- Table of Contents
-
- H3C S3610[S5510] Series Ethernet Switches Command Manual-Release 5303(V1.01)
- 00-1Cover
- 01-Login Commands
- 02-VLAN Commands
- 03-IP Addressing and Performance Commands
- 04-QinQ-BPDU Tunneling Commands
- 05-Port Correlation Configuration Commands
- 06-Link Aggregation Commands
- 07-MAC Address Table Management Commands
- 08-IP Source Guard Commands
- 09-MSTP Commands
- 10-IPv6 Commands
- 11-Routing Overview Commands
- 12-IPv4 Routing Commands
- 13-BFD-GR Commands
- 14-IPv6 Routing Commands
- 15-Multicast Protocol Commands
- 16-802.1x-HABP-MAC Authentication Commands
- 17-AAA-RADIUS-HWTACACS Commands
- 18-ARP Commands
- 19-DHCP Commands
- 20-ACL Commands
- 21-QoS Commands
- 22-Port Mirroring Commands
- 23-Cluster Management Commands
- 24-UDP Helper Commands
- 25-SNMP-RMON Commands
- 26-NTP Commands
- 27-DNS Commands
- 28-File System Management Commands
- 29-Information Center Commands
- 30-System Maintaining and Debugging Commands
- 31-NQA Commands
- 32-VRRP Commands
- 33-SSH Commands
- 34-MCE Commands
- 35-OAM Commands
- 36-DLDP Commands
- 37-RRPP Commands
- 38-SSL-HTTPS Commands
- 39-PKI Commands
- 40-Appendix
- Related Documents
-
Title | Size | Download |
---|---|---|
34-MCE Commands | 109.59 KB |
Table of Contents
Chapter 1 MCE Configuration Commands
1.1 MCE Configuration Commands
1.1.2 display bgp vpnv4 vpn-instance group
1.1.3 display bgp vpnv4 vpn-instance network
1.1.4 display bgp vpnv4 vpn-instance paths
1.1.5 display bgp vpnv4 vpn-instance peer
1.1.6 display bgp vpnv4 vpn-instance routing-table
1.1.7 display bgp vpnv4 vpn-instance routing-table label
1.1.8 display bgp vpnv4 route-distinguisher routing-table
1.1.9 display ip routing-table vpn-instance
1.1.10 display ip vpn-instance
1.1.16 ip binding vpn-instance
1.1.18 ipv4-family vpn-instance
1.1.21 refresh bgp vpn-instance
1.1.23 reset bgp vpn-instance dampening
1.1.24 reset bgp vpn-instance flap-info
1.1.28 vpn-instance-capability simple
Chapter 1 MCE Configuration Commands
& Note:
This chapter only describes the commands related to the multi-CE (MCE) feature. For information about the routing protocol configuration commands in the configuration examples, refer to the IPv4 Routing module of this manual.
1.1 MCE Configuration Commands
1.1.1 description
Syntax
description text
undo description
View
VPN instance view
Parameter
text: Description for the VPN instance, a string of 1 to 80 characters.
Description
Use the description command to configure a description for the current VPN instance.
Use the undo description command to delete the description.
Example
# Configure the description of VPN instance vpn1.
<Sysname> system-view
[Sysname] ip vpn-instance vpn1
[Sysname-vpn-instance-vpn1] description vpn1
1.1.2 display bgp vpnv4 vpn-instance group
Syntax
display bgp vpnv4 vpn-instance vpn-instance-name group [ group-name ]
View
Any view
Parameter
vpn-instance-name: Name of the VPN instance, a string of 1 to 31 characters.
group-name: Name of the BGP peer group, a string of 1 to 47 characters.
Description
Use the display bgp vpnv4 group command display information about a specified or all BGP VPNv4 peer group.
Example
# Display information about BGP VPNv4 peer group a for VPN instance vpn1.
<Sysname> display bgp vpnv4 vpn-instance vpn1 group a
BGP peer-group is a
remote AS number not specified
Type : external
Maximum allowed prefix number: 4294967295
Threshold: 75%
Configured hold timer value: 180
Keepalive timer value: 60
Minimum time between advertisement runs is 30 seconds
Peer Preferred Value: 0
No routing policy is configured
Members:
Peer V AS MsgRcvd MsgSent OutQ PrefRcv Up/Down State
10.1.1.1 4 200 18 21 0 1 00:12:58 Established
Table 1-1 Description on the fields of the display bgp vpnv4 group command
Field |
Description |
BGP peer-group |
Name of the BGP peer group |
remote AS number |
Number of the remote AS |
Type |
Peer group type |
Maximum allowed prefix number |
Maximum number of routes that the VPN instance supports |
Threshold |
Threshold value |
Configured hold timer value |
Setting of the hold timer |
Keepalive timer value |
Keepalive interval |
Minimum time between advertisement runs |
Minimum route advertisement interval |
Peer Preferred Value |
Weight for the routes from the peer |
No routing policy is configured |
Whether the VPN instance is configured with a routing policy |
Peer |
IP address of the peer |
V |
Version of BGP that the peer runs |
AS |
AS number of the peer group |
MsgRcvd |
Number of messages received |
MsgSent |
Number of messages sent |
OutQ |
Number of messages waiting to be sent to the peer |
PrefRcv |
Number of prefixes received |
Up/Down |
Duration of the BGP session in the current state |
State |
Status of the peer |
1.1.3 display bgp vpnv4 vpn-instance network
Syntax
display bgp vpnv4 vpn-instance vpn-instance-name network
View
Any view
Parameter
vpn-instance-name: Name of a VPN instance, a string of 1 to 31 characters.
Description
Use the display bgp vpnv4 network command to display information about BGP VPNv4 routes injected into a specified or all VPN instances.
Example
# Display information about BGP VPNv4 routes injected into VPN instance vpn1.
<Sysname> display bgp vpnv4 vpn-instance vpn1 network
BGP Local Router ID is 104.1.1.1.
Local AS Number is 400.
Route Distinguisher: 100:1 (1)
Network Mask Route-policy Short-cut
104.1.101.1 255.255.255.255
Table 1-2 Description on the fields of the display bgp vpnv4 network command
Field |
Description |
BGP Local Router ID |
Router ID of the local BGP router |
Local AS Number |
Local AS number |
Network |
Advertised network route |
Mask |
Mask of the advertised network route |
Route-policy |
Routing policy configured |
Short-cut |
Indicates whether the route is a short-cut route |
1.1.4 display bgp vpnv4 vpn-instance paths
Syntax
display bgp vpnv4 vpn-instance vpn-instance-name paths [as-regular-expression ]
View
Any view
Parameter
vpn-instance-name: Name of the VPN instance, a string of 1 to 31 characters.
as-regular-expression: Regular expression for filtering the AS path information to be displayed.
Description
Use the display bgp vpnv4 paths command to display the BGP VPNv4 AS path information.
Example
# Display the BGP VPNv4 AS path information of VPN instance vpn1.
<Sysname> display bgp vpnv4 vpn-instance vpn1 paths
Address Hash Refcount MED Path/Origin
0x6E72D18 0 1 0 200?
0x6E72E50 0 1 0 i
0x6E72B78 1 1 0 ?
0x6E72BE0 1 2 0 ?
Table 1-3 Description on the fields of the display bgp vpnv4 paths command
Field |
Description |
Address |
Routing address in the local database |
Hash |
Hash bucket for storing routes |
Refcount |
Number of times that the path is referenced |
MED |
Metric for routes |
Path/Origin |
AS_PATH attribute/Route origin code |
1.1.5 display bgp vpnv4 vpn-instance peer
Syntax
display bgp vpnv4 vpn-instance vpn-instance-name peer [ group-name log-info | ip-address { log-info | verbose } | verbose ]
View
Any view
Parameter
vpn-instance-name: Name of the VPN instance, a string of 1 to 31 characters.
group-name: Name of a peer group, a string of 1 to 47 characters.
log-info: Displays the log information about the peer group.
ip-address: IP address of the peer.
verbose: Displays detailed information.
Description
Use the display bgp vpnv4 peer command to display information about BGP VPNv4 peers.
Example
# Display information about BGP VPNv4 peers of VPN instance vpn1.
<Sysname> display bgp vpnv4 vpn-instance vpn1 peer
BGP local router ID : 2.2.2.2
Local AS number : 100
Total number of peers : 1 Peers in established state : 1
Peer V AS MsgRcvd MsgSent OutQ PrefRcv Up/Down State
10.1.1.1 4 200 24 29 0 1 00:18:47 Established
Table 1-4 Description on the fields of display bgp vpnv4 vpn-instance peer
Field |
Description |
BGP Local router ID |
Router ID of the local BGP router |
local AS number |
Local AS number |
Total number of peers |
Total number of peers |
Peers in established state |
Number of peers in the state of established |
Peer |
IP address of the peer |
V |
Version of BGP that the peer runs |
AS |
AS number of the peer group |
MsgRcvd |
Number of messages received |
MsgSent |
Number of messages sent |
OutQ |
Number of messages waiting to be sent to the peer |
PrefRcv |
Number of received prefixes |
Up/Down |
Duration of the BGP session in the current state |
State |
Status of the peer |
# Display detailed information about BGP VPNv4 peers of VPN instance vpn1.
<Sysname> display bgp vpnv4 vpn-instance vpn1 peer verbose
Peer: 10.1.1.1 Local: 2.2.2.2
Type: EBGP link
BGP version 4, remote router ID 10.1.1.1
BGP current state: Established, Up for 00h19m26s
BGP current event: KATimerExpired
BGP last state: OpenConfirm
Port: Local - 179 Remote - 1025
Configured: Active Hold Time: 180 sec Keepalive Time:60 sec
Received : Active Hold Time: 180 sec
Negotiated: Active Hold Time: 180 sec Keepalive Time:60 sec
Peer optional capabilities:
Peer support bgp multi-protocol extended
Peer support bgp route refresh capability
Address family IPv4 Unicast: advertised and received
Received: Total 25 messages, Update messages 1
Sent: Total 30 messages, Update messages 4
Maximum allowed prefix number: 4294967295
Threshold: 75%
Minimum time between advertisement runs is 30 seconds
Optional capabilities:
Route refresh capability has been enabled
Peer Preferred Value: 0
Routing policy configured:
No routing policy is configured
Table 1-5 Description on the fields of the display bgp vpnv4 peer verbose command
Field |
Description |
Peer |
IP address of the peer |
Local |
IP address of the local router |
Type |
BGP type |
BGP version |
Version of BGP that the peer runs |
remote router ID |
Router ID of the remote router |
BGP current state |
Current status of the BGP session |
Up for |
Duration since the peer is established |
BGP current event |
Current event of the BGP session |
BGP last state |
State that the BGP session was in before transitioning to the current status |
Port |
Local and remote ports of the BGP session |
Configured |
Settings of the local timers, including the active hold interval and keepalive interval |
Received |
Received active hold interval |
Negotiated |
Negotiated active hold interval and keepalive time |
Peer optional capabilities |
Optional capabilities of the peer |
Peer support bgp multi-protocol extended |
The peer supports multiprotocol extension. |
Peer support bgp route refresh capability |
The peer supports route refresh capability. |
Address family IPv4 Unicast |
IPv4 unicast family capability |
Received |
Total number of received messages and the number of received update messages |
Sent |
Total number of sent messages and the number of sent update messages |
Maximum allowed prefix number |
Maximum number of routes that the VPN instance supports |
Threshold |
Threshold value |
Minimum time between advertisement runs |
Minimum route advertisement interval |
Optional capabilities |
Local optional capabilities |
Route refresh capability has been enabled |
Whether the route refresh capability is supported |
Peer Preferred Value |
Weight for the routes from the peer |
Routing policy configured |
Routing policy configured |
1.1.6 display bgp vpnv4 vpn-instance routing-table
Syntax
display bgp vpnv4 vpn-instance vpn-instance-name routing-table [ network-address [ { mask-length | mask-address } [ longer-prefixes ] ] | as-path-acl as-path-acl-number | cidr | community [ aa:nn ]&<1-13>[ no-export-subconfed | no-advertise | no-export ]* [ whole-match ] | community-list { basic-community-list-number [ whole-match ] | adv-community-list-number }&<1-16> | dampened | dampening parameter | different-origin-as | flap-info [ as-path-acl as-path-acl-number | network-address [ mask [ longer-match ] | mask-length [ longer-match ] ] | regular-expression as-regular-expression ] | peer ip-address { advertised-routes | received-routes } | regular-expression as-regular-expression | statistic ]
View
Any view
Parameter
vpn-instance-name: Name of the VPN instance, a string of 1 to 31 characters.
network-address: IP address of the destination segment.
mask-length: Length of the network mask, in the range 0 to 32.
mask-address: Network mask, in the format of X.X.X.X.
longer-prefixes: Specifies to match the longest prefix.
as-path-acl as-path-acl-number: Filters routing information using the specified AS_PATH list. The as-path-acl-number argument ranges from 1 to 256.
cidr: Displays classless interdomain routing (CIDR) information.
community: Displays routing information of the specified BGP community in the routing table.
aa:nn&<1-13>: Community number. Both the aa and nn parameters range from 0 to 65535. &<1-13> means that you can enter the parameter combination up to 13 times.
no-export-subconfed: A route with this attribute is neither advertised out of the local AS, nor advertised to the other sub-ASs in the confederation.
no-advertise: A route with this attribute is not advertised to any other BGP peer.
no-export: A route with this attribute is not advertised out of the local AS or, If existing, confederation. However, it is advertised to the other sub-ASs in the confederation.
whole-match: Performs exact match.
community-list: Displays routing information of the specified BGP community list.
basic-community-list-number: Basic community list number, in the range 1 to 99.
adv-community-list-number: Advanced community list number, in the range 100 to 199.
&<1-16>: Specifies that the argument before it can be entered up to 16 times.
dampened: Displays information about dampened BGP VPNv4 routes.
dampening parameter: Configured BGP VPNv4 route dampening parameters.
different-origin-as: Displays information about routes with different AS origins.
flap-info: Displays BGP VPNv4 route flap statistics.
longer-match: Displays flap statistics for routes with greater mask lengths than that specified by the network-address { mask | mask-length } combination.
peer ip-address: Specifies a peer by its IP address.
advertised-routes: Displays routing information sent to the specified peer.
received-routes: Displays routing information received from the specified peer.
regular-expression as-regular-expression: Displays routing information matching the specified AS regular expression.
statistic: Displays BGP VPNv4 route statistics.
Description
Use the display bgp vpnv4 vpn-instance routing-table command to display the BGP VPNv4 routing information of a specified VPN instance.
Example
# Display the BGP VPNv4 routing information of VPN instance vpn1.
<Sysname> display bgp vpnv4 vpn-instance vpn1 routing-table
Total Number of Routes: 5
BGP Local router ID is 2.2.2.2
Status codes: * - valid, > - best, d - damped,
h - history, i - internal, s - suppressed, S - Stale
Origin : i - IGP, e - EGP, ? - incomplete
Network NextHop MED LocPrf PrefVal Path/Ogn
*>i 10.0.0.0 1.1.1.1 0 100 0 i
*> 10.1.1.0/24 0.0.0.0 0 0 ?
*> 20.0.0.0 10.1.1.1 0 99 200?
*>i 123.1.1.1/32 1.1.1.1 0 100 0 ?
*> 124.1.1.1/32 0.0.0.0 0 0 ?
Table 1-6 Description on the fields of display bgp vpnv4 vpn-instance routing-table
Field |
Description |
Total Number of Routes |
Total number of routes |
BGP Local router ID |
Router ID of the local BGP router |
Status codes |
Route status code. For valid values. |
Origin |
Route origin code. For valid values. |
Network |
Network address in the BGP routing table |
NextHop |
Address of the next hop |
MED |
Metric associated with the destination network |
LocPrf |
Local preference |
PrefVal |
Preferred value of the protocol |
Path/Ogn |
AS_PATH attribute/Route origin code. |
1.1.7 display bgp vpnv4 vpn-instance routing-table label
Syntax
display bgp vpnv4 vpn-instance vpn-instance-name routing-table label
View
Any view
Parameter
vpn-instance-name: Name of a VPN instance, a string of 1 to 31 characters.
Description
Use the display bgp vpnv4 vpn-instance routing-table label command to display the information about the labeled routes in a BGP routing table.
& Note:
Currently, this command is not supported on H3C S3610 and S5510 series Ethernet switches.
Example
# Display the information about the labeled routes in the BGP routing table of the VPN instance named “vpn1”.
<Sysname> display bgp vpnv4 vpn-instance vpn1 routing-table label
1.1.8 display bgp vpnv4 route-distinguisher routing-table
Syntax
display bgp vpnv4 route-distinguisher route-distinguisher routing-table community [ aa:nn ]&<1-13> [ no-export-subconfed | no-advertise | no-export ] * [ whole-match ]
View
Any view
Parameter
route-distinguisher: Route distinguisher (RD) of the VPN instance.
community: Displays routing information of the specified BGP community in the routing table.
aa:nn&<1-13>: Community number. Both the aa and nn parameters range from 0 to 65535. &<1-13> means that you can enter the parameter combination up to 13 times.
no-export-subconfed: A route with this attribute is neither advertised out of the local AS, nor advertised to the other sub-ASs in the confederation.
no-advertise: A route with this attribute is not advertised to any other BGP peer.
no-export: A route with this attribute is not advertised out of the local AS or, if existing, confederation. However, it is advertised to the other sub-ASs in the confederation.
whole-match: Performs exact matching.
Description
Use the display bgp vpnv4 route-distinguisher routing-table command to display the BGP VPNv4 routing information of a specified RD.
Related commands: route-distinguisher.
& Note:
Currently, this command is not available on H3C S3610 and S5510 series Ethernet switches.
Example
# Display the BGP VPNv4 routing information of RD 100:1.
<Sysname> display bgp vpnv4 route-distinguisher 100:1 routing-table community
1.1.9 display ip routing-table vpn-instance
Syntax
display ip routing-table vpn-instance vpn-instance-name [ verbose ]
View
Any view
Parameter
vpn-instance-name: Name of the VPN instance, a string of 1 to 31 characters.
verbose: Displays detailed information.
Description
Use the display ip routing-table vpn-instance command to display the routing information of a VPN instance.
Example
# Display the routing information of VPN instance vpn2.
<Sysname> display ip routing-table vpn-instance vpn2
Routing Tables: vpn2
Destinations : 5 Routes : 5
Destination/Mask Proto Pre Cost NextHop Interface
127.0.0.0/8 Direct 0 0 127.0.0.1 InLoop0
127.0.0.1/32 Direct 0 0 127.0.0.1 InLoop0
10.214.20.0/24 Direct 0 0 10.214.20.3 Vlan20
10.214.20.3/32 Direct 0 0 127.0.0.1 InLoop0
192.168.10.0/24 RIP 100 1 10.214.20.2 Vlan20
Table 1-7 Description on the fields of display ip routing-table vpn-instance
Field |
Description |
Destinations |
Number of destination addresses |
Routes |
Number of routes |
Destination/Mask |
Destination address/mask length |
Proto |
Protocol discovering the route |
Pre |
Preference of the route |
Cost |
Cost of the route |
NextHop |
Address of the next hop along the route |
Interface |
Outbound interface for forwarding packets to the destination segment |
1.1.10 display ip vpn-instance
Syntax
display ip vpn-instance [ instance-name vpn-instance-name ]
View
Any view
Parameter
vpn-instance-name: Name of the VPN instance, a string of 1 to 31 characters.
Description
Use the display ip vpn-instance command to display information about a VPN instance or all VPN instances.
If you do not specify any parameter, the command displays brief information about all VPN instances.
Example
# Display information about all VPN instances.
<Sysname> display ip vpn-instance
Total VPN-Instances configured : 2
VPN-Instance Name RD Create Time
vpn1 22:1 2003/10/13 09:32:45
vpn2 33:3 2003/10/13 09:42:59
Table 1-8 Description on the fields of the display ip vpn-instance command
Field |
Description |
VPN-Instance Name |
Name of the VPN instance |
RD |
RD of the VPN instance |
Create Time |
Time when the VPN instance was created |
# Display detailed information about a specified VPN instance.
<Sysname> display ip vpn-instance instance-name vpn1
VPN-Instance Name and ID : vpn1, 1
Create time : 2000/04/26 13:29:37
Up time : 0 days, 16 hours, 45 minutes and 21 seconds
Route Distinguisher : 10:1
Export VPN Targets : 10:1
Import VPN Targets : 10:1
Description : this is vpn1
Maximum Routes Limit : 200
Interfaces : Vlan-interface2, LoopBack0
Table 1-9 Description on the fields of display ip vpn-instance instance-name
Field |
Description |
VPN-Instance Name and ID |
Name and ID of the VPN instance |
CreateTime |
Time when the VPN instance was created |
Up time |
Duration of the VPN instance |
Route Distinguisher |
RD of the VPN instance |
Export VPN Targets |
Export target attribute of the VPN instance |
Import VPN Targets |
Import target attribute of the VPN instance |
Import Route Policy |
Import routing policy of the VPN instance |
Description |
Description of the VPN instance |
Maximum number of Routes |
Maximum number of routes of the VPN instance |
Interfaces |
Interface to which the VPN instance is bound |
1.1.11 domain-id
Syntax
domain-id domain-id [ secondary ]
undo domain-id [ domain-id ]
View
OSPF view
Parameter
domain-id: OSPF domain ID, in integer or dotted decimal notation. If it is in integer, it ranges from 0 to 4,294,967,295.
secondary: Uses the domain ID as secondary. With this keyword not specified, the domain ID configured is primary.
Description
Use the domain-id command to configure an OSPF domain ID.
Use the undo domain-id command to restore the default.
By default, the OSPF domain ID is 0.
With no parameter specified, the undo domain-id command deletes the primary domain ID.
Usually, routes injected from PEs are advertised as External-LSAs. However, routes to different destinations in the same OSPF domain must be advertised as Type-3 LSAs. Therefore, using the same domain ID is required for an OSPF domain.
Example
# Configure the OSPF domain ID.
<Sysname> system-view
[Sysname] ospf 100 vpn-instance vpn1
[Sysname-ospf-100] domain-id 234
1.1.12 export route-policy
Syntax
export route-policy route-policy
undo export route-policy
View
VPN instance view
Parameter
route-policy: Name of the export routing policy for the VPN instance, a string of 1 to 19 characters.
Description
Use the export route-policy command to apply an export routing policy to a VPN instance.
Use the undo export route-policy command to remove the application.
You can configure an export routing policy when a finer control on the VPN instance routes to be redistributed is required, that is, when the control provided by the extended community attribute is not enough. An export routing policy may deny routes that are permitted by the export target attribute.
By default, all VPN instance routes permitted by the export target attribute can be redistributed.
Example
# Apply export routing policy poly-1 to VPN instance vpn1.
<Sysname> system-view
[Sysname] ip vpn-instance vpn1
[Sysname-vpn-instance-vpn1] export route-policy poly-1
1.1.13 filter-policy export
Syntax
filter-policy { acl-number | ip-prefix ip-prefix-name } export [ direct | isis process-id | ospf process-id | rip process-id | static ]
undo filter-policy export [ direct | isis process-id | ospf process-id | rip process-id | static ]
View
BGP-VPN instance view
Parameter
acl-number: IP ACL number, in the range 2000 to 3999.
ip-prefix-name: IP address prefix list name, a string of 1 to 19 characters.
direct: Filters direct routes to be advertised.
isis process-id: Filters ISIS routes to be advertised that are from a specified ISIS process. The process-id argument is in the range 1 to 65535.
ospf process-id: Filters OSPF routes to be advertised that are from a specified OSPF process. The process-id argument is in the range 1 to 65535.
rip process-id: Filters RIP routes to be advertised that are from a specified RIP process. The process-id argument is in the range 1 to 65535.
static: Filters static routes to be advertised.
Description
Use the filter-policy export command to configure BGP to filter all or certain types of routes to be advertised.
Use the undo filter-policy export command to remove the configuration.
If you specify no routing protocol parameters for the filter-policy export command, all routes to be advertised will be filtered.
By default, BGP does not filter routes to be advertised.
Only routes that survive the filtering are advertised by BGP.
Example
# Configure BGP to filter the routes to be advertised by using ACL 2555.
<Sysname> system-view
[Sysname] bgp 100
[Sysname] ipv4-family vpn-instance vpn1
[Sysname-bgp-vpn1] filter-policy 2555 export
1.1.14 filter-policy import
Syntax
filter-policy { acl-number | ip-prefix ip-prefix-name } import
undo filter-policy import
View
BGP-VPN instance view
Parameter
acl-number: IP ACL number, in the range 2000 to 3999.
ip-prefix-name: IP address prefix list name, a string of 1 to 19 characters.
Description
Use the filter-policy import command to configure BGP to filter received routes.
Use the undo filter-policy import command to remove the configuration.
By default, BGP does not filter received routes.
Only routes that survive the filtering are added into the BGP routing table.
Example
# Configure BGP to filter received routes using ACL 2255.
<Sysname> system-view
[Sysname] bgp 100
[Sysname] ipv4-family vpn-instance vpn1
[Sysname-bgp-vpn1] filter-policy 2255 import
1.1.15 import route-policy
Syntax
import route-policy route-policy
undo import route-policy
View
VPN instance view
Parameter
route-policy: Name of the import routing policy for the VPN instance, a string of 1 to 19 characters.
Description
Use the import route-policy command to apply an import routing policy to a VPN instance.
Use the undo import route-policy command to remove the application.
You can configure an import routing policy when a finer control on the routes to be redistributed into a VPN instance is required, that is, when the control provided by the extended community attributes is not enough. An import routing policy may deny routes that are permitted by the import target attributes.
By default, all routes permitted by the import target attribute can be redistributed into the VPN instance.
Example
# Apply import routing policy poly-1 to VPN instance vpn1.
<Sysname> system-view
[Sysname] ip vpn-instance vpn1
[Sysname-vpn-instance-vpn1] import route-policy poly-1
1.1.16 ip binding vpn-instance
Syntax
ip binding vpn-instance vpn-instance-name
undo ip binding vpn-instance vpn-instance-name
View
Interface view
Parameter
vpn-instance-name: Name of the VPN instance to be associated, a case-insensitive string of 1 to 31 characters.
Description
Use the ip binding vpn-instance command to associate an interface with a VPN instance.
Use the undo ip binding vpn-instance command to remove the association.
By default, an interface is associated with no VPN instance; it belongs to the public network.
When configured on an interface, the ip binding vpn-instance command clears the IP address of the interface. Therefore, you must re-configure the IP address of the interface after configuring the command.
Example
# Associate Vlan-interface 1 with the VPN instance named “vpn1”.
<Sysname> system-view
[Sysname] interface Vlan-interface1
[Sysname-Vlan-interface1] ip binding vpn-instance vpn1
1.1.17 ip vpn-instance
Syntax
ip vpn-instance vpn-instance-name
undo ip vpn-instance vpn-instance-name
View
System view
Parameter
vpn-instance-name: Name of the VPN instance, a case-insensitive string of 1 to 31 characters.
Description
Use the ip vpn-instance command to create a VPN instance and enter VPN instance view.
Use the undo ip vpn-instance command to delete a VPN instance.
A VPN instance takes effect only after you configure an RD for it.
Related command: route-distinguisher.
Example
# Create a VPN instance named vpn1.
<Sysname> system-view
[Sysname] ip vpn-instance vpn1
[Sysname-vpn-instance-vpn1]
1.1.18 ipv4-family vpn-instance
Syntax
ipv4-family vpn-instance vpn-instance-name
undo ipv4-family vpn-instance vpn-instance-name
View
BGP view
Parameter
vpn-instance vpn-instance-name: Associates a VPN instance with an IPv4 address family and enters BGP VPN instance view. The vpn-instance-name argument is a string of 1 to 31 characters.
Description
Use the ipv4-family command to enter BGP-VPN instance view.
Use the undo ipv4-family command to remove all the configurations performed in either of the two views.
Before entering BGP VPN instance view, make sure the corresponding VPN instance is created.
Example
# Enter BGP-VPN instance view.
<Sysname> system-view
[Sysname] bgp 100
[Sysname] ipv4-family vpn-instance vpn1
[Sysname-bgp-vpn1]
1.1.19 peer allow-as-loop
Syntax
peer { group-name | ip-address } allow-as-loop [ number ]
undo peer { group-name | ip-address } allow-as-loop
View
BGP-VPN instance view
Parameter
group-name: Name of the peer group, a string of 1 to 47 characters.
ip-address: IP address of the peer.
number: Maximum number that the local AS number can appear repeatedly in the AS-PATH attribute. It ranges from 1 to 10 and defaults to 1.
Description
Use the peer allow-as-loop command to allow the local AS number to appear in the AS-PATH attribute of a received route and to set the allowed maximum number of repetitions.
Use the undo peer allow-as-loop command to remove the configuration.
Example
# Allow the local AS number to appear repeatedly in the AS-PATH attribute of a route received from peer 1.1.1.1 for up to twice.
<Sysname> system-view
[Sysname] bgp 100
[Sysname] ipv4-family vpn-instance vpn1
[Sysname-bgp-vpn1] peer 1.1.1.1 allow-as-loop 2
1.1.20 peer group
Syntax
peer ip-address group group-name [ as-number as-number ]
undo peer ip-address group group-name
View
BGP-VPN instance view
Parameter
ip-address: IP address of a peer.
group-name: Name of a peer group, a string of 1 to 47 characters.
as-number as-number: Specifies an AS number, which ranges from 1 to 65535.
Description
Use the peer group command to add a peer to a peer group.
Use the undo peer group command to remove a peer from a peer group.
Example
# Add the peer with the IP address 1.1.1.1 to the peer group named “test”.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] ipv4-family vpn-instance vpn1
[Sysname-bgp-vpn1] peer 1.1.1.1 group test
1.1.21 refresh bgp vpn-instance
Syntax
refresh bgp vpn-instance vpn-instance-name { ip-address | all | external | group group-name } { export | import }
View
User view
Parameter
vpn-instance-name: Name of a VPN instance, a string of 1 to 31 characters.
ip-address: IP address of a peer.
all: Performs a soft reset of all BGP VPN instance connections.
external: Performs a soft reset of EBGP sessions.
group group-name: Performs a soft reset of the connections with the specified BGP peer group. The group-name argument is a string of 1 to 47 characters.
export: Performs a soft reset in the outbound direction.
import: Performs a soft reset in the inbound direction.
Description
Use the refresh bgp vpn-instance command to perform a soft reset of BGP connections in a VPN instance.
Example
# Perform a soft reset of all BGP connections in VPN instance vpn1 in the inbound direction to make new configurations take effect.
<Sysname> refresh bgp vpn-instance vpn1 all import
1.1.22 reset bgp vpn-instance
Syntax
reset bgp vpn-instance vpn-instance-name { as-number | ip-address | all | external | group group-name }
View
User view
Parameter
vpn-instance-name: Name of a VPN instance, a string of 1 to 31 characters.
as-number: AS number, in the range 1 to 65535.
ip-address: IP address of a peer.
group group-name: Resets the connections with the specified BGP peer group. The group-name argument is a string of 1 to 47 characters.
all: Resets all BGP connections.
external: Resets EBGP sessions.
Description
Use the reset bgp vpn-instance command to reset the BGP connections of a specified VPN instance.
Example
# Reset all BGP connections of VPN instance vpn1.
<Sysname> reset bgp vpn-instance vpn1 all
1.1.23 reset bgp vpn-instance dampening
Syntax
reset bgp vpn-instance vpn-instance-name dampening [ network-address [ mask | mask-length ] ]
View
User view
Parameter
vpn-instance-name: Name of the VPN instance, a string of 1 to 31 characters.
dampening: Specifies route flap dampening information.
network-address: Network address.
mask: Network mask, in the format of X.X.X.X.
mask-length: Length of the network mask, in the range 0 to 32.
Description
Use the reset bgp vpn-instance dampening command to clear the route flap dampening information of a VPN instance.
Example
# Clear the route flap dampening information of VPN instance vpn1.
<Sysname> reset bgp vpn-instance vpn1 dampening
1.1.24 reset bgp vpn-instance flap-info
Syntax
reset bgp vpn-instance vpn-instance-name ip-address flap-info
reset bgp vpn-instance vpn-instance-name flap-info [ ip-address [ mask | mask-length ] | as-path-acl as-path-acl-number | regexp as-path-regexp ]
View
User view
Parameter
vpn-instance-name: Name of the VPN instance, a string of 1 to 31 characters.
ip-address: IP address of the peer.
mask: Network mask, in the format of X.X.X.X.
mask-length: Length of the network mask, in the range 0 to 32.
as-path-acl as-path-acl-number: Specifies the AS_PATH filtering list. The as-path-acl-number argument ranges from 1 to 256.
regexp as-path-regexp: Specifies the AS_PATH regular expression.
Description
Use the reset bgp vpn-instance flap-info command to clear the route flap history information about BGP peers of a VPN instance.
Example
# Clear route flap history information about BGP peer 2.2.2.2 of VPN instance vpn1.
<Sysname> reset bgp vpn-instance vpn1 2.2.2.2 flap-info
1.1.25 route-distinguisher
Syntax
route-distinguisher route-distinguisher
View
VPN instance view
Parameter
route-distinguisher: Route distinguisher (RD) for the VPN instance, a string of 3 to 21 characters in either of the following two formats:
l 16-bit AS number:32-bit user-defined number. For example, 101:3.
l 32-bit IP address:16-bit user-defined number. For example, 192.168.122.15:1.
Description
Use the route-distinguisher command to configure a route distinguisher (RD) for a VPN instance.
An RD is used to create the routing and forwarding table of a VPN. By prefixing an RD to an IPv4 prefix, you make the VPN IPv4 prefix unique globally.
& Note:
l No RD is configured by default; you must configure an RD for each VPN instance.
l A VPN instance takes effect only after you configure an RD for it.
l Once you configure an RD for a VPN, you cannot remove the association.
l You cannot change an RD directly; you can only delete the VPN instance, re-create the VPN instance, and then re-configure a new RD.
Example
# Configure the RD of VPN instance vpn1.
<Sysname> system-view
[Sysname] ip vpn-instance vpn1
[Sysname-vpn-instance-vpn1] route-distinguisher 22:1
1.1.26 routing-table limit
Syntax
routing-table limit number { warn-threshold | simply-alert }
undo routing-table limit
View
VPN instance view
Parameter
number: Maximum number of routes for the VPN instance to support, in the range 1 to 4096.
warn-threshold: Threshold for rejecting new routes. It is expressed in the percentage of the specified maximum number of routes for the VPN instance. It ranges from 1 to 100.
simply-alert: Specifies that when the maximum number of routes exceeds the threshold, the system still accepts routes and generates only a SYSLOG error message.
Description
Use the routing-table limit command to limit the maximum number of routes in a VPN instance, preventing too many routes from being redistributed from the inbound interface of the PE.
Use he undo routing-table limit command to remove the limitation.
By default, there is no limit to the maximum number of routes that a VPN instance supports.
Example
# Specify that VPN instance vpn1 can redistribute up to 1000 routes in, and allow the VPN instance to accept new routes after the threshold is exceeded.
<Sysname> system-view
[Sysname] ip vpn-instance vpn1
[Sysname-vpn-instance-vpn1] route-distinguisher 100:1
[Sysname-vpn-instance-vpn1] routing-table limit 1000 simply-alert
1.1.27 switch-mode mce
Syntax
switch-mode mce
switch-mode { default | dual-ipv4-ipv6 }
View
System view
Parameter
mce: Operates in MCE mode.
default: Operates in the default mode. In the default mode, only the IPv4 protocol stack is supported; MCE and the IPv6 protocol stack are not supported.
dual-ipv4-ipv6: Operates in IPv4/IPv6 dual stack mode. MCE is not supported in this mode.
Description
Use the switch-mode mce command to configure the device to operate in MCE mode.
Use the switch-mode { default | dual-ipv4-ipv6 } command to configure the device to operate in the default or dual stack mode.
By default, the switch operates in the default mode.
& Note:
The switch-mode mce command requires a reboot to take effect.
Example
# Configure the device to work in MCE mode.
<Sysname> system-view
[Sysname] switch-mode mce
1.1.28 vpn-instance-capability simple
Syntax
vpn-instance-capability simple
undo vpn-instance-capability
View
OSPF multi-instance view
Parameter
None
Description
Use the vpn-instance-capability simple command to enable multi-VPN-instance CE.
Use the undo vpn-instance-capability command to disable the function.
By default, the function is disabled.
Example
# Enable multi-VPN-instance CE.
<Sysname> system-view
[Sysname] ospf 100 vpn-instance vpna
[Sysname-ospf-100] vpn-instance-capability simple
1.1.29 vpn-target
Syntax
vpn-target vpn-target&<1-8> [ both | export-extcommunity | import-extcommunity ]
undo vpn-target { all | { vpn-target&<1-8> [ both | export-extcommunity | import-extcommunity ] }
View
VPN instance view
Parameter
vpn-target&<1-8>: Adds the VPN target extended community attribute to the import or export VPN target extended community list and specify the VPN target in the format nn:nn or IP-address:nn. &<1-8> means that you can specify this argument for up to 8 times.
A VPN target attribute can be of 3 to 21 characters and in either of these two formats:
l 16-bit AS number:32-bit user-defined number. For example, 101:3.
l 32-bit IP address:16-bit user-defined number. For example, 192.168.122.15:1.
both: Specifies both the export routing information to the destination VPN extended community and the import routing information from the destination VPN extended community. This is the default.
export-extcommunity: Specifies the export routing information to the destination VPN extended community.
import-extcommunity: Specifies the import routing information from the destination VPN extended community.
all: Specifies all export routing information to the destination VPN extended community and import routing information from the destination VPN extended community.
Description
Use the vpn-target command to associate the current VPN instance with one or more VPN targets.
Use the undo vpn-target command to remove the association of the current VPN instance with VPN targets.
VPN target has no default. You must configure it when creating a VPN instance.
Example
# Associate the current VPN instance with VPN targets.
<Sysname> system-view
[Sysname] ip vpn-instance vpn1
[Sysname-vpn-instance-vpn1] route-distinguisher 100:1
[Sysname-vpn-instance-vpn1] vpn-target 3:3 export-extcommunity
EVT Assignment result:
VPN-Target assignment is successful
[Sysname-vpn-instance-vpn1] vpn-target 4:4 import-extcommunity
IVT Assignment result:
VPN-Target assignment is successful
[Sysname-vpn-instance-vpn1] vpn-target 5:5 both
IVT Assignment result:
VPN-Target assignment is successful
EVT Assignment result:
VPN-Target assignment is successful