H3C S3610[S5510] Series Ethernet Switches Command Manual-Release 5303(V1.01)

HomeSupportSwitchesH3C S3610[S5510] Switch SeriesReference GuidesCommand ReferencesH3C S3610[S5510] Series Ethernet Switches Command Manual-Release 5303(V1.01)
34-MCE Commands
Title Size Download
34-MCE Commands 109.59 KB

Chapter 1  MCE Configuration Commands

 

&  Note:

This chapter only describes the commands related to the multi-CE (MCE) feature. For information about the routing protocol configuration commands in the configuration examples, refer to the IPv4 Routing module of this manual.

 

1.1  MCE Configuration Commands

1.1.1  description

Syntax

description text

undo description

View

VPN instance view

Parameter

text: Description for the VPN instance, a string of 1 to 80 characters.

Description

Use the description command to configure a description for the current VPN instance.

Use the undo description command to delete the description.

Example

# Configure the description of VPN instance vpn1.

<Sysname> system-view

[Sysname] ip vpn-instance vpn1

[Sysname-vpn-instance-vpn1] description vpn1

1.1.2  display bgp vpnv4 vpn-instance group

Syntax

display bgp vpnv4 vpn-instance vpn-instance-name group [ group-name ]

View

Any view

Parameter

vpn-instance-name: Name of the VPN instance, a string of 1 to 31 characters.

group-name: Name of the BGP peer group, a string of 1 to 47 characters.

Description

Use the display bgp vpnv4 group command display information about a specified or all BGP VPNv4 peer group.

Example

# Display information about BGP VPNv4 peer group a for VPN instance vpn1.

<Sysname> display bgp vpnv4 vpn-instance vpn1 group a

 

 BGP peer-group is a

 remote AS number not specified

 Type : external

 Maximum allowed prefix number: 4294967295

 Threshold: 75%

 Configured hold timer value: 180

 Keepalive timer value: 60

 Minimum time between advertisement runs is 30 seconds

 Peer Preferred Value: 0

 No routing policy is configured

  Members:

  Peer       V   AS  MsgRcvd  MsgSent  OutQ PrefRcv Up/Down  State

 

  10.1.1.1   4   200   18       21     0     1      00:12:58 Established

Table 1-1 Description on the fields of the display bgp vpnv4 group command

Field

Description

BGP peer-group

Name of the BGP peer group

remote AS number

Number of the remote AS

Type

Peer group type

Maximum allowed prefix number

Maximum number of routes that the VPN instance supports

Threshold

Threshold value

Configured hold timer value

Setting of the hold timer

Keepalive timer value

Keepalive interval

Minimum time between advertisement runs

Minimum route advertisement interval

Peer Preferred Value

Weight for the routes from the peer

No routing policy is configured

Whether the VPN instance is configured with a routing policy

Peer

IP address of the peer

V

Version of BGP that the peer runs

AS

AS number of the peer group

MsgRcvd

Number of messages received

MsgSent

Number of messages sent

OutQ

Number of messages waiting to be sent to the peer

PrefRcv

Number of prefixes received

Up/Down

Duration of the BGP session in the current state

State

Status of the peer

 

1.1.3  display bgp vpnv4 vpn-instance network

Syntax

display bgp vpnv4 vpn-instance vpn-instance-name network

View

Any view

Parameter

vpn-instance-name: Name of a VPN instance, a string of 1 to 31 characters.

Description

Use the display bgp vpnv4 network command to display information about BGP VPNv4 routes injected into a specified or all VPN instances.

Example

# Display information about BGP VPNv4 routes injected into VPN instance vpn1.

<Sysname> display bgp vpnv4 vpn-instance vpn1 network

  BGP Local Router ID is 104.1.1.1.

  Local AS Number is 400.

  Route Distinguisher: 100:1 (1)

  Network          Mask            Route-policy        Short-cut

 

  104.1.101.1      255.255.255.255

Table 1-2 Description on the fields of the display bgp vpnv4 network command

Field

Description

BGP Local Router ID

Router ID of the local BGP router

Local AS Number

Local AS number

Network

Advertised network route

Mask

Mask of the advertised network route

Route-policy

Routing policy configured

Short-cut

Indicates whether the route is a short-cut route

 

1.1.4  display bgp vpnv4 vpn-instance paths

Syntax

display bgp vpnv4 vpn-instance vpn-instance-name paths [as-regular-expression ]

View

Any view

Parameter

vpn-instance-name: Name of the VPN instance, a string of 1 to 31 characters.

as-regular-expression: Regular expression for filtering the AS path information to be displayed.

Description

Use the display bgp vpnv4 paths command to display the BGP VPNv4 AS path information.

Example

# Display the BGP VPNv4 AS path information of VPN instance vpn1.

<Sysname> display bgp vpnv4 vpn-instance vpn1 paths

 

    Address       Hash    Refcount  MED         Path/Origin

    0x6E72D18     0       1           0           200?

    0x6E72E50     0       1           0           i

    0x6E72B78     1       1           0           ?

0x6E72BE0     1       2           0           ?

Table 1-3 Description on the fields of the display bgp vpnv4 paths command

Field

Description

Address

Routing address in the local database

Hash

Hash bucket for storing routes

Refcount

Number of times that the path is referenced

MED

Metric for routes

Path/Origin

AS_PATH attribute/Route origin code

 

1.1.5  display bgp vpnv4 vpn-instance peer

Syntax

display bgp vpnv4 vpn-instance vpn-instance-name peer [ group-name  log-info | ip-address { log-info | verbose } | verbose ]

View

Any view

Parameter

vpn-instance-name: Name of the VPN instance, a string of 1 to 31 characters.

group-name: Name of a peer group, a string of 1 to 47 characters.

log-info: Displays the log information about the peer group.

ip-address: IP address of the peer.

verbose: Displays detailed information.

Description

Use the display bgp vpnv4 peer command to display information about BGP VPNv4 peers.

Example

# Display information about BGP VPNv4 peers of VPN instance vpn1.

<Sysname> display bgp vpnv4 vpn-instance vpn1 peer

 

 BGP local router ID : 2.2.2.2

 Local AS number : 100

 Total number of peers : 1                 Peers in established state : 1

 Peer       V    AS  MsgRcvd  MsgSent  OutQ   PrefRcv   Up/Down        State

 

 10.1.1.1  4   200         24       29      0          1  00:18:47 Established

Table 1-4 Description on the fields of display bgp vpnv4 vpn-instance peer

Field

Description

BGP Local router ID

Router ID of the local BGP router

local AS number

Local AS number

Total number of peers

Total number of peers

Peers in established state

Number of peers in the state of established

Peer

IP address of the peer

V

Version of BGP that the peer runs

AS

AS number of the peer group

MsgRcvd

Number of messages received

MsgSent

Number of messages sent

OutQ

Number of messages waiting to be sent to the peer

PrefRcv

Number of received prefixes

Up/Down

Duration of the BGP session in the current state

State

Status of the peer

 

# Display detailed information about BGP VPNv4 peers of VPN instance vpn1.

<Sysname> display bgp vpnv4 vpn-instance vpn1 peer verbose

 

         Peer: 10.1.1.1  Local: 2.2.2.2

         Type: EBGP link

         BGP version 4, remote router ID 10.1.1.1

         BGP current state: Established, Up for 00h19m26s

         BGP current event: KATimerExpired

         BGP last state: OpenConfirm

         Port:  Local - 179      Remote - 1025

         Configured: Active Hold Time: 180 sec   Keepalive Time:60 sec

         Received  : Active Hold Time: 180 sec

         Negotiated: Active Hold Time: 180 sec   Keepalive Time:60 sec

         Peer optional capabilities:

         Peer support bgp multi-protocol extended

         Peer support bgp route refresh capability

         Address family IPv4 Unicast: advertised and received

 

 Received: Total 25 messages, Update messages 1

 Sent: Total 30 messages, Update messages 4

 Maximum allowed prefix number: 4294967295

 Threshold: 75%

 Minimum time between advertisement runs is 30 seconds

 Optional capabilities:

 Route refresh capability has been enabled

 Peer Preferred Value: 0

 

 Routing policy configured:

 No routing policy is configured

Table 1-5 Description on the fields of the display bgp vpnv4 peer verbose command

Field

Description

Peer

IP address of the peer

Local

IP address of the local router

Type

BGP type

BGP version

Version of BGP that the peer runs

remote router ID

Router ID of the remote router

BGP current state

Current status of the BGP session

Up for

Duration since the peer is established

BGP current event

Current event of the BGP session

BGP last state

State that the BGP session was in before transitioning to the current status

Port

Local and remote ports of the BGP session

Configured

Settings of the local timers, including the active hold interval and keepalive interval

Received

Received active hold interval

Negotiated

Negotiated active hold interval and keepalive time

Peer optional capabilities

Optional capabilities of the peer

Peer support bgp multi-protocol extended

The peer supports multiprotocol extension.

Peer support bgp route refresh capability

The peer supports route refresh capability.

Address family IPv4 Unicast

IPv4 unicast family capability

Received

Total number of received messages and the number of received update messages

Sent

Total number of sent messages and the number of sent update messages

Maximum allowed prefix number

Maximum number of routes that the VPN instance supports

Threshold

Threshold value

Minimum time between advertisement runs

Minimum route advertisement interval

Optional capabilities

Local optional capabilities

Route refresh capability has been enabled

Whether the route refresh capability is supported

Peer Preferred Value

Weight for the routes from the peer

Routing policy configured

Routing policy configured

 

1.1.6  display bgp vpnv4 vpn-instance routing-table

Syntax

display bgp vpnv4 vpn-instance vpn-instance-name routing-table [ network-address [ { mask-length | mask-address } [ longer-prefixes ] ] | as-path-acl as-path-acl-number | cidr | community [ aa:nn ]&<1-13>[ no-export-subconfed | no-advertise | no-export ]* [ whole-match ] | community-list { basic-community-list-number [ whole-match ] | adv-community-list-number }&<1-16> | dampened | dampening parameter | different-origin-as | flap-info [ as-path-acl as-path-acl-number | network-address  [ mask [ longer-match ] | mask-length [ longer-match ] ] | regular-expression as-regular-expression ] | peer ip-address { advertised-routes | received-routes } | regular-expression as-regular-expression | statistic ]

View

Any view

Parameter

vpn-instance-name: Name of the VPN instance, a string of 1 to 31 characters.

network-address: IP address of the destination segment.

mask-length: Length of the network mask, in the range 0 to 32.

mask-address: Network mask, in the format of X.X.X.X.

longer-prefixes: Specifies to match the longest prefix.

as-path-acl as-path-acl-number: Filters routing information using the specified AS_PATH list. The as-path-acl-number argument ranges from 1 to 256.

cidr: Displays classless interdomain routing (CIDR) information.

community: Displays routing information of the specified BGP community in the routing table.

aa:nn&<1-13>: Community number. Both the aa and nn parameters range from 0 to 65535. &<1-13> means that you can enter the parameter combination up to 13 times.

no-export-subconfed: A route with this attribute is neither advertised out of the local AS, nor advertised to the other sub-ASs in the confederation.

no-advertise: A route with this attribute is not advertised to any other BGP peer.

no-export: A route with this attribute is not advertised out of the local AS or, If existing, confederation. However, it is advertised to the other sub-ASs in the confederation.

whole-match: Performs exact match.

community-list: Displays routing information of the specified BGP community list.

basic-community-list-number: Basic community list number, in the range 1 to 99.

adv-community-list-number: Advanced community list number, in the range 100 to 199.

&<1-16>: Specifies that the argument before it can be entered up to 16 times.

dampened: Displays information about dampened BGP VPNv4 routes.

dampening parameter: Configured BGP VPNv4 route dampening parameters.

different-origin-as: Displays information about routes with different AS origins.

flap-info: Displays BGP VPNv4 route flap statistics.

longer-match: Displays flap statistics for routes with greater mask lengths than that specified by the network-address { mask | mask-length } combination.

peer ip-address: Specifies a peer by its IP address.

advertised-routes: Displays routing information sent to the specified peer.

received-routes: Displays routing information received from the specified peer.

regular-expression as-regular-expression: Displays routing information matching the specified AS regular expression.

statistic: Displays BGP VPNv4 route statistics.

Description

Use the display bgp vpnv4 vpn-instance routing-table command to display the BGP VPNv4 routing information of a specified VPN instance.

Example

# Display the BGP VPNv4 routing information of VPN instance vpn1.

<Sysname> display bgp vpnv4 vpn-instance vpn1 routing-table

 Total Number of Routes: 5

 

 BGP Local router ID is 2.2.2.2

 Status codes: * - valid, > - best, d - damped,

               h - history,  i - internal, s - suppressed, S - Stale

               Origin : i - IGP, e - EGP, ? - incomplete

 Network            NextHop         MED        LocPrf   PrefVal Path/Ogn

 

 *>i 10.0.0.0      1.1.1.1         0          100        0       i

 *>  10.1.1.0/24   0.0.0.0         0                     0       ?

 *>  20.0.0.0      10.1.1.1        0                     99      200?

 *>i 123.1.1.1/32  1.1.1.1         0          100        0       ?

 *>  124.1.1.1/32  0.0.0.0         0                     0       ?

Table 1-6 Description on the fields of display bgp vpnv4 vpn-instance routing-table

Field

Description

Total Number of Routes

Total number of routes

BGP Local router ID

Router ID of the local BGP router

Status codes

Route status code. For valid values.

Origin

Route origin code. For valid values.

Network

Network address in the BGP routing table

NextHop

Address of the next hop

MED

Metric associated with the destination network

LocPrf

Local preference

PrefVal

Preferred value of the protocol

Path/Ogn

AS_PATH attribute/Route origin code.

 

1.1.7  display bgp vpnv4 vpn-instance routing-table label

Syntax

display bgp vpnv4 vpn-instance vpn-instance-name routing-table label

View

Any view

Parameter

vpn-instance-name: Name of a VPN instance, a string of 1 to 31 characters.

Description

Use the display bgp vpnv4 vpn-instance routing-table label command to display the information about the labeled routes in a BGP routing table.

 

&  Note:

Currently, this command is not supported on H3C S3610 and S5510 series Ethernet switches.

 

Example

# Display the information about the labeled routes in the BGP routing table of the VPN instance named “vpn1”.

<Sysname> display bgp vpnv4 vpn-instance vpn1 routing-table label

1.1.8  display bgp vpnv4 route-distinguisher routing-table

Syntax

display bgp vpnv4 route-distinguisher route-distinguisher routing-table community [ aa:nn ]&<1-13> [ no-export-subconfed | no-advertise | no-export ] * [ whole-match ]

View

Any view

Parameter

route-distinguisher: Route distinguisher (RD) of the VPN instance.

community: Displays routing information of the specified BGP community in the routing table.

aa:nn&<1-13>: Community number. Both the aa and nn parameters range from 0 to 65535. &<1-13> means that you can enter the parameter combination up to 13 times.

no-export-subconfed: A route with this attribute is neither advertised out of the local AS, nor advertised to the other sub-ASs in the confederation.

no-advertise: A route with this attribute is not advertised to any other BGP peer.

no-export: A route with this attribute is not advertised out of the local AS or, if existing, confederation. However, it is advertised to the other sub-ASs in the confederation.

whole-match: Performs exact matching.

Description

Use the display bgp vpnv4 route-distinguisher routing-table command to display the BGP VPNv4 routing information of a specified RD.

Related commands: route-distinguisher.

 

&  Note:

Currently, this command is not available on H3C S3610 and S5510 series Ethernet switches.

 

Example

# Display the BGP VPNv4 routing information of RD 100:1.

<Sysname> display bgp vpnv4 route-distinguisher 100:1 routing-table community

1.1.9  display ip routing-table vpn-instance

Syntax

display ip routing-table vpn-instance vpn-instance-name [ verbose ]

View

Any view

Parameter

vpn-instance-name: Name of the VPN instance, a string of 1 to 31 characters.

verbose: Displays detailed information.

Description

Use the display ip routing-table vpn-instance command to display the routing information of a VPN instance.

Example

# Display the routing information of VPN instance vpn2.

<Sysname> display ip routing-table vpn-instance vpn2

Routing Tables: vpn2

         Destinations : 5        Routes : 5

 

Destination/Mask    Proto  Pre  Cost         NextHop         Interface

 

127.0.0.0/8         Direct 0    0            127.0.0.1       InLoop0

127.0.0.1/32        Direct 0    0            127.0.0.1       InLoop0

10.214.20.0/24      Direct 0    0            10.214.20.3     Vlan20

10.214.20.3/32      Direct 0    0            127.0.0.1       InLoop0

192.168.10.0/24     RIP    100  1            10.214.20.2     Vlan20 

Table 1-7 Description on the fields of display ip routing-table vpn-instance

Field

Description

Destinations

Number of destination addresses

Routes

Number of routes

Destination/Mask

Destination address/mask length

Proto

Protocol discovering the route

Pre

Preference of the route

Cost

Cost of the route

NextHop

Address of the next hop along the route

Interface

Outbound interface for forwarding packets to the destination segment

 

1.1.10  display ip vpn-instance

Syntax

display ip vpn-instance [ instance-name vpn-instance-name ]

View

Any view

Parameter

vpn-instance-name: Name of the VPN instance, a string of 1 to 31 characters.

Description

Use the display ip vpn-instance command to display information about a VPN instance or all VPN instances.

If you do not specify any parameter, the command displays brief information about all VPN instances.

Example

# Display information about all VPN instances.

<Sysname> display ip vpn-instance

  Total VPN-Instances configured : 2

 

  VPN-Instance Name      RD          Create Time

  vpn1                   22:1        2003/10/13 09:32:45

  vpn2                   33:3        2003/10/13 09:42:59

Table 1-8 Description on the fields of the display ip vpn-instance command

Field

Description

VPN-Instance Name

Name of the VPN instance

RD

RD of the VPN instance

Create Time

Time when the VPN instance was created

 

# Display detailed information about a specified VPN instance.

<Sysname> display ip vpn-instance instance-name vpn1

  VPN-Instance Name and ID : vpn1, 1

  Create time : 2000/04/26 13:29:37

  Up time : 0 days, 16 hours, 45 minutes and 21 seconds

  Route Distinguisher : 10:1

  Export VPN Targets :  10:1

  Import VPN Targets :  10:1

  Description : this is vpn1

  Maximum Routes Limit : 200

  Interfaces : Vlan-interface2,  LoopBack0       

Table 1-9 Description on the fields of display ip vpn-instance instance-name

Field

Description

VPN-Instance Name and ID

Name and ID of the VPN instance

CreateTime

Time when the VPN instance was created

Up time

Duration of the VPN instance

Route Distinguisher

RD of the VPN instance

Export VPN Targets

Export target attribute of the VPN instance

Import VPN Targets

Import target attribute of the VPN instance

Import Route Policy

Import routing policy of the VPN instance

Description

Description of the VPN instance

Maximum number of Routes

Maximum number of routes of the VPN instance

Interfaces

Interface to which the VPN instance is bound

 

1.1.11  domain-id

Syntax

domain-id domain-id [ secondary ]

undo domain-id [ domain-id ]

View

OSPF view

Parameter

domain-id: OSPF domain ID, in integer or dotted decimal notation. If it is in integer, it ranges from 0 to 4,294,967,295.

secondary: Uses the domain ID as secondary. With this keyword not specified, the domain ID configured is primary.

Description

Use the domain-id command to configure an OSPF domain ID.

Use the undo domain-id command to restore the default.

By default, the OSPF domain ID is 0.

With no parameter specified, the undo domain-id command deletes the primary domain ID.

Usually, routes injected from PEs are advertised as External-LSAs. However, routes to different destinations in the same OSPF domain must be advertised as Type-3 LSAs. Therefore, using the same domain ID is required for an OSPF domain.

Example

# Configure the OSPF domain ID.

<Sysname> system-view

[Sysname] ospf 100 vpn-instance vpn1

[Sysname-ospf-100] domain-id 234

1.1.12  export route-policy

Syntax

export route-policy route-policy

undo export route-policy

View

VPN instance view

Parameter

route-policy: Name of the export routing policy for the VPN instance, a string of 1 to 19 characters.

Description

Use the export route-policy command to apply an export routing policy to a VPN instance.

Use the undo export route-policy command to remove the application.

You can configure an export routing policy when a finer control on the VPN instance routes to be redistributed is required, that is, when the control provided by the extended community attribute is not enough. An export routing policy may deny routes that are permitted by the export target attribute.

By default, all VPN instance routes permitted by the export target attribute can be redistributed.

Example

# Apply export routing policy poly-1 to VPN instance vpn1.

<Sysname> system-view

[Sysname] ip vpn-instance vpn1

[Sysname-vpn-instance-vpn1] export route-policy poly-1

1.1.13  filter-policy export

Syntax

filter-policy { acl-number | ip-prefix ip-prefix-name } export [ direct | isis process-id | ospf process-id | rip process-id | static ]

undo filter-policy export [ direct | isis process-id | ospf process-id | rip process-id | static ]

View

BGP-VPN instance view

Parameter

acl-number: IP ACL number, in the range 2000 to 3999.

ip-prefix-name: IP address prefix list name, a string of 1 to 19 characters.

direct: Filters direct routes to be advertised.

isis process-id: Filters ISIS routes to be advertised that are from a specified ISIS process. The process-id argument is in the range 1 to 65535.

ospf process-id: Filters OSPF routes to be advertised that are from a specified OSPF process. The process-id argument is in the range 1 to 65535.

rip process-id: Filters RIP routes to be advertised that are from a specified RIP process. The process-id argument is in the range 1 to 65535.

static: Filters static routes to be advertised.

Description

Use the filter-policy export command to configure BGP to filter all or certain types of routes to be advertised.

Use the undo filter-policy export command to remove the configuration.

If you specify no routing protocol parameters for the filter-policy export command, all routes to be advertised will be filtered.

By default, BGP does not filter routes to be advertised.

Only routes that survive the filtering are advertised by BGP.

Example

# Configure BGP to filter the routes to be advertised by using ACL 2555.

<Sysname> system-view

[Sysname] bgp 100

[Sysname] ipv4-family vpn-instance vpn1

[Sysname-bgp-vpn1] filter-policy 2555 export

1.1.14  filter-policy import

Syntax

filter-policy { acl-number | ip-prefix ip-prefix-name } import

undo filter-policy import

View

BGP-VPN instance view

Parameter

acl-number: IP ACL number, in the range 2000 to 3999.

ip-prefix-name: IP address prefix list name, a string of 1 to 19 characters.

Description

Use the filter-policy import command to configure BGP to filter received routes.

Use the undo filter-policy import command to remove the configuration.

By default, BGP does not filter received routes.

Only routes that survive the filtering are added into the BGP routing table.

Example

# Configure BGP to filter received routes using ACL 2255.

<Sysname> system-view

[Sysname] bgp 100

[Sysname] ipv4-family vpn-instance vpn1

[Sysname-bgp-vpn1] filter-policy 2255 import

1.1.15  import route-policy

Syntax

import route-policy route-policy

undo import route-policy

View

VPN instance view

Parameter

route-policy: Name of the import routing policy for the VPN instance, a string of 1 to 19 characters.

Description

Use the import route-policy command to apply an import routing policy to a VPN instance.

Use the undo import route-policy command to remove the application.

You can configure an import routing policy when a finer control on the routes to be redistributed into a VPN instance is required, that is, when the control provided by the extended community attributes is not enough. An import routing policy may deny routes that are permitted by the import target attributes.

By default, all routes permitted by the import target attribute can be redistributed into the VPN instance.

Example

# Apply import routing policy poly-1 to VPN instance vpn1.

<Sysname> system-view

[Sysname] ip vpn-instance vpn1

[Sysname-vpn-instance-vpn1] import route-policy poly-1

1.1.16  ip binding vpn-instance

Syntax

ip binding vpn-instance vpn-instance-name

undo ip binding vpn-instance vpn-instance-name

View

Interface view

Parameter

vpn-instance-name: Name of the VPN instance to be associated, a case-insensitive string of 1 to 31 characters.

Description

Use the ip binding vpn-instance command to associate an interface with a VPN instance.

Use the undo ip binding vpn-instance command to remove the association.

By default, an interface is associated with no VPN instance; it belongs to the public network.

When configured on an interface, the ip binding vpn-instance command clears the IP address of the interface. Therefore, you must re-configure the IP address of the interface after configuring the command.

Example

# Associate Vlan-interface 1 with the VPN instance named “vpn1”.

<Sysname> system-view

[Sysname] interface Vlan-interface1

[Sysname-Vlan-interface1] ip binding vpn-instance vpn1

1.1.17  ip vpn-instance

Syntax

ip vpn-instance vpn-instance-name

undo ip vpn-instance vpn-instance-name

View

System view

Parameter

vpn-instance-name: Name of the VPN instance, a case-insensitive string of 1 to 31 characters.

Description

Use the ip vpn-instance command to create a VPN instance and enter VPN instance view.

Use the undo ip vpn-instance command to delete a VPN instance.

A VPN instance takes effect only after you configure an RD for it.

Related command: route-distinguisher.

Example

# Create a VPN instance named vpn1.

<Sysname> system-view

[Sysname] ip vpn-instance vpn1

[Sysname-vpn-instance-vpn1]

1.1.18  ipv4-family vpn-instance

Syntax

ipv4-family vpn-instance vpn-instance-name

undo ipv4-family vpn-instance vpn-instance-name

View

BGP view

Parameter

vpn-instance vpn-instance-name: Associates a VPN instance with an IPv4 address family and enters BGP VPN instance view. The vpn-instance-name argument is a string of 1 to 31 characters.

Description

Use the ipv4-family command to enter BGP-VPN instance view.

Use the undo ipv4-family command to remove all the configurations performed in either of the two views.

Before entering BGP VPN instance view, make sure the corresponding VPN instance is created.

Example

# Enter BGP-VPN instance view.

<Sysname> system-view

[Sysname] bgp 100

[Sysname] ipv4-family vpn-instance vpn1

[Sysname-bgp-vpn1]

1.1.19  peer allow-as-loop

Syntax

peer { group-name | ip-address } allow-as-loop [ number ]

undo peer { group-name | ip-address } allow-as-loop

View

BGP-VPN instance view

Parameter

group-name: Name of the peer group, a string of 1 to 47 characters.

ip-address: IP address of the peer.

number: Maximum number that the local AS number can appear repeatedly in the AS-PATH attribute. It ranges from 1 to 10 and defaults to 1.

Description

Use the peer allow-as-loop command to allow the local AS number to appear in the AS-PATH attribute of a received route and to set the allowed maximum number of repetitions.

Use the undo peer allow-as-loop command to remove the configuration.

Example

# Allow the local AS number to appear repeatedly in the AS-PATH attribute of a route received from peer 1.1.1.1 for up to twice.

<Sysname> system-view

[Sysname] bgp 100

[Sysname] ipv4-family vpn-instance vpn1

[Sysname-bgp-vpn1] peer 1.1.1.1 allow-as-loop 2

1.1.20  peer group

Syntax

peer ip-address group group-name [ as-number as-number ]

undo peer ip-address group group-name

View

BGP-VPN instance view

Parameter

ip-address: IP address of a peer.

group-name: Name of a peer group, a string of 1 to 47 characters.

as-number as-number: Specifies an AS number, which ranges from 1 to 65535.

Description

Use the peer group command to add a peer to a peer group.

Use the undo peer group command to remove a peer from a peer group.

Example

# Add the peer with the IP address 1.1.1.1 to the peer group named “test”.

<Sysname> system-view

[Sysname] bgp 100

[Sysname-bgp] ipv4-family vpn-instance vpn1

[Sysname-bgp-vpn1] peer 1.1.1.1 group test

1.1.21  refresh bgp vpn-instance

Syntax

refresh bgp vpn-instance vpn-instance-name { ip-address | all | external | group group-name } { export | import }

View

User view

Parameter

vpn-instance-name: Name of a VPN instance, a string of 1 to 31 characters.

ip-address: IP address of a peer.

all: Performs a soft reset of all BGP VPN instance connections.

external: Performs a soft reset of EBGP sessions.

group group-name: Performs a soft reset of the connections with the specified BGP peer group. The group-name argument is a string of 1 to 47 characters.

export: Performs a soft reset in the outbound direction.

import: Performs a soft reset in the inbound direction.

Description

Use the refresh bgp vpn-instance command to perform a soft reset of BGP connections in a VPN instance.

Example

# Perform a soft reset of all BGP connections in VPN instance vpn1 in the inbound direction to make new configurations take effect.

<Sysname> refresh bgp vpn-instance vpn1 all import

1.1.22  reset bgp vpn-instance

Syntax

reset bgp vpn-instance vpn-instance-name { as-number | ip-address | all | external | group group-name }

View

User view

Parameter

vpn-instance-name: Name of a VPN instance, a string of 1 to 31 characters.

as-number: AS number, in the range 1 to 65535.

ip-address: IP address of a peer.

group group-name: Resets the connections with the specified BGP peer group. The group-name argument is a string of 1 to 47 characters.

all: Resets all BGP connections.

external: Resets EBGP sessions.

Description

Use the reset bgp vpn-instance command to reset the BGP connections of a specified VPN instance.

Example

# Reset all BGP connections of VPN instance vpn1.

<Sysname> reset bgp vpn-instance vpn1 all

1.1.23  reset bgp vpn-instance dampening

Syntax

reset bgp vpn-instance vpn-instance-name dampening [ network-address [ mask | mask-length ] ]

View

User view

Parameter

vpn-instance-name: Name of the VPN instance, a string of 1 to 31 characters.

dampening: Specifies route flap dampening information.

network-address: Network address.

mask: Network mask, in the format of X.X.X.X.

mask-length: Length of the network mask, in the range 0 to 32.

Description

Use the reset bgp vpn-instance dampening command to clear the route flap dampening information of a VPN instance.

Example

# Clear the route flap dampening information of VPN instance vpn1.

<Sysname> reset bgp vpn-instance vpn1 dampening

1.1.24  reset bgp vpn-instance flap-info

Syntax

reset bgp vpn-instance vpn-instance-name ip-address flap-info

reset bgp vpn-instance vpn-instance-name flap-info [ ip-address [ mask | mask-length ] | as-path-acl as-path-acl-number | regexp as-path-regexp ]

View

User view

Parameter

vpn-instance-name: Name of the VPN instance, a string of 1 to 31 characters.

ip-address: IP address of the peer.

mask: Network mask, in the format of X.X.X.X.

mask-length: Length of the network mask, in the range 0 to 32.

as-path-acl as-path-acl-number: Specifies the AS_PATH filtering list. The as-path-acl-number argument ranges from 1 to 256.

regexp as-path-regexp: Specifies the AS_PATH regular expression.

Description

Use the reset bgp vpn-instance flap-info command to clear the route flap history information about BGP peers of a VPN instance.

Example

# Clear route flap history information about BGP peer 2.2.2.2 of VPN instance vpn1.

<Sysname> reset bgp vpn-instance vpn1 2.2.2.2 flap-info

1.1.25  route-distinguisher

Syntax

route-distinguisher route-distinguisher

View

VPN instance view

Parameter

route-distinguisher: Route distinguisher (RD) for the VPN instance, a string of 3 to 21 characters in either of the following two formats:

l           16-bit AS number:32-bit user-defined number. For example, 101:3.

l           32-bit IP address:16-bit user-defined number. For example, 192.168.122.15:1.

Description

Use the route-distinguisher command to configure a route distinguisher (RD) for a VPN instance.

An RD is used to create the routing and forwarding table of a VPN.  By prefixing an RD to an IPv4 prefix, you make the VPN IPv4 prefix unique globally.

 

&  Note:

l      No RD is configured by default; you must configure an RD for each VPN instance.

l      A VPN instance takes effect only after you configure an RD for it.

l      Once you configure an RD for a VPN, you cannot remove the association.

l      You cannot change an RD directly; you can only delete the VPN instance, re-create the VPN instance, and then re-configure a new RD.

 

Example

# Configure the RD of VPN instance vpn1.

<Sysname> system-view

[Sysname] ip vpn-instance vpn1

[Sysname-vpn-instance-vpn1] route-distinguisher 22:1

1.1.26  routing-table limit

Syntax

routing-table limit number { warn-threshold | simply-alert }

undo routing-table limit

View

VPN instance view

Parameter

number: Maximum number of routes for the VPN instance to support, in the range 1 to 4096.

warn-threshold: Threshold for rejecting new routes. It is expressed in the percentage of the specified maximum number of routes for the VPN instance. It ranges from 1 to 100.

simply-alert: Specifies that when the maximum number of routes exceeds the threshold, the system still accepts routes and generates only a SYSLOG error message.

Description

Use the routing-table limit command to limit the maximum number of routes in a VPN instance, preventing too many routes from being redistributed from the inbound interface of the PE.

Use he undo routing-table limit command to remove the limitation.

By default, there is no limit to the maximum number of routes that a VPN instance supports.

Example

# Specify that VPN instance vpn1 can redistribute up to 1000 routes in, and allow the VPN instance to accept new routes after the threshold is exceeded.

<Sysname> system-view

[Sysname] ip vpn-instance vpn1

[Sysname-vpn-instance-vpn1] route-distinguisher 100:1

[Sysname-vpn-instance-vpn1] routing-table limit 1000 simply-alert

1.1.27  switch-mode mce

Syntax

switch-mode mce

switch-mode { default | dual-ipv4-ipv6 }

View

System view

Parameter

mce: Operates in MCE mode.

default: Operates in the default mode. In the default mode, only the IPv4 protocol stack is supported; MCE and the IPv6 protocol stack are not supported.

dual-ipv4-ipv6: Operates in IPv4/IPv6 dual stack mode. MCE is not supported in this mode.

Description

Use the switch-mode mce command to configure the device to operate in MCE mode.

Use the switch-mode { default | dual-ipv4-ipv6 } command to configure the device to operate in the default or dual stack mode.

By default, the switch operates in the default mode.

 

&  Note:

The switch-mode mce command requires a reboot to take effect.

 

Example

# Configure the device to work in MCE mode.

<Sysname> system-view

[Sysname] switch-mode mce

1.1.28  vpn-instance-capability simple

Syntax

vpn-instance-capability simple

undo vpn-instance-capability

View

OSPF multi-instance view

Parameter

None

Description

Use the vpn-instance-capability simple command to enable multi-VPN-instance CE.

Use the undo vpn-instance-capability command to disable the function.

By default, the function is disabled.

Example

# Enable multi-VPN-instance CE.

<Sysname> system-view

[Sysname] ospf 100 vpn-instance vpna

[Sysname-ospf-100] vpn-instance-capability simple

1.1.29  vpn-target

Syntax

vpn-target vpn-target&<1-8> [ both | export-extcommunity | import-extcommunity ]

undo vpn-target { all | { vpn-target&<1-8> [ both | export-extcommunity | import-extcommunity ] }

View

VPN instance view

Parameter

vpn-target&<1-8>: Adds the VPN target extended community attribute to the import or export VPN target extended community list and specify the VPN target in the format nn:nn or IP-address:nn. &<1-8> means that you can specify this argument for up to 8 times.

A VPN target attribute can be of 3 to 21 characters and in either of these two formats:

l           16-bit AS number:32-bit user-defined number. For example, 101:3.

l           32-bit IP address:16-bit user-defined number. For example, 192.168.122.15:1.

both: Specifies both the export routing information to the destination VPN extended community and the import routing information from the destination VPN extended community. This is the default.

export-extcommunity: Specifies the export routing information to the destination VPN extended community.

import-extcommunity: Specifies the import routing information from the destination VPN extended community.

all: Specifies all export routing information to the destination VPN extended community and import routing information from the destination VPN extended community.

Description

Use the vpn-target command to associate the current VPN instance with one or more VPN targets.

Use the undo vpn-target command to remove the association of the current VPN instance with VPN targets.

VPN target has no default. You must configure it when creating a VPN instance.

Example

# Associate the current VPN instance with VPN targets.

<Sysname> system-view

[Sysname] ip vpn-instance vpn1

[Sysname-vpn-instance-vpn1] route-distinguisher 100:1

[Sysname-vpn-instance-vpn1] vpn-target 3:3 export-extcommunity

 EVT Assignment result:

 VPN-Target assignment is successful

[Sysname-vpn-instance-vpn1] vpn-target 4:4 import-extcommunity

 IVT Assignment result:

 VPN-Target assignment is successful

[Sysname-vpn-instance-vpn1] vpn-target 5:5 both

 IVT Assignment result:

 VPN-Target assignment is successful

 EVT Assignment result:

 VPN-Target assignment is successful

 

  • Cloud & AI
  • InterConnect
  • Intelligent Computing
  • Security
  • SMB Products
  • Intelligent Terminal Products
  • Product Support Services
  • Technical Service Solutions
All Services
  • Resource Center
  • Policy
  • Online Help
All Support
  • Become A Partner
  • Partner Policy & Program
  • Global Learning
  • Partner Sales Resources
  • Partner Business Management
  • Service Business
All Partners
  • Profile
  • News & Events
  • Online Exhibition Center
  • Contact Us
All About Us
新华三官网