VPNs that the switch can support will reduce. |
Examples
# Associate interface VLAN-interface 1 with VPN instance vpn1.
<Sysname> system-view
[Sysname] interface vlan-interface 1
[Sysname-Vlan-interface1] ip binding vpn-instance vpn1
ip vpn-instance
Syntax
ip vpn-instance vpn-instance-name
undo ip vpn-instance vpn-instance-name
View
System view
Default level
2: System level
Parameters
vpn-instance-name: Name for the VPN instance, a case-sensitive string of 1 to 31 characters.
Description
Use ip vpn-instance to create a VPN instance and enter VPN instance view.
Use undo ip vpn-instance to delete a VPN instance.
A VPN instance takes effect only after you configure an RD for it.
Related commands: route-distinguisher.
Examples
# Create a VPN instance named vpn1.
<Sysname> system-view
[Sysname] ip vpn-instance vpn1
[Sysname-vpn-instance-vpn1]
ipv4-family (BGP view)
Syntax
ipv4-family { vpn-instance vpn-instance-name | vpnv4 }
undo ipv4-family { vpn-instance vpn-instance-name | vpnv4 }
View
BGP view
Default level
2: System level
Parameters
vpn-instance vpn-instance-name: Associates a VPN instance with an IPv4 address family and enters BGP VPN instance view. The vpn-instance-name argument represents the VPN instance name, a case-sensitive string of 1 to 31 characters.
vpnv4: Enters BGP-VPNv4 subaddress family view.
Description
Use ipv4-family in BGP view to enter BGP-VPNv4 subaddress family view or BGP VPN instance view.
Use undo ipv4-family to remove all configurations performed in either of the two views.
Before entering BGP VPN instance view, you must create the VPN instance.
Examples
# Enter BGP-VPNv4 subaddress family view.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] ipv4-family vpnv4
[Sysname-bgp-af-vpnv4]
# Associate VPN instance vpn1 with an IPv4 address family and enter BGP VPN instance view.
<Sysname> system-view
[Sysname] ip vpn-instance vpn1
[Sysname-vpn-instance-vpn1] quit
[Sysname] bgp 100
[Sysname-bgp] ipv4-family vpn-instance vpn1
[Sysname-bgp-vpn1]
ipv4-family (VPN instance view)
Syntax
ipv4-family
undo ipv4-family
View
VPN instance view
Default level
2: System level
Parameters
None
Description
Use ipv4-family in VPN instance view to enter IPv4 VPN view.
Use undo ipv4-family to remove all configurations performed in IPv4 VPN view.
Examples
# Enter IPv4 VPN view.
<Sysname> system-view
[Sysname] ip vpn-instance vpn1
[Sysname-vpn-instance-vpn1] ipv4-family
[Sysname-vpn-ipv4-vpn1]
ipv6-family (BGP view)
Syntax
ipv6-family { vpn-instance vpn-instance-name | vpnv6 }
undo ipv6-family { vpn-instance vpn-instance-name | vpnv6 }
View
BGP view
Default level
2: System level
Parameters
vpn-instance vpn-instance-name: Associates a VPN instance with an IPv6 address family and enters IPv6 BGP-VPN instance view. The vpn-instance-name argument is a case-sensitive string of 1 to 31 characters.
vpnv6: Enters BGP-VPNv6 subaddress family view.
Description
Use ipv6-family in BGP view to enter BGP-VPNv6 subaddress family view or IPv6 BGP-VPN instance view.
Use undo ipv6-family to remove all configurations performed in BGP-VPNv6 subaddress family view or IPv6 BGP-VPN instance view.
Before entering IPv6 BGP-VPN instance view, you must create the VPN instance.
Examples
# Enter BGP-VPNv6 subaddress family view.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] ipv6-family vpnv6
[Sysname-bgp-af-vpnv6]
# Associate VPN instance vpn1 with the IPv6 address family and enter IPv6 BGP-VPN instance view.
<Sysname> system-view
[Sysname] ip vpn-instance vpn1
[Sysname-vpn-instance-vpn1] quit
[Sysname] bgp 100
[Sysname-bgp] ipv6-family vpn-instance vpn1
[Sysname-bgp-vpn1]
ipv6-family (VPN instance view)
Syntax
ipv6-family
undo ipv6-family
View
VPN instance view
Default level
2: System level
Parameters
None
Description
Use ipv6-family in VPN instance view to enter IPv6 VPN view.
Use undo ipv6-family to remove all configurations performed in IPv6 VPN view.
Examples
# Enter IPv6 VPN view.
<Sysname> system-view
[Sysname] ip vpn-instance vpn1
[Sysname-vpn-instance-vpn1] ipv6-family
[Sysname-vpn-ipv6-vpn1]
mpls ldp vpn-instance
Syntax
mpls ldp vpn-instance vpn-instance-name
undo mpls ldp vpn-instance vpn-instance-name
View
System view
Default level
2: System level
Parameters
vpn-instance-name: Name of the VPN instance, a case-sensitive string of 1 to 31 characters.
Description
Use mpls ldp vpn-instance to enable LDP for a VPN instance, create an LDP instance, and enter MPLS LDP VPN instance view.
Use undo mpls ldp vpn-instance to disable LDP for a VPN instance and remove the LDP instance.
By default, a VPN instance is not enabled with LDP.
Before configuring the mpls ldp vpn-instance command, you need to configure the MPLS LSR ID and enable MPLS for the switch.
Related commands: mpls and mpls lsr-id.
Examples
# Enable LDP for VPN instance vpn1, create the LDP instance, and enter the MPLS LDP VPN instance view.
<Sysname> System-view
[Sysname] mpls ldp vpn-instance vpn1
[Sysname-mpls-ldp-vpn-instance-vpn1]
nesting-vpn
Syntax
nesting-vpn
undo nesting-vpn
View
BGP-VPNv4 subaddress family view
Default level
2: System level
Parameters
None
Description
Use nesting-vpn to enable the nested VPN function.
Use undo nesting-vpn to disable the nested VPN function.
By default, the nested VPN function is disabled.
If a nested VPN peer connected to a PE needs to advertise VPNv4 routes, you need to enable nested VPN on the PE.
Examples
# Enable nested VPN.
<Sysname> system-view
[Sysname] bgp 10
[Sysname-bgp] ipv4-family vpnv4
[Sysname-bgp-af-vpnv4] nesting-vpn
peer advertise-community (BGP-VPNv4 subaddress family view)
Syntax
peer { group-name | ip-address } advertise-community
undo peer { group-name | ip-address } advertise-community
View
BGP-VPNv4 subaddress family view
Default level
2: System level
Parameters
group-name: Name of the peer group, a case-sensitive string of 1 to 47 characters.
ip-address: IP address of the peer.
Description
Use peer advertise-community to specify to advertise community attributes to a peer or peer group.
Use undo peer advertise-community to remove the configuration.
By default, no community attributes are advertised to any peer or peer group.
Examples
# In BGP-VPNv4 subaddress family view, specify to advertise community attributes to peer 3.3.3.3.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] ipv4-family vpnv4
[Sysname-bgp-af-vpnv4] peer 3.3.3.3 advertise-community
peer allow-as-loop
Syntax
peer { group-name | ip-address } allow-as-loop [ number ]
undo peer { group-name | ip-address } allow-as-loop
View
BGP-VPNv4 subaddress family view, VPLS address family view
Default level
2: System level
Parameters
group-name: Name of the peer group, a case-sensitive string of 1 to 47 characters.
ip-address: IP address of the peer.
number: Maximum number that the local AS number can appear repeatedly in the AS-PATH attribute. It is in the range of 1 to 10 and defaults to 1.
Description
Use peer allow-as-loop to allow the local AS number to appear in the AS-PATH attribute of a received route and to set the allowed maximum number of repetitions.
Use undo peer allow-as-loop to remove the configuration.
Examples
# In BGP-VPNv4 subaddress family view, allow the local AS number to appear repeatedly in the AS-PATH attribute of a route received from peer 1.1.1.1 for up to twice.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] ipv4-family vpnv4
[Sysname-bgp-af-vpnv4] peer 1.1.1.1 allow-as-loop 2
# In VPLS address family view, allow the local AS number to appear repeatedly in the AS-PATH attribute of a route received from peer 1.1.1.1 for up to twice.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] vpls-family
[Sysname-bgp-af-vpls] peer 1.1.1.1 allow-as-loop 2
peer as-path-acl (BGP-VPNv4 subaddress family view)
Syntax
peer { group-name | ip-address } as-path-acl as-path-acl-number { import | export }
undo peer { group-name | ip-address } as-path-acl as-path-acl-number { import | export }
BGP-VPNv4 subaddress family view
Default level
2: System level
Parameters
group-name: Name of the peer group, a case-sensitive string of 1 to 47 characters.
ip-address: IP address of the peer.
as-path-acl-number: AS_PATH filtering list number in the range of 1 to 256.
import: Filters the received routes.
export: Filters the routes to be advertised.
Description
Use peer as-path-acl to specify to filter routes received from, or to be advertised to, a specific peer or peer group based on an AS_PATH list.
Use undo peer as-path-acl to remove the configuration.
By default, no AS filtering list is applied to a peer or peer group.
Examples
# In BGP-VPNv4 subaddress family view, apply AS filtering list 3 to routes advertised by peer group test.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] ipv4-family vpnv4
[Sysname-bgp-af-vpnv4] peer test as-path-acl 3 export
peer capability-advertise orf ip-prefix (BGP-VPNv4 subaddress family view)
Syntax
peer { group-name | ip-address } capability-advertise orf ip-prefix { both | receive | send }
undo peer { group-name | ip-address } capability-advertise orf ip-prefix { both | receive | send }
View
BGP-VPNv4 subaddress family view
Default level
2: System level
Parameters
group-name: Name of the peer group, a string of 1 to 47 characters.
ip-address: IP address of the peer.
both: Supports sending and receiving Route-refresh messages with ORF information.
receive: Supports receiving Route-refresh messages with ORF information.
send: Supports sending Route-refresh messages with ORF information.
Description
Use peer capability-advertise orf ip-prefix to enable the ORF capability for a BGP peer or peer group.
Use undo peer capability-advertise orf ip-prefix to disable the ORF capability for a BGP peer or peer group.
By default, the ORF capability is not enabled for a BGP peer or peer group.
· With the ORF capability enabled, the local BGP router negotiates the ORF capability with the BGP peer through Open messages. After the negotiation succeeds, the BGP router can process Route-refresh messages with the standard ORF information from the peer or send Route-refresh messages with the standard ORF information to the peer.
· If you disable the ORF capability, the local BGP router does not negotiate the ORF capability with the specified peer or peer group.
Table 32 Description of the both, send, and receive parameters and the negotiation result
Local parameter |
Peer parameter |
Negotiation result |
send |
· receive · both |
The ORF sending capability is enabled locally and the ORF receiving capability is enabled on the peer. |
receive |
· send · both |
The ORF receiving capability is enabled locally and the ORF sending capability is enabled on the peer. |
both |
both |
Both the ORF sending and receiving capabilities are enabled locally and on the peer. |
Examples
# Enable both the ORF sending and receiving capabilities for the BGP peer 18.10.0.9. Then, after the negotiation succeeds, the local router can exchange VPNv4 ORF information with the peer 18.10.0.9.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] peer 18.10.0.9 as-number 100
[Sysname-bgp] ipv4-family vpnv4
[Sysname-bgp-af-vpnv4] peer 18.10.0.9 enable
[Sysname-bgp-af-vpnv4] peer 18.10.0.9 capability-advertise orf ip-prefix both
peer default-route-advertise vpn-instance
Syntax
peer { group-name | ip-address } default-route-advertise vpn-instance vpn-instance-name
undo peer { group-name | ip-address } default-route-advertise vpn-instance vpn-instance-name
View
BGP-VPNv4 subaddress family view
Default level
2: System level
Parameters
group-name: Name of the peer group, a case-sensitive string of 1 to 47 characters.
ip-address: IP address of the peer.
vpn-instance-name: Name of the VPN instance, a case-sensitive string of 1 to 31 characters.
Description
Use peer default-route-advertise vpn-instance to advertise a default VPN route to a peer or peer group.
Use undo peer default-route-advertise vpn-instance to remove the configuration.
By default, no default route is advertised to a peer or peer group.
After you execute this command, the switch always advertises a default route with the local address as the next hop for the specified VPN instance to the specified peer or peer group, regardless of whether the default route is present in the local routing table for the VPN.
Examples
# In BGP-VPNv4 subaddress family view, advertise a default route for VPN instance vpn1 to peer 1.1.1.1.
[Sysname] bgp 100
[Sysname-bgp] ipv4-family vpnv4
[Sysname-bgp-af-vpnv4] peer 1.1.1.1 enable
[Sysname-bgp-af-vpnv4] peer 1.1.1.1 upe
[Sysname-bgp-af-vpnv4] peer 1.1.1.1 default-route-advertise vpn-instance vpn1
peer enable
Syntax
In BGP-VPNv4 subaddress family view, VPLS address family view:
peer { group-name | ip-address } enable
undo peer { group-name | ip-address } enable
In BGP-VPNv6 subaddress family view:
peer ip-address enable
undo peer ip-address enable
View
BGP-VPNv4 subaddress family view, VPLS address family view, BGP-VPNv6 subaddress family view
Default level
2: System level
Parameters
group-name: Name of the peer group, a case-sensitive string of 1 to 47 characters.
ip-address: IP address of the peer.
Description
Use peer enable to enable a peer or peer group for an address family and enable the exchange of BGP routing information for the address family.
Use undo peer enable to disable the capability.
By default, only IPv4 routing information is exchanged between BGP peers/peer groups.
# Configure peer 1.1.1.1 and enable the peer for the BGP-VPNv4 subaddress family.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] peer 1.1.1.1 as-number 100
[Sysname-bgp] ipv4-family vpnv4
[Sysname-bgp-af-vpnv4] peer 1.1.1.1 enable
# Configure peer 1.1.1.1 and enable the peer for the VPLS address family.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] peer 1.1.1.1 as-number 100
[Sysname-bgp] vpls-family
[Sysname-bgp-af-vpls] peer 1.1.1.1 enable
# Configure peer 1.1.1.1 and enable the peer for the BGP-VPNv6 subaddress family.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] peer 1.1.1.1 as-number 100
[Sysname-bgp] ipv6-family vpnv6
[Sysname-bgp-af-vpnv6] peer 1.1.1.1 enable
peer filter-policy (BGP-VPNv4/BGP-VPNv6 subaddress family view)
Syntax
In BGP-VPNv4 subaddress family view:
peer { group-name | ip-address } filter-policy acl-number { export | import }
undo peer { group-name | ip-address } filter-policy [ acl-number ] { export | import }
In BGP-VPNv6 subaddress family view:
peer ip-address filter-policy acl6-number { export | import }
undo peer ip-address filter-policy [ acl6-number ] { export | import }
View
BGP-VPNv4 subaddress family view, BGP-VPNv6 subaddress family view
Default level
2: System level
Parameters
group-name: Name of the peer group, a case-sensitive string of 1 to 47 characters.
ip-address: IP address of the peer.
acl-number: IP ACL number in the range of 2000 to 3999.
acl6-number: IPv6 ACL number in the range of 2000 to 3999.
export: Filters the routes to be advertised to the specified peer or peer group.
import: Filters the routes received from the specified peer or peer group.
Description
Use peer filter-policy to apply a filtering policy to a peer or peer group.
Use undo peer filter-policy to remove the configuration.
By default, no filtering policy is applied to a peer or peer group.
Related commands: peer as-path-acl.
Examples
# In BGP-VPNv4 subaddress family view, apply a filtering policy to filter the routes received from peer group test.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] ipv4-family vpnv4
[Sysname-bgp-af-vpnv4] peer test filter-policy 2003 import
# In BGP-VPNv6 subaddress family view, apply a filtering policy to filter the routes received from peer 1.1.1.1.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] ipv6-family vpnv6
[Sysname-bgp-af-vpnv6] peer 1.1.1.1 filter-policy 2003 import
peer group
Syntax
peer ip-address group group-name
undo peer ip-address group group-name
View
BGP-VPNv4 subaddress family view, VPLS address family view
Default level
2: System level
Parameters
group-name: Name of the peer group, a case-sensitive string of 1 to 47 characters.
ip-address: IP address of the peer.
Description
Use peer group to add a peer into an existing peer group.
Use undo peer group to remove a peer from a peer group.
Examples
# In BGP-VPNv4 subaddress family view, add peer 1.1.1.1 into peer group test.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] group test external
[Sysname-bgp] peer 1.1.1.1 as-number 200
[Sysname-bgp] peer 1.1.1.1 group test
[Sysname-bgp] ipv4-family vpnv4
[Sysname-bgp-af-vpnv4] peer test enable
[Sysname-bgp-af-vpnv4] peer 1.1.1.1 group test
[Sysname-bgp-af-vpnv4] quit
# In VPLS address family view, add peer 1.1.1.1 into peer group test.
[Sysname-bgp] vpls-family
[Sysname-bgp-af-vpls] peer test enable
[Sysname-bgp-af-vpls] peer 1.1.1.1 group test
peer ip-prefix (BGP-VPNv4 subaddress family view)
Syntax
peer { group-name | ip-address } ip-prefix prefix-name { export | import }
undo peer { group-name | ip-address } ip-prefix { export | import }
View
BGP-VPNv4 subaddress family view
Default level
2: System level
Parameters
group-name: Name of the peer group, a case-sensitive string of 1 to 47 characters.
ip-address: IP address of the peer.
prefix-name: Name of the IP prefix list, a string of 1 to 19 characters.
export: Filters the routes to be advertised to the specified peer or peer group.
import: Filters the routes received from the specified peer or peer group.
Description
Use peer ip-prefix to apply a route filtering policy based on IP prefix list to a peer or peer group.
Use undo peer ip-prefix to remove the configuration.
By default, no route filtering policy based on IP prefix list is applied to a peer or peer group.
Examples
# In BGP-VPNv4 subaddress family view, filter the routes received from peer group group1 by using IP prefix list list1.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] ipv4-family vpnv4
[Sysname-bgp-af-vpnv4] peer group1 ip-prefix list1 import
peer ipv6-prefix (BGP-VPNv6 subaddress family view)
Syntax
peer ip-address ipv6-prefix prefix-name { export | import }
undo peer ip-address ipv6-prefix { export | import }
View
BGP-VPNv6 subaddress family view
Default level
2: System level
Parameters
ip-address: IP address of a peer.
prefix-name: Name of an IPv6 prefix list, a string of 1 to 19 characters.
export: Filters routes to be advertised to the peer.
import: Filters routes received from the peer.
Description
Use peer ipv6-prefix to apply an IPv6 prefix list to filter routes for a peer.
Use undo peer ipv6-prefix to remove the configuration.
By default, no IPv6 prefix list is applied to filter routes for a peer.
Examples
# In BGP-VPNv6 subaddress family view, apply IPv6 prefix list list1 to filter routes received from peer 1.1.1.1.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] ipv6-family vpnv6
[Sysname-bgp-af-vpnv6] peer 1.1.1.1 ipv6-prefix list1 import
peer label-route-capability (BGP view, BGP VPN instance view)
Syntax
peer { group-name | ip-address } label-route-capability
undo peer { group-name | ip-address } label-route-capability
View
BGP view, BGP VPN instance view
Default level
2: System level
Parameters
group-name: Name of the peer group, a case-sensitive string of 1 to 47 characters.
ip-address: IP address of the peer.
Description
Use peer label-route-capability to enable the exchange of labeled routes with an IPv4 peer or peer group.
Use undo peer label-route-capability to disable the capability.
By default, the switch does not advertise labeled routes to an IPv4 peer.
According to the networking scheme, the peer label-route-capability command enables the exchange of labeled IPv4 routes with:
· ASBR PEs in the same AS.
· PEs in the same AS.
· The peer ASBR PE.
Examples
# Specify to exchange labeled IPv4 routes with peer 2.2.2.2.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] peer 2.2.2.2 label-route-capability
peer next-hop-invariable (BGP-VPNv4 subaddress family view)
Syntax
peer { group-name | ip-address } next-hop-invariable
undo peer { group-name | ip-address } next-hop-invariable
View
BGP-VPNv4 subaddress family view
Default level
2: System level
Parameters
group-name: Name of the peer group, a case-sensitive string of 1 to 47 characters.
ip-address: IP address of the peer.
Description
Use peer next-hop-invariable to configure the switch not to change the next hop of a route when advertising it to a peer.
Use undo peer next-hop-invariable to restore the default.
By default, a device uses its address as the next hop when advertising a route to its eBGP peer. In the inter-AS option C application, you need to configure next-hop-invariable on the RR for multi-hop eBGP neighbors and reflector clients to make sure that the next hop of a VPN route will not be changed.
Related commands: peer ebgp-max-hop (Layer 3—IP Routing Command Reference).
Examples
# In BGP-VPNv4 subaddress family view, configure the switch not to change the next hop of a route when advertising it to eBGP peer 1.1.1.1.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] ipv4-family vpnv4
[Sysname-bgp-af-vpnv4] peer 1.1.1.1 next-hop-invariable
peer next-hop-local
Syntax
peer { group-name | ip-address } next-hop-local
undo peer { group-name | ip-address } next-hop-local
View
BGP-VPNv4 subaddress family view, VPLS address family view
Default level
2: System level
Parameters
group-name: Name of the peer group, a case-sensitive string of 1 to 47 characters.
ip-address: IP address of the peer.
Description
Use peer next-hop-local to configure the switch to use the local address as the next hop of a route when advertising it to a peer or peer group.
Use undo peer next-hop-local to remove the configuration.
Examples
# In BGP-VPNv4 subaddress family view, configure the switch to use the local address as the next hop of a route when advertising it to peer group test.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] ipv4-family vpnv4
[Sysname-bgp-af-vpnv4] peer test next-hop-local
# In VPLS address family view, configure the switch to use the local address as the next hop of a route when advertising it to peer group test.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] vpls-family
[Sysname-bgp-af-vpls] peer test next-hop-local
peer preferred-value (BGP-VPNv4/BGP-VPNv6 subaddress family view)
Syntax
In BGP-VPNv4 subaddress family view:
peer { group-name | ip-address } preferred-value value
undo peer { group-name | ip-address } preferred-value
In BGP-VPNv6 subaddress family view:
peer ip-address preferred-value value
undo peer ip-address preferred-value
View
BGP-VPNv4 subaddress family view, BGP-VPNv6 subaddress family view
Default level
2: System level
Parameters
group-name: Name of the peer group, a case-sensitive string of 1 to 47 characters.
ip-address: IP address of the peer.
value: Preference value to be specified, in the range of 0 to 65535.
Description
Use peer preferred-value to specify the preference value for the routes received from the specified peer/peer group.
Use undo peer preferred-value to restore the default.
By default, the preference value for the routes received from a peer/peer group is 0.
Examples
# In BGP-VPNv4 subaddress family view, set the preference value for the routes received from peer 131.108.1.1 to 50.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] ipv4-family vpnv4
[Sysname-bgp-af-vpnv4] peer 131.108.1.1 preferred-value 50
# In BGP-VPNv6 subaddress family view, set the preference value for the routes received from peer 131.108.1.1 to 50.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] ipv6-family vpnv6
[Sysname-bgp-af-vpnv6] peer 131.108.1.1 preferred-value 50
peer public-as-only (BGP-VPNv4/BGP-VPNv6 subaddress family view)
Syntax
In BGP-VPNv4 subaddress family view:
peer { group-name | ip-address } public-as-only
undo peer { group-name | ip-address } public-as-only
In BGP-VPNv6 subaddress family view:
peer ip-address public-as-only
undo peer ip-address public-as-only
View
BGP-VPNv4 subaddress family view, BGP-VPNv6 subaddress family view
Default level
2: System level
Parameters
group-name: Name of the peer group, a case-sensitive string of 1 to 47 characters.
ip-address: IP address of the peer.
Description
Use peer public-as-only to make outbound BGP updates carry no private AS numbers.
Use undo peer public-as-only to make outbound BGP updates carry private AS numbers.
By default, a BGP update carries private AS numbers.
If a BGP update to be sent carries any public AS number, this command does not take effect. The private AS number is in the range of 64512 to 65535.
Examples
# In BGP-VPNv4 subaddress family view, configure the switch to exclude private AS numbers from the BGP updates to be sent to the peer group test.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] ipv4-family vpnv4
[Sysname-bgp-af-vpnv4] peer test public-as-only
# In BGP-VPNv6 subaddress family view, configure the switch to exclude private AS numbers from the BGP updates to be sent to the peer 1.1.1.1.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] ipv6-family vpnv6
[Sysname-bgp-af-vpnv6] peer 1.1.1.1 public-as-only
peer reflect-client
Syntax
In BGP-VPNv4 subaddress family view, VPLS address family view:
peer { group-name | ip-address } reflect-client
undo peer { group-name | ip-address } reflect-client
In BGP-VPNv6 subaddress family view:
peer ip-address reflect-client
undo peer ip-address reflect-client
View
BGP-VPNv4 subaddress family view, VPLS address family view, BGP-VPNv6 subaddress family view
Default level
2: System level
Parameters
group-name: Name of the peer group, a case-sensitive string of 1 to 47 characters.
ip-address: IP address of the peer.
Description
Use peer reflect-client to configure the local device as a route reflector (RR) and a peer or peer group as the client of the RR.
Use undo peer reflect-client to remove the configuration.
By default, no RR or RR client is configured.
For more information about RR, see Layer 3—IP Routing Configuration Guide.
The BGP view, BGP-VPNv4 subaddress family view, and BGP-VPNv6 subaddress family view support the peer reflect-client command. If you configure this command in BGP view, you configure the local device to reflect public network routes. If you configure this command in BGP-VPNv4 subaddress family view or BGP-VPNv6 subaddress family view, you configure the local device to reflect VPN routes. For more information about BGP view, see Layer 3—IP Routing Command Reference.
Examples
# In BGP-VPNv4 subaddress family view, configure the local device as RR and peer group test as the client of the RR.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] ipv4-family vpnv4
[Sysname-bgp-af-vpnv4] peer test reflect-client
# In VPLS address family view, configure the local device as an RR and peer group test as the client of the RR.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] vpls-family
[Sysname-bgp-af-vpls] peer test reflect-client
# In BGP-VPNv6 subaddress family view, configure the local device as an RR and peer 1.1.1.1 as the client of the RR.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] ipv6-family vpnv6
[Sysname-bgp-af-vpnv6] peer 1.1.1.1 reflect-client
peer route-policy (BGP-VPNv4/BGP-VPNv6 subaddress family view)
Syntax
In BGP-VPNv4 subaddress family view:
peer { group-name | ip-address } route-policy route-policy-name { export | import }
undo peer { group-name | ip-address } route-policy route-policy-name { export | import }
In BGP-VPNv6 subaddress family view:
peer ip-address route-policy route-policy-name { export | import }
undo peer ip-address route-policy route-policy-name { export | import }
BGP-VPNv4 subaddress family view, BGP-VPNv6 subaddress family view
Default level
2: System level
Parameters
group-name: Name of the peer group, a case-sensitive string of 1 to 47 characters.
ip-address: IP address of the peer.
route-policy-name: Name of the routing policy, a case-sensitive string of 1 to 63 characters.
export: Filters the routes to be advertised to the peer or peer group.
import: Filters the routes received from the peer or peer group.
Description
Use peer route-policy to apply a routing policy to a peer or peer group.
Use undo peer route-policy to remove the application.
By default, no routing policy is applied to a peer or peer group.
Examples
# In BGP-VPNv4 subaddress family view, apply routing policy test-policy to filter the routes received from peer group test.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] ipv4-family vpnv4
[Sysname-bgp-af-vpnv4] peer test route-policy test-policy import
# In BGP-VPNv6 subaddress family view, apply routing policy test-policy to filter routes received from peer 1.1.1.1.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] ipv6-family vpnv6
[Sysname-bgp-af-vpnv6] peer 1.1.1.1 route-policy test-policy import
peer upe
Syntax
peer { group-name | ip-address } upe
undo peer { group-name | ip-address } upe
View
BGP-VPNv4 subaddress family view
Default level
2: System level
Parameters
group-name: Name of the peer group, a case-sensitive string of 1 to 47 characters.
ip-address: IP address of the peer.
Description
Use peer upe to configure a BGP peer or peer group as an HoVPN UPE for a BGP-VPNv4 subaddress family.
Use undo peer upe to remove the configuration.
UPE is a kind of special VPNv4 peer. It accepts only one default route for each related VPN instance on an SPE and routes from SPEs that are permitted by the routing policy. An SPE is a common VPN peer.
Examples
# Configure peer 1.1.1.1 as a UPE.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] ipv4-family vpnv4
[Sysname-bgp-af-vpnv4] peer 1.1.1.1 upe
peer upe route-policy
Syntax
peer { group-name | ip-address } upe route-policy route-policy-name export
undo peer { group-name | ip-address } upe route-policy route-policy-name export
View
BGP-VPNv4 subaddress family view
Default level
2: System level
Parameters
group-name: Name of the peer group, a case-sensitive string of 1 to 47 characters.
ip-address: IP address of the peer.
route-policy-name: Name of the routing policy, a case-sensitive string of 1 to 63 characters.
export: Applies the filtering policy to routes to be advertised.
Description
Use peer upe route-policy to specify to advertise routes permitted by a routing policy to UPEs.
Use undo peer upe route-policy to restore the default.
By default, no routes are advertised to peers.
This command must be used together with the peer upe command
Related commands: peer upe.
Examples
# In BGP-VPNv4 subaddress family view, configure peer 1.1.1.1 as a UPE and specify to advertise routes permitted by routing policy hope to 1.1.1.1.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] peer 1.1.1.1 as-number 200
[Sysname-bgp] ipv4-family vpnv4
[Sysname-bgp-af-vpnv4] peer 1.1.1.1 enable
[Sysname-bgp-af-vpnv4] peer 1.1.1.1 upe
[Sysname-bgp-af-vpnv4] peer 1.1.1.1 upe route-policy hope export
peer vpn-instance enable
Syntax
peer { group-name | peer-address } vpn-instance vpn-instance-name enable
undo peer { group-name | peer-address } vpn-instance vpn-instance-name enable
View
BGP-VPNv4 subaddress family view
Default level
2: System level
Parameters
group-name: Name of the peer group, a case-sensitive string of 1 to 47 characters.
peer-address: IP address of the peer.
vpn-instance-name: Name of the VPN instance, a case-sensitive string of 1 to 31 characters.
Description
Use peer vpn-instance enable to activate a nested VPN peer or peer group and enable the capability of exchanging BGP-VPNv4 routes with the peer or peer group.
Use undo peer vpn-instance enable to disable the capability of exchanging BGP-VPNv4 routes with a nested VPN peer or peer group.
By default, nested VPN peers/peer groups can exchange only IPv4 routes; they cannot exchange BGP-VPNv4 routes.
This configuration takes effect only after the nested VPN function is enabled.
Before specifying a nested VPN peer or peer group, be sure to configure the corresponding CE peer or peer group by using the peer as-number command in BGP-VPN instance view.
Deleting the VPN instance to which a peer belongs will also delete the configuration of this command.
Examples
# Activate a nested VPN peer group named ebgp.
<Sysname> system-view
[Sysname] bgp 10
[Sysname-bgp] ipv4-family vpn-instance vpn1
[Sysname-bgp-vpn1] group ebgp external
[Sysname-bgp-vpn1] quit
[Sysname-bgp] ipv4-family vpnv4
[Sysname-bgp-af-vpnv4] peer ebgp vpn-instance vpn1 enable
peer vpn-instance group
Syntax
peer peer-address vpn-instance vpn-instance-name group group-name
undo peer peer-address vpn-instance vpn-instance-name group group-name
View
BGP-VPNv4 subaddress family view
Default level
2: System level
Parameters
peer-address: IP address of the peer.
vpn-instance-name: Name of the VPN instance, a case-sensitive string of 1 to 31 characters.
group-name: Name of the peer group, a case-sensitive string of 1 to 47 characters.
Description
Use peer vpn-instance group to add a peer to a nested VPN peer group.
Use undo peer vpn-instance group to remove a peer from a nested VPN peer group.
By default, a peer is not in any nested peer group.
This configuration takes effect only after the nested VPN function is enabled.
Deleting the VPN instance to which a peer belongs will also delete the configuration of this command.
Examples
# Add peer 1.1.1.1 to the nested VPN peer group named ebgp.
<Sysname> system-view
[Sysname] bgp 10
[Sysname-bgp] ipv4-family vpn-instance vpn1
[Sysname-bgp-vpn1] group ebgp external
[Sysname-bgp-vpn1] peer 1.1.1.1 as-number 600
[Sysname-bgp-vpn1] peer 1.1.1.1 group ebgp
[Sysname-bgp-vpn1] quit
[Sysname-bgp] ipv4-family vpnv4
[Sysname-bgp-af-vpnv4] peer ebgp vpn-instance vpn1 enable
[Sysname-bgp-af-vpnv4] peer 1.1.1.1 vpn-instance vpn1 group ebgp
peer vpn-instance route-policy import
Syntax
peer { group-name | peer-address } vpn-instance vpn-instance-name route-policy route-policy-name import
undo peer { group-name | peer-address } vpn-instance vpn-instance-name route-policy route-policy-name import
View
BGP-VPNv4 subaddress family view
Default level
2: System level
Parameters
group-name: Name of the peer group, a case-sensitive string of 1 to 47 characters.
peer-address: IP address of the peer, in dotted decimal notation.
vpn-instance-name: Name of the VPN instance, a case-sensitive string of 1 to 31 characters.
route-policy-name: Name of the routing policy to be applied, a case-sensitive string of 1 to 63 characters.
Description
Use peer vpn-instance route-policy import to specify the routing policy to be applied to VPNv4 routes received from a nested VPN peer or peer group.
Use undo peer vpn-instance route-policy import to restore the default.
By default, no routing policy is applied.
A routing policy for a peer and a routing policy for the peer group to which the peer belongs are of the same priority; the one configured last takes effect.
This configuration takes effect only after the nested VPN function is enabled.
Deleting the VPN instance to which a peer belongs will also delete the configuration of this command.
Examples
# Specify to apply routing policy comtest to VPNv4 routes received from peer group ebgp.
<Sysname> system-view
[Sysname] bgp 10
[Sysname-bgp] ipv4-family vpnv4
[Sysname-bgp-af-vpnv4] peer ebgp vpn-instance vpn1 route-policy comtest import
policy vpn-target
Syntax
policy vpn-target
undo policy vpn-target
View
BGP-VPNv4 subaddress family view, VPLS address family view, BGP-VPNv6 subaddress family view
Default level
2: System level
Parameters
None
Description
Use policy vpn-target to enable VPN target filtering for received VPNv4 routes.
Use undo policy vpn-target to disable the filtering, permitting all VPNv4 routes.
Only VPNv4 routes with export route target attributes matching the local import route target attributes are added into the routing table.
By default, the VPN target filtering function is enabled for received VPNv4 routes.
|
NOTE: The command applies to inter-AS VPN option B schemes. |
Examples
# In BGP-VPNv4 subaddress family view, enable VPN target filtering for received VPNv4 routes.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] ipv4-family vpnv4
[Sysname-bgp-af-vpnv4] policy vpn-target
# In VPLS address family view, enable VPN target filtering for received VPNv4 routes.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] vpls-family
[Sysname-bgp-af-vpls] policy vpn-target
# In BGP-VPNv6 subaddress family view, enable VPN target filtering for received VPNv6 routes.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] ipv6-family vpnv6
[Sysname-bgp-af-vpnv6] policy vpn-target
preferred-path
Syntax
preferred-path number interface tunnel tunnel-number [ disable-fallback ]
undo preferred-path number
View
Tunneling policy view
Default level
2: System view
Parameters
number: Number of the preferred tunnel, in the range 0 to 63. A smaller number means a higher priority.
interface tunnel tunnel-number: Specifies a tunnel interface for the preferred tunnel. The tunnel-number argument represents the tunnel interface number in the range of 0 to 1023.
disable-fallback: With this keyword specified, the tunneling policy does not select other paths when this preferred tunnel is matched (the tunnel’s destination address and encapsulation type are both matched) but is unavailable.
Description
Use preferred-path interface tunnel to configure a preferred tunnel and specify a tunnel interface for it.
Use undo preferred-path to remove a preferred tunnel.
By default, no preferred tunnel exists.
In a tunneling policy, you can configure up to 64 preferred tunnels.
The tunnel interfaces specified for the preferred tunnels can have the same destination address and the tunnel encapsulation type must be MPLS TE.
Examples
# Tunnel interfaces Tunnel 0, Tunnel 2, and Tunnel 3 have the same destination address 1.1.1.1. Configure a tunneling policy po1 for the switch, so that the switch selects tunnels for traffic destined for 1.1.1.1 in this order: Tunnel 0, Tunnel 2, Tunnel 3. If all three tunnels are unavailable, tunnel selection is stopped and traffic destined for 1.1.1.1 cannot be transmitted. For traffic going to other destinations, the device only selects one CR-LSP tunnel, no load balancing.
<Sysname> system-view
[Sysname] tunnel-policy po1
[Sysname-tunnel-policy-po1] preferred-path 0 interface tunnel 0
[Sysname-tunnel-policy-po1] preferred-path 2 interface tunnel 2
[Sysname-tunnel-policy-po1] preferred-path 3 interface tunnel 3 disable-fallback
[Sysname-tunnel-policy-po1] tunnel select-seq cr-lsp load-balance-number 1
reflect between-clients
Syntax
reflect between-clients
undo reflect between-clients
View
BGP-VPNv4 subaddress family view, VPLS address family view, BGP-VPNv6 subaddress family view
Default level
2: System level
Parameters
None
Description
Use reflect between-clients to enable route reflection between clients.
Use undo reflect between-clients to disable the function.
By default, route reflection between clients is enabled.
If fully meshed interconnections exist between the clients, route reflection is not required. Otherwise, an RR is required for routes to be reflected from one client to every other client.
Examples
# In BGP-VPNv4 subaddress family view, disable route reflection between clients.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] ipv4-family vpnv4
[Sysname-bgp-af-vpnv4] undo reflect between-clients
# In VPLS address family view, disable route reflection between clients.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] vpls-family
[Sysname-bgp-af-vpls] undo reflect between-clients
# In BGP-VPNv6 subaddress family view, disable route reflection between clients.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] ipv6-family vpnv6
[Sysname-bgp-af-vpnv6] undo reflect between-clients
reflector cluster-id
Syntax
reflector cluster-id { cluster-id | ip-address }
undo reflector cluster-id
View
BGP-VPNv4 subaddress family view, VPLS address family view, BGP-VPNv6 subaddress family view
Default level
2: System level
Parameters
cluster-id: Cluster ID of the route reflector (RR), in the range of 1 to 4294967295.
ip-address: IP address of the peer, which is to be used as the cluster ID of the RR.
Description
Use reflector cluster-id to specify a cluster ID for an RR.
Use undo reflector cluster-id to remove the cluster ID.
By default, each RR in a cluster uses its own router ID as the cluster ID.
Generally, a cluster contains only one RR, and the router ID of the RR is used for identifying the cluster. Setting multiple RRs can improve network reliability. If more than one RR exists in a cluster, use the reflector cluster-id command to configure the same cluster ID for all RRs in the cluster to avoid routing loops.
Examples
# In BGP-VPNv4 subaddress family view, set the RR’s cluster ID to 50.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] ipv4-family vpnv4
[Sysname-bgp-af-vpnv4] reflector cluster-id 50
# In VPLS address family view, set the RR’s cluster ID to 50.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] vpls-family
[Sysname-bgp-af-vpls] reflector cluster-id 50
# In BGP-VPNv6 subaddress family view, set the RR’s cluster ID to 50.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] ipv6-family vpnv6
[Sysname-bgp-af-vpnv6] reflector cluster-id 50
refresh bgp ipv6 vpn-instance
Syntax
refresh bgp ipv6 vpn-instance vpn-instance-name { ipv6-address | all | external } { export | import }
View
User view
Default level
1: Monitor level
Parameters
vpn-instance-name: Name of the VPN instance, a case-sensitive string of 1 to 31 characters.
ipv6-address: Soft resets the BGP connection with the BGP peer identified by this IPv6 address.
all: Soft resets all IPv6 BGP connections in the specified VPN instance.
external: Soft resets eBGP sessions.
export: Performs a soft reset in the outbound direction.
import: Performs a soft reset in the inbound direction.
Description
Use refresh bgp ipv6 vpn-instance to soft reset IPv6 BGP connections in a VPN instance.
Soft reset of BGP connections refers to updating BGP routing information without breaking BGP neighbor relationships.
Examples
# Soft reset all IPv6 BGP connections in VPN instance vpn1 in the inbound direction to make new configurations take effect.
<Sysname> refresh bgp ipv6 vpn-instance vpn1 all import
refresh bgp vpn-instance
Syntax
refresh bgp vpn-instance vpn-instance-name { ip-address | all | external | group group-name } { export | import }
View
User view
Default level
1: Monitor level
Parameters
vpn-instance-name: Name of the VPN instance, a case-sensitive string of 1 to 31 characters.
ip-address: Soft resets the BGP connection with the BGP peer identified by this IP address.
all: Soft resets all BGP connections in the specified VPN instance.
external: Soft resets eBGP sessions.
group group-name: Soft resets the connections with the BGP peer group identified by this name. The group-name argument is a string of 1 to 47 characters.
export: Performs a soft reset in the outbound direction.
import: Performs a soft reset in the inbound direction.
Description
Use refresh bgp vpn-instance to soft reset the BGP connections in a VPN instance.
Soft reset of BGP connections refers to updating BGP routing information without breaking BGP neighbor relationships.
Examples
# Soft reset all BGP connections in VPN instance vpn1 in the inbound direction to make new configurations take effect.
<Sysname> refresh bgp vpn-instance vpn1 all import
refresh bgp vpnv4
refresh bgp vpnv4 { ip-address | all | external | group group-name | internal } { export | import }
View
User view
Default level
1: Monitor level
Parameters
ip-address: Soft resets the BGP VPNv4 connection with the BGP peer identified by this IP address.
all: Soft resets all BGP VPNv4 connections.
external: Soft resets eBGP sessions.
group group-name: Soft resets the VPNv4 connections with the BGP peer group identified by this name.
internal: Soft resets iBGP sessions.
export: Performs a soft reset in the outbound direction.
import: Performs a soft reset in the inbound direction.
Description
Use refresh bgp vpnv4 to soft reset BGP VPNv4 connections.
Soft reset of BGP connections refers to updating BGP routing information without breaking BGP neighbor relationships.
Examples
# Soft reset all BGP VPNv4 connections in the inbound direction to make new configurations take effect.
<Sysname> refresh bgp vpnv4 all import
refresh bgp vpnv6
Syntax
refresh bgp vpnv6 { ip-address | all | external | internal } { export | import }
View
User view
Default level
1: Monitor level
Parameters
ip-address: Soft resets of the BGP VPNv6 connection with the BGP peer identified by this IP address.
all: Soft resets all BGP VPNv6 connections.
external: Soft resets eBGP sessions.
internal: Soft resets iBGP sessions.
export: Performs a soft reset in the outbound direction.
import: Performs a soft reset in the inbound direction.
Description
Use refresh bgp vpnv6 to soft reset BGP VPNv6 connections.
Soft reset of BGP connections refers to updating BGP routing information without breaking BGP neighbor relationships.
Examples
# Soft reset all BGP VPNv6 connections in the inbound direction to make new configurations take effect.
<Sysname> refresh bgp vpnv6 all import
reserve-vlan (VPN instance view)
Syntax
reserve-vlan vlan-id
View
VPN instance view
Default level
2: System level
Parameters
vlan-id: ID of the VLAN to be specified as the reserved VLAN of the L3VPN, in the range of 1 to 4094.
Description
Use reserve-vlan to specify a reserved VLAN for the L3VPN.
Note the following configuration restrictions and guidelines:
· When you specify a reserved VLAN, make sure the VLAN has not been created. Otherwise, L3VPN service data cannot be forwarded correctly.
· The reserved VLAN configuration can take effect only when the system operates in standard mode. For more information about system operating modes, see Fundamentals Configuration Guide.
· When the system operates in standard mode, you must configure a reserved VLAN for a created VPN instance in the following cases: a) the VPN instance is connected with no CEs; b) it is required to configure the multicast VPN function for the VPN instance; c) it is required to bind the VPN instance with an IP tunnel.
· When the system operates in standard mode, to configure a reserved VLAN for a VPN instance, you must configure it before configuring an RD for the VPN instance. Otherwise, the VPN cannot function correctly and you must delete the VPN instance, and then re-create the VPN instance in the right configuration order. Before configuring an RD, you cannot configure any other parameters for the VPN instance except a reserved VLAN.
· Do not configure services on a reserved VLAN. Otherwise, the corresponding MPLS L3VPN will be affected, and you must delete the VPN instance, and then re-create the VPN instance in the right configuration order.
· A reserved VLAN cannot implement the common VLAN functions, such as VLAN mapping.
· When the system operates in standard mode, if a VPN instance is not configured with a reserved VLAN, you cannot configure URPF on the private network VLAN interface bound with the VPN instance.
· Once established, the association between a VPN instance and its reserved VLAN cannot be removed. To modify the association, you need to delete the VPN instance, recreate it, and then specify another reserved VLAN for it.
Examples
# Specify VLAN 100 as the reserved VLAN of VPN instance vpn1.
<Sysname> system-view
[Sysname] ip vpn-instance vpn1
[Sysname-vpn-instance-vpn1] reserve-vlan 100
reset bgp ipv6 vpn-instance
Syntax
reset bgp ipv6 vpn-instance vpn-instance-name { as-number | ipv6-address | all | external }
View
User view
Default level
1: Monitor level
Parameters
vpn-instance-name: Resets IPv6 BGP connections with the peers in a VPN instance. The VPN instance name is a case-sensitive string of 1 to 31 characters.
as-number: Resets IPv6 BGP connections with the peers in an AS. The AS number is in the range of 1 to 4294967295.
ipv6-address: Resets the connection with the BGP peer identified by this IPv6 address.
all: Resets all IPv6 BGP connections in the specified VPN instance.
external: Resets eBGP sessions.
Description
Use reset bgp ipv6 vpn-instance to reset IPv6 BGP connections in a VPN instance.
Examples
# Reset all IPv6 BGP connections in VPN instance vpn1.
<Sysname> reset bgp ipv6 vpn-instance vpn1 all
reset bgp vpn-instance
Syntax
reset bgp vpn-instance vpn-instance-name { as-number | ip-address | all | external | group group-name }
View
User view
Default level
1: Monitor level
Parameters
vpn-instance-name: Resets BGP connections with the peers in a VPN instance. The VPN instance name is a case-sensitive string of 1 to 31 characters.
as-number: Resets BGP connections with the peers in an AS. The AS number is in the range of 1 to 4294967295.
ip-address: Resets the connection with the BGP peer identified by this IP address.
all: Resets all BGP connections in the specified VPN instance.
external: Resets eBGP sessions.
group group-name: Resets the connections with the BGP peer group identified by this name. The group-name argument is a string of 1 to 47 characters.
Description
Use reset bgp vpn-instance to reset the BGP connections in a VPN instance.
Examples
# Reset all BGP connections in VPN instance vpn1.
<Sysname> reset bgp vpn-instance vpn1 all
reset bgp vpn-instance dampening
Syntax
reset bgp vpn-instance vpn-instance-name dampening [ network-address [ mask | mask-length ] ]
View
User view
Default level
1: Monitor level
Parameters
vpn-instance-name: Name of the VPN instance, a case-sensitive string of 1 to 31 characters.
network-address: Network address.
mask: Network mask, in the format of X.X.X.X.
mask-length: Length of the network mask, in the range of 0 to 32.
Description
Use reset bgp vpn-instance dampening to clear the route flap dampening information for a VPN instance.
Examples
# Clear the route flap dampening information for VPN instance vpn1.
<Sysname> reset bgp vpn-instance vpn1 dampening
reset bgp vpn-instance flap-info
Syntax
reset bgp vpn-instance vpn-instance-name ip-address flap-info
reset bgp vpn-instance vpn-instance-name flap-info [ ip-address [ mask | mask-length ] | as-path-acl as-path-acl-number | regexp as-path-regexp ]
View
User view
Default level
1: Monitor level
Parameters
vpn-instance-name: Name of the VPN instance, a case-sensitive string of 1 to 31 characters.
ip-address: IP address of the BGP peer.
mask: Network mask, in the format of X.X.X.X.
mask-length: Length of the network mask, in the range of 0 to 32.
as-path-acl-number: Number of the AS_PATH list, in the range of 1 to 256.
as-path-regexp: AS_PATH regular expression.
Description
Use reset bgp vpn-instance flap-info to clear the route flap history information about BGP peers of a VPN instance.
Examples
# Clear route flap history information about BGP peer 2.2.2.2 of VPN instance vpn1.
<Sysname> reset bgp vpn-instance vpn1 2.2.2.2 flap-info
reset bgp vpnv4
Syntax
reset bgp vpnv4 { as-number | ip-address | all | external | internal | group group-name }
View
User view
Default level
1: Monitor level
Parameters
as-number: Resets VPNv4 connections with the peers in an AS identified by this number. as-number is in the range of 1 to 4294967295.
ip-address: Resets the VPNv4 connection with a BGP peer identified by this IP address.
all: Resets all BGP VPNv4 connections.
external: Resets eBGP VPNv4 connections.
internal: Resets iBGP VPNv4 connections.
group group-name: Resets the VPNv4 connections with a BGP peer group identified by this name.
Description
Use reset bgp vpnv4 to reset BGP VPNv4 connections.
Examples
# Reset all BGP VPNv4 connections to make new configurations take effect.
<Sysname> reset bgp vpnv4 all
reset bgp vpnv6
Syntax
reset bgp vpnv6 { as-number | ip-address | all | external | internal }
View
User view
Default level
1: Monitor level
Parameters
as-number: Resets BGP VPNv6 connections with the peers in the AS identified by this number. as-number is in the range of 1 to 4294967295.
ip-address: Resets the BGP VPNv6 connection with the BGP peer identified by this IP address.
all: Resets all BGP VPNv6 connections.
external: Resets eBGP VPNv6 connections.
internal: Resets iBGP VPNv6 connections.
Description
Use reset bgp vpnv6 to reset BGP VPNv6 connections.
Examples
# Reset all BGP VPNv6 connections to make new configurations take effect.
<Sysname> reset bgp vpnv6 all
route-distinguisher (VPN instance view)
Syntax
route-distinguisher route-distinguisher
View
VPN instance view
Default level
2: System level
Parameters
route-distinguisher: Route distinguisher (RD) for the VPN instance, a string of 3 to 21 characters in one of the following three formats:
· 16-bit AS number:32-bit user-defined number. For example, 101:3.
· 32-bit IP address:16-bit user-defined number. For example, 192.168.122.15:1.
· 32-bit AS number:16-bit user-defined number, where the minimum value of the AS number is 65536. For example, 65536:1.
Description
Use route-distinguisher to configure a route distinguisher (RD) for a VPN instance.
An RD is used to create the routing and FIB of a VPN. By prefixing an RD to an IPv4 prefix, you get a VPN IPv4 prefix unique globally.
|
NOTE: · No RD is configured by default; you must configure an RD for each VPN instance. · A VPN instance takes effect only after you configure an RD for it. · Once you configure an RD for a VPN, you cannot remove the association. · You cannot change an RD directly; you can only delete the VPN instance, and then re-create the VPN instance and re-configure a new RD. |
Examples
# Configure the RD of VPN instance vpn1.
<Sysname> system-view
[Sysname] ip vpn-instance vpn1
[Sysname-vpn-instance-vpn1] route-distinguisher 22:1
route-tag
Syntax
route-tag tag-value
undo route-tag
View
OSPF view
Default level
2: System level
Parameters
tag-value: Configures an external route tag for imported VPN routes, in the range of 0 to 4294967295.
Description
Use route-tag to configure an external route tag for imported VPN routes.
Use undo route-tag to restore the default.
By default, if BGP is running in the MPLS backbone and the BGP's AS number is not greater than 65535, the first two octets of the default external route tag is always 0xD000 and the last two octets is the AS number of the local BGP. For example, if the local BGP AS number is 100, the default value of the external route tag is 3489661028, which equals the decimal value of 0xD0000000 (3489660928) + 100. If the BGP’s AS number is greater than 65535 or the MPLS backbone does not use BGP, the default external route tag is 0.
If PE-CE routing protocol is OSPF, the local PE redistributes the BGP VPNv4 routes received from the peer PE into the OSPF routing table, and advertises these routes to the locally connected CE through OSPF. If the routes are advertised to the CE through Type 5 or 7 LSAs, Type 5/7 LSAs must contain the external route tag. An external route tag can be configured by different commands and has different priorities. The following lists the commands used to configure the external route tag (in the descending order of tag priority):
· import-route
· route-tag
· default tag
The external route tag is used to avoid routing loops. If the external route tag carried in a Type 5 or 7 LSA received by a PE is the same as the locally configured external route tag, the PE neglects the LSA in route calculation to avoid routing loops.
Note the following guidelines:
· H3C recommends that you configure the same external route tag for PEs in the same area.
· An external route tag is not transferred in any BGP extended community attribute. It is only locally significant and takes effect only on the PEs that receive BGP routes and generate OSPF Type 5 or 7 LSAs.
· You can configure the same external route tag for different OSPF processes.
Related commands: import-route (Layer 3—IP Routing Command Reference).
Examples
# In OSPF process 100, set the external route tag for imported VPN routes to 100.
<Sysname> system-view
[Sysname] ospf 100
[Sysname-ospf-100] route-tag 100
routing-table limit
Syntax
routing-table limit number { warn-threshold | simply-alert }
undo routing-table limit
View
VPN instance view, IPv4 VPN view, IPv6 VPN view
Default level
2: System level
Parameters
number: Specifies the maximum number of routes supported. The value range varies by system working mode. For more information about system working modes, see Fundamentals Configuration Guide.
warn-threshold: Specifies a threshold for warning, in the range of 1 to 100, in percentages. When the percentage of the number of existing routes to the maximum number of routes supported exceeds the specified threshold, the system gives an alarm message but still allows new routes. If the number of routes in the VPN instance reaches the maximum supported, no more routes are added.
simply-alert: Specifies that when the number of routes exceeds the maximum number of routes supported, the system still accepts routes but generates a system log (Syslog) message.
Description
Use routing-table limit to limit the maximum number of routes in a VPN instance, an IPv4 VPN, or an IPv6 VPN, preventing too many routes from being accepted by a PE.
Use undo routing-table limit to restore the default.
A limit configured in VPN instance view is applicable to both the IPv4 VPN and the IPv6 VPN.
A limit configured in IPv4 VPN view is applicable to only the IPv4 VPN.
A limit configured in IPv6 VPN view is applicable to only the IPv6 VPN.
A limit configured in IPv4 VPN view or IPv6 VPN view takes precedence over that configured in VPN instance view. If you configure a limit in both IPv4 VPN view (or IPv6 VPN view) and VPN instance view, the limit configured in IPv4 VPN view (or IPv6 VPN view) is applied to the IPv4 VPN (or IPv6 VPN).
Examples
# Configure VPN instance vpn1 to support up to 1000 routes, and receive new routes after the number of existing routes exceeds the limit.
<Sysname> system-view
[Sysname] ip vpn-instance vpn1
[Sysname-vpn-instance-vpn1] route-distinguisher 100:1
[Sysname-vpn-instance-vpn1] routing-table limit 1000 simply-alert
# Specify that the IPv4 VPN of VPN instance vpn2 supports up to 1000 routes, and can receive new routes after the number of existing routes exceeds the limit.
<Sysname> system-view
[Sysname] ip vpn-instance vpn2
[Sysname-vpn-instance-vpn2] route-distinguisher 100:2
[Sysname-vpn-instance-vpn2] ipv4-family
[Sysname-vpn-ipv4-vpn2] routing-table limit 1000 simply-alert
# Specify that the IPv6 VPN of VPN instance vpn3 supports up to 1000 routes, and can receive new routes after the number of existing routes exceeds the limit.
<Sysname> system-view
[Sysname] ip vpn-instance vpn3
[Sysname-vpn-instance-vpn3] route-distinguisher 100:3
[Sysname-vpn-instance-vpn3] ipv6-family
[Sysname-vpn-ipv4-vpn3] routing-table limit 1000 simply-alert
rr-filter
Syntax
rr-filter extended-community-number
undo rr-filter
View
BGP-VPNv4 subaddress family view, VPLS address family view, BGP-VPNv6 subaddress family view
Default level
2: System level
Parameters
extended-community-number: Number of the Extended Communities attribute supported by the RR, in the range of 1 to 199.
Description
Use rr-filter to create an RR reflection policy so that only iBGP routes whose Extended Communities attribute matches the specified one are reflected.
Use undo rr-filter to restore the default.
By default, an RR does not filter the reflected routes.
By configuring different RR reflection policies on different RRs, you can implement load balancing among the RRs.
Examples
# In BGP-VPNv4 subaddress family view, specify an Extended Communities attribute for the RR to filter the incoming VPNv4 route update packets.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] ipv4-family vpnv4
[Sysname-bgp-af-vpnv4] rr-filter 10
# In VPLS address family view, specify an Extended Communities attribute for the RR to filter the incoming VPNv4 route update packets.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] vpls-family
[Sysname-bgp-af-vpls] rr-filter 10
# In BGP-VPNv6 subaddress family view, specify an Extended Communities attribute for the RR to filter the incoming VPNv6 route update packets.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] ipv6-family vpnv6
[Sysname-bgp-af-vpnv6] rr-filter 10
sham-link
Syntax
sham-link source-ip-address destination-ip-address [ cost cost | dead dead-interval | hello hello-interval | retransmit retrans-interval | trans-delay delay { simple [ cipher | plain ] password1 | { md5 | hmac-md5 } key-id [ cipher | plain ] password2 } ] *
undo sham-link source-ip-address destination-ip-address [ cost | dead | hello | retransmit | trans-delay |{ simple | { md5 | hmac-md5 } key-id } ] *
View
OSPF area view
Default level
2: System level
Parameters
source-ip-address: Source IP address for the sham link.
destination-ip-address: Destination IP address for the sham link.
cost: Cost for the sham link. It is in the range of 1 to 65,535 and defaults to 1.
dead-interval: Dead Interval in seconds. It is in the range of 1 to 32768 and defaults to 40. It must be equal to the dead interval of the router on the other end of the virtual link and must be at least four times the hello interval.
hello-interval: Interval at which the interface sends hello packets. It is in the range of 1 to 8192 seconds and defaults to 10 seconds. It must be equal to the hello interval of the router on the other end of the virtual link.
retrans-interval: Interval at which the interface retransmits LSAs. It is in the range of 1 to 8192 seconds and defaults to 5 seconds.
delay: Delay interval before the interface sends an LSA. It is in the range of 1 to 8192 seconds and defaults to 1 second.
simple [ cipher | plain ] password1: Uses simple authentication.
· cipher: Sets a ciphertext key.
· plain: Sets a plaintext key.
· password1: Specifies the key string. This argument is case sensitive. If cipher is specified, it must be a ciphertext string of 1 to 41 characters. If plain is specified, it must be a plaintext string of 1 to 8 characters. If neither cipher nor plain is specified, you set a plaintext key string.
md5: Uses MD5 algorithm for authentication.
hmac-md5: Uses HMAC-MD5 algorithm for authentication.
key-id: Authentication key ID of the interface, in the range of 1 to 255. It must be the same as that of the peer.
· cipher: Sets a ciphertext key.
· plain: Sets a plaintext key.
· password2: Specifies the key string. This argument is case sensitive. If cipher is specified, it must be a ciphertext string of 1 to 53 characters. If plain is specified, it must be a string of 1 to 16 characters. If neither cipher nor plain is specified, you can set a plaintext key of 1 to 16 characters or a ciphertext key of 1 to 53 characters.
Description
Use sham link to configure a sham link.
Use undo sham link source-ip-address destination-ip-address to remove a sham link.
Use undo sham link source-ip-address destination-ip-address with optional keywords to restore the defaults of the parameters for a sham link.
If two PEs belong to the same AS and a backdoor link is present, a sham link can be established between them.
For security purposes, all keys, including keys configured in plain text, are saved in cipher text.
Examples
# Create a sham link with the source address of 1.1.1.1 and the destination address of 2.2.2.2.
<Sysname> system-view
[Sysname] ospf
[Sysname-ospf-1] area 0
[Sysname-ospf-1-area-0.0.0.0] sham-link 1.1.1.1 2.2.2.2
tnl-policy (VPN instance view/IPv4 VPN view/IPv6 VPN view)
Syntax
tnl-policy tunnel-policy-name
undo tnl-policy
View
VPN instance view, IPv4 VPN view, IPv6 VPN view
Default level
2: System level
Parameters
tunnel-policy-name: Name of the tunneling policy for the VPN instance, a string of 1 to 19 characters.
Description
Use tnl-policy to associate the current VPN instance with a tunneling policy.
Use undo tnl-policy to remove the association.
If a VPN instance is not associated with any tunneling policy or the associated tunneling policy is not configured, the VPN instance selects tunnels according to the default tunneling policy. The default tunneling policy selects only one tunnel in this order: LSP tunnel, CR-LSP tunnel.
A tunneling policy specified in VPN instance view is applicable to both the IPv4 VPN and the IPv6 VPN.
A tunneling policy specified in IPv4 VPN view is applicable to only the IPv4 VPN.
A tunneling policy specified in IPv6 VPN view is applicable to only the IPv6 VPN.
A tunneling policy specified in IPv4 VPN view or IPv6 VPN view takes precedence over that specified in VPN instance view. If you specify a tunneling policy in both IPv4 VPN view (or IPv6 VPN view) and VPN instance view, the tunneling policy specified in IPv4 VPN view (or IPv6 VPN view) is applied to the IPv4 VPN (or IPv6 VPN).
Related commands: tunnel select-seq.
Examples
# Associate VPN instance vpn1 with tunneling policy po1.
<Sysname> system-view
[Sysname] tunnel-policy po1
[Sysname-tunnel-policy-po1] tunnel select-seq lsp load-balance-number 1
[Sysname-tunnel-policy-po1] quit
[Sysname] ip vpn-instance vpn1
[Sysname-vpn-instance-vpn1] route-distinguisher 22:33
[Sysname-vpn-instance-vpn1] tnl-policy po1
[Sysname-vpn-instance-vpn1] quit
# Associate the IPv4 VPN of VPN instance vpn2 with tunneling policy po1.
[Sysname] ip vpn-instance vpn2
[Sysname-vpn-instance-vpn2] route-distinguisher 11:22
[Sysname-vpn-instance-vpn2] ipv4-family
[Sysname-vpn-ipv4-vpn2] tnl-policy po1
[Sysname-vpn-ipv4-vpn2] quit
[Sysname-vpn-instance-vpn2] quit
# Associate the IPv6 VPN of VPN instance vpn3 with tunneling policy po1.
[Sysname] ip vpn-instance vpn3
[Sysname-vpn-instance-vpn3] route-distinguisher 11:33
[Sysname-vpn-instance-vpn3] ipv6-family
[Sysname-vpn-ipv6-vpn3] tnl-policy po1
tunnel select-seq
Syntax
tunnel select-seq { cr-lsp | lsp } * load-balance-number number
undo tunnel select-seq
View
Tunneling policy view
Default level
2: System level
Parameters
cr-lsp: Specifies CR-LSP tunnels.
lsp: Specifies LSP tunnels.
load-balance-number number: Specifies the number of tunnels for load balancing, in the range of 1 to 8.
Description
Use tunnel select-seq to configure the preference order for tunnel selection and the number of tunnels for load balancing.
Use undo tunnel select-seq to restore the default.
By default, only one tunnel (no load balancing) is selected in this order: LSP tunnel, CR-LSP tunnel.
Only tunnels of the types specified in the tunnel select-seq command can be used. A tunnel type closer to the select-seq keyword has a higher priority.
The number of tunnels for load balancing refers to the number of tunnels that an application can use.
CR-LSP tunnels are preferred by the following order: CR-LSPs configured with ACLs, CR-LSPs bound with VPN, ordinary CR-LSPs. These three types of CR-LSPs are mutually exclusive. Only one of the three types is selected at a time.
Examples
# Define a tunneling policy, using only one CR-LSP tunnel.
<Sysname> system-view
[Sysname] tunnel-policy po1
[Sysname-tunnel-policy-po1] tunnel select-seq cr-lsp load-balance-number 1
tunnel-policy
Syntax
tunnel-policy tunnel-policy-name
undo tunnel-policy tunnel-policy-name
View
System view
Default level
2: System level
Parameters
tunnel-policy-name: Name for the tunneling policy, a string of 1 to 19 characters.
Description
Use tunnel-policy to establish a tunneling policy and enter tunneling policy view.
Use undo tunnel-policy to delete a tunneling policy.
Related commands: tunnel select-seq.
Examples
# Establish a tunneling policy named po1 and enter tunneling policy view.
<Sysname> system-view
[Sysname] tunnel-policy po1
[Sysname-tunnel-policy-po1]
vpn popgo
Syntax
vpn popgo
undo vpn popgo
View
System view
Default level
2: System level
Parameters
None
Description
Use vpn popgo on an egress PE to specify the VPN label processing mode as POPGO forwarding, which will pop the label and then search for the outbound interface according to the label to forward the traffic.
Use undo vpn popgo to restore the default.
By default, the VPN label processing mode of an egress PE is POP forwarding, which will pop the label and then search the FIB table to find the outbound interface to forward the traffic.
Execute the vpn popgo or undo vpn popgo command on the switch and then reboot the switch as prompted. After the command is executed successfully, the switch does not inform you of the current VPN label processing mode. You can use the display vpn label operation command to view the current VPN label processing mode.
To add two switches to an IRF fabric, configure the same VPN label processing mode (POPGO by using vpn popgo or POP by using undo vpn popgo) for the two switches. Otherwise, the two switches cannot form an IRF fabric. For more information about IRF, see IRF Configuration Guide.
Examples
# Specify the VPN label processing mode of an egress PE as outbound interface based forwarding.
<Sysname> system-view
[Sysname] vpn popgo
# Specify the VPN label processing mode of an egress PE as FIB based forwarding.
<Sysname> system-view
[Sysname] undo vpn popgo
vpn-instance-capability simple
Syntax
vpn-instance-capability simple
undo vpn-instance-capability
View
VPN OSPF process view
Default level
2: System level
Parameters
None
Description
Use vpn-instance-capability simple to disable routing loop detection for the VPN OSPF process.
Use undo vpn-instance-capability to restore the default.
By default, routing loop detection is enabled for a VPN OSPF process.
In an MCE network, you must disable the routing loop detection function for a VPN OSPF process on the MCE. Otherwise, the MCE does not receive OSPF routes from the PE.
Examples
# Disable routing loop detection for the VPN OSPF process.
<Sysname> system-view
[Sysname] ospf 100 vpn-instance vpna
[Sysname-ospf-100] vpn-instance-capability simple
vpn-target (VPN instance view/IPv4 VPN view/IPv6 VPN view)
Syntax
vpn-target vpn-target&<1-8> [ both | export-extcommunity | import-extcommunity ]
undo vpn-target { all | vpn-target&<1-8> [ both | export-extcommunity | import-extcommunity ] }
View
VPN instance view, IPv4 VPN view, IPv6 VPN view
Default level
2: System level
Parameters
vpn-target&<1-8>: Adds VPN target extended community attributes to the import VPN target extended community attribute list (Import Target) or export VPN target extended community attribute list (Export Target). &<1-8> means that you can add up to eight VPN targets.
A VPN target attribute can be a string of 3 to 21 characters in one the following formats:
· 16-bit AS number:32-bit user-defined number. For example, 101:3.
· 32-bit IP address:16-bit user-defined number. For example, 192.168.122.15:1.
· 32-bit AS number:16-bit user-defined number, where the AS number must not be less than 65536. For example, 65536:1.
both: Uses the specified VPN targets as both import targets and export targets. The both keyword is also used when you do not specify any of both, export-extcommunity, and import-extcommunity.
export-extcommunity: Uses the specified VPN targets as export targets.
import-extcommunity: Uses the specified VPN targets as import targets.
all: Removes all VPN targets.
Description
Use vpn-target to configure VPN targets for a VPN instance, an IPv4 VPN, or an IPv6 VPN.
Use undo vpn-target to remove the specified or all VPN targets of a VPN instance, an IPv4 VPN, or an IPv6 VPN.
By default, no VPN targets are configured and you must configure VPN targets when creating a VPN instance, an IPv4 VPN, or an IPv6 VPN.
VPN targets configured in VPN instance view is applicable to both the IPv4 VPN and the IPv6 VPN.
VPN targets configured in IPv4 VPN view is applicable to only the IPv4 VPN.
VPN targets configured in IPv6 VPN view is applicable to only the IPv6 VPN.
VPN targets configured in IPv4 VPN view or IPv6 VPN view takes precedence over that configured in VPN instance view. If you configure VPN targets in both IPv4 VPN view (or IPv6 VPN view) and VPN instance view, those configured in IPv4 VPN view (or IPv6 VPN view) are applied to the IPv4 VPN (or IPv6 VPN).
Examples
# Configure VPN targets for VPN instance vpn1.
<Sysname> system-view
[Sysname] ip vpn-instance vpn1
[Sysname-vpn-instance-vpn1] vpn-target 3:3 export-extcommunity
[Sysname-vpn-instance-vpn1] vpn-target 4:4 import-extcommunity
[Sysname-vpn-instance-vpn1] vpn-target 5:5 both
# Configure VPN targets for the IPv4 VPN of VPN instance vpn2.
<Sysname> system-view
[Sysname] ip vpn-instance vpn2
[Sysname-vpn-instance-vpn2] ipv4-family
[Sysname-vpn-ipv4-vpn2] vpn-target 3:3 export-extcommunity
[Sysname-vpn-ipv4-vpn2] vpn-target 4:4 import-extcommunity
[Sysname-vpn-ipv4-vpn2] vpn-target 5:5 both
[Sysname-vpn-ipv4-vpn2] quit
[Sysname-vpn-instance-vpn2] quit
# Configure VPN targets for the IPv6 VPN of VPN instance vpn3.
<Sysname> system-view
[Sysname] ip vpn-instance vpn3
[Sysname-vpn-instance-vpn3] ipv6-family
[Sysname-vpn-ipv6-vpn3] vpn-target 3:3 export-extcommunity
[Sysname-vpn-ipv6-vpn3] vpn-target 4:4 import-extcommunity
[Sysname-vpn-ipv6-vpn3] vpn-target 5:5 both