Field	Description
Feature consistency check	Result of configuration consistency check for a feature: · Success. · Failure.
Local VLAN interfaces Peer VLAN interfaces	VLAN interfaces on the local or peer device. These fields display VLAN interfaces that meet the following conditions: · The interface is up. · The peer-link interface has been assigned to the corresponding VLANs.
Passing PVID and VLANs (tagged) on local peer-link interface	VLANs of which the local peer-link interface forwards tagged traffic or PVID of which the local peer-link interface forwards traffic. This field does not include VLANs that are permitted on the local peer-link interface but have not been created yet.
Passing PVID and VLANs (tagged) on peer peer-link interface	VLANs of which the peer-link interface on the M-LAG peer forwards tagged traffic or PVID of which the peer-link interface on the M-LAG peer forwards traffic. This field does not include VLANs that are permitted on the peer-link interface on the M-LAG peer but have not been created yet.
Invalid VLANs on local peer-link interface	VLANs of which the local peer-link interface cannot forward traffic because of incomplete or inconsistent VLAN settings: · VLANs to which the local peer-link interface is assigned as an untagged member (PVID not included). · VLANs that contain the local peer-link interface but do not contain the peer-link interface on the M-LAG peer. If no invalid VLANs exist, this field displays None.
Passing VLANs (tagged) on local M-LAG interface Passing VLANs (tagged) on peer M-LAG interface	VLANs of which the local or peer M-LAG interface forwards tagged traffic. These fields do not include VLANs that are permitted on the M-LAG interfaces but have not been created yet.
Passing VLANs (untagged) on local M-LAG interface Passing VLANs (untagged) on peer M-LAG interface	VLANs of which the local or peer M-LAG interface forwards untagged traffic. These fields do not include VLANs that are permitted on the M-LAG interfaces but have not been created yet.
Invalid VLANs on local M-LAG interface	VLANs of which the local M-LAG interface cannot forward traffic because of incomplete or inconsistent VLAN settings. A VLAN is in this list if it meets one of the following conditions: · The VLAN is permitted on the local M-LAG interface, but it is not in the passing PVID and VLANs (tagged) list on the peer-link interface on the local device or M-LAG peer. · The VLAN is in the passing PVID and VLANs (tagged) list on the peer-link interface on the local device or M-LAG peer, but it is not permitted on the local M-LAG interface. · The VLAN has been created on the local M-LAG member device and is permitted on both local and M-LAG interfaces, but it has not been created on the M-LAG peer yet. If no invalid VLANs exist, this field displays None.

display m-lag consistency-check status

Use display m-lag consistency-check status to display the configuration consistency check status.

Syntax

display m-lag consistency-check status

Views

Any view

Predefined user roles

network-admin

network-operator

Examples

# Display the configuration consistency check status.

<Sysname> display m-lag consistency-check status

Global Consistency Check Configuration

Local status : Enabled Peer status : Enabled

Local check mode : Strict Peer check mode : Strict

Consistency Check on Modules

Module Type1 Type2

LAGG Check Not Check

VLAN Check Check

STP Check Not Check

Type1 Consistency Check Result

Global consistency check result: SUCCESS

Inconsistent global modules: -

M-LAG IF M-LAG group ID Check Result Inconsistency modules

BAGG4 4 SUCCESS -

Table 2 Command output

Field	Description
Local status	Status of configuration consistency check at the local end: · Enabled. · Disabled.
Peer status	Status of configuration consistency check at the peer end: · Enabled. · Disabled.
Local check mode	Configuration consistency check mode at the local end: · Loose. · Strict.
Peer check mode	Configuration consistency check mode at the peer end: · Loose. · Strict.
Module	Feature module name.
Type1	Whether M-LAG checks the module for a type 1 configuration inconsistency: · Check. · Not Check.
Type2	Whether M-LAG checks the module for a type 2 configuration inconsistency: · Check. · Not Check.
Global consistency check result	Result of global configuration consistency check: · FAILURE. · SUCCESS.
Inconsistent global modules	Modules that failed global configuration consistency check. If the check succeeded, this field displays a hyphen (-).
M-LAG IF	Abbreviated name of the M-LAG interface.
Inconsistency modules	Modules that failed interface configuration consistency check. If the check succeeded, this field displays a hyphen (-).

display m-lag drcp statistics

Use display m-lag drcp statistics to display M-LAG DRCPDU statistics.

Syntax

display m-lag drcp statistics [ interface interface-type interface-number ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

interface interface-type interface-number: Specifies a Layer 2 aggregate interface or VXLAN tunnel interface by its type and number. If you do not specify this option, the command displays the M-LAG DRCPDU statistics about the peer-link interface and all M-LAG interfaces.

Examples

# Display M-LAG DRCPDU statistics.

<Sysname> display m-lag drcp statistics

* indicates the port is the peer-link interface.

Interface type:

BAGG -- Bridge-Aggregation, Tun -- Tunnel

Interface State Sent Received(Normal/Error/Unknown)

*BAGG3 UP 30 26/0/0

BAGG4 UP 29 26/0/0

# Display M-LAG DRCPDU statistics about Bridge-Aggregation 4.

<Sysname> display m-lag drcp statistics interface bridge-aggregation 4

* indicates the port is the peer-link interface.

Interface type:

BAGG -- Bridge-Aggregation, Tun -- Tunnel

Interface : BAGG4

State : UP

Sent : 31

Received (Normal/Error/Unknown): 28/0/0

Last received packet information:

Source MAC address: 3cd4-437d-0300

Time: 2019/09/11 09:19:58

Action: Accept

Table 3 Command output

Field	Description
Interface	Abbreviated interface name. The name of the peer-link interface is prefixed with an asterisk (*).
State	Physical state of the interface: · UP. · DOWN.
Sent	Number of sent M-LAG DRCPDUs.
Received (Normal/Error/Unknown)	Numbers of received normal, error, and unrecognized M-LAG DRCPDUs.
Last received packet information	Information about the most recently received M-LAG DRCPDU.
Time	Date and time when the M-LAG DRCPDU was received, in the YYYY/MM/DD hh:mm:ss format.
Action	Action taken on the M-LAG DRCPDU: · Accept. · Drop. If the M-LAG DRCPDU was dropped, this field also displays the reason for dropping the M-LAG DRCPDU.

Related commands

reset m-lag drcp statistics

display m-lag keepalive

Use display m-lag keepalive to display M-LAG keepalive packet statistics.

Syntax

display m-lag keepalive

Views

Any view

Predefined user roles

network-admin

network-operator

Examples

# Display M-LAG keepalive packet statistics.

<Sysname> display m-lag keepalive

Neighbor keepalive link status (cause): Up

Neighbor is alive for: 135642 s 501 ms

Keepalive packet transmission status:

Sent: Successful

Received: Successful

Last received keepalive packet information:

Source IP address: 10.0.0.2

Time: 2019/09/11 09:21:51

Action: Accept

M-LAG keepalive parameters:

Destination IP address: 10.0.0.2

Source IP address: 10.0.0.1

Keepalive UDP port : 6400

Keepalive VPN name : vpn1

Keepalive interval : 1000 ms

Keepalive timeout : 5 sec

Keepalive hold time: 3 sec

Table 4 Command output

Field	Description
Neighbor keepalive link status (cause)	State of the M-LAG peer: · Unknown—No M-LAG peer is detected because the destination IP address of keepalive packets is not specified. · Up—The M-LAG peer is up. · Down—The M-LAG peer is down. Cause of the keepalive link down event: · M-LAG system init—M-LAG system initialization. · Local IP not configured—The local end does not have source and destination IP address settings for the keepalive link. · Local Tx failed—Packet transmission failed on the local end. · Local Rx timeout—Packet reception timed out on the local end. · Peer Rx timeout—Packet reception timed out on the peer end.
Neighbor is alive for	Time period for which the M-LAG peer has been up.
Last received keepalive packet information	Information about the most recently received keepalive packet.
Time	Date and time when the keepalive packet was received, in the YYYY/MM/DD hh:mm:ss format. If the device has not received any keepalive packets, this field displays N/A.
Action	Action taken on the keepalive packet: · Accept. · Drop. If the keepalive packet was dropped, this field also displays the reason for dropping the packet.
Destination IP address	Destination IP address of keepalive packets sent by the device.
Source IP address	Source IP address of keepalive packets sent by the device.
Keepalive UDP port	Destination UDP port of keepalive packets.
Keepalive VPN name	VPN instance for keepalive packets. If no VPN instance is configured for keepalive packets, this field displays N/A.
Keepalive interval	Interval at which the device sends keepalive packets.
Keepalive timeout	Keepalive timeout timer.
Keepalive hold time	Keepalive hold timer setting. The keepalive hold timer specifies the amount of time that the device uses to identify the cause of a peer link down event.

Related commands

m-lag keepalive { ip | ipv6 }

m-lag keepalive hold-time

m-lag keepalive interval

display m-lag mad verbose

Use display m-lag mad verbose to display detailed M-LAG MAD information.

Syntax

display m-lag mad verbose

Views

Any view

Predefined user roles

network-admin

network-operator

Examples

# Display detailed M-LAG MAD information.

<Sysname> display m-lag mad verbose

M-LAG MAD DOWN state : No

Restore delay : 30 s

Remaining restore delay: -

M-LAG MAD default action: DOWN

M-LAG MAD DOWN persistence: Disabled

Excluding logical interfaces: Disabled

Port configuration for M-LAG MAD DOWN action:

Included ports(user-configured):

Bridge-Aggregation1

Ten-GigabitEthernet1/0/5(ineffective)

Included ports(system-configured):

Member interfaces of M-LAG Bridge-Aggregation3:

Ten-GigabitEthernet 1/0/3

Excluded ports(user-configured):

Bridge-Aggregation2

Ten-GigabitEthernet1/0/4

Excluded ports(system-configured):

Management interfaces:

M-GigabitEthernet0/0/0

M-LAG interfaces:

Bridge-Aggregation4

Peer-link interface:

Bridge-Aggregation3

Member interfaces of peer-link interface Bridge-Aggregation3:

Ten-GigabitEthernet1/0/1

Ten-GigabitEthernet1/0/2

Table 5 Command output

Field	Description
M-LAG MAD DOWN state	Whether the network interfaces on the device are in M-LAG MAD DOWN state: · Yes—The device has network interfaces placed in M-LAG MAD DOWN state. · No—No network interfaces are in M-LAG MAD DOWN state. If this field displays Yes, check the peer link for the link down issue to remove multi-active collision.
Restore delay	Data restoration interval, in seconds.
Remaining restore delay	The remaining time (in seconds) before the data restoration interval expires. If the data restoration interval has not started, this field displays a hyphen (-).
M-LAG MAD default action	Default action to take on network interfaces when the M-LAG system splits: · DOWN—Shut down interfaces and place them in M-LAG MAD DOWN state. · NONE—M-LAG MAD does not take action on interfaces.
M-LAG MAD DOWN persistence	M-LAG MAD DOWN state persistence: · Enabled—The M-LAG member device does not bring up the network interfaces in M-LAG MAD DOWN state when its role changes from secondary to primary. · Disabled—The M-LAG member device brings up the network interfaces in M-LAG MAD DOWN state when its role changes from secondary to primary.
Excluding logical interfaces	Whether all logical interfaces are excluded from the shutdown action by M-LAG MAD: · Enabled. · Disabled.
Included ports(user-configured)	Network interfaces manually configured to be shut down by M-LAG MAD when the M-LAG system splits. An interface entry will be marked as ineffective if the system does not allow the specified interface to be shut down by M-LAG MAD. M-LAG MAD will not shut down interfaces in ineffective entries when the M-LAG system splits. The following are interfaces not allowed to be shut down by M-LAG MAD: · Interfaces automatically excluded from being shut down by M-LAG MAD. · Interfaces used for special purposes.
Included ports(system-configured)	Network interfaces automatically set by the system to shut down by M-LAG MAD when the M-LAG system splits. Aggregation member ports of M-LAG interfaces are in this category of interfaces.
Excluded ports(user-configured)	Network interfaces manually configured to not be shut down by M-LAG MAD. An interface entry will be marked as ineffective if the specified interface is in the list of ports excluded by the system from the M-LAG MAD shutdown action. In this situation, the manual configuration does not take effect.
Excluded ports(system-configured)	Network interfaces set by the system to not shut down by M-LAG MAD, including: · Management interfaces. · M-LAG interfaces. · Peer-link interface. · Aggregation member interfaces if a Layer 2 aggregate interface is used as the peer-link interface.

Related commands

m-lag mad default-action

m-lag mad exclude logical-interfaces

m-lag mad exclude interface

m-lag mad include interface

m-lag mad persistent

display m-lag role

Use display m-lag role to display M-LAG role information.

Syntax

display m-lag role

Views

Any view

Predefined user roles

network-admin

network-operator

Examples

# Display M-LAG role information.

<Sysname> display m-lag role

Effective role information

Factors Local Peer

Effective role Primary Secondary

Initial role None None

MAD DOWN state Yes Yes

Health level 0 0

Role priority 32768 32768

Bridge MAC 3cd4-3ce1-0200 3cd4-437d-0300

Effective role trigger: Peer link calculation

Effective role reason: Bridge MAC

Configured role information

Factors Local Peer

Configured role Primary Secondary

Role priority 32768 32768

Bridge MAC 3cd4-3ce1-0200 3cd4-437d-0300

Table 6 Command output

Field	Description
Factors	Factors used in role calculation.
Local	Local configuration.
Peer	Peer configuration.
Effective role	Effective device role: · None. · Primary. · Secondary.
Status of M-LAG interfaces	The status of all M-LAG interfaces: · Down—All M-LAG interfaces are down. · UP—One or more M-LAG interfaces are up.
Initial role	Device role before role calculation: · None. · Primary. · Secondary.
MAD DOWN state	Whether there were interfaces in M-LAG MAD DOWN state during role calculation: · Yes. · No. This field displays N/A if no peer exists.
Health level	Health level of the device during role calculation. The member device with a lower value is healthier. This field displays N/A if no peer exists.
Effective role trigger	Why effective role calculation was triggered: · M-LAG system init—M-LAG system initialization. · Peer link calculation—The local device role was calculated over the peer link. · peer link down and role calculation over keepalive link—The peer link went down, and the local device role was calculated over the keepalive link. · Peer link and keepalive link down—Both the peer link and the keepalive link went down. · Peer link and keepalive link down. All local M-LAG interfaces down—Both the peer link and the keepalive link went down, and all local M-LAG interfaces went down.
Effective role reason	Factor that determined the effective device role: · No peer existed. In this situation, a hyphen (-) is displayed. · Status of M-LAG interfaces. · Single None role. One M-LAG member device had the None role, and the other M-LAG member device had the Primary role. · MAD status. · Health level. · Role priority. · Bridge MAC.
Configured role	Manually assigned device role: · None. · Primary. · Secondary.

Related commands

m-lag role priority

display m-lag summary

Use display m-lag summary to display summary information about the peer-link interface and M-LAG interfaces.

Syntax

display m-lag summary

Views

Any view

Predefined user roles

network-admin

network-operator

Examples

# Display summary information about the peer-link interface and M-LAG interfaces. In this example, global configuration consistency check was successful.

<Sysname> display m-lag summary

Flags: A -- Aggregate interface down, B -- No peer M-LAG interface configured

C -- Configuration consistency check failed

Peer-link interface: BAGG3

Peer-link interface state (cause): UP

Keepalive link state (cause): UP

M-LAG interface information

M-LAG IF M-LAG group Local state (cause) Peer state Remaining down time(s)

BAGG4 4 UP UP -

Table 7 Command output

Field	Description
Peer-link interface	Abbreviated name of the peer-link interface.
Peer-link interface state (cause)	State of the peer-link interface: · UP. · DOWN. · If the peer-link interface is down, this field also displays the cause of the down state.
Keepalive link state (cause)	State of the keepalive link: · UP. · DOWN. Cause of the keepalive link down event: · M-LAG system init—M-LAG system initialization. · Local IP not configured—The local end does not have source and destination IP address settings for the keepalive link. · Local Tx failed—Packet transmission failed on the local end. · Local Rx timeout—Packet reception timed out on the local end. · Peer Rx timeout—Packet reception timed out on the peer end.
M-LAG IF	Name of the M-LAG interface.
Local state (cause)	State of the M-LAG interface: · UP. · DOWN. If the M-LAG interface is down, this field also displays the cause of the down state: · A—The aggregate interface went down. · B—The peer M-LAG interface did not exist. · C—Configuration consistency check failed.
Peer state	State of the peer M-LAG interface: · UP. · DOWN—No peer M-LAG interface exists or the peer M-LAG interface is down. · UNKNOWN—The state of the peer M-LAG interface is unknown when the peer link is down.
Remaining down time (s)	Remaining time (in seconds) during which the M-LAG interface will stay in M-LAG MAD DOWN state. If the M-LAG interface is not in M-LAG MAD DOWN state, this field displays a hyphen (-).

display m-lag system

Use display m-lag system to display the M-LAG system settings.

Syntax

display m-lag system

Views

Any view

Predefined user roles

network-admin

network-operator

Examples

# Display the M-LAG system settings.

<Sysname> display m-lag system

System information

Local system number: 1 Peer system number: 2

Local system MAC: 0001-0001-0001 Peer system MAC: 0001-0001-0001

Local system priority: 123 Peer system priority: 123

Local bridge MAC: 3cd4-3ce1-0200 Peer bridge MAC: 3cd4-437d-0300

Local effective role: Primary Peer effective role: Secondary

Health level: 0

Standalone mode on split: Enabled

In standalone mode: Yes

System timer information

Timer State Value (s) Remaining time (s)

Auto recovery Disabled - -

Restore delay Disabled 30 -

Consistency-check delay Disabled 15 -

Standalone delay Disabled - -

Role to None delay Disabled 60 -

Table 8 Command output

Field	Description
Local system number	Local M-LAG system number. If the parameter is not configured, this field displays N/A.
Peer system number	Peer M-LAG system number. If the parameter is not configured or the peer does not exist, this field displays N/A.
Local system MAC	Local M-LAG system MAC address. If the parameter is not configured, this field displays N/A.
Peer system MAC	Peer M-LAG system MAC address. If the parameter is not configured or the peer does not exist, this field displays N/A.
Local system priority	Local M-LAG system priority. If the parameter is not configured, this field displays N/A.
Peer system priority	Peer M-LAG system priority. If the parameter is not configured or the peer does not exist, this field displays N/A.
Local bridge MAC	Local bridge MAC address.
Peer bridge MAC	Peer bridge MAC address. If the peer does not exist, this field displays N/A.
Local effective role	Effective role of the local device: · None. · Primary. · Secondary.
Peer effective role	Effective role of the peer device: · None. · Primary. · Secondary.
Health level	Health level of the device. The member device with a lower value is healthier.
Standalone mode on split	Whether M-LAG standalone mode is enabled: · Enabled. · Disabled.
In standalone state	Whether the device is in M-LAG standalone mode: · Yes. · No.
Timer	Timer type: · Auto recovery—Reload delay timer. · Restore delay—Data restoration interval. · Consistency check delay—Configuration consistency check delay timer. · Standalone delay—Delay that the device must wait before changing to M-LAG standalone mode. · Role to None delay—Delay that the device must wait before setting its role to None.
State	State of the timer: · Enabled. · Disabled.
Value (s)	Value of the timer, in seconds.
Remaining time (s)	Remaining time of the timer, in seconds. If the timer has not started, this field displays a hyphen (-).

display m-lag troubleshooting

Use display m-lag troubleshooting to display M-LAG troubleshooting information.

Syntax

display m-lag troubleshooting [ m-lag-interface | peer-link | keepalive ] [ history ] [ count ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

m-lag-interface: Displays M-LAG interface troubleshooting information.

peer-link: Displays peer-link interface troubleshooting information.

keepalive: Displays keepalive link troubleshooting information.

history: Displays troubleshooting records. If you do not specify this keyword, the command displays current troubleshooting information.

count: Specifies the number of events to display, in the range of 1 to 200. If you do not specify this argument, the command displays the most recent 20 events.

Usage guidelines

If you do not specify the m-lag-interface, peer-link, or keepalive keywords, this command displays troubleshooting information about M-LAG interfaces, the peer-link interface, and the keepalive link.

Examples

# Display M-LAG troubleshooting records.

<Sysname> display m-lag troubleshooting history

Total: 3

Time Event description

2019-09-10 14:13:53.103 Peer-link interface BAGG10 went down because the

peer-link interface role of the interface was removed.

Please reconfigure an interface as the peer-link interface.

2019-09-10 14:23:53.102 Keepalive link went down because the peer keepalive

timeout timer expired. Please check the keepalive

packet transmission and reception status at the two

ends.

2019-09-10 14:53:53.103 Local M-LAG interface state of BAGG1024 in M-LAG group 1024

changed to down because the aggregate interface went

down. Please check the aggregate link status.

Related commands

reset m-lag troubleshooting history

display m-lag verbose

Use display m-lag verbose to display detailed information about the peer-link interface and M-LAG interfaces.

Syntax

display m-lag verbose [ interface interface-type interface-number ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

interface interface-type interface-number: Specifies an M-LAG interface or the peer-link interface by its number. The interface number must already exist. If you do not specify an interface, the command displays detailed information about the peer-link interface and all M-LAG interfaces.

Usage guidelines

If the specified interface is not the peer-link interface or an M-LAG interface, no information is displayed.

Examples

# Display detailed information about M-LAG interface Bridge-Aggregation 1.

<Sysname> display m-lag verbose interface bridge-aggregation 1

Flags: A -- Home_Gateway, B -- Neighbor_Gateway, C -- Other_Gateway,

D -- PeerLink_Activity, E -- DRCP_Timeout, F -- Gateway_Sync,

G -- Port_Sync, H -- Expired

M-LAG interface/M-LAG group ID: BAGG1/1

Local M-LAG interface state: UP

Peer M-LAG interface state: UP

M-LAG group state: UP

Local M-LAG interface down cause: -

Remaining M-LAG DOWN time: -

Local M-LAG interface LACP MAC: Config=0001-0001-0001, Effective=0001-0001-0001

Peer M-LAG interface LACP MAC: Config=0001-0001-0001, Effective=0001-0001-0001

Local M-LAG interface LACP priority: Config=200, Effective=200

Peer M-LAG interface LACP priority: Config=200, Effective=200

Local DRCP flags/Peer DRCP flags: ABDFG/ABDFG

Local Selected ports (index): XGE1/0/1 (260), XGE1/0/2 (261)

Peer Selected ports indexes: 260, 261

# Display detailed information about peer-link interface Bridge-Aggregation 2.

<Sysname> display m-lag verbose interface bridge-aggregation 2

Flags: A -- Home_Gateway, B -- Neighbor_Gateway, C -- Other_Gateway,

D -- PeerLink_Activity, E -- DRCP_Timeout, F -- Gateway_Sync,

G -- Port_Sync, H -- Expired

Peer-link interface/Peer-link interface ID: BAGG2/1

State: UP

Cause: -

Local DRCP flags/Peer DRCP flags: ABDFG/ABDFG

Local Selected ports (index): XGE1/0/1 (258), XGE1/0/2 (259)

Peer Selected ports indexes: 258, 259

Table 9 Command output

Field	Description
Flags	DRCP state flags. The flag field is one byte long, represented by ABCDEFGH from the lowest bit to the highest bit. A letter is displayed when its bit is 1 and is not displayed when its bit is 0. · A—Indicates whether DRCP is enabled on the local device. 1 indicates enabled. 0 indicates disabled. · B—Indicates whether DRCP is enabled on the M-LAG peer. 1 indicates enabled. 0 indicates disabled. · C—Indicates whether DRCP is enabled on a third M-LAG member device. 1 indicates enabled. 0 indicates disabled. · D—Indicates whether the local peer-link interface has determined that DRCP is enabled on the M-LAG peer. 1 indicates yes. 0 indicates no. · E—Indicates the DRCP timeout timer. 1 indicates the short timeout timer. 0 indicates the long timeout timer. · F—Indicates whether the local peer-link interface permits the packets that contain the negotiated gateway conversation IDs. 1 indicates yes. 0 indicates no. · G—Indicates whether the local peer-link interface permits the packets that contain the negotiated port conversation IDs. 1 indicates yes. 0 indicates no. · H—Indicates whether the local DRCPDU receive machine is in default or expired state. 1 indicates yes. 0 indicates no.
Peer-link interface	Abbreviated name of the peer-link interface.
M-LAG IF	Abbreviated name of the M-LAG interface.
Local M-LAG interface state	State of the local M-LAG interface: · UP—The M-LAG interface is up if it has Selected ports in its aggregation group. · DOWN—The M-LAG interface is down if it does not have Selected ports in its aggregation group.
Peer M-LAG interface state	State of the peer M-LAG interface: · UP—The M-LAG interface is up if it has Selected ports in its aggregation group. · DOWN—The M-LAG interface is down if it does not have Selected ports in its aggregation group. · UNKNOWN—The state of the peer M-LAG interface is unknown when the peer link is down.
M-LAG group state	State of the M-LAG group: · UP—The M-LAG group is up if it contains a minimum of one member M-LAG interface in UP state. · DOWN—The M-LAG group is down if it all its member M-LAG interfaces are in DOWN state.
Local M-LAG interface down cause	Cause of the down state of the local M-LAG interface. If the local M-LAG interface is up, this field displays a hyphen (-).
Remaining M-LAG DOWN time	Remaining time (in seconds) during which the M-LAG interface will stay in M-LAG MAD DOWN state. If the M-LAG interface is not in M-LAG MAD DOWN state, this field displays a hyphen (-).
State	State of the peer-link interface: · UP. · DOWN.
Cause	Cause of the down state of the peer-link interface. If the peer-link interface is up, this field displays a hyphen (-).
Config	Configured value.
Effective	Effective value.
Local DRCP flags	Local DRCP state flags. If all bits are set to 0, this field displays Unknown.
Peer DRCP flags	Peer DRCP state flags. If all bits are set to 0 or no peer exists, this field displays Unknown.
Local Selected ports (index)	Abbreviated name of the Selected ports in the local aggregation group and their port indexes.
Peer Selected ports indexes	Port indexes of the Selected ports in the peer aggregation group.

display m-lag virtual-ip

Use display m-lag virtual-ip to display M-LAG virtual IP addresses (VIPs).

Syntax

display m-lag virtual-ip [ interface interface-type interface-number ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

interface interface-type interface-number: Specifies a VLAN interface or loopback interface by its number. The interface number must already exist. If you do not specify an interface, the command displays detailed information about all M-LAG VIPs.

Examples

# Display all M-LAG VIPs.

<Sysname> display m-lag virtual-ip

Interface IP address MAC address Effective State

Vlan2 10.10.10.10/24 N/A ACTIVE

10.10.20.10/24 N/A STANDBY

Table 10 Command output

Field	Description
Interface	Abbreviated name of the interface.
IP address	Virtual IP address.
MAC address	Virtual MAC address. This field displays N/A if no virtual MAC address is configured.
Effective State	State of the VIP: · Active—The virtual IPv4 address is available on the local device. · Standby—The virtual IPv4 address is not available on the local device.

m-lag authentication key

Use m-lag authentication key to enable M-LAG packet authentication and configure an authentication key.

Use undo m-lag authentication key to disable M-LAG packet authentication.

Syntax

m-lag authentication key { simple | cipher } string

undo m-lag authentication key

Default

M-LAG packet authentication is disabled.

Views

System view

Predefined user roles

network-admin

Parameters

cipher: Specifies an authentication key in encrypted form.

simple: Specifies an authentication key in plaintext form. For security purposes, the authentication key specified in plaintext form will be stored in encrypted form.

string: Specifies the authentication key. Its plaintext form is a case-sensitive string of 1 to 32 characters. Its encrypted form is a case-sensitive string of 1 to 73 characters.

Usage guidelines

To prevent M-LAG DRCPDU and keepalive packet tampering from causing link flapping, enable M-LAG packet authentication on M-LAG member devices. With this feature enabled, M-LAG member devices compute a message digest by using an authentication key for each outgoing M-LAG DRCPDU or keepalive packet and insert the message digest into the packet. When receiving an M-LAG DRCPDU or keepalive packet, an M-LAG member device computes a message digest and compares it with the message digest in the packet. If the message digests match, the packet passes authentication. If the message digests do not match, the device drops the packet.

For successful authentication, configure the same authentication key for the M-LAG member devices.

Examples

# Enable M-LAG packet authentication and configure the authentication key as abcdefg.

<Sysname> system-view

[Sysname] m-lag authentication key simple abcdefg

m-lag auto-recovery reload-delay

Use m-lag auto-recovery reload-delay to enable M-LAG system auto-recovery and set the reload delay timer.

Use undo m-lag auto-recovery reload-delay to restore the default.

Syntax

m-lag auto-recovery reload-delay delay-value

undo m-lag auto-recovery reload-delay

Default

M-LAG system auto-recovery is disabled and the reload delay timer is not set.

Views

System view

Predefined user roles

network-admin

Parameters

delay-value: Specifies a reload delay in the range of 240 to 3600 seconds.

Usage guidelines

If only one M-LAG member device recovers after the entire M-LAG system reboots, auto-recovery enables that member device to remove its M-LAG interfaces from the M-LAG DOWN interface list.

· If that member device has up M-LAG interfaces, it takes over the primary role when the reload delay timer expires and forwards traffic.

· If that member device does not have up M-LAG interfaces, it is stuck in the None role and does not forward traffic.

If auto-recovery is disabled, that M-LAG member device will be stuck in the None role with all its M-LAG interfaces being M-LAG DOWN after it recovers.

If both M-LAG member devices recover and have up M-LAG interfaces after the entire M-LAG system reboots, active-active situation might occur if both peer link and keepalive links were down when the reload delay timer expires. If this rare situation occurs, examine the peer link and keepalive links and restore them.

To avoid incorrect role preemption, make sure the reload delay timer is longer than the amount of time required for the device to restart.

Examples

# Enable M-LAG system auto-recovery and set the reload delay timer to 245 seconds.

<Sysname> system-view

[Sysname] m-lag auto-recovery reload-delay 245

Related commands

display m-lag role

m-lag consistency-check disable

Use m-lag consistency-check disable to disable M-LAG from performing configuration consistency check.

Use undo m-lag consistency-check disable to enable M-LAG to perform configuration consistency check.

Syntax

m-lag consistency-check disable

undo m-lag consistency-check disable

Default

M-LAG performs configuration consistency check.

Views

System view

Predefined user roles

network-admin

Usage guidelines

To ensure that the M-LAG system can operate correctly, M-LAG by default performs configuration consistency check when the M-LAG system is set up.

Configuration consistency check might fail when you upgrade the M-LAG member devices in an M-LAG system. To prevent the M-LAG system from falsely shutting down M-LAG interfaces, you can temporarily disable configuration consistency check.

You must make sure the M-LAG member devices use the same setting for configuration consistency check.

Examples

# Disable M-LAG from performing configuration consistency check.

<Sysname> system-view

[Sysname] m-lag consistency-check disable

m-lag consistency-check mode

Use m-lag consistency-check mode to set the mode of configuration consistency check.

Use undo m-lag consistency-check mode to restore the default.

Syntax

m-lag consistency-check mode { loose | strict }

undo m-lag consistency-check mode

Default

Configuration consistency check uses strict mode.

Views

System view

Predefined user roles

network-admin

Parameters

loose: Specifies loose mode.

strict: Specifies strict mode.

Usage guidelines

The device handles configuration inconsistency depending on the mode of configuration consistency check.

· For type 1 configuration inconsistency:

¡ The device generates log messages if loose mode is enabled.

¡ The device shuts down M-LAG interfaces and generates log messages if strict mode is enabled.

· For type 2 configuration inconsistency, the device only generates log messages, whether strict or loose mode is enabled.

Examples

# Enable the loose mode of configuration consistency check.

<Sysname> system-view

[Sysname] m-lag consistency-check mode loose

m-lag drcp period short

Use m-lag drcp period short to enable the short DRCP timeout timer (3 seconds) on the peer-link interface or an M-LAG interface.

Use undo m-lag drcp period to restore the default.

Syntax

m-lag drcp period short

undo m-lag drcp period

Default

An aggregate interface uses the long DRCP timeout timer (90 seconds).

Views

Layer 2 aggregate interface view

VXLAN tunnel interface view

Predefined user roles

network-admin

Usage guidelines

This command takes effect only on the peer-link interface or an M-LAG interface.

DRCP uses a timeout mechanism to specify the amount of time that a peer-link interface or M-LAG interface must wait to receive M-LAG DRCPDUs before it determines that the peer interface is down. This timeout mechanism provides the following timer options:

· Short DRCP timeout timer, which is fixed at 3 seconds. If this timer is used, the peer interface sends one M-LAG DRCPDU every second.

· Long DRCP timeout timer, which is fixed at 90 seconds. If this timer is used, the peer interface sends one M-LAG DRCPDU every 30 seconds.

Short DRCP timeout timer enables the M-LAG member devices to detect a peer interface down event more quickly than the long DRCP timeout timer. However, this benefit is at the expense of bandwidth and system resources.

To avoid traffic interruption during an ISSU or M-LAG process restart, disable the short DRCP timeout timer before you perform an ISSU or M-LAG process restart. For more information about ISSU, see Fundamentals Configuration Guide.

Examples

# Enable the short DRCP timeout timer on Bridge-Aggregation 1.

<Sysname> system-view

[Sysname] interface bridge-aggregation 1

[Sysname-Bridge-Aggregation1] m-lag drcp period short

m-lag keepalive { ip | ipv6 }

Use m-lag keepalive { ip | ipv6 } to configure M-LAG keepalive packet parameters.

Use undo m-lag keepalive { ip | ipv6 } to restore the default.

Syntax

m-lag keepalive { ip | ipv6 } destination { ipv4-address | ipv6-address } [ source { ipv4-address | ipv6-address } | udp-port udp-number | vpn-instance vpn-instance-name ] *

undo m-lag keepalive { ip | ipv6 }

Default

No keepalive packet parameters are configured.

Views

System view

Predefined user roles

network-admin

Parameters

ip: Specifies IPv4 addresses.

ipv6: Specifies IPv6 addresses.

destination: Specifies an IP address of the M-LAG peer as the destination IP address of keepalive packets.

source: Specifies a local IP address as the source IP address of keepalive packets. If you do not specify a source IP address, the IP address of the outgoing interface is used.

ipv4-address: Specifies an IPv4 address.

ipv6-address: Specifies an IPv6 address.

udp-port udp-number: Specifies the destination UDP port of keepalive packets. The value range for the udp-number argument is 1 to 65535. If you do not specify a UDP port number, 6400 is used.

vpn-instance vpn-instance-name: Specifies an MPLS L3VPN instance by its name, a case-sensitive string of 1 to 31 characters. If the keepalive packets belong to the public network, do not specify a VPN instance.

Usage guidelines

The device accepts only keepalive packets that are sourced from the specified destination IP address. The keepalive link goes down if the device receives keepalive packets sourced from any other IP addresses.

Make sure the M-LAG member devices in an M-LAG system use the same keepalive destination UDP port.

If you execute this command multiple times, the most recent configuration takes effect.

Examples

# Specify the destination and source IP addresses of keepalive packets as 192.168.68.125 and 192.168.68.100, respectively.

<Sysname> system-view

[Sysname] m-lag keepalive ip destination 192.168.68.125 source 192.168.68.100

Related commands

display m-lag keepalive

m-lag keepalive hold-time

Use m-lag keepalive hold-time to set the keepalive hold timer.

Use undo m-lag keepalive hold-time to restore the default.

Syntax

m-lag keepalive hold-time value

undo m-lag keepalive hold-time

Default

The keepalive hold timer is 3 seconds.

Views

System view

Predefined user roles

network-admin

Parameters

value: Specifies a timer value in the range of 3 to 10 seconds.

Usage guidelines

IMPORTANT:

For the M-LAG member device to correctly determine the cause of a peer link down event, make sure the keepalive hold timer is longer than the keepalive interval and is shorter than the keepalive timeout timer.

The keepalive hold timer starts when the peer link goes down. The keepalive hold timer specifies the amount of time that the device uses to identify the cause of a peer link down event.

· If the device receives keepalive packets from the M-LAG peer before the timer expires, the peer link is down because the peer link fails.

· If the device does not receive keepalive packets from the M-LAG peer before the timer expires, the peer link is down because the peer M-LAG device fails.

If you use M-LAG and VRRP together, make sure the keepalive hold timer is shorter than the interval at which the VRRP master sends VRRP advertisements. Violation of this restriction might cause a VRRP master/backup switchover to occur before peer link failure is confirmed. To set the interval at which the VRRP master sends VRRP advertisements, use the vrrp vrid timer advertise or vrrp ipv6 vrid timer advertise command. For more information about the commands, see High Availability Command Reference.

Examples

# Set the keepalive hold timer to 5 seconds.

<Sysname> system-view

[Sysname] m-lag keepalive hold-time 5

Related commands

display m-lag keepalive

vrrp ipv6 vrid timer advertise (High Availability Command Reference)

vrrp vrid timer advertise (High Availability Command Reference)

m-lag keepalive interval

Use m-lag keepalive interval to set the M-LAG keepalive interval and timeout timer.

Use undo m-lag keepalive interval to restore the default.

Syntax

m-lag keepalive interval interval [ timeout timeout ]

undo m-lag keepalive interval

Default

The M-LAG keepalive interval is 1000 milliseconds, and the M-LAG keepalive timeout timer is 5 seconds.

Views

System view

Predefined user roles

network-admin

Parameters

interval interval: Specifies the keepalive interval, in the range of 100 to 10000 milliseconds.

timeout timeout: Specifies the keepalive timeout timer, in the range of 3 to 20 seconds. The local keepalive timeout timer must be two times the keepalive interval of the peer at minimum.

Usage guidelines

The device sends keepalive packets at the specified interval to its M-LAG peer. If the device has not received a keepalive packet from the M-LAG peer before the keepalive timeout timer expires, the device determines that the keepalive link is down.

You must configure the same M-LAG keepalive interval on the M-LAG member devices in an M-LAG system.

If you execute this command multiple times, the most recent configuration takes effect.

Examples

# Set the M-LAG keepalive interval and timeout timer to 2000 milliseconds and 6 seconds, respectively.

<Sysname> system-view

[Sysname] m-lag keepalive interval 2000 timeout 6

Changing the keepalive interval might cause system setup failure. Continue? [Y/N]:y

Related commands

display m-lag keepalive

m-lag mad default-action

Use m-lag mad default-action to configure the default M-LAG MAD action to take on network interfaces on the secondary M-LAG member device when the M-LAG system splits.

Use undo m-lag mad default-action to restore the default.

Syntax

m-lag mad default-action { down | none }

undo m-lag mad default-action

Default

M-LAG MAD shuts down network interfaces on the secondary M-LAG member device.

Views

System view

Predefined user roles

network-admin

Parameters

down: Sets the action to M-LAG MAD DOWN. M-LAG MAD will shut down all network interfaces on the secondary M-LAG member device when the M-LAG system splits, except the interfaces excluded manually or by the system.

none: Sets the M-LAG MAD action to NONE. M-LAG MAD will not shut down any network interfaces when the M-LAG system splits, except the interfaces configured manually or by the system to be shut down by M-LAG MAD.

Usage guidelines

In most network environments, use the M-LAG MAD DOWN action in conjunction with the m-lag mad exclude interface command.

· The M-LAG MAD DOWN action helps avoid network issues caused by multi-active collision, which occurs if the peer link goes down while the keepalive link is up.

· The m-lag mad exclude interface command enables you to exclude special-purpose interfaces, for example, interfaces used in M-LAG for M-LAG keepalive detection.

This configuration method is inefficient if a large number of interfaces on the secondary M-LAG member must be retained in up state after the M-LAG system splits. For example, if you use a VXLAN tunnel as the peer link in an EVPN environment, you must retain a large number of logical interfaces (for example, VLAN, aggregate, loopback, tunnel, and VSI interfaces) in up state.

In these situations, use the following method to configure M-LAG MAD:

· Set the default M-LAG MAD action to NONE.

· Execute the m-lag mad include interface command to specify interfaces that must be shut down by M-LAG MAD in addition to those already automatically specified by the system.

The M-LAG MAD DOWN action will not take effect on the following interfaces:

· Interfaces automatically or manually excluded from being shut down by M-LAG MAD. To identify these interfaces, execute the display m-lag mad verbose command.

· Interfaces used for special purposes, including:

¡ Interfaces placed in a loopback test by using the loopback command.

¡ Interfaces assigned to a service loopback group by using the port service-loopback group command.

¡ Mirroring reflector ports configured by using the mirroring-group reflector-port command.

¡ Interfaces forced to stay up by using the port up-mode command.

Examples

# Configure M-LAG MAD to shut down all network interfaces except excluded interfaces when the M-LAG system splits.

<Sysname> system-view

[Sysname] m-lag mad default-action down

Related commands

display m-lag mad verbose

m-lag mad exclude interface

m-lag mad include interface

loopback

mirroring-group reflector-port (Network Management and Monitoring Command Reference)

port service-loopback group

port up-mode

m-lag mad exclude interface

Use m-lag mad exclude interface to add an interface to the user-configured list of excluded ports, which will not be shut down by M-LAG MAD when the M-LAG system splits.

Use undo m-lag mad exclude interface to remove an interface from the user-configured list of excluded ports.

Syntax

m-lag mad exclude interface interface-type interface-number

undo m-lag mad exclude interface interface-type interface-number

Default

M-LAG MAD shuts down all network interfaces when detecting a multi-active collision, except for the network interfaces set by the system to not shut down.

Views

System view

Predefined user roles

network-admin

Parameters

interface-type interface-number: Specifies an interface by its type and number.

Usage guidelines

This command is typically used when the default M-LAG MAD action is set to M-LAG MAD DOWN. In this situation, when M-LAG MAD detects a multi-active collision, M-LAG sets all network interfaces on the secondary M-LAG member device to M-LAG MAD DOWN state, except for the following interfaces:

· Network interfaces manually configured to not shut down by M-LAG MAD.

· Network interfaces set by the system to not shut down by M-LAG MAD, including:

¡ Peer-link interface.

¡ Aggregation member interfaces if a Layer 2 aggregate interface is used as the peer-link interface.

¡ M-LAG interfaces.

¡ Management interfaces.

You must exclude the following interfaces from the shutdown action by M-LAG MAD:

· For correct keepalive detection, you must exclude the interfaces used for keepalive detection from the shutdown action .

· For M-LAG member devices to synchronize ARP entries, you must exclude the VLAN interfaces of the VLANs to which the M-LAG interfaces and peer-link interfaces belong from the shutdown action.

· If the peer-link interface is a tunnel interface, you must exclude the traffic outgoing interface for the tunnel from the shutdown action. To view the traffic outgoing interface for a tunnel, use the display fib ip-address or display ip routing-table ip-address command. To view the destination address of a tunnel, use the display interface tunnel command.

Examples

# Exclude Ten-GigabitEthernet 1/0/1 from the shutdown action by M-LAG MAD.

<Sysname> system-view

[Sysname] m-lag mad exclude interface ten-gigabitethernet 1/0/1

Related commands

display m-lag mad verbose

display fib (Layer 3—IP Services Command Reference)

display interface tunnel (Layer 3—IP Services Command Reference)

display ip routing-table (Layer 3—IP Routing Command Reference)

m-lag mad exclude logical-interfaces

Use m-lag mad exclude logical-interfaces to exclude all logical interfaces from the shutdown action by M-LAG MAD.

Use undo m-lag mad exclude logical-interfaces to restore the default.

Syntax

m-lag mad exclude logical-interfaces

undo m-lag mad exclude logical-interfaces

Default

By default, M-LAG MAD shuts down all network interfaces when it detects a multi-active collision, except for the network interfaces set by the system to not shut down.

Views

System view

Predefined user roles

network-admin

Usage guidelines

When a VXLAN tunnel is used as the peer link on an EVPN M-LAG system, you must retain a large number of logical interfaces (for example, VLAN, aggregate, loopback, tunnel, and VSI interfaces) in up state. To simplify configuration, you can exclude all logical interfaces from the shutdown action by M-LAG MAD.

The m-lag mad exclude interface and m-lag mad include interface commands take precedence over the m-lag mad exclude logical-interfaces command.

Examples

# Exclude all logical interfaces from the shutdown action by M-LAG MAD.

<Sysname> system-view

[Sysname] m-lag mad exclude logical-interfaces

Related commands

display m-lag mad verbose

m-lag mad default-action

m-lag mad exclude interface

m-lag mad include interface

Use m-lag mad include interface to add an interface to the user-configured list of included ports, which will be shut down by M-LAG MAD when the M-LAG system splits.

Use undo m-lag mad include interface to remove a network interface from the user-configured list of included ports.

Syntax

m-lag mad include interface interface-type interface-number

undo m-lag mad include interface interface-type interface-number

Default

The user-configured included port list does not contain any ports.

Views

System view

Predefined user roles

network-admin

Parameters

interface-type interface-number: Specifies an interface by its type and number.

Usage guidelines

This command is typically used when the default M-LAG MAD action is set to NONE. In this situation, M-LAG MAD does not shut down the network interfaces on the secondary M-LAG member device when the M-LAG system splits. To avoid network issues caused by multi-active collision, add network interfaces to the user-configured include port list if they are not in the system-configured included port list. M-LAG MAD on the secondary M-LAG member device will shut down the interfaces in the system-configured and user-configured included port lists when the M-LAG system splits.

For example, if you use a VXLAN tunnel as the peer link in an EVPN environment, you must retain a large number of logical interfaces (for example, VLAN, aggregate, loopback, tunnel, and VSI interfaces) in up state. To improve configuration efficiency, you can set the default M-LAG MAD action to NONE and add interfaces to the user-configured include port list.

The M-LAG MAD DOWN action will not take effect on the following interfaces:

· Network interfaces automatically or manually excluded from being shut down by M-LAG MAD. To identify these interfaces, execute the display m-lag mad verbose command.

· Network interfaces used for special purposes, including:

¡ Interfaces placed in a loopback test by using the loopback command.

¡ Interfaces in a service loopback group.

¡ Reflector ports for remote port mirroring.

¡ Interfaces forced to stay up by using the port-up mode command.

Examples

# Configure M-LAG MAD to shut down Bridge-Aggregation 1 on the secondary M-LAG member device when the M-LAG system splits.

<Sysname> system-view

[Sysname] m-lag mad include interface bridge-aggregation 1

Related commands

display m-lag mad verbose

m-lag mad default-action

m-lag mad exclude logical-interfaces

m-lag mad exclude interface

loopback

mirroring-group reflector-port (Network Management and Monitoring Command Reference)

port service-loopback group

port-up mode

m-lag mad persistent

Use m-lag mad persistent to enable M-LAG MAD DOWN state persistence.

Use undo m-lag mad persistent to disable M-LAG MAD DOWN state persistence.

Syntax

m-lag mad persistent

undo m-lag mad persistent

Default

The secondary M-LAG member device brings up interfaces in M-LAG MAD DOWN state when its role changes to primary.

Views

System view

Predefined user roles

network-admin

Usage guidelines

M-LAG MAD DOWN state persistence prevents the secondary M-LAG member device from bringing up the network interfaces in M-LAG MAD DOWN state when its role change to primary. This feature helps avoid the forwarding issues that might occur in the multi-active situation that occurs because the keepalive link goes down while the peer link is down.

Examples

# Enable M-LAG MAD DOWN state persistence.

<Sysname> system-view

[Sysname] m-lag mad persistent

Related commands

display m-lag mad verbose

m-lag mad restore

Use m-lag mad restore to bring up the interfaces in M-LAG MAD DOWN state.

Syntax

m-lag mad restore

Views

System view

Predefined user roles

network-admin

Usage guidelines

Execute this command only when both the peer link and the keepalive link are down.

You can bring up the interfaces in M-LAG MAD DOWN state on the secondary M-LAG member device for it to forward traffic if the following conditions exist:

· The primary M-LAG member device fails while the peer link is down.

· M-LAG MAD DOWN state persists on the secondary M-LAG member device.

Examples

# Bring up the interfaces in M-LAG MAD DOWN state.

<Sysname> system-view

[Sysname] m-lag mad restore

To avoid network issues, make sure the primary device has failed and cannot forward traffic. Continue? [Y/N]:y

Related commands

display m-lag mad verbose

m-lag mad persistent

m-lag restore-delay

Use m-lag restore-delay to set the data restoration interval.

Use undo m-lag restore-delay to restore the default.

Syntax

m-lag restore-delay value

undo m-lag restore-delay

Default

The data restoration interval is 30 seconds.

Views

System view

Predefined user roles

network-admin

Parameters

value: Specifies the data restoration interval, in the range of 1 to 3600 seconds.

Usage guidelines

The data restoration interval specifies the maximum amount of time for the secondary M-LAG device to synchronize data with the primary M-LAG device during M-LAG system setup. Within the data restoration interval, the secondary M-LAG device sets all network interfaces to M-LAG MAD DOWN state, except for the interfaces excluded from the MAD shutdown action by M-LAG.

When the data restoration interval expires, the secondary M-LAG device brings up all network interfaces.

To avoid packet loss and forwarding failure, increase the data restoration interval if the amount of data is large or if an ISSU is to be performed between the M-LAG member devices.

Examples

# Set the data restoration interval to 50 seconds.

<Sysname> system-view

[Sysname] m-lag restore-delay 50

m-lag role priority

Use m-lag role priority to set the M-LAG role priority of the device.

Use undo m-lag role priority to restore the default.

Syntax

m-lag role priority priority-value

undo m-lag role priority

Default

The M-LAG role priority of the device is 32768.

Views

System view

Predefined user roles

network-admin

Parameters

priority-value: Specifies the M-LAG role priority, in the range of 0 to 65535. The lower the value, the higher the priority.

Usage guidelines

For features that require centralized traffic processing, an M-LAG member device is assigned the primary or secondary role based on its M-LAG role priority. The secondary M-LAG device forwards the traffic of those features to the primary M-LAG device for processing. If the M-LAG member devices use the same M-LAG role priority, the member device with a lower bridge MAC address is assigned the primary role.

As a best practice to avoid network flapping, do not modify the M-LAG role priority of M-LAG member devices after the M-LAG system is established.

Examples

# Set the M-LAG role priority of the device to 66.

<Sysname> system-view

[Sysname] m-lag role priority 66

Related commands

display m-lag role

m-lag sequence enable

Use m-lag sequence enable to enable M-LAG sequence number check.

Use undo m-lag sequence enable to disable M-LAG sequence number check.

Syntax

m-lag sequence enable

undo m-lag sequence enable

Default

M-LAG sequence number check is disabled.

Views

System view

Predefined user roles

network-admin

Usage guidelines

To protect M-LAG member devices from replay attacks, enable M-LAG sequence number check for them to identify attack packets.

With this feature enabled, the M-LAG member devices insert a sequence number into each outgoing M-LAG DRCPDU or keepalive packet and the sequence number increases by 1 for each sent packet. When receiving an M-LAG DRCPDU or keepalive packet, the M-LAG member devices check its sequence number and drop the packet if the check result is either of the following:

· The sequence number of the packet is the same as that of a previously received packet.

· The sequence number of the packet is smaller than that of the most recently received packet.

As a best practice to improve security, use M-LAG sequence number check together with M-LAG packet authentication.

After one M-LAG member device reboots, the other M-LAG member device might receive and accept the packets that were intercepted by an attacker before the reboot. As a best practice, change the authentication key after an M-LAG member device reboots.

Examples

# Enable M-LAG sequence number check.

<Sysname> system-view

[Sysname] m-lag sequence enable

m-lag standalone enable

Use m-lag standalone enable to enable M-LAG standalone mode.

Use undo m-lag standalone enable to disable M-LAG standalone mode.

Syntax

m-lag standalone enable [ delay delay-time ]

undo m-lag standalone enable [ delay ]

Default

M-LAG standalone mode is disabled.

Views

System view

Predefined user roles

network-admin

Parameters

delay delay-time: Sets the delay that the device must wait before changing to M-LAG standalone mode. The value range for this delay is 0 to 3600 seconds. If you do not set this parameter, the device changes to M-LAG standalone mode without delay when both the peer link and the keepalive link go down.

Usage guidelines

Enable M-LAG standalone mode to avoid forwarding issues in the multi-active situation that might occur after both the peer link and the keepalive link are down.

M-LAG standalone mode helps avoid traffic forwarding issues in this multi-active situation by allowing only the member ports in the M-LAG interfaces on one member device to forward traffic.

If you execute this command multiple times, the most recent configuration takes effect.

As a best practice, enable M-LAG standalone mode on both primary and secondary M-LAG member devices.

To prevent member ports of M-LAG interfaces from flapping, set the M-LAG standalone mode delay to be longer than the time required for a device reboot.

Before you enable M-LAG standalone mode on an M-LAG member device, make sure its LACP system priority is higher than that of the remote aggregation system. This restriction ensures that the reference port is on the remote aggregation system and prevents the interfaces attached to the M-LAG system from flapping.

NOTE:

A M-LAG member device changes to M-LAG standalone mode only when it detects that both the peer link and the keepalive link are down. It does not change to M-LAG standalone mode when the peer M-LAG member device reboots.

Examples

# Enable M-LAG standalone mode.

<Sysname> system-view

[Sysname] m-lag standalone enable

m-lag system-mac

Use m-lag system-mac to configure the M-LAG system MAC address.

Use undo m-lag system-mac to restore the default.

Syntax

m-lag system-mac mac-address

undo m-lag system-mac

Default

The M-LAG system MAC address is not configured.

Views

System view

Predefined user roles

network-admin

Parameters

mac-address: Specifies a MAC address in the H-H-H format. The MAC address cannot be a multicast MAC address, all-zero MAC address, or all-F MAC address.

Usage guidelines

CAUTION:

Changing the M-LAG system MAC address causes M-LAG system split. When you perform this task on a live network, make sure you are fully aware of its impact.

The M-LAG system MAC address uniquely identifies the M-LAG system on the network. For the M-LAG member devices to be identified as one M-LAG system, you must configure the same M-LAG system MAC address on them. As a best practice to avoid MAC address collision, use the bridge MAC address of one M-LAG member device as the M-LAG system MAC address.

Examples

# Configure the M-LAG system MAC address as 0001-0001-0001.

<Sysname> system-view

[Sysname] m-lag system-mac 1-1-1

Changing the system MAC address might flap the intra-portal link and cause M-LAG system setup failure. Continue? [Y/N]:y

[Sysname]

m-lag system-number

Use m-lag system-number to set the M-LAG system number.

Use undo m-lag system-number to restore the default.

Syntax

m-lag system-number system-number

undo m-lag system-number

Default

The M-LAG system number is not set.

Views

System view

Predefined user roles

network-admin

Parameters

system-number: Specifies the M-LAG system number. Available values are 1 and 2.

Usage guidelines

CAUTION:

Changing the M-LAG system number causes M-LAG system split. When you perform this task on a live network, make sure you are fully aware of its impact.

You must assign different M-LAG system numbers to the M-LAG member devices in an M-LAG system.

Examples

# Set the M-LAG system number to 1.

<Sysname> system-view

[Sysname] m-lag system-number 1

Changing the system number might flap the intra-portal link and cause M-LAG system setup failure. Continue? [Y/N]:y

[Sysname]

Related commands

display m-lag system

m-lag system-priority

Use m-lag system-priority to set the M-LAG system priority.

Use undo m-lag system-priority to restore the default.

Syntax

m-lag system-priority priority

undo m-lag system-priority

Default

The M-LAG system priority is 32768.

Views

System view

Predefined user roles

network-admin

Parameters

priority: Specifies a priority value in the range of 0 to 65535. The lower the value, the higher the priority.

Usage guidelines

CAUTION:

Changing the M-LAG system priority causes M-LAG system split. When you perform this task on a live network, make sure you are fully aware of its impact.

An M-LAG system uses its M-LAG system priority as the system LACP priority to communicate with the remote aggregation system.

You must configure the same M-LAG system priority for the M-LAG member devices in an M-LAG system.

Examples

# Set the M-LAG system priority to 64.

<Sysname> system-view

[Sysname] m-lag system-priority 64

Changing the system priority might flap the intra-portal link and cause M-LAG system setup failure. Continue? [Y/N]:y

[Sysname]

Related commands

display m-lag system

port m-lag group

Use port m-lag group to assign an aggregate interface to an M-LAG group.

Use undo port m-lag group to restore the default.

Syntax

port m-lag group group-id [ allow-single-member ]

undo port m-lag group

Default

An aggregate interface does not belong to an M-LAG group.

Views

Layer 2 aggregate interface view

Predefined user roles

network-admin

Parameters

group-id: Specifies an M-LAG group number in the range of 1 to 1024.

allow-single-member: Allows the Layer 2 aggregate interface to be the only member of the specified M-LAG group. M-LAG MAD will not place the interface in M-LAG MAD DOWN state. If you do not specify this keyword, M-LAG MAD will shut down the interface if it is the only member of the specified M-LAG group. As a best practice, specify this keyword for a dynamic aggregate interface.

Usage guidelines

To use a Layer 2 aggregate interface as an M-LAG interface, you must assign it to an M-LAG group.

The device can have multiple M-LAG interfaces. However, you can assign a Layer 2 aggregate interface to only one M-LAG group.

A Layer 2 aggregate interface cannot operate as both peer-link interface and M-LAG interface.

If you specify the allow-single-member keyword for an M-LAG interface, the access device attached to the aggregate interface is identified as a single-homed device. The M-LAG interface is a single-homed M-LAG interface.

To change the allow-single-member setting for a single-homed M-LAG interface, first execute the undo port m-lag group command to remove it from its M-LAG group.

To prevent loops when you assign a single-homed aggregate interface to an M-LAG group, use the following procedure:

1. Assign the aggregate interface to the M-LAG group.

2. Assign ports to the aggregation group of the aggregate interface.

When you remove a single-homed M-LAG interface from its M-LAG group, use the following procedure:

1. Remove the member ports from the aggregation group of the M-LAG interface.

2. Remove the M-LAG interface from the M-LAG group.

Examples

# Assign Bridge-Aggregation 1 to M-LAG group 100.

<Sysname> system-view

[Sysname] interface bridge-aggregation 1

[Sysname-Bridge-Aggregation1] port m-lag group 100

Related commands

display m-lag summary

display m-lag verbose

port m-lag peer-link

Use port m-lag peer-link to specify an aggregate interface or VXLAN tunnel interface as the peer-link interface.

Use undo port m-lag peer-link to restore the default.

Syntax

port m-lag peer-link port-id

undo port m-lag peer-link

Default

An interface is not the peer-link interface.

Views

Layer 2 aggregate interface view

VXLAN tunnel interface view

Predefined user roles

network-admin

Parameters

port-id: Specifies the peer-link interface ID, which is fixed at 1.

Usage guidelines

An M-LAG member device can have only one peer-link interface.

Make sure the bandwidth of the peer-link interface is higher than that of an M-LAG interface.

A Layer 2 aggregate interface cannot operate as both peer-link interface and M-LAG interface.

If you specify an aggregate interface as a peer-link interface, the device assigns the aggregate interface as a trunk port to all VLANs when the interface uses the default VLAN settings. If not, the device does not change the VLAN settings of the interface.

The device does not change the VLAN settings of an aggregate interface when you remove its peer-link interface role.

As a best practice to reduce the impact of interface flapping on upper-layer services, execute the link-delay command on the peer-link interface.

You cannot disable MAC address learning on the peer-link interface.

When a VXLAN tunnel is used as the peer link, perform the following tasks for the M-LAG member devices to communicate at Layer 3 by using VLAN interfaces:

· Create VLAN interfaces on the M-LAG member devices.

· Configure the smallest link cost for the routing protocol used by the M-LAG member devices.

Examples

# Specify Bridge-Aggregation 2 as the peer-link interface.

<Sysname> system-view

[Sysname] interface bridge-aggregation 2

[Sysname-Bridge-Aggregation2] port m-lag peer-link 1

Related commands

link-delay

mac-address mac-learning enable

port m-lag ipv6 virtual-ip

Use port m-lag ipv6 virtual-ip to assign an M-LAG virtual IPv6 address to an interface.

Use undo port m-lag ipv6 virtual-ip to restore the default.

Syntax

VLAN interface view:

port m-lag ipv6 virtual-ip ipv6-address { prefix-length [ active | standby ] [ virtual-mac mac-address ] | link-local }

undo port m-lag ipv6 virtual-ip [ ipv6-address ]

VSI interface view:

port m-lag ipv6 virtual-ip ipv6-address { prefix-length [ active | standby ] | link-local }

undo port m-lag ipv6 virtual-ip [ ipv6-address ]

Default

No M-LAG virtual IPv6 addresses are assigned to interfaces.

Views

VLAN interface view

VSI interface view

Predefined user roles

network-admin

Parameters

ipv6-address: Specifies a virtual IPv6 address.

prefix-length: Specifies a prefix length for the IPv6 address, in the range of 0 to 128.

active: Sets the virtual IPv6 address to be active on the local device.

standby: Sets the virtual IPv6 address to be standby on the local device.

virtual-mac mac-address: Specifies a MAC address in the H-H-H format. The MAC address cannot be a multicast MAC address, all-zero MAC address, or all-F MAC address.

link-local: Uses the specified link-local address as the virtual IPv6 address. Specify this keyword only for OSPFv3 neighbor establishment when dual-active gateways exist on the M-LAG system.

Usage guidelines

To ensure correct traffic forwarding, assign M-LAG virtual IPv6 addresses to the following interfaces on the M-LAG system:

· VLAN interfaces that act as dual-active gateways for the same VLAN.

· VSI interfaces that act as distributed EVPN gateways.

If you do not specify the active or standby keyword for a virtual IPv6 address, the address is active only on the primary M-LAG member device.

If you execute the undo port m-lag ipv6 virtual-ip command without specifying the ipv6-address argument, the command deletes all M-LAG virtual IPv6 addresses on the interface.

When the peer-link interface fails, the standby virtual IPv6 address becomes active on the primary M-LAG member device. If no virtual MAC address is associated with the standby virtual IPv6 address, the MAC address of the interface that owns the standby virtual IPv6 address is used as the virtual MAC address. In this scenario, the devices attached to the primary M-LAG member device will refresh their ND entries.

When you assign multiple M-LAG virtual IPv6 addresses to an interface, follow these restrictions and guidelines:

· You can assign a maximum of two virtual IPv6 addresses to an interface.

· If you configure different virtual MAC addresses for a virtual IPv6 address, the most recent configuration takes effect.

· You cannot configure the same virtual MAC address for multiple virtual IPv6 addresses.

· When you assign a virtual IPv6 address to VLAN interfaces, you must configure the same virtual MAC address for the virtual IPv6 address on both M-LAG member devices.

When both M-LAG member devices act as gateways for dualhomed user-side devices, the gateway interfaces (VLAN interfaces) on the M-LAG member devices use the same IP address and MAC address. In this scenario, the M-LAG member devices cannot set up neighbor relationships with the user-side devices. To resolve this issue, assign virtual IPv6 addresses to the gateway interfaces and configure routing protocols to use the virtual IPv6 addresses for neighbor relationship setup.

For the M-LAG member devices to set up BGP peer relationships with other devices, perform the following tasks:

· Execute the port m-lag ipv6 virtual-ip ipv6-address prefix-length [ active | standby ] [ virtual-mac mac-address ] command.

· Execute the peer source-address command to specify the virtual IPv6 address as the source IPv6 address for establishing TCP connections to peers.

For the M-LAG member devices to set up OSPFv3 neighbor relationships with other devices, execute the port m-lag ipv6 virtual-ip ipv6-address link-local command.

When dual-active gateways exist on the M-LAG system, you must assign unique virtual IPv6 addresses to the gateway interfaces on the M-LAG member devices and configure both virtual IPv6 addresses to be active. When you assign a virtual MAC address to a VLAN interface, make sure the virtual MAC address is identical to the MAC address assigned to the VLAN interface by using the mac-address command.

Examples

# Assign M-LAG virtual IPv6 address 1::10/64 to VLAN-interface 2 and set the state of the address to active.

<Sysname> system-view

[Sysname] interface vlan-interface 2

[Sysname-Vlan-interface2] port m-lag ipv6 virtual-ip 1::10 64 active virtual-mac 1-1-1

Related commands

peer source-address (Layer 3—IP Routing Command Reference)

port m-lag system-mac

Use port m-lag system-mac to configure the M-LAG system MAC address on an aggregate interface.

Use undo port m-lag system-mac to restore the default.

Syntax

port m-lag system-mac mac-address

undo port m-lag system-mac

Default

The M-LAG system MAC address is not configured.

Views

Aggregate interface view

Predefined user roles

network-admin

Parameters

mac-address: Specifies a MAC address in the H-H-H format. The MAC address cannot be a multicast MAC address, all-zero MAC address, or all-F MAC address.

Usage guidelines

CAUTION:

Changing the M-LAG system MAC address causes M-LAG system split. When you perform this task on a live network, make sure you are fully aware of its impact.

The M-LAG system MAC address uniquely identifies the M-LAG system on the network. For the M-LAG member devices to be identified as one M-LAG system, you must configure the same M-LAG system MAC address on the M-LAG interfaces in the same M-LAG group. As a best practice to avoid MAC address collision, use the bridge MAC address of one M-LAG member device as the M-LAG system MAC address.

You can configure the M-LAG system MAC address on an aggregate interface only after it is configured as an M-LAG interface.

You can configure the M-LAG system MAC address globally and in aggregate interface view. The global M-LAG system MAC address takes effect on all aggregation groups. On an aggregate interface, the interface-specific M-LAG system MAC address takes precedence over the global M-LAG system MAC address.

Examples

# Configure the M-LAG system MAC address as 0001-0001-0001 on Bridge-Aggregation 1.

<Sysname> system-view

[Sysname] interface bridge-aggregation 1

[Sysname-Bridge-Aggregation1] port m-lag system-mac 1-1-1

Related commands

display m-lag verbose

m-lag system-mac

port m-lag system-priority

Use port m-lag system-priority to set the M-LAG system priority on an aggregate interface.

Use undo port m-lag system-priority to restore the default.

Syntax

port m-lag system-priority priority

undo port m-lag system-priority

Default

The M-LAG system priority is 32768.

Views

Aggregate interface view

Predefined user roles

network-admin

Parameters

priority: Specifies a priority value in the range of 0 to 65535. The lower the value, the higher the priority.

Usage guidelines

An M-LAG system uses its M-LAG system priority as the LACP system priority to communicate with the remote aggregation system.

You must configure the same M-LAG system priority for the M-LAG interfaces in the same M-LAG group.

You can configure the M-LAG system priority on an aggregate interface only after it is configured as an M-LAG interface.

You can configure the M-LAG system priority globally and in aggregate interface view. The global M-LAG system priority takes effect on all aggregation groups. On an aggregate interface, the interface-specific M-LAG system priority takes precedence over the global M-LAG system priority.

Examples

# Set the M-LAG system priority to 64 on Bridge-Aggregation 1.

<Sysname> system-view

[Sysname] interface bridge-aggregation 1

[Sysname-Bridge-Aggregation1] port m-lag system-priority 64

Related commands

display m-lag verbose

m-lag system-priority

port m-lag virtual-ip

Use port m-lag virtual-ip to assign an M-LAG virtual IPv4 address to an interface.

Use undo port m-lag virtual-ip to restore the default.

Syntax

VLAN interface view:

port m-lag virtual-ip ipv4-address { mask-length | mask } [ active | standby ]

undo port m-lag virtual-ip [ ipv4-address ]

VSI interface view:

port m-lag virtual-ip ipv4-address { mask-length | mask } [ active | standby ]

undo port m-lag virtual-ip [ ipv4-address ]

Default

No M-LAG virtual IPv4 addresses are assigned to interfaces.

Views

VLAN interface view

VSI interface view

Predefined user roles

network-admin

Parameters

ipv4-address: Specifies a virtual IPv4 address.

mask-length: Specifies the subnet mask length in the range of 0 to 32.

mask: Specifies the subnet mask in dotted decimal notation.

active: Sets the virtual IPv4 address to be active on the local device.

standby: Sets the virtual IPv4 address to be standby on the local device.

Usage guidelines

To ensure correct traffic forwarding, assign M-LAG virtual IPv4 addresses to the following interfaces on the M-LAG system:

· VLAN interfaces that act as dual-active gateways for the same VLAN.

· VSI interfaces that act as distributed EVPN gateways.

If you do not specify the active or standby keyword for a virtual IPv4 address, the address is active only on the primary M-LAG member device.

If you execute the undo port m-lag virtual-ip command without specifying the ipv4-address argument, the command deletes all M-LAG virtual IPv4 addresses on the interface.

When the peer-link interface fails, the standby virtual IPv4 address becomes active on the primary M-LAG member device.

You can assign a maximum of two virtual IPv4 addresses to an interface.

When both M-LAG member devices act as gateways for dualhomed user-side devices, the gateway interfaces (VLAN interfaces) on the M-LAG member devices use the same IP address and MAC address. In this scenario, the M-LAG member devices cannot set up neighbor relationships with the user-side devices. To resolve this issue, assign virtual IPv4 addresses to the gateway interfaces and configure routing protocols to use the virtual IPv4 addresses for neighbor relationship setup.

If you assign both virtual IPv4 and IPv6 addresses to VLAN interfaces, make sure the virtual IPv4 and IPv6 addresses that use the same virtual MAC address are in the same state on the M-LAG member devices.

When both M-LAG member devices act as gateways for dualhomed user-side devices, the gateway interfaces (VLAN or VSI interfaces) on the M-LAG member devices use the same IP address and MAC address. In this scenario, the M-LAG member devices cannot set up neighbor relationships with the user-side devices. To resolve this issue, assign virtual IPv4 addresses to the gateway interfaces and configure routing protocols such as BGP and OSPF to use the virtual IPv4 addresses for neighbor relationship setup.

For the M-LAG member devices to set up BGP peer relationships with other devices, perform the following tasks:

· Execute the port m-lag virtual-ip ipv4-address { mask-length | mask } [ active | standby ] [ virtual-mac mac-address ] command.

· Execute the peer source-address command to specify the virtual IPv4 address as the source IPv4 address for establishing TCP connections to peers.

For the M-LAG member devices to set up OSPF neighbor relationships with other devices, perform the following tasks:

· Execute the port m-lag virtual-ip ipv4-address { mask-length | mask } [ active | standby ] [ virtual-mac mac-address ] command.

· Execute the ospf peer sub-address enable command to specify the virtual IPv4 address as the secondary IPv4 address for establishing OSPF neighbor relationships.

When dual-active gateways exist on the M-LAG system, you must assign unique virtual IPv4 addresses to the gateway interfaces on the M-LAG member devices and configure both virtual IPv4 addresses to be active.

Examples

# Assign M-LAG virtual IPv4 address 10.10.10.10/24 to VLAN-interface 2 and set the state of the address to active.

<Sysname> system-view

[Sysname] interface vlan-interface 2

[Sysname-Vlan-interface2] port m-lag virtual-ip 10.10.10.10 24 active

Related commands

ospf peer sub-address enable (Layer 3—IP Routing Command Reference)

peer source-address (Layer 3—IP Routing Command Reference)

reset m-lag drcp statistics

Use reset m-lag drcp statistics to clear M-LAG DRCPDU statistics.

Syntax

reset m-lag drcp statistics [ interface interface-list ]

Views

User view

Predefined user roles

network-admin

Parameters

interface interface-list: Specifies a space-separated list of interface items. Each item specifies an aggregate interface or a range of aggregate interfaces in the form of interface-type interface-number1 [ to interface-type interface-number2 ]. The value for interface-number2 must be greater than or equal to the value for interface-number1. The aggregate interfaces must be M-LAG interfaces or the peer-link interface. If you do not specify this option, the command clears the M-LAG DRCPDU statistics about all M-LAG interfaces and the peer-link interface.

Examples

# Clear M-LAG DRCPDU statistics.

<Sysname> reset m-lag drcp statistics

Related commands

display m-lag drcp statistics

reset m-lag troubleshooting history

Use reset m-lag troubleshooting history to clear M-LAG troubleshooting records.

Syntax

reset m-lag troubleshooting history

Views

User view

Predefined user roles

network-admin

Examples

# Clear M-LAG troubleshooting records.

<Sysname> reset m-lag troubleshooting history

Related commands

display m-lag troubleshooting

03-Layer 2—LAN Switching Command Reference

m-lag consistency-check disable

m-lag keepalive { ip | ipv6 }

m-lag mad persistent

m-lag restore-delay

port m-lag peer-link

Cloud & AI

InterConnect

Intelligent Terminal Products

Product Support Services

Technical Service Solutions

Resource Center

Policy

Online Help

Become a Partner

Partner Resources

Partner Business Management

Company Information

News & Events

Contact Us