Hardware	SRv6 VPN compatibility
MSR610	No
MSR810, MSR810-W, MSR810-W-DB, MSR810-LM, MSR810-W-LM, MSR810-10-PoE, MSR810-LM-HK, MSR810-W-LM-HK, MSR810-LM-CNDE-SJK, MSR810-CNDE-SJK, MSR810-EI, MSR810-LM-EA, MSR810-LM-EI	Yes
MSR810-LMS, MSR810-LUS	No
MSR810-SI, MSR810-LM-SI	No
MSR810-LMS-EA, MSR810-LME	Yes
MSR1004S-5G, MSR1004S-5G-CN	Yes
MSR1104S-W, MSR1104S-W-CAT6, MSR1104S-5G-CN, MSR1104S-W-5G-CN	Yes
MSR2600-6-X1, MSR2600-15-X1, MSR2600-15-X1-T	Yes
MSR2600-10-X1	Yes
MSR 2630	Yes
MSR3600-28, MSR3600-51	Yes
MSR3600-28-SI, MSR3600-51-SI	No
MSR3600-28-X1, MSR3600-28-X1-DP, MSR3600-51-X1, MSR3600-51-X1-DP	Yes
MSR3600-28-G-DP, MSR3600-51-G-DP	Yes
MSR3610-I-DP, MSR3610-IE-DP, MSR3610-IE-ES, MSR3610-IE-EAD, MSR-EAD-AK770, MSR3610-I-IG, MSR3610-IE-IG	Yes
MSR3610-X1, MSR3610-X1-DP, MSR3610-X1-DC, MSR3610-X1-DP-DC, MSR3620-X1, MSR3640-X1	Yes
MSR3610, MSR3620, MSR3620-DP, MSR3640, MSR3660	Yes
MSR3610-G, MSR3620-G	Yes
MSR3640-G	Yes
MSR3640-X1-HI	Yes

Hardware	SRv6 VPN compatibility
MSR810-W-WiNet, MSR810-LM-WiNet	Yes
MSR830-4LM-WiNet	Yes
MSR830-5BEI-WiNet, MSR830-6EI-WiNet, MSR830-10BEI-WiNet	Yes
MSR830-6BHI-WiNet, MSR830-10BHI-WiNet	Yes
MSR2600-6-WiNet	Yes
MSR2600-10-X1-WiNet	Yes
MSR2630-WiNet	Yes
MSR3600-28-WiNet	Yes
MSR3610-X1-WiNet	Yes
MSR3610-WiNet, MSR3620-10-WiNet, MSR3620-DP-WiNet, MSR3620-WiNet, MSR3660-WiNet	Yes

Hardware	SRv6 VPN compatibility
MSR860-6EI-XS	Yes
MSR860-6HI-XS	Yes
MSR2630-XS	Yes
MSR3600-28-XS	Yes
MSR3610-XS	Yes
MSR3620-XS	Yes
MSR3610-I-XS	Yes
MSR3610-IE-XS	Yes
MSR3620-X1-XS	Yes
MSR3640-XS	Yes
MSR3660-XS	Yes

Hardware	SRv6 VPN compatibility
MSR810-LM-GL	Yes
MSR810-W-LM-GL	Yes
MSR830-6EI-GL	Yes
MSR830-10EI-GL	Yes
MSR830-6HI-GL	Yes
MSR830-10HI-GL	Yes
MSR1004S-5G-GL	Yes
MSR2600-6-X1-GL	Yes
MSR3600-28-SI-GL	No

advertise route-reoriginate

Use advertise route-reoriginate to reoriginate the optimal routes in a VPN instance and advertise the reoriginated routes to VPNv4 or VPNv6 peers.

Use undo advertise route-reoriginate to restore the default.

Syntax

advertise route-reoriginate

undo advertise route-reoriginate

Default

The device does not reoriginate the optimal routes in a VPN instance. The original VPNv4 or VPNv6 routes are advertised to VPNv4 or VPNv6 peers.

Views

BGP-VPN IPv4 unicast address family view

BGP-VPN IPv6 unicast address family view

Predefined user roles

network-admin

Usage guidelines

All settings in this section are configured on an MPE.

In the HoVPN scenario, UPEs can reach each other through an MPE and SPE. If the network has a large number of UPEs, the SPE will receive abundant UPE routes that include labels from the MPE. Forwarding failure might occur for UPEs if the SPE does not have sufficient routing entry resources to store the UPE routes.

To reduce the number of routes advertised to the SPE, use this command on the MPE. When the MPE receives VPNv4 or VPNv6 routes, it compares the export targets of the routes with the local import route targets of the corresponding VPN instance. If the route targets match, the device reoriginates the optimal routes in the VPN instance and advertises the reoriginated routes to VPNv4 or VPNv6 peers.

The reoriginated routes include the RD of the VPN instance. In addition, the route targets of the VPN instance are added to the routes based on the original routes.

Examples

# In BGP-VPN IPv4 unicast address family view, configure the device to reoriginate the optimal routes in VPN instance vpn1 and advertise the reoriginated routes to VPNv4 peers.

<Sysname> system-view

[Sysname] bgp 100

[Sysname-bgp-default] ip vpn-instance vpn1

[Sysname-bgp-default-vpn1] address-family ipv4

[Sysname-bgp-default-ipv4-vpn1] advertise route-reoriginate

default color

Use default color to specify the default color for EVPN routes.

Use undo default color to restore the default.

Syntax

default color color-value

undo default color

Default

No default color is specified.

Views

EVPN instance view

Predefined user roles

network-admin

Parameters

color-value: Specifies the default color, in the range of 0 to 4294967295.

Usage guidelines

In case of color-based traffic steering, the default color is used if a BGP EVPN route does not have the color extended community attribute or cannot match a routing policy to obtain a color.

Examples

# In VSI EVPN instance view, set the default color to 100.

<Sysname> system-view

[Sysname] vsi aaa

[Sysname-vsi-aaa] evpn encapsulation srv6

[Sysname-vsi-aaa-mpls-srv6] default color 100

# In cross-connect group EVPN instance view, set the default color to 100.

<Sysname> system-view

[Sysname] xconnect-group vpna

[Sysname-xcg-vpna] evpn encapsulation srv6

[Sysname-xcg-vpna-evpn-srv6] default color 100

display l2vpn forwarding srv6

Use display l2vpn forwarding srv6 to display L2VPN SRv6 forwarding information.

Syntax

display l2vpn forwarding srv6 [ vsi vsi-name | xconnect-group group-name ] [ verbose ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

vsi vsi-name: Specifies a VSI by its name, a case-sensitive string of 1 to 31 characters.

xconnect-group group-name: Specifies a cross-connect group by its name, a case-sensitive string of 1 to 31 characters. The group name cannot contain hyphens (-).

verbose: Displays detailed L2VPN SRv6 forwarding information. If you do not specify this keyword, the command displays only brief L2VPN SRv6 forwarding information.

Usage guidelines

If you do not specify a VSI or a cross-connect group, this command displays L2VPN SRv6 forwarding information for all VSIs and cross-connect groups.

Examples

# Display brief L2VPN SRv6 forwarding information.

<Sysname> display l2vpn forwarding srv6

Total number of cross-connections: 1

Total number of VSIs: 1

Total number of SRv6 tunnels: 2, 2 up, 0 blocked, 0 down

VSI Name : vpnb

Link ID : 0x9000000 Type: BE State: Up

In SID : 100::2

Out SID : 200::3

Xconnect-group Name : vpna

Connection Name : pw1

Link ID : 0x1 Type: BE State: Up

In SID : 100::1

Out SID : 200::1

Table 1 Command output

Field	Description
Link ID	Link ID of the SRv6 tunnel on the VSI or cross-connect group.
Type	Route recursion mode. After the PE receives a customer packet destined for an End.DX2, End.DT2M, or End.DT2U SID, it forwards the packet according to the route recursion mode. · BE—SRv6-BE mode. In this mode, the PE first encapsulates the End.DX2, End.DT2M, or End.DT2U SID into the packet. Then, the PE searches the IPv6 routing table based on the SID encapsulated in the packet to forward the encapsulated packet. · TE—SRv6-TE mode. In this mode, the PE first searches the tunnel policies for a matching SRv6 TE policy based on the next hop of a matching route. Then, the PE adds an SRH to the packet. The SRH includes the End.DX2, End.DT2M, or End.DT2U SID and the SID list of the SRv6 TE policy. Finally, the PE forwards the encapsulated packet through the SRv6 TE policy. · BE/TE—SRv6-TE and SRv6-BE hybrid mode. In this mode, the PE preferentially uses the SRv6-TE mode to forward the packet. If no SRv6 TE policy is available for the packet, the PE forwards the packet in SRv6-BE mode.
State	SRv6 tunnel status: · Up—The SRv6 tunnel is up. · Down—The SRv6 tunnel is down. · Blocked—The SRv6 tunnel is a backup tunnel. Its tunnel interface is up, but the tunnel is blocked because the primary tunnel is operating correctly.
In SID	Input SID, which is a local SID.
Out SID	Output SID, which is a remote SID.

‌

# Display detailed L2VPN SRv6 forwarding information.

<Sysname> display l2vpn forwarding srv6 verbose

VSI Name: vpnb

Link ID : 0x9000000

SRv6 Tunnel State : Up

In SID : 200::3

Out SID : 100::2

MTU : 1500

SRv6 Tunnel Attributes : Main

SRv6 Forwarding IDs : -

Remote Leaf Argument : -

Xconnect-group Name: vpna

Connection Name: pw1

Link ID : 0x1

SRv6 Tunnel State : Up

In SID : 200::1

Out SID : 100::1

MTU : 1500

SRv6 Tunnel Attributes : Main

SRv6 Forwarding IDs : -

Table 2 Command output

Field	Description
Link ID	Link ID of the SRv6 tunnel on the VSI or cross-connect group.
SRv6 Tunnel State	SRv6 tunnel status: · Up—The SRv6 tunnel is up. · Down—The SRv6 tunnel is down. · Blocked—The SRv6 tunnel is a bakup tunnel. Its tunnel interface is up, but the tunnel is blocked because the primary tunnel is operating correctly.
In SID	Input SID, which is a local SID.
Out SID	Output SID, which is a remote SID.
MTU	Maximum transmission unit, in bytes.
SRv6 Tunnel Attributes	SRv6 tunnel attributes: · Main—The primary tunnel. · Backup—The backup tunnel. · ac-Bypass—The Bypass tunnel for AC bypass. · ECMP—ECMP tunnel.
SRv6 Forwarding IDs	Forwarding entry indexes of the candidate paths in an SRv6 TE policy. If service traffic is not forwarded through an SRv6 TE policy tunnel, this field displays a hyphen (-).
Remote Leaf Argument	Argument value used by the remote PE to identify leaf ACs. If no argument value exists, this field displays a hyphen (-).

‌

display l2vpn peer srv6

Use display l2vpn peer srv6 to display L2VPN SRv6 information.

Syntax

display l2vpn peer srv6 [ vsi vsi-name | xconnect-group group-name ] [ state-machine | verbose ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

vsi vsi-name: Specifies a VSI by its name, a case-sensitive string of 1 to 31 characters.

xconnect-group group-name: Specifies a cross-connect group by its name, a case-sensitive string of 1 to 31 characters.

state-machine: Displays L2VPN SRv6 state machine information.

verbose: Displays detailed L2VPN SRv6 information.

Usage guidelines

If you do not specify a VSI or a cross-connect group, this command displays L2VPN SRv6 information for all VSIs and cross-connect groups.

If you do not specify the state-machine or verbose keyword, this command displays brief information about L2VPN SRv6.

Examples

# Display brief information about L2VPN SRv6.

<Sysname> display l2vpn peer srv6

Total number of SRv6 Tunnels: 2

2 up, 0 blocked, 0 down

VSI Name: vpnb

Peer : 2::2

Flag : Main

State : Up

Xconnect-group Name: vpna

Peer : 2::2

Flag : Main

State : Up

Remote SrvID : 2

# Display detailed information about L2VPN SRv6.

<Sysname> display l2vpn peer srv6 verbose

VSI Name: vpnb

Peer: 2::2

Signaling Protocol : EVPN

Link ID : 0x9000000

SRv6 Tunnel State : Up

In SID : 100::2

Out SID : 200::3

MTU : 1500

SRv6 Tunnel Attributes : Main

Tunnel Group ID : 0x1000000030000000

SRv6 Forwarding IDs : 0

Color : -

Remote Leaf Argument : -

Recursion Mode : SID based

Output Statistics :

Octets : 0

Packets : 0

Errors : 0

Discards : 0

Output Rate :

Bytes per second : 0

Packets per second : 0

Xconnect-group Name: vpna

Connection Name: pw1

Peer: 2::2

Remote Service ID : 2

Signaling Protocol : EVPN

Link ID : 0x1

SRv6 Tunnel State : Up

In SID : 100::1

Out SID : 200::1

MTU : 1500

SRv6 Tunnel Attributes : Main

Tunnel Group ID : 0x1000000030000000

SRv6 Forwarding IDs : 0

Color : -

Recursion Mode : SID based

Input Statistics :

Octets : 0

Packets : 0

Errors : 0

Discards : 0

Output Statistics :

Octets : 0

Packets : 0

Errors : 0

Discards : 0

Input Rate :

Bytes per second : 0

Packets per second : 0

Output Rate :

Bytes per second : 0

Packets per second : 0

Table 3 Command output

Field	Description
Peer	IPv6 address of the peer PE.
Flag	SRv6 tunnel flags: · Main—The primary tunnel. · Backup—The backup tunnel. · Bypass—The Bypass tunnel. · ECMP—ECMP tunnel.
State/SRv6 Tunnel State	SRv6 tunnel status: · Up—The SRv6 tunnel is up. · Down—The SRv6 tunnel is down. · Blocked—The SRv6 tunnel is a backup tunnel. Its tunnel interface is up, but the tunnel is blocked because the primary tunnel is operating correctly.
Remote SrvID/Remote Service ID	Remote service ID.
Signaling Protocol	Signaling protocol used to establish the SRv6 tunnel. The value is EVPN.
Link ID	Link ID of the SRv6 tunnel on the VSI or cross-connect group.
In SID	Input SID, which is a local SID.
Out SID	Output SID, which is a remote SID.
MTU	Maximum transmission unit, in bytes.
SRv6 Tunnel Attributes	SRv6 tunnel attributes: · Main—The primary tunnel. · Backup—The backup tunnel. · ac-Bypass—The Bypass tunnel for AC bypass. · ECMP—ECMP tunnel.
Tunnel Group ID	ID of the public network tunnel group that carries the SRv6 tunnel.
SRv6 Forwarding IDs	Forwarding entry indexes of the candidate paths in an SRv6 TE policy. If service traffic is not forwarded through an SRv6 TE policy tunnel, this field displays a hyphen (-).
Color	Color attribute of the expected SRv6 TE policy for route recursion. If no color attribute is available, this field displays a hyphen (-).
Remote Leaf Argument	Argument value used by the remote PE to identify leaf ACs. If no argument value exists, this field displays a hyphen (-).
Recursion Mode	Route recursion mode of the SRv6 tunnel: · SID based—SRv6-BE mode. · Nexthop based—SRv6-TE mode. · Nexthop based/SID based—SRv6-TE and SRv6-BE hybrid mode.
Down Reason	SRv6 tunnel down reason: · MTU not match—The MTUs at the two ends of the SRv6 tunnel do not match. · Local AC Down—The local AC is down. · Local VSI admin Down—The local VSI is administratively down. · EVPN VPWS AD per EVI route received from peer—In the EVPN VPWS over SRv6 network, the local end does not receive A-D per EVI routes sent from the peer end. · EVPN VPWS AD per ES route not received from peer—In the EVPN VPWS over SRv6 network, the local end does not receive A-D per ES routes sent from the peer end. · SRv6 not configured with best effort or traffic engineering—No route recursion mode is configured for the SRv6 tunnel. · Tunnel Down—The route is not reachable in SRv6-BE recursion mode or no SRv6 TE policy is configured in SRv6-TE recursion mode. · BFD session for SRv6 PW down—BFD detects that the SRv6 tunnel is down. · Unknown.
Input Statistics	SRv6 PW incoming traffic statistics: · Octets—Number of incoming bytes. · Packets—Number of incoming packets. · Errors—Number of error packets. · Discards—Number of dropped packets. This field is not available in an EVPN VPLS over SRv6 network.
Output statistics	SRv6 PW outgoing traffic statistics: · Octets—Number of outgoing bytes. · Packets—Number of outgoing packets. · Errors—Number of error packets. · Discards—Number of dropped packets.
Input Rate	SRv6 PW incoming traffic rate: · Bytes per second—Number of incoming bytes per second. · Packets per second—Number of incoming packets per second. This field is not available in an EVPN VPLS over SRv6 network.
Output Rate	SRv6 PW outgoing traffic rate: · Bytes per second—Number of outgoing bytes per second. · Packets per second—Number of outgoing packets per second.

‌

# Display state machine information about L2VPN SRv6.

<Sysname> display l2vpn peer srv6 state-machine

SRv6 tunnel group state:

Idle: Idle N: Normal UA: Unavailable PF: Protecting failure

P: Protection tunnel failure W: Working tunnel failure L: Local

Total number of SRv6 tunnels: 2

VSI Name: vpnb

SRv6 Group Link ID : 0x9000000

Main SRv6 Tunnel:

Peer : 2::2

Backup SRv6 Tunnel : -

Signaling Protocol : EVPN

Main SRv6 Defect State : No defect

Backup SRv6 Defect State : -

Switch Result : Working

Switch Reason : None

Remote Event : -

Local Event : SFCW

SRv6 Group Old State : Idle

SRv6 Group State : UA:P:L

Xconnect-group Name: vpna

Connection Name: pw1

SRv6 Group Link ID : 0x1

Main SRv6 Tunnel:

Peer : 2::2

Service ID : 2

Backup SRv6 Tunnel : -

Signaling Protocol : EVPN

Main SRv6 Defect State : No defect

Backup SRv6 Defect State : -

Switch Result : Working

Switch Reason : None

Remote Event : -

Local Event : SFCW

SRv6 Group Old State : Idle

SRv6 Group State : UA:P:L

Table 4 Command output

Field	Description
Main SRv6 Tunnel	Primary SRv6 tunnel.
Peer	IPv6 address of the remote PE for the SRv6 tunnel.
Service ID	Service ID of the remote PE.
Backup SRv6 Tunnel	Backup SRv6 tunnel.
Signaling Protocol	Signaling protocol used to establish the SRv6 tunnels. The value is EVPN.
Main SRv6 Defect State	Defect state of the primary SRv6 tunnel: · No defect. · Signal defect—The signaling protocol detected defects.
Backup SRv6 Defect State	Defect state of the backup SRv6 tunnel: · No defect. · Signal defect—The signaling protocol detected defects. If no backup SRv6 tunnel exists, this field displays a hyphen (-).
Switch Result	SRv6 tunnel in use after a primary/backup tunnel switchover: · None—Neither the primary nor the backup SRv6 tunnel is in use. · Working—The primary SRv6 tunnel is in use. · Backup—The backup SRv6 tunnel is in use.
Switch Reason	Reason that causes the primary/backup tunnel switchover: · Config changed—An SRv6 tunnel is added to or removed from the tunnel redundancy group. · Fault detected—An SRv6 tunnel fault is detected. · SRv6 down—The state of an SRv6 tunnel changes from active to down. · SRv6 up—The state of an SRv6 tunnel changes from active to up. · None—No primary/backup tunnel switchover has occurred.
Remote Event	This field is not supported in the current software version. Remote state machine event.
Local Event	Local state machine event: · SFW—Local primary SRv6 tunnel defect event. · SFP—Local backup SRv6 tunnel defect event. · SFCW—Local primary SRv6 tunnel up event. · SFCP—Local backup SRv6 tunnel up event. · None—No local event.
SRv6 Group Old State	SRv6 tunnel redundancy group state before switchover: · Idle—Both the primary and backup SRv6 tunnels are not available. · Normal—Both the primary and backup SRv6 tunnels are available. The primary SRv6 tunnel is up and the backup SRv6 tunnel is blocked. The primary SRv6 tunnel is used to forward traffic. · UA:P:L—The backup SRv6 tunnel has defects and the primary SRv6 tunnel is up. · PF:W:L—The primary SRv6 tunnel has defects and the back SRv6 tunnel is up.
SRv6 Group State	SRv6 tunnel redundancy group state after switchover. The supported values are the same as those of the SRv6 Group Old State field.

‌

display l2vpn statistics srv6-pw inbound

Use display l2vpn statistics srv6-pw inbound to display incoming packet statistics for SRv6 PWs in an EVPN VPLS over SRv6 network.

Syntax

display l2vpn statistics srv6-pw inbound [ vsi vsi-name ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

vsi vsi-name: Specifies a VSI by its name, a case-sensitive string of 1 to 31 characters. If you do not specify a VSI, this command displays incoming packet statistics for all SRv6 PWs on all VSIs.

Usage guidelines

Use this command to display incoming packet statistics for all SRv6 PWs on the specified VSI or all VSIs.

To display outgoing packet statistics, use the display l2vpn peer srv6 verbose command.

Examples

# Display incoming packet statistics for all SRv6 PWs on VSI aaa.

<Sysname> display l2vpn statistics srv6-pw inbound vsi aaa

VSI name: aaa

Input statistics:

Octets : 0

Packets : 0

Errors : 0

Discards : 0

Input rate :

Bytes per second : 0

Packets per second : 0

Table 5 Command output

Field	Description
Input statistics	Incoming packet statistics for all SRv6 PWs: · Octets—Number of incoming bytes. · Packets—Number of incoming packets. · Errors—Number of error packets. · Discards—Number of discarded packets.
Input rate	Incoming traffic rate for all SRv6 PWs: · Bytes per second—Number of incoming bytes per second. · Packets per second—Number of incoming packets per second.

Field

Description

Input statistics

Incoming packet statistics for all SRv6 PWs:

· Octets—Number of incoming bytes.

· Packets—Number of incoming packets.

· Errors—Number of error packets.

· Discards—Number of discarded packets.

Input rate

Incoming traffic rate for all SRv6 PWs:

· Bytes per second—Number of incoming bytes per second.

· Packets per second—Number of incoming packets per second.

Related commands

reset l2vpn statistics srv6-pw

statistics enable

display l2vpn vsi

Use display l2vpn vsi to display L2VPN VSI information.

Syntax

display l2vpn vsi [ evpn-srv6 | name vsi-name ] [ count | verbose ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

evpn-srv6: Specifies VSIs in the EVPN VPLS over SRv6 network.

name vsi-name: Specifies a VSI by its name, a case-sensitive string of 1 to 31 characters.

count: Displays VSI statistics.

verbose: Displays detailed VSI information.

Examples

# Display brief information about all VSIs in the EVPN VPLS over SRv6 network.

<Sysname> display l2vpn vsi evpn-srv6

Total number of VSIs: 1, 1 up, 0 down, 0 admin down

VSI Name VSI Index MTU State

vpnb 0 1500 Up

# Display statistics about all VSIs in the EVPN VPLS over SRv6 network.

<Sysname> display l2vpn vsi evpn-srv6 count

Total number of VSIs: 1, 1 up, 0 down, 0 admin down

Table 6 Command output

Field	Description
MTU	Maximum transmission unit of the VSI.
State	VSI state: · Up—The VSI is up. · Down—The VSI is down. · Admin down—The VSI is manually shut down by using the shutdown command.

Field

Description

MTU

Maximum transmission unit of the VSI.

State

VSI state:

· Up—The VSI is up.

· Down—The VSI is down.

· Admin down—The VSI is manually shut down by using the shutdown command.

‌

# Display detailed information about all VSIs in the EVPN VPLS over SRv6 network

<Sysname> display l2vpn vsi evpn-srv6 verbose

VSI Name: vpnb

VSI Index : 0

VSI Description : vsi for vpnb

VSI State : Up

MTU : 1500

Diffserv Mode : -

Bandwidth : -

Broadcast Restrain : 5120 kbps

Multicast Restrain : 5120 kbps

Unknown Unicast Restrain: 5120 kbps

MAC Learning : Enabled

MAC Table Limit : -

MAC Learning rate : Unlimited

Local MAC aging time : 300 sec

Remote MAC aging time : 300 sec

Drop Unknown : Disabled

PW Redundancy Mode : Slave

Flooding : Enabled

Statistics : Disabled

VXLAN ID : -

EVPN Encapsulation : SRv6

SRv6 SIDs:

Dt2U SID : 222::1(64/64/0)

Dt2UL SID : 222::2(64/64/0)

Dt2M SID : 222::3(64/64/0)

SRv6 tunnels:

Peer : 2::2

Link ID : 0x9000000

State : Up

ACs:

AC Link ID State

GE1/0/1 0x0 Up

Statistics: Disabled

# Display detailed information about all VSIs in the EVPN VPLS over SRv6 network.

<Sysname> display l2vpn vsi verbose

VSI Name: vpnb

VSI Index : 0

VSI Description : vsi for vpnb

VSI State : Up

MTU : 1500

Diffserv Mode : -

Bandwidth : -

Broadcast Restrain : 5120 kbps

Multicast Restrain : 5120 kbps

Unknown Unicast Restrain: 5120 kbps

MAC Learning : Enabled

MAC Table Limit : -

MAC Learning rate : Unlimited

Local MAC aging time : 300 sec

Remote MAC aging time : 300 sec

Drop Unknown : Disabled

PW Redundancy Mode : Slave

Flooding : Enabled

Statistics : Disabled

VXLAN ID : -

EVPN Encapsulation : SRv6

SRv6 SIDs:

Dt2U SID : 222::1(64/64/0)

Dt2UL SID : 222::2(64/64/0)

Dt2M SID : 222::3(64/64/0)

SRv6 tunnels:

Peer : 2::2

Link ID : 0x9000000

State : Up

ACs:

AC Link ID State

GE1/0/3 srv1 0x0 Up

Statistics: Disabled

Table 7 Command output

Field	Description
VSI Description	VSI description. If no description is configured, this field is not available.
VSI State	VSI state: · Up—The VSI is up. · Down—The VSI is down. · Administratively down—The VSI is manually shut down by using the shutdown command.
MTU	Maximum transmission unit of the VSI.
Diffserv Mode	DiffServ mode. Options include the following: · ingress—DiffServ mode for the inbound direction. · egress—DiffServ mode for the outbound direction. · pipe—Pipe mode. · short-pipe—Short-pipe mode. · uniform—Uniform mode · trust—Priority trust mode ¡ inner-dot1p—Trusts the inner 802.1p priority in packets. ¡ dscp—Trusts the DSCP in packets. af1, af2, af3, af4, be, cs6, cs7, or ef represents the MPLS EXP value. If no DiffServ mode is configured, this field displays a hyphen (-).
Bandwidth	Maximum bandwidth (in kbps) for known unicast traffic on the VSI.
Broadcast Restrain	Broadcast restraint bandwidth (in kbps).
Multicast Restrain	Multicast restraint bandwidth (in kbps).
Unknown Unicast Restrain	Unknown unicast restraint bandwidth (in kbps).
MAC Learning	State of the MAC learning feature.
MAC Tabel Limit	Maximum number of MAC address entries on the VSI. If the VSI does not limit the maximum number of MAC address entries, this field displays Unlimited.
MAC Learning rate	MAC address entry learning rate of the VSI.
Local MAC aging time	MAC aging time for dynamic local-MAC entries, in seconds. If dynamic local-MAC entries do not age out, this field displays NotAging.
Remote MAC aging time	MAC aging time for dynamic remote-MAC entries, in seconds. If dynamic remote-MAC entries do not age out, this field displays NotAging.
Drop Unknown	Action on source MAC-unknown frames received after the maximum number of MAC entries is reached.
PW Redundancy Mode	PW redundancy operation mode: · Slave—Master/slave mode and the local PE operates as the slave node. · Master—Master/slave mode and the local PE operates as the master node. · Independent—Independent mode.
Flooding	State of the VSI's flooding feature. This field is not supported by VPLS.
Statistics	Packet statistics state.
Input Statistics	Incoming traffic statistics: · Octets—Number of incoming bytes. · Packets—Number of incoming packets. · Errors—Number of error packets. · Discards—Number of dropped packets.
Output statistics	Outgoing traffic statistics: · Octets—Number of outgoing bytes. · Packets—Number of outgoing packets. · Errors—Number of error packets. · Discards—Number of dropped packets.
Input Rate	Incoming traffic rate: · Bytes per second—Number of incoming bytes per second. · Packets per second—Number of incoming packets per second. This field is not available in an EVPN VPLS over SRv6 network.
Output Rate	Outgoing traffic rate: · Bytes per second—Number of outgoing bytes per second. · Packets per second—Number of outgoing packets per second.
VXLAN ID	VXLAN ID. This field is not supported by VPLS.
EVPN Encapsulation	EVPN encapsulation type: · VXLAN. · MPLS. · SRv6.
SRv6 SIDs	SRv6 SIDs of the VSI.
Dt2U SID	SRv6 SID used for unicast forwarding in the EVPN VPLS over SRv6 network. The values in parentheses are the length of each segment in the SID, which are the locator length, opcode length, and argument length in sequence. The total length of those segments is 128.
Dt2Ul SID	SRv6 SID used for unicast forwarding over the bypass tunnel at the multihomed EVPN VPLS over SRv6 site. The values in parentheses are the length of each segment in the SID, which are the locator length, opcode length, and argument length in sequence. The total length of those segments is 128.
Dt2M SID	SRv6 SID used for flood forwarding in the EVPN VPLS over SRv6 network. The values in parentheses are the length of each segment in the SID, which are the locator length, opcode length, and argument length in sequence. The total length of those segments is 128.
SRv6 Tunnels	SRv6 tunnels on the VSI.
Peer	IPv6 address of the PW remote PE.
Link ID	Link ID of the SRv6 tunnel on the VSI.
State	SRv6 tunnel state, which can be Up, Down, Blocked, or Defect.
ACs	ACs of the VSI.
AC	For a Layer 3 interface, this field displays the interface name. For an Ethernet service instance, this field displays the name of the Ethernet service instance and the name of the Layer 2 interface where the Ethernet service instance name resides.
Link ID	Link ID of the AC on the VSI.
State	AC state, which can be Up or Down.
Statistics	AC packet statistics state.

‌

display l2vpn xconnect-group

Use display l2vpn xconnect-group to display L2VPN cross-connect group information.

Syntax

display l2vpn xconnect-group [ evpn-srv6 | name group-name [ connection connection-name ] ] [ count | verbose ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

evpn-srv6: Specifies cross-connect groups in the EVPN VPWS over SRv6 network.

name group-name: Specifies a cross-connect group by its name, a case-sensitive string of 1 to 31 characters.

connection connection-name: Specifies a cross-connect by its name, a case-sensitive string of 1 to 20 characters. The cross-connect name cannot contain hyphens (-). If you do not specify a cross-connect, this command displays information about all cross-connects in the specified cross-connect group.

count: Displays cross-connect group statistics.

verbose: Displays detailed cross-connect group information.

Examples

# Display brief information about all cross-connect groups in the EVPN VPWS over SRv6 network.

<Sysname> display l2vpn xconnect-group evpn-srv6

Status Codes: UP - Up, DN - Down, DF - Defect, BD - Blocked, AD - Admin Down,

DL - Idle, DP - Duplicate

Total number of cross-connections: 1, 1 up, 0 down, 0 admin down

Xconnect-group Connection ST

Segment1 ST Segment2 ST

--------------------------------------------------------------------------------

vpna pw1 UP

GE1/0/2 UP EVPN 2::2 UP

--------------------------------------------------------------------------------

# Display statistics about all cross-connect groups in the EVPN VPWS over SRv6 network.

<Sysname> display l2vpn xconnect-group evpn-srv6 count

Status Codes: UP - Up, DN - Down, DF - Defect, BD - Blocked, AD - Admin Down,

DL - Idle, DP - Duplicate

Total number of cross-connections: 1, 1 up, 0 down, 0 admin down

Table 8 Command output

Field	Description
ST	State of the cross-connect: · UP—The cross-connect is up. · DN—The cross-connect is down. · AD—The cross-connect is manually shut down by using the shutdown command.
Segment1 / Segment2	For an AC segment: · If the AC is a Layer 3 interface, this field displays the interface name. · If the AC is an Ethernet service instance, this field displays the Ethernet service instance name. For an SRv6 tunnel segment, this field displays the establishment method of the SRv6 tunnel and the IPv6 address of the remote PE. Only the EVPN establishment method is supported.
ST	If this field displays AC state, the following options are available: · UP—The AC is up. · DN—The AC is down. If this field displays SRv6 tunnel state, the following options are available: · UP—The tunnel is up. · DN—The tunnel is down. · DF—BFD detects that the tunnel has defects. · BD—The tunnel is a backup tunnel. Its tunnel interface is up, but the tunnel is blocked because the primary tunnel is operating correctly. · DL—The input SID of the tunnel is not available. · DP—This option is not supported in the current software version.

‌

# Display detailed information about all cross-connect groups in the EVPN VPWS over SRv6 network.

<Sysname> display l2vpn xconnect-group evpn-srv6 verbose

Xconnect-group Name: vpna

Connection Name : pw1

Connection ID : 1

State : Up

MTU : 1500

PW Redundancy Mode : Slave

Diffserv Mode : -

SRv6 tunnels:

Peer : 2::2

Link ID : 0x1

State : Up

ACs:

AC Link ID State

GE1/0/1 0x0 Up

Statistics: Disabled

# Display detailed information about all cross-connect groups in the EVPN VPWS over SRv6 network.

<Sysname> display l2vpn xconnect-group evpn-srv6 verbose

Xconnect-group Name: vpna

Connection Name : pw1

Connection ID : 1

State : Up

MTU : 1500

PW Redundancy Mode : Slave

Diffserv Mode : -

SRv6 tunnels:

Peer : 2::2

Link ID : 0x1

State : Up

ACs:

AC Link ID State

GE1/0/4 srv1 0x0 Up

Statistics: Disabled

Table 9 Command output

Field	Description
Description	Description of the cross-connect group. If no description is configured, this field is not available.
State	Cross-connect group state: · Up—The cross-connect group is up. · Down—The cross-connect group is down. · Administratively down—The cross-connect group is manually shut down by using the shutdown command.
MTU	Maximum transmission unit of cross-connects.
PW Redundancy Mode	PW redundancy operation mode: · Slave—Master/slave mode and the local PE operates as the slave node. · Master—Master/slave mode and the local PE operates as the master node. · Independent—Independent mode.
Diffserv Mode	DiffServ mode. Options include the following: · ingress—DiffServ mode for the inbound direction. · egress—DiffServ mode for the outbound direction. · pipe—Pipe mode. · short-pipe—Short-pipe mode. · uniform—Uniform mode · trust—Priority trust mode ¡ inner-dot1p—Trusts the inner 802.1p priority in packets. ¡ dscp—Trusts the DSCP in packets. af1, af2, af3, af4, be, cs6, cs7, or ef represents the MPLS EXP value. If no DiffServ mode is configured, this field displays a hyphen (-).
SRv6 tunnels	SRv6 tunnel information.
Peer	IPv6 address of the SRv6 tunnel remote PE.
Link ID	Link ID of the SRv6 tunnel on the cross-connect.
State	SRv6 tunnel state, which can be Up, Down, Blocked, or Defect.
ACs	AC information.
AC	For a Layer 3 interface, this field displays the interface name. For an Ethernet service instance, this field displays the name of the Ethernet service instance and the name of the Layer 2 interface where the Ethernet service instance name resides.
Link ID	Link ID of the AC on the cross-connect.
State	AC state, which can be Up or Down.
Statistics	AC packet statistics state.

‌

encapsulation source-address

Use encapsulation source-address to specify a source address for the outer IPv6 header of SRv6 VPN packets.

Use undo encapsulation source-address to restore the default.

Syntax

encapsulation source-address ipv6-address [ ip-ttl ttl-value ]

undo encapsulation source-address

Default

No source address is specified for the outer IPv6 header of SRv6 VPN packets.

Views

SRv6 view

Predefined user roles

network-admin

Parameters

ipv6-address: Specifies a source IPv6 address. The IPv6 address cannot be a loopback address, link-local address, multicast address, or unspecified address.

ip-ttl ttl-value: Specifies the TTL of the outer IPv6 header, in the range of 1 to 255. The default value is 255.

Usage guidelines

To ensure correct VPN traffic forwarding in an SRv6 VPN network, you must specify a source address for the outer IPv6 header of SRv6 VPN packets.

You must specify an IPv6 address of the local device as the source IPv6 address, and make sure the IPv6 address has been advertised by a routing protocol. As a best practice, specify a loopback interface address of the local device as the source IPv6 address.

Examples

# Specify 1::1 as the source address of SRv6 VPN packets in the outer IPv6 header and set the TTL of the outer IPv6 header to 200.

<Sysname> system-view

[Sysname] segment-routing ipv6

[Sysname-segment-routing-ipv6] encapsulation source-address 1::1 ip-ttl 200

evpn encapsulation srv6

Use evpn encapsulation srv6 to create an EVPN instance, specify it to use SRv6 encapsulation, and enter its view, or enter the view of an existing EVPN instance that uses SRv6 encapsulation.

Use undo evpn encapsulation to restore the default.

Syntax

evpn encapsulation srv6

undo evpn encapsulation

Default

No EVPN instance is created.

Views

VSI view

Cross-connect group view

Predefined user roles

network-admin

Usage guidelines

Before you can configure EVPN settings for a VSI or cross-connect group, you must create an EVPN instance on it.

This command is mutually exclusive with the evpn encapsulation binding instance command. You cannot use them together on the same VSI.

Examples

# Create an EVPN instance and specify it to use SRv6 encapsulation on VSI aaa and enter its view.

<Sysname> system-view

[Sysname] vsi aaa

[Sysname-vsi-aaa] evpn encapsulation srv6

[Sysname-vsi-aaa-evpn-srv6]

evpn next-header-field

Use evpn next-header-field to configure the value of the Next Header field in the SRH.

Use undo evpn next-header-field to restore the default.

Syntax

evpn next-header-field { 59 | 143 }

undo evpn next-header-field

Default

The value of the Next Header field in the SRH is 143.

Views

SRv6 view

Predefined user roles

network-admin

Parameters

59: Sets the value of the Next Header field in the SRH to 59.

143: Sets the value of the Next Header field in the SRH to 143.

Usage guidelines

On EVPN VPWS over SRv6 and EVPN VPLS over SRv6 networks, the device identifies SRv6 packets by the value of the Next Header field in the SRH. If the value in a packet is different from that set on the device, the device processes the packet as a normal IPv6 packet rather than an SRv6 packet. For the device to successfully identify SRv6 packets, you can change the value on the device according to the value supported by the peer device.

Examples

# Set the value of the Next Header field in the SRH to 59.

<Sysname> system-view

[Sysname] segment-routing ipv6

[Sysname-segment-routing-ipv6] evpn next-header-field 59

export route-policy

Use export route-policy to apply an export routing policy to an EVPN instance.

Use undo export route-policy to restore the default.

Syntax

export route-policy route-policy

undo export route-policy

Default

No export routing policy is applied to an EVPN instance.

Views

EVPN instance view

Predefined user roles

network-admin

Parameters

route-policy: Specifies a routing policy by its name, a case-sensitive string of 1 to 63 characters.

Usage guidelines

You can specify an export routing policy to filter advertised routes or modify their route attributes for EVPN.

If you execute this command multiple times, the most recent configuration takes effect.

Examples

# Apply export routing policy poly-1 to the EVPN instance on VSI vpna.

<Sysname> system-view

[Sysname] vsi vpna

[Sysname-vsi-vpna] evpn encapsulation srv6

[Sysname-vsi-vpna-evpn-srv6] route-distinguisher 1:1

[Sysname-vsi-vpna-evpn-srv6] export route-policy poly-1

Related commands

route-policy (Layer 3—IP Routing Command Reference)

import route-policy

Use import route-policy to apply an import routing policy to an EVPN instance.

Use undo import route-policy to restore the default.

Syntax

import route-policy route-policy

undo import route-policy

Default

No import routing policy is applied to an EVPN instance. The EVPN instance accepts a route when the route targets of the route match local import route targets.

Views

EVPN instance view

Predefined user roles

network-admin

Parameters

route-policy: Specifies a routing policy by its name, a case-sensitive string of 1 to 63 characters.

Usage guidelines

You can specify an import routing policy to filter received routes or modify their route attributes for EVPN.

If you execute this command multiple times, the most recent configuration takes effect.

Examples

# Apply import routing policy poly-1 to the EVPN instance on VSI vpna.

<Sysname> system-view

[Sysname] vsi vpna

[Sysname-vsi-vpna] evpn encapsulation srv6

[Sysname-vsi-vpna-evpn-srv6] route-distinguisher 1:1

[Sysname-vsi-vpna-evpn-srv6] import route-policy poly-1

Related commands

route-policy (Layer 3—IP Routing Command Reference)

nexthop interface (BGP-VPN IPv4 SR next hop view/BGP-VPN IPv4 EVPN SR next hop view)

Use nexthop interface to specify a next hop to which an End.DX4 SID can be dynamically allocated and specify the output interface of the next hop.

Use undo nexthop to restore the default.

Syntax

nexthop nexthop-address interface interface-type interface-number

undo nexthop nexthop-address

Default

No End.DX4 SID is allocated to a next hop.

Views

BGP-VPN IPv4 SR next hop view

BGP-VPN IPv4 EVPN SR next hop view

Predefined user roles

network-admin

Parameters

nexthop-address: Specifies a next hop by its IPv4 address.

interface-type interface-number: Specifies an output interface by its type and number.

Usage guidelines

This command is applicable to the IPv4 L3VPN over SRv6 or IPv4 EVPN L3VPN over SRv6 scenario to accelerate traffic forwarding. This command allocates an End.DX4 SID to the specified next hop for BGP IPv4 routes and associates the next hop with an output interface.

Use one of the following methods to allocate End.DX4 SIDs to next hops:

· Use this command to dynamically allocate an End.DX4 SID to a next hop from the locator applied to the VPN instance.

Make sure the output interface specified for the next hop in this command is consistent with the output interface of that next hop in the routing table. If they are inconsistent, the device cannot dynamically allocate an End.DX4 SID to the next hop.

· Use the opcode end-dx4 vpn-instance command to manually configure an End.DX4 SID in the locator applied to the VPN instance.

Make sure the output interface specified for the next hop in the opcode end-dx4 vpn-instance command is consistent with the output interface of that next hop in the routing table. If they are inconsistent, the device cannot use the manually configured End.DX4 SID to forward traffic.

If both methods are used for the same next hop, the manually configured End.DX4 SID takes precedence over the dynamically allocated one.

You can specify only one output interface for one next hop. To change the output interface of a next hop, first use the undo nexthop command to remove the original next hop and output interface association.

The device might be unable to dynamically allocate SIDs to BGP IPv4 routes based on the route next hops when dynamic SID resources are insufficient. If the device does not have manually configured End.DX4 SIDs, it allocates the End.DT4 SID or End.DT46 SID of the VPN instance to the routes.

Examples

# In BGP-VPN IPv4 SR next hop view, allow the system to allocate an End.DX4 SID to next hop 10.1.1.2 and specify GigabitEthernet 1/0/1 as the output interface of the next hop.

<Sysname> system-view

[Sysname] bgp 100

[Sysname-bgp-default] ip vpn-instance vpna

[Sysname-bgp-default-vpna] address-family ipv4 unicast

[Sysname-bgp-default-ipv4-vpna] segment-routing ipv6 locator aaa

[Sysname-bgp-default-ipv4-vpna] segment-routing ipv6 apply-sid specify-nexthop

[Sysname-bgp-default-sid-np-ipv4-vpna] nexthop 10.1.1.2 interface gigabitethernet 1/0/1

Related commands

opcode

nexthop interface (BGP SRv6 next hop view/BGP-VPN SRv6 next hop view/BGP-VPN IPv6 EVPN SR next hop view)

Use nexthop interface to specify a next hop to which an End.DX6 SID can be dynamically allocated and specify the output interface of the next hop.

Use undo nexthop to restore the default.

Syntax

nexthop nexthop-ipv6-address interface interface-type interface-number

undo nexthop nexthop-ipv6-address

Default

No End.DX6 SID is allocated to a next hop.

Views

BGP-VPN SRv6 next hop view

BGP-VPN IPv6 EVPN SR next hop view

BGP SRv6 next hop view

Predefined user roles

network-admin

Parameters

nexthop-ipv6-address: Specifies a next hop by its IPv6 address.

interface-type interface-number: Specifies an output interface by its type and number.

Usage guidelines

This command is applicable to the IPv6 L3VPN over SRv6, IPv6 EVPN L3VPN over SRv6, or public network IPv6 over SRv6 scenario to accelerate traffic forwarding. This command allocates an End.DX6 SID to the specified next hop for BGP IPv6 routes and associates the next hop with an output interface.

Use one of the following methods to allocate End.DX6 SIDs to next hops:

· Use this command to dynamically allocate an End.DX6 SID to a next hop from the locator applied to the VPN instance or public instance.

· Use the opcode end-dx6 vpn-instance command to manually configure an End.DX6 SID in the locator applied to the VPN instance or public instance.

Make sure the output interface specified for the next hop in the opcode end-dx6 vpn-instance command is consistent with the output interface of that next hop in the routing table. If they are inconsistent, the device cannot use the manually configured End.DX6 SID to forward traffic.

If both methods are used for the same next hop, the manually configured End.DX6 SID takes precedence over the dynamically allocated one.

The device might be unable to dynamically allocate SIDs to BGP IPv6 routes based on the route next hops when dynamic SID resources are insufficient. If the device does not have manually configured End.DX6 SIDs, it allocates the End.DT6 SID or End.DT46 SID of the VPN instance or public instance to the routes.

Examples

# In BGP SRv6 next hop view, allow the system to allocate an End.DX6 SID to next hop 10::1:2 and specify GigabitEthernet 1/0/1 as the output interface of the next hop.

<Sysname> system-view

[Sysname] bgp 100

[Sysname-bgp-default] address-family ipv6 unicast

[Sysname-bgp-default-ipv6] segment-routing ipv6 locator aaa

[Sysname-bgp-default-ipv6] segment-routing ipv6 apply-sid specify-nexthop

[Sysname-bgp-default-sid-np-ipv6] nexthop 10::1:2 interface gigabitethernet 1/0/1

Related commands

opcode

peer advertise encap-type srv6

Use peer advertise encap-type srv6 to enable SRv6 encapsulation for the EVPN IP prefix advertisement routes advertised to a peer or peer group.

Use undo peer advertise encap-type srv6 to disable SRv6 encapsulation for the EVPN IP prefix advertisement routes advertised to a peer or peer group.

Syntax

peer { group-name | ipv6-address [ prefix-length ] } advertise encap-type srv6

undo peer { group-name | ipv6-address [ prefix-length ] } advertise encap-type srv6

The following compatibility matrixes show the support of hardware platforms for this command:

Hardware	Command compatibility
MSR610	No
MSR810, MSR810-W, MSR810-W-DB, MSR810-LM, MSR810-W-LM, MSR810-10-PoE, MSR810-LM-HK, MSR810-W-LM-HK, MSR810-LM-CNDE-SJK, MSR810-CNDE-SJK, MSR810-EI, MSR810-LM-EA, MSR810-LM-EI	Yes
MSR810-LMS, MSR810-LUS	No
MSR810-SI, MSR810-LM-SI	No
MSR810-LMS-EA, MSR810-LME	Yes
MSR1004S-5G, MSR1004S-5G-CN	Yes
MSR1104S-W, MSR1104S-W-CAT6, MSR1104S-5G-CN, MSR1104S-W-5G-CN	Yes
MSR2600-6-X1, MSR2600-15-X1, MSR2600-15-X1-T	Yes
MSR2600-10-X1	Yes
MSR 2630	Yes
MSR3600-28, MSR3600-51	Yes
MSR3600-28-SI, MSR3600-51-SI	No
MSR3600-28-X1, MSR3600-28-X1-DP, MSR3600-51-X1, MSR3600-51-X1-DP	Yes
MSR3600-28-G-DP, MSR3600-51-G-DP	Yes
MSR3610-I-DP, MSR3610-IE-DP, MSR3610-IE-ES, MSR3610-IE-EAD, MSR-EAD-AK770, MSR3610-I-IG, MSR3610-IE-IG	Yes
MSR3610-X1, MSR3610-X1-DP, MSR3610-X1-DC, MSR3610-X1-DP-DC, MSR3620-X1, MSR3640-X1	Yes
MSR3610, MSR3620, MSR3620-DP, MSR3640, MSR3660	Yes
MSR3610-G, MSR3620-G	Yes
MSR3640-G	Yes
MSR3640-X1-HI	Yes

Hardware	Command compatibility
MSR810-W-WiNet, MSR810-LM-WiNet	Yes
MSR830-4LM-WiNet	Yes
MSR830-5BEI-WiNet, MSR830-6EI-WiNet, MSR830-10BEI-WiNet	Yes
MSR830-6BHI-WiNet, MSR830-10BHI-WiNet	Yes
MSR2600-6-WiNet	Yes
MSR2600-10-X1-WiNet	Yes
MSR2630-WiNet	Yes
MSR3600-28-WiNet	Yes
MSR3610-X1-WiNet	Yes
MSR3610-WiNet, MSR3620-10-WiNet, MSR3620-DP-WiNet, MSR3620-WiNet, MSR3660-WiNet	Yes

Hardware	Command compatibility
MSR860-6EI-XS	Yes
MSR860-6HI-XS	Yes
MSR2630-XS	Yes
MSR3600-28-XS	Yes
MSR3610-XS	Yes
MSR3620-XS	Yes
MSR3610-I-XS	Yes
MSR3610-IE-XS	Yes
MSR3620-X1-XS	Yes
MSR3640-XS	Yes
MSR3660-XS	Yes

Hardware	Command compatibility
MSR810-LM-GL	Yes
MSR810-W-LM-GL	Yes
MSR830-6EI-GL	Yes
MSR830-10EI-GL	Yes
MSR830-6HI-GL	Yes
MSR830-10HI-GL	Yes
MSR1004S-5G-GL	Yes
MSR2600-6-X1-GL	Yes
MSR3600-28-SI-GL	No

Default

IP prefix advertisement routes use VXLAN encapsulation.

Views

BGP EVPN address family view

Predefined user roles

network-admin

Parameters

group-name: Specifies a peer group by its name, a case-sensitive string of 1 to 47 characters. The peer group must exist.

ipv6-address: Specifies a peer by its IPv6 address. The peer must exist.

prefix-length: Specifies a prefix length in the range of 0 to 128. To specify a subnet, you must specify both the ipv6-address and prefix-length arguments.

Usage guidelines

Use this command to enable the device to advertise EVPN IP prefix advertisement routes with SRv6 encapsulation in an EVPN L3VPN over SRv6 network.

Execute this command on the edge nodes of the EVPN L3VPN network and RRs.

Examples

# Enable SRv6 encapsulation for the IP prefix advertisement routes advertised to peer 1::1.

<Sysname> system-view

[Sysname] bgp 100

[Sysname-bgp-default] address-family l2vpn evpn

[Sysname-bgp-default-evpn] peer 1::1 advertise encap-type srv6

peer advertise original-route

Use peer advertise original-route to enable the device to advertise original BGP VPNv4, VPNv6, or EVPN routes to a peer or peer group.

Use undo peer advertise original-route to restore the default.

Syntax

peer { group-name | ipv4-address [ mask-length ] | ipv6-address [ prefix-length ] } advertise original-route

undo peer { group-name | ipv4-address [ mask-length ] | ipv6-address [ prefix-length ] } advertise original-route

Default

The device advertises reoriginated BGP VPNv4, VPNv6, or EVPN routes to peers and peer groups after the peer re-originated command is executed.

Views

BGPN VPNv4 address family view

BGPN VPNv6 address family view

BGP EVPN address family view

Predefined user roles

network-admin

Parameters

group-name: Specifies a peer group by its name, a case-sensitive string of 1 to 47 characters. The peer group must exist.

ipv4-address: Specifies a peer by its IPv4 address. The peer must exist.

mask-length: Specifies a mask length in the range of 0 to 32. To specify a subnet, you must specify both the ipv4-address and mask-length arguments.

ipv6-address: Specifies a peer by its IPv6 address. The peer must exist.

prefix-length: Specifies a prefix length in the range of 0 to 128. To specify a subnet, you must specify both the ipv6-address and prefix-length arguments.

Usage guidelines

For this command to take effect, you must execute the peer re-originated command.

The device configured with the peer re-originated command advertises only reoriginated BGP VPNv4, VPNv6, or EVPN routes. For the device to advertise both original and reoriginated BGP VPNv4, VPNv6, or EVPN routes to a peer or peer group, execute the peer advertise original-route command on the device.

Examples

# In BGP VPNv4 address family view, enable the device to advertise original BGP VPNv4 routes to peer 1.1.1.1.

<Sysname> system-view

[Sysname] bgp 100

[Sysname-bgp-default] address-family vpnv4

[Sysname-bgp-default-vpnv4] peer 1.1.1.1 advertise original-route

Related commands

peer re-originated

peer suppress re-originated

peer prefix-sid

Use peer prefix-sid to enable BGP to exchange SRv6 SID information with an IPv6 peer or peer group.

Use undo peer prefix-sid to restore the default.

Syntax

peer { group-name | ipv6-address [ prefix-length ] } prefix-sid

undo peer { group-name | ipv6-address [ prefix-length ] } prefix-sid

Default

BGP does not exchange SRv6 SID information with an IPv6 peer or peer group.

Views

BGP VPNv4 address family view

BGP VPNv6 address family view

BGP IPv4 unicast address family view

BGP IPv6 unicast address family view

Predefined user roles

network-admin

Parameters

group-name: Specifies a peer group by its name, a case-sensitive string of 1 to 47 characters. The peer group must exist.

ipv6-address: Specifies a peer by its IPv6 address. The peer must exist.

prefix-length: Specifies a prefix length in the range of 0 to 128. To specify a subnet, you must specify both the ipv6-address and prefix-length arguments.

Usage guidelines

Use this command to enable IPv6 peers in an SRv6 VPN network to exchange SRv6 SID information through BGP VPNv4, VPNv6, IPv4 unicast, or IPv6 unicast routes.

Examples

# In BGP VPNv4 address family view, enable BGP to exchange SRv6 SID information with peer 2001:1::1.

<Sysname> system-view

[Sysname] bgp 100

[Sysname-bgp-default] address-family vpnv4

[Sysname-bgp-default-vpnv4] peer 2001:1::1 prefix-sid

peer re-originated

Use peer re-originated to enable the device to reoriginate BGP VPNv4, VPNv6, or EVPN routes based on the BGP VPNv4, VPNv6, or EVPN routes received from a peer or peer group.

Use undo peer re-originated to disable the device from reoriginating BGP VPNv4, VPNv6, or EVPN routes based on the BGP VPNv4, VPNv6, or EVPN routes received from a peer or peer group.

Syntax

In BGP VPNv4 address family view or BGP VPNv6 address family view:

peer { group-name | ipv4-address [ mask-length ] | ipv6-address [ prefix-length ] } re-originated [ replace-rt ]

undo peer { group-name | ipv4-address [ mask-length ] | ipv6-address [ prefix-length ] } re-originated

In BGP EVPN address family view:

peer { group-name | ipv4-address [ mask-length ] | ipv6-address [ prefix-length ] } re-originated [ ip-prefix ] [ replace-rt ]

undo peer { group-name | ipv4-address [ mask-length ] | ipv6-address [ prefix-length ] } re-originated [ ip-prefix ]

Default

The device does not reoriginate BGP VPNv4, VPNv6, or EVPN routes based on received BGP VPNv4, VPNv6, or EVPN routes.

Views

BGP VPNv4 address family view

BGP VPNv6 address family view

BGP EVPN address family view

Predefined user roles

network-admin

Parameters

group-name: Specifies a peer group by its name, a case-sensitive string of 1 to 47 characters. The peer group must exist.

ipv4-address: Specifies a peer by its IPv4 address. The peer must exist.

mask-length: Specifies a mask length in the range of 0 to 32. To specify a subnet, you must specify both the ipv4-address and mask-length arguments.

ipv6-address: Specifies a peer by its IPv6 address. The peer must exist.

prefix-length: Specifies a prefix length in the range of 0 to 128. To specify a subnet, you must specify both the ipv6-address and prefix-length arguments.

ip-prefix: Specifies IP prefix advertisement routes. If you do not specify this keyword, the command still reoriginates IP prefix advertisement routes.

replace-rt: Modifies route information.

· Replaces the RD and route targets of VPNv4 or VPNv6 routes with those of the matching local VPN instance, and adds MPLS labels or SRv6 SIDs to the routes. If you do not specify this keyword, the device performs the same operations except that it does not replace the route targets.

· Replaces the L3 VXLAN ID, RD, and route targets of EVPN IP prefix advertisement routes with those of the matching local VPN instance, and adds MPLS labels or SRv6 SIDs to the routes. If you do not specify this keyword, the device performs the same operations except that it does not replace the route targets.

Usage guidelines

Use this command on a PE that connects the MPLS L3VPN and MPLS L3VPN over SRv6 networks or connects the EVPN L3VPN and EVPN L3VPN over SRv6 networks. This command enables the PE to modify VPNv4, VPNv6, or EVPN route information to realize intercommunication between the MPLS and SRv6 networks.

After you execute this command on a PE, the PE performs the following operations after receiving BGP VPNv4, VPNv6, or EVPN routes from the MPLS L3VPN or EVPN L3VPN network:

1. Matches the route targets of the routes with the import route targets of local VPN instances.

2. Replaces the L3 VXLAN ID (for EVPN L3VPN), RD, and route targets of the routes with those of the matching local VPN instance. In addition, the PE adds an SRv6 SID to the routes and maps the SRv6 SID of the routes to the private label of the routes.

3. Advertises the reoriginated routes to the SRv6 network.

After you execute this command on a PE, the PE performs the following operations after receiving BGP VPNv4, VPNv6, or EVPN routes from the SRv6 network:

1. Matches the route targets of the routes with the import route targets of local VPN instances.

2. Replaces the L3 VXLAN ID (for EVPN L3VPN), RD, and route targets of the routes with those of the matching local VPN instance. In addition, the PE adds MPLS labels to the routes and maps the private label of the routes to the SRv6 SID of the routes.

3. Advertises the reoriginated routes to the MPLS L3VPN or EVPN L3VPN network.

After you execute this command on a PE, the PE advertises only reoriginated routes to the specified peer or peer group. The original routes are not advertised.

If the RD of a received BGP VPNv4, VPNv6, or EVPN route is identical to the RD of the matching local VPN instance, a PE does not modify the route or reoriginate the route. As a result, the PE does not advertise the route. As a best practice, assign unique RDs to VPN instances on different devices if you use this command.

Examples

# In BGP VPNv4 address family view, replace the RD and route targets of the BGP VPNv4 routes received from peer 1.1.1.1 and add an MPLS label or SRv6 SID to the routes.

<Sysname> system-view

[Sysname] bgp 100

[Sysname-bgp-default] address-family vpnv4

[Sysname-bgp-default-vpnv4] peer 1.1.1.1 re-originated replace-rt

Related commands

peer advertise original-route

peer suppress re-originated

peer srv6-vpn compatible

Use peer srv6-vpn compatible to enable SRv6 VPN compatibility with a peer or peer group.

Use undo peer srv6-vpn compatible to disable SRv6 VPN compatibility with a peer or peer group.

Syntax

peer { group-name | ipv6-address [ prefix-length ] } srv6-vpn compatible

undo peer { group-name | ipv6-address [ prefix-length ] } srv6-vpn compatible

Default

SRv6 VPN compatibility is disabled for a peer or peer group.

Views

BGP VPNv4 address family view

Predefined user roles

network-admin

Usage guidelines

PEs from different vendors might define different End.DT4 SID message formats in VPNv4 routes. A PE cannot learn VPNv4 routes from its peers if it uses an End.DT4 SID message format different than its peers. To resolve this issue, perform this task on the PE to enable its SRv6 VPN compatibility with its peers. This task ensures that a Comware PE can communicate with PEs from other vendors in an MPLS L3VPN over SRv6 network.

Parameters

group-name: Specifies a peer group by its name, a case-sensitive string of 1 to 47 characters. The peer group must exist.

ipv6-address: Specifies a peer by its IPv6 address. The peer must exist.

prefix-length: Specifies a prefix length in the range of 0 to 128. To specify a subnet, you must specify both the ipv6-address and prefix-length arguments.

Examples

# Enable SRv6 VPN compatibility with peer 2::2.

<Sysname> system-view

[Sysname] bgp 1

[Sysname-bgp-default] address-family vpnv4

[Sysname-bgp-default-vpnv4] peer 2::2 srv6-vpn compatible

peer suppress re-originated

Use peer suppress re-originated to suppress advertisement of reoriginated BGP VPNv4, VPNv6, or EVPN routes to a peer or peer group.

Use undo peer suppress re-originated to restore the default.

Syntax

In BGPN VPNv4 address family view or BGPN VPNv6 address family view:

peer { group-name | ipv4-address [ mask-length ] | ipv6-address [ prefix-length ] } suppress re-originated

undo peer { group-name | ipv4-address [ mask-length ] | ipv6-address [ prefix-length ] } suppress re-originated

In BGP EVPN address family view:

peer { group-name | ipv4-address [ mask-length ] | ipv6-address [ prefix-length ] } suppress re-originated ip-prefix

undo peer { group-name | ipv4-address [ mask-length ] | ipv6-address [ prefix-length ] } suppress re-originated ip-prefix

Default

The device advertises reoriginated BGP VPNv4, VPNv6, or EVPN routes to peers and peer groups after the peer re-originated command is executed.

Views

BGPN VPNv4 address family view

BGPN VPNv6 address family view

BGP EVPN address family view

Predefined user roles

network-admin

Parameters

group-name: Specifies a peer group by its name, a case-sensitive string of 1 to 47 characters. The peer group must exist.

ipv4-address: Specifies a peer by its IPv4 address. The peer must exist.

mask-length: Specifies a mask length in the range of 0 to 32. To specify a subnet, you must specify both the ipv4-address and mask-length arguments.

ipv6-address: Specifies a peer by its IPv6 address. The peer must exist.

prefix-length: Specifies a prefix length in the range of 0 to 128. To specify a subnet, you must specify both the ipv6-address and prefix-length arguments.

ip-prefix: Specifies IP prefix advertisement routes.

Usage guidelines

The device configured with the peer re-originated and peer advertise original-route commands advertises both original and reoriginated BGP VPNv4, VPNv6, or EVPN routes. For the device to advertise only original BGP VPNv4, VPNv6, EVPN routes to a peer or peer group, execute the peer suppress re-originated command on the device.

Examples

# In BGP VPNv4 address family view, suppress advertisement of reoriginated BGP VPNv4 routes to peer 1.1.1.1.

<Sysname> system-view

[Sysname] bgp 100

[Sysname-bgp-default] address-family vpnv4

[Sysname-bgp-default-vpnv4] peer 1.1.1.1 suppress re-originated

Related commands

peer advertise original-route

peer re-originated

ping evpn vpls srv6

Use ping evpn vpls srv6 to test the connectivity of an SRv6 PW in an EVPN VPLS over SRv6 network by pinging a remote PE from the local PE.

Syntax

Views

Any view

Predefined user roles

network-admin

Parameters

vsi vsi-name: Specifies a VSI by its name, a case-sensitive string of 1 to 31 characters.

mac mac-address: Specifies a host attached to a remote PE by its MAC address in H-H-H format. Do not specify a broadcast MAC address, multicast MAC address, or all-zeros MAC address.

-a source-ipv6: Specifies the source IPv6 address of MPLS echo requests. If you do not specify a source IPv6 address, the IPv6 address of the traffic output interface is used as the source IPv6 address of MPLS echo requests.

-c count: Specifies the number of MPLS echo requests to be sent. The value range for the count argument is 1 to 4294967295, and the default value is 5.

-h hop-limit: Specifies the maximum number of hops allowed for an MPLS echo request. The value range for the hop-limit argument is 1 to 255, and the default value is 255.

-m interval: Specifies the interval at which an MPLS echo request is sent, in milliseconds. The value range for the interval argument is 1 to 10000, and the default value is 2000.

-r reply-mode: Specifies the reply mode used by the receiver (the remote PE) to reply to MPLS echo requests. The value for the reply-mode argument can be 2 or 4, and the default value is 2. If the mode is 2, the receiver searches the IP forwarding table for the destination IP address to forward MPLS echo replies. If the mode is 4, the receiver searches the IPv6 routing table for the source IPv6 address of the echo requests, encapsulates an SRH to the replies, and forwards them.

-s packet-size: Specifies the length of MPLS echo requests, in bytes. The value range for the packet-size argument is 81 to 1200, and the default value is 100. The specified packet length does not include the IPv6 header and UDP header length.

-t time-out: Specifies the timeout time of MPLS echo replies, in milliseconds. The value range for the time-out argument is 0 to 65535, and the default value is 2000. If the local PE does not receive an MPLS echo reply within the timeout time after sending an MPLS echo request, it determines that the MPLS echo reply times out.

-tc tc: Specifies the traffic class value in MPLS echo requests. The value range for the tc argument is 0 to 255 and the default value is 0.

Usage guidelines

In an EVPN VPLS over SRv6 network, a PE transmits data packets to a remote PE over an SRv6 PW. Use this command to test the connectivity of the SRv6 PW from the local PE to the remote PE when packet loss or traffic interruption occurs between the PEs.

Examples

# Test the connectivity of the SRv6 PW from the local PE to the remote PE attached to the host with MAC address 2-2-2 in VSI vpna.

<System> ping evpn vpls srv6 vsi vpna mac 2-2-2

Ping a remote PE in VSI vpna over SRv6 by reaching remote-MAC 0002-0002-0002: 100 data bytes.

Press CTRL+C to break.

100 bytes from 11::2: sequence=1 time=1 ms

100 bytes from 11::2: sequence=2 time=2 ms

100 bytes from 11::2: sequence=3 time=1 ms

100 bytes from 11::2: sequence=4 time=2 ms

100 bytes from 11::2: sequence=5 time=1 ms

--- Ping statistics for MAC 0002-0002-0002 ---

5 packets transmitted, 5 packets received, 0.0% packets lost

Round-trip min/avg/max = 1/1/2 ms

Table 10 Command output

Field	Description
Ping a remote PE in VSI vpna over SRv6 by reaching remote-MAC 0002-0002-0002: 100 data bytes	Ping a remote PE through an SRv6 PW in VSI vpna by reaching remote-MAC 0002-0002-0002. Each MPLS echo request contains 100 bytes.
Press CTRL+C to break	Press escape key Ctrl+C to abort the ping operation.
100 bytes from 11::2: sequence=1 time=1 ms	Received MPLS echo replies from the device whose IPv6 address is 11::2. · bytes—Number of bytes in the MPLS echo reply. · Sequence—Packet sequence, used to determine whether a segment is lost, disordered or repeated. · time—Response time. If no MPLS echo reply is received when the echo reply timeout time expires, the device displays Request time out.
Ping statistics for MAC 0002-0002-0002	Statistics on data received and sent in the ping operation.
5 packets transmitted	Number of MPLS echo requests sent.
5 packets received	Number of MPLS echo replies received.
0.0% packets lost	Percentage of unacknowledged packets to the total packets sent.
Round-trip min/avg/max = 1/1/2 ms	Minimum, average, or maximum response time, in milliseconds.

Related commands

tracert evpn vpls srv6

ping evpn vpws srv6

Use ping evpn vpws srv6 to test the connectivity of an SRv6 PW in an EVPN VPWS over SRv6 network by pinging a remote PE from the local PE.

Syntax

Views

Any view

Predefined user roles

network-admin

Parameters

xconnect-group group-name: Specifies a cross-connect group by its name, a case-sensitive string of 1 to 31 characters. The string cannot contain a hyphen (-).

local-service-id: Specifies a local service ID in the range of 1 to 16777215.

remote-service-id: Specifies a remote service ID in the range of 1 to 16777215.

-c count: Specifies the number of MPLS echo requests to be sent. The value range for the count argument is 1 to 4294967295, and the default value is 5.

-h hop-limit: Specifies the maximum number of hops allowed for an MPLS echo request. The value range for the hop-limit argument is 1 to 255 and the default value is 255.

-m interval: Specifies the interval at which an MPLS echo request is sent. The value range for the interval argument is 1 to 10000 milliseconds and the default value is 2000 milliseconds.

-s packet-size: Specifies the length of MPLS echo requests, in bytes. The value range for the packet-size argument is 80 to 1200, and the default value is 100. The specified packet length does not include the IPv6 header and UDP header length.

-tc tc: Specifies the traffic class value in MPLS echo requests. The value range for the tc argument is 0 to 255 and the default value is 0.

Usage guidelines

In an EVPN VPWS over SRv6 network, a PE transmits data packets to a remote PE over an SRv6 PW. Use this command to test the connectivity of the SRv6 PW from the local PE to the remote PE when packet loss or traffic interruption occurs between the PEs.

Examples

# Ping a remote PE through an SRv6 PW with local service ID 2 and remote service ID 1 in cross-connect group xcga.

<Sysname> ping evpn vpws srv6 xconnect-group xcga 2 1

Ping a remote PE over SRv6 through a PW with local service ID 2 and remote service ID 1 in cross-connect group xcga: 100 data bytes.

Press CTRL+C to break.

100 bytes from 111::100: sequence=1 time=2 ms

100 bytes from 111::100: sequence=2 time=2 ms

100 bytes from 111::100: sequence=3 time=1 ms

100 bytes from 111::100: sequence=4 time=1 ms

100 bytes from 111::100: sequence=5 time=2 ms

--- Ping statistics for the PW with local ID 2 and remote ID 1 ---

5 packets transmitted,5 packets received,0.00% packets lost

Round-trip min/avg/max = 1/1/2 ms

Table 11 Command output

Field	Description
Ping a remote PE over SRv6 through a PW with local service ID 2 and remote service ID 1 in cross-connect group xcga: 100 data bytes	Ping a remote PE through an SRv6 PW with local service ID 2 and remote service ID 1 in cross-connect group xcga. Each MPLS echo request contains 100 bytes.
Press CTRL+C to break	Press escape key Ctrl+C to abort the ping operation.
100 bytes from 111::100: sequence=5 time=1 ms	Received MPLS echo replies from the device whose IPv6 address is 111::100. · bytes—Number of bytes in the MPLS echo reply. · sequence—Packet sequence, used to determine whether a segment is lost, disordered or repeated. · time—Response time. If no MPLS echo reply is received when the echo reply timeout time expires, the device displays Request time out.
Ping statistics for the PW with local ID 2 and remote ID 1	Statistics on data received and sent in the ping operation.
5 packets transmitted	Number of MPLS echo requests sent.
5 packets received	Number of MPLS echo replies received.
0.0% packets lost	Percentage of unacknowledged packets to the total packets sent.
Round-trip min/avg/max = 1/1/2 ms	Minimum, average, or maximum response time, in milliseconds.

Related commands

tracert evpn vpws srv6

reset l2vpn statistics srv6-pw

Use reset l2vpn statistics srv6-pw to clear SRv6 PW packet statistics.

Syntax

reset l2vpn statistics srv6-pw [ vsi vsi-name [ peer ipv6-address ] | xconnect-group group-name [ connection connection-name ] ]

Views

User view

Predefined user roles

network-admin

Parameters

vsi vsi-name: Specifies a VSI by its name, a case-sensitive string of 1 to 31 characters.

peer ipv6-address: Specifies a remote PE by its IPv6 address to clear outgoing packet statistics for the SRv6 PWs between the local PE and the specified remote PE. If you do not specify a remote PE, this command clears all SRv6 PW packet statistics for the specified VSI.

xconnect-group group-name: Specifies a cross-connect group by its name, a case-sensitive string of 1 to 31 characters.

connection connection-name: Specifies a cross-connect by its name, a case-sensitive string of 1 to 20 characters. If you do not specify a cross-connect, this command clears all SRv6 PW packet statistics for the specified cross-connect group.

Usage guidelines

This command clears packet statistics for both primary and backup SRv6 PWs.

If you do not specify any parameters, this command clears all SRv6 PW packet statistics.

Examples

# Clear all SRv6 PW packet statistics.

<Sysname> reset l2vpn statistics srv6-pw

Related commands

statistics enable

segment-routing ipv6

Use segment-routing ipv6 to specify a route recursion mode.

Use undo segment-routing ipv6 to restore the default.

Syntax

segment-routing ipv6 { best-effort | traffic-engineering | traffic-engineering best-effort }

undo segment-routing ipv6

Default

The device searches the IPv6 routing table based on the next hop of a matching EVPN route to forward traffic.

Views

Cross-connect group EVPN instance view

VSI EVPN instance view

Predefined user roles

network-admin

Parameters

best-effort: Specifies the SRv6-BE mode.

traffic-engineering: Specifies the SRv6-TE mode.

traffic-engineering best-effort: Specifies the SRv6-TE and SRv6-BE hybrid mode.

Usage guidelines

Use this command in an EVPN VPWS over SRv6 or EVPN VPLS over SRv6 network.

After the PE receives a customer packet destined for an End.DX2, End.DT2M, or End.DT2U SID, it forwards the packet according to the route recursion mode.

· SRv6-BE mode—This mode is also called SID-based forwarding mode. In this mode, the PE first encapsulates the End.DX2, End.DT2M, or End.DT2U SID into the packet. Then, the PE searches the IPv6 routing table based on the SID encapsulated in the packet to forward the packet.

· SRv6-TE mode—This mode is also called next hop-based forwarding mode. In this mode, when the PE forwards the packet, it first searches the tunnel policies for a matching SRv6 TE policy based on the next hop of a matching route. Then, the PE adds an SRH to the packet. The SRH includes the End.DX2, End.DT2M, or End.DT2U SID and the SID list of the SRv6 TE policy. Finally, the PE forwards the encapsulated packet through the SRv6 TE policy.

· SRv6-TE and SRv6-BE hybrid mode—In this mode, the PE preferentially uses the SRv6-TE mode to forward the packet. If no SRv6 TE policy is available for the packet, the PE forwards the packet in SRv6-BE mode.

Examples

# In VSI EVPN instance view, specify the SRv6-BE route recursion mode.

<Sysname> system-view

[Sysname] vsi aaa

[Sysname-vsi-aaa] evpn encapsulation srv6

[Sysname-vsi-aaa-mpls-srv6] segment-routing ipv6 best-effort

# In cross-connect group EVPN instance view, specify the SRv6-BE route recursion mode.

<Sysname> system-view

[Sysname] xconnect-group vpna

[Sysname-xcg-vpna] evpn encapsulation srv6

[Sysname-xcg-vpna-evpn-mpls] segment-routing ipv6 best-effort

segment-routing ipv6 apply-sid all-nexthop (BGP IPv4/BGP IPv6 address family view)

Use segment-routing ipv6 apply-sid all-nexthop to dynamically allocate an End.DX4 or End.DX6 SID to each next hop of BGP IPv6 routes in the public network.

Use undo segment-routing ipv6 apply-sid all-nexthop to restore the default.

Syntax

segment-routing ipv6 apply-sid all-nexthop

undo segment-routing ipv6 apply-sid all-nexthop

Default

A PE allocates the End.DT4, End.DT6, or End.DT46 SID of the public instance to BGP IPv4 or IPv6 routes in the public network.

Views

BGP IPv4 unicast address family view

BGP IPv6 unicast address family view

Predefined user roles

network-admin

Usage guidelines

Use this command to forward an SRv6 decapsulated public network packet to the next hop without looking up the routing table of the public network.

This command is applicable to the public network IPv4 over SRv6 and IPv6 over SRv6 scenarios. By default, a PE allocates the same SID to all BGP public network routes. When the PE removes the SRv6 encapsulation from a received packet, it looks up the routing table of the public network based on the SID for an optimal route. To forward the packet to the next hop without looking up the routing table, use this command.

This command dynamically allocates an End.DX4 or End.DX6 SID to each next hop for BGP IPv6 routes in the public network. When forwarding a packet, the PE searches for the output interface and next hop based on the End.DX4 or End.DX6 SID of the packet. Then, the PE directly forwards the packet out of the output interface to the next hop.

Before you use this command in BGP IPv6 unicast address family view, execute the segment-routing ipv6 locator command in the same view to apply a locator to the view. This ensures successful dynamic End.DX4 or End.DX6 SID allocation.

In the same view, the segment-routing ipv6 apply-sid all-nexthop command is mutually exclusive with the segment-routing ipv6 apply-sid specify-nexthop command. Do not use both commands in the same view.

The device might be unable to dynamically allocate SIDs to BGP public network routes based on the route next hops when dynamic SID resources are insufficient. If the device does not have manually configured End.DX4 or End.DX6 SIDs, it allocates the End DT4 SID, End DT6 SID, or End.DT46 SID of the public instance to the routes.

The segment-routing ipv6 apply-sid all-nexthop command does not assign End.DX4 or End.DX6 SIDs to direct routes.

Examples

# In BGP IPv6 unicast address family view, enable the system to automatically allocate an End.DX6 SID to each next hop of BGP public network routes.

<Sysname> system-view

[Sysname] bgp 100

[Sysname-bgp-default] address-family ipv6 unicast

[Sysname-bgp-default-ipv6] segment-routing ipv6 locator aaa

[Sysname-bgp-default-ipv6] segment-routing ipv6 apply-sid all-nexthop

Related commands

segment-routing ipv6 apply-sid specify-nexthop

segment-routing ipv6 locator

segment-routing ipv6 apply-sid all-nexthop (BGP-VPN IPv4/IPv6 address family view)

Use segment-routing ipv6 apply-sid all-nexthop to configure next hop-based dynamic End.DX4 or End.DX6 SID allocation for private network routes.

Use undo segment-routing ipv6 apply-sid all-nexthop to restore the default.

Syntax

segment-routing ipv6 apply-sid all-nexthop [ evpn ]

undo segment-routing ipv6 apply-sid all-nexthop [ evpn ]

Default

VPN instance-based SID allocation is used for private network routes.

Views

BGP-VPN IPv4 unicast address family view

BGP-VPN IPv6 unicast address family view

Predefined user roles

network-admin

Parameters

evpn: Allocates SIDs to private network routes based on the route next hops when the routes are converted to EVPN routes. If you do not specify this keyword, the command allocates SIDs to private network routes based on the route next hops when the routes are converted to BGP VPNv4 or VPNv6 routes.

Usage guidelines

Use this command to forward an SRv6 decapsulated VPN packet to the next hop without looking up the routing table of the VPN instance.

This command is applicable to MPLS L3VPN over SRv6 and EVPN L3VPN over SRv6 networks. If you assign an End.DT4 SID, End.DT6 SID, or End.DT46 SID to a BGP VPN instance, all BGP private network routes of the instance are allocated that SID. When a PE removes the SRv6 encapsulation from a received packet, it looks up the routing table of the VPN instance based on the SID for an optimal route. Then, the PE forwards the packet to a CE. To forward the packet to the next hop without looking up the routing table of the VPN instance, use this command.

This command dynamically allocates End.DX4 or End.DX6 SIDs to all next hops of the BGP private network routes in a VPN instance based on the next hop addresses. When forwarding a packet, the PE searches for the output interface and next hop based on the End.DX4 or End.DX6 SID of the packet. Then, the PE directly forwards the packet out of the output interface to the next hop.

Before you use this command in BGP-VPN IPv4 or IPv6 unicast address family view, execute the segment-routing ipv6 locator command in the same view to apply a locator to the view. This ensures successful dynamic End.DX4 or End.DX6 SID allocation.

The device might be unable to dynamically allocate SIDs to private network routes in a VPN instance based on the route next hops when dynamic SID resources are insufficient. If the device cannot dynamically allocate SIDs, it allocates the End.DT4 SID, End.DT6 SID, or End.DT46 SID of the VPN instance to private network routes.

The segment-routing ipv6 apply-sid all-nexthop command does not allocate End.DX4 or End.DX6 SIDs to direct routes.

Examples

# In BGP-VPN IPv4 unicast address family view, configure next hop-based End.DX4 or End.DX6 SID allocation for private network routes.

<Sysname> system-view

[Sysname] bgp 100

[Sysname-bgp-default] ip vpn-instance vpn1

[Sysname-bgp-default-vpn1] address-family ipv4

[Sysname-bgp-default-ipv4-vpn1] segment-routing ipv6 apply-sid all-nexthop

segment-routing ipv6 apply-sid specify-nexthop (BGP IPv4/BGP IPv6 address family view)

Use segment-routing ipv6 apply-sid specify-nexthop to configure next hop-specific dynamic End.DX4 or End.DX6 SID allocation for BGP public network IPv4 or IPv6 routes, and create and enter BGP SRv6 next hop view. If the view already exists, the command directly places you in the view.

Use undo segment-routing ipv6 apply-sid specify-nexthop to restore the default.

Syntax

segment-routing ipv6 apply-sid specify-nexthop

undo segment-routing ipv6 apply-sid specify-nexthop

Default

A PE allocates the End.DT4 SID, End.DT6 SID, or End.DT46 SID of the public instance to BGP public network IPv4 or IPv6 routes.

Views

BGP IPv4 unicast address family view

BGP IPv6 unicast address family view

Predefined user roles

network-admin

Usage guidelines

This command is applicable to the public network IPv4 over SRv6 and IPv6 over SRv6 scenarios.

By default, a PE allocates the same SID to all BGP public network routes. When a PE removes the SRv6 encapsulation from a received packet, it looks up the routing table of the public network based on the SID for an optimal route. To forward the packet to the next hop without looking up the routing table, use this command and the nexthop interface command.

This command and the nexthop interface command dynamically allocate an End.DX4 or End.DX6 SID to the specified next hop. When forwarding a packet, the PE searches for the output interface and next hop based on the End.DX4 or End.DX6 SID of the packet. Then, the PE directly forwards the packet out of the output interface to the next hop.

Before you use the segment-routing ipv6 apply-sid specify-nexthop command in BGP IPv6 unicast address family view, execute the segment-routing ipv6 locator command in the same view to apply a locator to the view. This ensures successful dynamic End.DX4 or End.DX6 SID allocation.

In the same view, the segment-routing ipv6 apply-sid specify-nexthop command is mutually exclusive with the segment-routing ipv6 apply-sid all-nexthop command. Do not use both commands in the same view.

The device might be unable to dynamically allocate SIDs to BGP public network routes based on the route next hops when dynamic SID resources are insufficient. If the device does not have manually configured End.DX4 or End.DX6 SIDs, it allocates the End.DT4 SID, End.DT6 SID, or End.DT46 SID of the public instance to the routes.

The segment-routing ipv6 apply-sid specify-nexthop command does not assign End.DX4 or End.DX6 SIDs to direct routes.

Examples

# In BGP IPv6 unicast address family view, configure next hop-specific dynamic End.DX6 SID allocation for BGP public network IPv6 routes, and create and enter BGP SRv6 next hop view.

<Sysname> system-view

[Sysname] bgp 100

[Sysname-bgp-default] address-family ipv6 unicast

[Sysname-bgp-default-ipv6] segment-routing ipv6 locator aaa

[Sysname-bgp-default-ipv6] segment-routing ipv6 apply-sid specify-nexthop

[Sysname-bgp-default-sid-np-ipv6]

Related commands

nexthop interface

segment-routing ipv6 apply-sid all-nexthop

segment-routing ipv6 locator

segment-routing ipv6 apply-sid specify-nexthop (BGP-VPN IPv4/IPv6 address family view)

Use segment-routing ipv6 apply-sid specify-nexthop to configure next hop-specific dynamic End.DX4 or End.DX6 SID allocation for BGP private network IPv4 or IPv6 routes, and create and enter BGP-VPN IPv4 SR or SRv6 next hop view. If the view already exists, the command directly places you in the view.

Use undo segment-routing ipv6 apply-sid specify-nexthop to restore the default.

Syntax

segment-routing ipv6 apply-sid specify-nexthop [ evpn ]

undo segment-routing ipv6 apply-sid specify-nexthop [ evpn ]

Default

A PE allocates the End.DT4, End.DT6, or End.DT46 SID of a VPN instance to the BGP private network IPv4 or IPv6 routes of that VPN instance.

Views

BGP-VPN IPv4 unicast address family view

BGP-VPN IPv6 unicast address family view

Predefined user roles

network-admin

Parameters

evpn: Enables next hop-specific dynamic End.DX4 or End.DX6 SID allocation for private network routes when the routes are converted to BGP EVPN routes in an EVPN L3VPN over SRv6 network. If you do not specify this keyword, this command enables nexthop-specific dynamic End.DX4 or End.DX6 SID allocation for private network routes when the routes are converted to BGP VPNv4 or VPNv6 routes.

Usage guidelines

This command is applicable to the MPLS L3VPN over SRv6 and EVPN L3VPN over SRv6 scenarios.

By default, a PE allocates the same SID to all BGP routes of a VPN instance. When the PE removes the SRv6 encapsulation from a received packet, it looks up the routing table of the VPN instance based on the SID for an optimal route. Then, the PE forwards the packet to a CE. To forward the packet to the next hop without looking up the routing table, use this command and the nexthop interface command.

Before you use the segment-routing ipv6 apply-sid specify-nexthop command in BGP-VPN IPv4 or IPv6 unicast address family view, execute the segment-routing ipv6 locator command in the same view to apply a locator to the view. This ensures successful dynamic End.DX4 or End.DX6 SID allocation.

The device might be unable to dynamically allocate SIDs to BGP private network routes in a VPN instance based on the route next hops when dynamic SID resources are insufficient. If the device does not have manually configured End.DX4 or End.DX6 SIDs, it allocates the End.DT4 SID, End.DT6 SID, or End.DT46 SID of the VPN instance to the routes.

Examples

# In BGP-VPN IPv4 unicast address family view, configure next hop-specific dynamic End.DX4 SID allocation for BGP private network IPv4 routes, and create and enter BGP-VPN IPv4 SR next hop view.

<Sysname> system-view

[Sysname] bgp 100

[Sysname-bgp-default] ip vpn-instance vpn1

[Sysname-bgp-default-vpn1] address-family ipv4 unicast

[Sysname-bgp-default-ipv4-vpn1] segment-routing ipv6 locator aaa

[Sysname-bgp-default-ipv4-vpn1] segment-routing ipv6 apply-sid specify-nexthop

[Sysname-bgp-default-sid-np-ipv4]

Related commands

nexthop interface

segment-routing ipv6 apply-sid all-nexthop

segment-routing ipv6 locator

segment-routing ipv6 best-effort

Use segment-routing ipv6 best-effort to recurse routes to SRv6-BE tunnels.

Use undo segment-routing ipv6 best-effort to restore the default.

Syntax

In BGP-VPN IPv4 unicast address family view or BGP-VPN IPv6 unicast address family view:

segment-routing ipv6 best-effort [ evpn ]

undo segment-routing ipv6 best-effort [ evpn ]

In BGP VPNv4 address family view or BGP VPNv6 address family view:

segment-routing ipv6 best-effort

undo segment-routing ipv6 best-effort

In BGP EVPN address family view:

segment-routing ipv6 best-effort evpn

undo segment-routing ipv6 best-effort evpn

In BGP IPv4 unicast address family view or BGP IPv6 unicast address family view:

segment-routing ipv6 best-effort

undo segment-routing ipv6 best-effort

Default

A PE searches the IPv6 routing table based on the next hop of a matching route to forward traffic.

Views

BGP-VPN IPv4 unicast address family view

BGP-VPN IPv6 unicast address family view

BGP IPv4 unicast address family view

BGP IPv6 unicast address family view

BGP VPNv4 address family view

BGP VPNv6 address family view

BGP EVPN address family view

Predefined user roles

network-admin

Parameters

evpn: Recurses EVPN routes to SRv6-BE tunnels. If you do not specify this keyword, the device recurses BGP VPNv4 or VPNv6 routes to SRv6-BE tunnels.

Usage guidelines

This command is applicable to the IP L3VPN over SRv6, EVPN L3VPN over SRv6, and public network IP over SRv6 scenarios. This command enables a PE to forward packets by looking up the IPv6 routing table based on the SRv6 SIDs in the packets.

Use this command in different address family views according to your network scenario.

· In the IPv4 or IPv6 L3VPN over SRv6 and IPv4 or IPv6 EVPN L3VPN over SRv6 scenarios, use this command in BGP-VPN IPv4 unicast address family view or BGP-VPN IPv6 unicast address family view.

· In the public network IPv4 or IPv6 over SRv6 scenario, use this command in BGP IPv4 unicast address family view or BGP IPv6 unicast address family view.

· In the inter-AS option B VPN scenario, use this command in BGP VPNv4 address family view, BGP VPNv6 address family view, or BGP EVPN address family view.

This command is mutually exclusive with the segment-routing ipv6 traffic-engineering command.

Examples

# In BGP-VPN IPv4 unicast address family view, recurse private network routes to SRv6-BE tunnels.

<Sysname> system-view

[Sysname] bgp 100

[Sysname-bgp-default] ip vpn-instance vpn1

[Sysname-bgp-default-vpn1] address-family ipv4

[Sysname-bgp-default-ipv4-vpn1] segment-routing ipv6 best-effort

# In BGP-VPN IPv6 unicast address family view, recurse private network routes to SRv6-BE tunnels.

<Sysname> system-view

[Sysname] bgp 100

[Sysname-bgp-default] ip vpn-instance vpn1

[Sysname-bgp-default-vpn1] address-family ipv6

[Sysname-bgp-default-ipv6-vpn1] segment-routing ipv6 best-effort

Related commands

segment-routing ipv6 traffic-engineering

segment-routing ipv6 locator

Use segment-routing ipv6 locator to add the SID attribute to private network routes when the routes are converted to BGP VPNv4, VPNv6, IPv4 unicast, IPv6 unicast, or EVPN routes.

Use undo segment-routing ipv6 locator to restore the default.

Syntax

In BGP-VPN IPv4 unicast address family view or BGP-VPN IPv6 unicast address family view:

segment-routing ipv6 locator locator-name [ evpn ] [ auto-sid-disable ]

undo segment-routing ipv6 locator [ evpn ]

In BGP VPNv4 address family view or BGP VPNv6 address family view:

segment-routing ipv6 locator locator-name [ auto-sid-disable ]

undo segment-routing ipv6 locator

In BGP EVPN address family view:

segment-routing ipv6 locator locator-name evpn [ auto-sid-disable ]

undo segment-routing ipv6 locator evpn

In BGP IPv4 unicast address family view or BGP IPv6 unicast address family view:

segment-routing ipv6 locator locator-name

undo segment-routing ipv6 locator

Default

The SID attribute is not add to private network routes when the routes are converted to BGP VPNv4, VPNv6, IPv4 unicast, IPv6 unicast, or EVPN routes.

Views

BGP-VPN IPv4 unicast address family view

BGP-VPN IPv6 unicast address family view

BGP VPNv4 address family view

BGP VPNv6 address family view

BGP EVPN address family view

BGP IPv4 unicast address family view

BGP IPv6 unicast address family view

Predefined user roles

network-admin

Parameters

locator-name: Specifies a locator by its name, a case-sensitive string of 1 to 31 characters. The specified locator must exist.

evpn: Adds the SID attribute to private network routes when the routes are converted to EVPN routes. If you do not specify this keyword, the command adds the SID attribute to private network routes when the routes are converted to BGP VPNv4 or VPNv6 routes.

auto-sid-disable: Disables automatic SRv6 SID allocation. If you do not specify this keyword, the device allows dynamically allocated SRv6 SIDs. If static SRv6 SIDs are configured when automatic SRv6 SID allocation is enabled, the static SRv6 SIDs take precedence. If no static SRv6 SIDs are configured when automatic SRv6 SID allocation is enabled, the system dynamically allocates SRv6 SIDs.

Usage guidelines

In an SRv6 VPN network, the private network routes of a VPN instance advertised by a PE through BGP update messages must have an SRv6 SID. This SRv6 SID is used to identify packets that belong to the VPN instance. Use this command to specify the SRv6 SID to be added in the private network routes when the routes are converted to BGP VPNv4, VPNv6, IPv4 unicast, IPv6 unicast, or EVPN routes.

If you execute this command multiple times for the same address family, the most recent configuration takes effect.

Examples

# In BGP-VPN IPv4 unicast address family view, add the SID attribute to private network routes when the routes are converted to BGP VPNv4 routes.

<Sysname> system-view

[Sysname] bgp 100

[Sysname-bgp-default] ip vpn-instance vpn1

[Sysname-bgp-default-vpn1] address-family ipv4

[Sysname-bgp-default-ipv4-vpn1] segment-routing ipv6 locator abc

# In BGP-VPN IPv6 unicast address family view, add the SID attribute to private network routes when the routes are converted to BGP VPNv6 routes.

<Sysname> system-view

[Sysname] bgp 100

[Sysname-bgp-default] ip vpn-instance vpn1

[Sysname-bgp-default-vpn1] address-family ipv6

[Sysname-bgp-default-ipv6-vpn1] segment-routing ipv6 locator abc

# In BGP-VPN IPv6 unicast address family view, add the SID attribute to private network routes when the routes are converted to BGP EVPN routes.

<Sysname> system-view

[Sysname] bgp 100

[Sysname-bgp-default] ip vpn-instance vpn1

[Sysname-bgp-default-vpn1] address-family ipv6

[Sysname-bgp-default-ipv6-vpn1] segment-routing ipv6 locator abc evpn

Related commands

locator

opcode

segment-routing ipv6 locator (cross-connect view and VSI EVPN instance view)

Use segment-routing ipv6 locator to apply an SRv6 locator to a cross-connect or a VSI.

Use undo segment-routing ipv6 locator to remove the specified SRv6 locator from a cross-connect or a VSI.

Syntax

In cross-connect view:

segment-routing ipv6 locator locator-name [ dx2l-locator dx2l-locator-name ] [ auto-sid-disable ]

undo segment-routing ipv6 locator

In VSI EVPN instance view:

segment-routing ipv6 locator locator-name [ dt2u-locator dt2u-locator-name ] [ dt2ul-locator dt2ul-locator-name ] [ dx2-locator dx2-locator-name ] [ dx2l-locator dx2l-locator-name ] [ auto-sid-disable ]

undo segment-routing ipv6 locator

Default

No SRv6 locators are applied to a cross-connect or a VSI.

Views

Cross-connect view

VSI EVPN instance view

Predefined user roles

network-admin

Parameters

locator-name: Specifies a locator by its name, a case-sensitive string of 1 to 31 characters.

dx2l-locator dx2l-locator-name: Specifies the locator used to apply for End.DX2L SIDs. The dx2l-locator-name argument represents the locate name, a case-sensitive string of 1 to 31 characters.

dt2u-locator dt2u-locator-name: Specifies the locator used to apply for End.DT2U SIDs. The dt2u-locator-name argument represents the locate name, a case-sensitive string of 1 to 31 characters.

dt2ul-locator dt2ul-locator-name: Specifies the locator used to apply for End.DT2UL SIDs. The dt2ul-locator-name argument represents the locate name, a case-sensitive string of 1 to 31 characters.

dx2-locator dx2-locator-name: Specifies the locator used to apply for End.DX2 SIDs. The dx2-locator-name argument represents the locate name, a case-sensitive string of 1 to 31 characters.

auto-sid-disable: Disables automatic SID allocation. If no opcode is configured for the locator specified in this command when automatic SID allocation is disabled, SID application fails. If you do not specify this keyword, automatic SID allocation is enabled and static SRv6 SIDs and dynamic SRv6 SIDs can coexist. The static SRv6 SIDs take precedence over the dynamically allocated SRv6 SIDs.

Usage guidelines

Use this command to enable a cross-connect or VSI to apply for SRv6 SIDs from the specified locator.

In cross-connect view:

· If you specify the dx2l-locator dx2l-locator-name option, the locator-name argument applies for End.DX2 SIDs and the dx2l-locator-name argument applies for End.DX2L SIDs.

· If you do not specify the dx2l-locator dx2l-locator-name option, the locator-name argument applies for both End.DX2 SIDs and End.DX2L SIDs.

In VSI EVPN instance view:

· If you do not specify the dt2u-locator dt2u-locator-name, dt2ul-locator dt2ul-locator-name, dx2-locator dx2-locator-name, or dx2l-locator dx2l-locator-name option, the locator-name argument applies for End.DT2M, End.DT2U, End.DT2UL, End.DX2, and End.DX2L SIDs.

· If you specify the dt2u-locator dt2u-locator-name, dt2ul-locator dt2ul-locator-name, dx2-locator dx2-locator-name, or dx2l-locator dx2l-locator-name option, the option applies for End.DT2U, End.DT2UL, End.DX2, or End.DX2L SIDs and the locator-name argument applies for other SRv6 SIDs.

Examples

# Configure VSI aaa to use locator test1 to apply for End.DT2M, End.DT2UL, End.DX2, and End.DX2L SIDs and use locator test2 to apply for End.DT2U SIDs.

<Sysname> system-view

[Sysname] vsi aaa

[Sysname-vsi-aaa] evpn encapsulation srv6

[Sysname-vsi-aaa-evpn-srv6] segment-routing ipv6 locator test1 dt2u-locator test2

# Configure cross-connect aaa in cross-connect group bbb to use locator test3 to apply for End.DX2 and End.DX2L SIDs and disable automatic SID allocation.

<Sysname> system-view

[Sysname] xconnect-group bbb

[Sysname-xcg-bbb] evpn encapsulation srv6

[Sysname-xcg-bbb-evpn-srv6] quit

[Sysname-xcg-bbb] connection aaa

[Sysname-xcg-bbb-connection-aaa] segment-routing ipv6 locator test3 auto-sid-disable

segment-routing ipv6 traffic-engineering

Use segment-routing ipv6 traffic-engineering to recurse routes to SRv6 TE policy tunnels.

Use undo segment-routing ipv6 traffic-engineering to restore the default.

Syntax

In BGP-VPN IPv4 unicast address family view or BGP-VPN IPv6 unicast address family view:

segment-routing ipv6 traffic-engineering [ best-effort | best-effort-backup ] [ evpn ]

undo segment-routing ipv6 traffic-engineering [ best-effort | best-effort-backup ] [ evpn ]

In BGP VPNv4 address family view or BGP VPNv6 address family view:

segment-routing ipv6 traffic-engineering [ best-effort ]

undo segment-routing ipv6 traffic-engineering [ best-effort ]

In BGP EVPN address family view:

segment-routing ipv6 traffic-engineering [ best-effort ] evpn

undo segment-routing ipv6 traffic-engineering [ best-effort ] evpn

In BGP IPv4 unicast address family view or BGP IPv6 unicast address family view:

segment-routing ipv6 traffic-engineering [ best-effort | best-effort-backup ]

undo segment-routing ipv6 traffic-engineering [ best-effort | best-effort-backup ]

Default

A PE searches the IPv6 routing table based on the next hop of a matching route to forward traffic.

Views

BGP-VPN IPv4 unicast address family view

BGP-VPN IPv6 unicast address family view

BGP IPv4 unicast address family view

BGP IPv6 unicast address family view

BGP VPNv4 address family view

BGP VPNv6 address family view

BGP EVPN address family view

Predefined user roles

network-admin

Parameters

best-effort: Forwards L3VPN traffic through SRv6-BE-based route recursion when route recursion based on the matching SRv6 TE policy tunnel fails. If you do not specify this keyword, the PE looks up the routing table based on the destination IP address to forward L3VPN traffic when the matching SRv6 TE policy tunnel fails.

best-effort-backup: Implements FRR by using the SRv6-TE path (primary path) and SRv6-BE path (backup path). If the SRv6-TE path fails or does not exist, traffic is immediately switched to the SRv6-BE path to ensure service continuity. If multiple SRv6-BE paths exist between the source and destination nodes, the SRv6-BE path with the lowest next hop address is selected as the backup path.

evpn: Recurses EVPN routes to SRv6 TE policy tunnels. If you do not specify this keyword, the device recurses the private network routes based on BGP VPNv4 or VPNv6 routes to SRv6 TE policy tunnels.

Usage guidelines

This command enables a PE to recurse a route to an SRv6 TE policy tunnel and use the tunnel to forward L3VPN traffic.

To improve high availability for L3VPN packet forwarding, specify the best-effort or best-effort-backup keyword. The PE forwards an L3VPN packet as follows:

1. The PE forwards the packet through the matching SRv6 TE policy tunnel.

2. If the matching SRv6 TE policy tunnel fails, the PE forwards the packet in SRv6-BE mode.

¡ If the best-effort keyword is specified, the device performs IPv6 routing table lookup based on the encapsulated SRv6 SID, and forwards the packet in SRv6-BE mode.

¡ If the best-effort-backup keyword is specified, the device immediately switches the packet to the SRv6-BE backup path.

3. If the packet forwarding still fails in SRv6-BE mode, the PE forwards the packet by looking up the routing table based on the destination IP address of the packet.

4. If the packet forwarding still fails, the PE drops the packet.

Use this command in different address family views according to your network scenario.

· In the IPv4 or IPv6 L3VPN over SRv6 and IPv4 or IPv6 EVPN L3VPN over SRv6 scenarios, use this command in BGP-VPN IPv4 unicast address family view or BGP-VPN IPv6 unicast address family view.

· In the public network IPv4 or IPv6 over SRv6 scenario, use this command in BGP IPv4 unicast address family view or BGP IPv6 unicast address family view.

· In the inter-AS option B VPN scenario, use this command in BGP VPNv4 address family view, BGP VPNv6 address family view, or BGP EVPN address family view.

If the best-effort or best-effort-backup keyword is not specified, the device forwards a packet by looking up the routing table based on the destination IP address of the packet upon failure of the SRv6-TE policy tunnel.

This command is mutually exclusive with the segment-routing ipv6 best-effort command.

Examples

# In BGP IPv6 unicast address family view, recurse routes to SRv6 TE policy tunnels.

<Sysname> system-view

[Sysname] bgp 100

[Sysname-bgp-default] address-family ipv6

[Sysname-bgp-default-ipv6] segment-routing ipv6 traffic-engineering

Related commands

segment-routing ipv6 best-effort

srv6-mpls-interworking enable

Use srv6-mpls-interworking enable to enable SRv6 and MPLS interworking.

Use undo srv6-mpls-interworking enable to disable SRv6 and MPLS interworking.

Syntax

srv6-mpls-interworking enable

undo srv6-mpls-interworking enable

Default

SRv6 and MPLS interworking is disabled.

Views

BGP VPNv4 address family view

BGP VPNv6 address family view

BGP EVPN address family view

Predefined user roles

network-admin

Usage guidelines

For intercommunication between an MPLS network in one AS and an SRv6 network in another AS, enable SRv6 and MPLS interworking on the ASBR in the SRv6 network. This feature enables End.T SID allocation and establishes mappings between End.T SIDs and MPLS labels.

With this feature, the ASBR in the SRv6 network allocates End.T SIDs based on FECs and advertises the SIDs to other SRv6 nodes through an IGP. An FEC is a destination IPv4 address/mask or destination IPv6 address/prefix length. The function of an End.T SID is removing the outer IPv6 header and looking up the IPv6 FIB table based on the End.T SID to forward packets.

For SRv6-to MPLS packets, the ingress node in the SRv6 network encapsulates an End.T SID to the packets when forwarding the packets to the ASBR in the SRv6 network. When the ASBR in the SRv6 network receives the packets, it looks up the IPv6 FIB table based on the End.T SID for a matching route. Then, the ASBR recurses the route to an LSP to forward the packets to the MPLS network.

For MPLS-to-SRv6 packets, the ASBR in the SRv6 network looks up the label forwarding table to forward the packets. The out label is an End.DT4, End.DT6, End.DT46, End.DX4, or End.DX6 SID in the SRv6 network. After the ASBR in the SRv6 network encapsulates the End.DT4, End.DT6, End.DT46, End.DX4, or End.DX6 SID to the packets, it forwards the packets in SRv6-BE or SRv6-TE mode.

Examples

# Enable SRv6 and MPLS interworking.

<Sysname> system-view

[Sysname] bgp 100

[Sysname-bgp-default] address-family vpnv4

[Sysname-bgp-default-vpnv4] srv6-mpls-interworking enable

statistics enable

Use statistics enable to enable SRv6 PW packet statistics.

Use undo statistics enable to disable SRv6 PW packet statistics.

Syntax

statistics enable

undo statistics enable

Default

The SRv6 PW packet statistics feature is disabled.

Views

Cross-connect EVPN PW view

VSI EVPN instance view

Predefined user roles

network-admin

Usage guidelines

EVPN VPWS over SRv6 network:

Use this command to enable SRv6 PW packet statistics in cross-connect EVPN PW view. To display SRv6 PW packet statistics, use the display l2vpn peer srv6 verbose command. To clear SRv6 PW packet statistics, use the reset l2vpn statistics srv6-pw command.

The statistics enable command is not supported by PWs in a cross-connect group EVPN instance that uses MPLS encapsulation.

EVPN VPLS over SRv6 network:

Use the statistics enable command to enable packet statistics for all SRv6 PWs in a VSI EVPN instance. To display inbound packet statistics for all SRv6 PWs, use the display l2vpn statistics srv6-pw inbound command. To display outbound packet statistics for each SRv6 PW, use the display l2vpn peer srv6 verbose command. To clear SRv6 PW packet statistics, use the reset l2vpn statistics srv6-pw command.

The statistics enable command is supported only by VSI EVPN instances that use SRv6 encapsulation.

Examples

# In an EVPN VPWS over SRv6 network, enable packet statistics for an SRv6 PW.

<Sysname> system-view

[Sysname] xconnect-group vpws

[Sysname-xcg-vpws] connection aa

[Sysname-xcg-vpws-aa] evpn local-service-id 2 remote-service-id 4

[Sysname-xcg-vpws-aa-2-4] statistics enable

# In an EVPN VPLS over SRv6 network, enable packet statistics for all SRv6 PWs in an EVPN instance.

<Sysname> system-view

[Sysname] vsi vpna

[Sysname-vsi-vpna] evpn encapsulation srv6

[Sysname-vsi-vpna-evpn-srv6] stastics enable

Related commands

display l2vpn peer srv6 verbose

display l2vpn statistics srv6-pw inbound

reset l2vpn statistics srv6-pw

tracert evpn vpls srv6

Use tracert evpn vpls srv6 to trace the path of an SRv6 PW from the local PE to the remote PE in an EVPN VPLS over SRv6 network.

Syntax

tracert evpn vpls srv6 vsi vsi-name mac mac-address [ -a source-ipv6 | -h hop-limit | -r reply-mode | -t time-out | -tc tc ] *

Views

Any view

Predefined user roles

network-admin

Parameters

vsi vsi-name: Specifies a VSI by its name, a case-sensitive string of 1 to 31 characters.

mac mac-address: Specifies a host attached to a remote PE by its MAC address in H-H-H format. Do not specify a broadcast MAC address, multicast MAC address, or all-zeros MAC address.

-h hop-limit: Specifies the maximum number of hops allowed for an MPLS echo request. The value range for the hop-limit argument is 1 to 255, and the default value is 255.

-tc tc: Specifies the traffic class value in MPLS echo replies. The value range for the tc argument is 0 to 255 and the default value is 0.

Usage guidelines

In an EVPN VPLS over SRv6 network, a PE transmits data packets to a remote PE over an SRv6 PW. Use this command to trace the path of the SRv6 PW from the local PE to the remote PE when packet loss or traffic interruption occurs between the PEs. This command helps you locate the failed nodes on the path.

Examples

# Trace route to a remote PE through an SRv6 PW in VSI vpna by reaching remote-MAC 0002-0002-0002.

<Sysname> tracert evpn vpls srv6 vsi vpna mac 2-2-2

Trace route to a remote PE in VSI vpna over SRv6 by reaching remote-MAC 0002-0002-0002.

Press CTRL+C to break.

Hop Wait time Type Replier

0 0 ms Ingress

1 4 ms Transit 1111::2

2 5 ms Transit 2222::2

3 6 ms Transit 3333::2

4 6 ms Egress 4444::2

Table 12 Command output

Field	Description
Trace route to a remote PE in VSI vpna over SRv6 by reaching remote-MAC 0002-0002-0002	Trace route to a remote PE through an SRv6 PW in VSI vpna by reaching remote-MAC 0002-0002-0002.
Press CTRL+C to break	Press escape key Ctrl+C to abort the tracert operation.
Hop	Hop number.
Wait time	Interval between the time when an echo request was sent and the time when the reply of the echo request was received. The unit is millisecond.
Type	Node type: · Ingress. · Transit. · Egress.
Replier	IPv6 address of the node.
Request time out	This field is available if the local PE does not receive any MPLS echo reply to an MPLS echo request when the echo reply timeout time expires.

Related commands

ping evpn vpls srv6

tracert evpn vpws srv6

Use tracert evpn vpws srv6 to trace the path of an SRv6 PW from the local PE to the remote PE in an EVPN VPWS over SRv6 network.

Syntax

tracert evpn vpws srv6 xconnect-group group-name local-service-id remote-service-id [ -a source-ip | -h hop-limit | -r reply-mode | -t time-out | -tc tc ] *

Views

Any view

Predefined user roles

network-admin

Parameters

xconnect-group group-name: Specifies a cross-connect group by its name, a case-sensitive string of 1 to 31 characters. The string cannot contain a hyphen (-).

local-service-id: Specifies a local service ID in the range of 1 to 16777215.

remote-service-id: Specifies a remote service ID in the range of 1 to 16777215.

-a source-ip: Specifies the source IPv6 address of MPLS echo requests. If you do not specify a source IPv6 address, the IPv6 address of the traffic output interface is used as the source IPv6 address of MPLS echo requests.

-h hop-limit: Specifies the maximum number of hops allowed for an MPLS echo request. The value range for the hop-limit argument is 1 to 255, and the default value is 255.

-r reply-mode: Specifies the reply mode used by the receiver (the remote PE) to reply to an MPLS echo request. The value for the reply-mode argument can be 2 or 4, and the default value is 2. If the mode is 2, the receiver searches the IP forwarding table for the destination IP address to forward MPLS echo replies. If the mode is 4, the receiver searches the IPv6 routing table for the source IPv6 address of the echo requests, encapsulates an SRH to the replies, and forwards them.

-tc tc: Specifies the traffic class value in MPLS echo replies. The value range for the tc argument is 0 to 255 and the default value is 0.

Usage guidelines

In an EVPN VPWS over SRv6 network, a PE transmits data packets to a remote PE over an SRv6 PW. Use this command to trace the path of the SRv6 PW from the local PE to the remote PE when packet loss or traffic interruption occurs between the PEs. This command helps you locate the failed nodes on the path.

Examples

# Trace the route that an SRv6 PW traverses from the local PE to the remote PE in an EVPN VPWS over SRv6 network. The SRv6 PW belongs to cross-connect group xcga, its local service ID is 2, and its remote service ID is 1.

<Sysname> tracert evpn vpws srv6 xconnect-group xcga 1 2

Trace route to a remote PE over SRv6 through a PW with local service ID 2 and remote service ID 1 in cross-connect group xcga.

Press CTRL+C to break.

Hop Wait time Type Replier

0 0 ms Ingress

1 4 ms Transit 1111::2

2 5 ms Transit 2222::2

3 6 ms Transit 3333::2

4 6 ms Egress 3333::2

Table 13 Command output

Field	Description
Trace route to a remote PE over SRv6 through a PW with local service ID 2 and remote service ID 1 in cross-connect group xcga	Trace route to a remote PE through an SRv6 PW with local service ID 2 and remote service ID 1 in cross-connect group xcga.
Hop	Hop number.
Wait time	Interval between the time when an echo request was sent and the time when the reply of the echo request was received. The unit is millisecond.
Press CTRL+C to break	Press escape key Ctrl+C to abort the tracert operation.
Type	Node type: · Ingress. · Transit. · Egress.
Replier	IPv6 address of the node.
Request time out	This field is available if the local PE does not receive any MPLS echo reply to an MPLS echo request when the echo reply timeout time expires.

Related commands

ping evpn vpws srv6

unicast-forwarding dx2-based

Use unicast-forwarding dx2-based to configure unicast traffic forwarding based on End.DX2 and End.DX2L SIDs in an EVPN VPLS over SRv6 network.

Use undo unicast-forwarding dx2-based to restore the default.

Syntax

unicast-forwarding dx2-based

undo unicast-forwarding dx2-based

Default

Unicast traffic is forwarded based on End.DT2U and End.DT2UL SIDs in an EVPN VPLS over SRv6 network.

Views

VSI EVPN instance view

Predefined user roles

network-admin

Usage guidelines

By default, when a PE receives a packet that includes an End.DT2U or End.DT2UL SID, it looks up the MAC address table of the SID's VSI to forward the packet.

To improve forwarding efficiency, use this command. This command enables the PE to allocate an End.DX2 or End.DX2L SID to each AC associated with a VSI and advertise the SIDs to remote PEs through MAC/IP advertisement routes. When the PE receives an SRv6 packet that includes a locally allocated End.DX2 or End.DX2L SID, it does not look up the MAC address table. The PE directly forwards the packet to the AC that is associated with the SID after removing the SRv6 encapsulation.

Examples

# Configure EVPN VPLS over SRv6 to forward unicast traffic based on End.DX2 and End.DX2L SIDs.

<Sysname> system-view

[Sysname] vsi aaa

[Sysname-vsi-aaa] evpn encapsulation srv6

[Sysname-vsi-aaa-evpn-srv6] unicast-forwarding dx2-based

Related commands

segment-routing ipv6 locator (cross-connect view and VSI EVPN instance view)

23-Segment Routing Command References

SRv6 VPN commands

evpn encapsulation srv6

peer advertise encap-type srv6

reset l2vpn statistics srv6-pw

segment-routing ipv6 apply-sid all-nexthop (BGP-VPN IPv4/IPv6 address family view)

Cloud & AI

InterConnect

Intelligent Terminal Products

Product Support Services

Technical Service Solutions

Resource Center

Policy

Online Help

Become a Partner

Partner Resources

Partner Business Management

Company Information

News & Events

Contact Us