- Table of Contents
- Related Documents
-
Title | Size | Download |
---|---|---|
01-LISP commands | 165.57 KB |
database-mapping (dynamic-EID view)
database-mapping (LISP view/LISP-VRF view)
etr accept-map-request-mapping
map-server (LISP view/LISP-VRF view)
native-forward-map-cache timeout
LISP commands
Data Software licenses are required for some devices to support LISP. For more information about licensing, see license management in Fundamentals Configuration Guide.
allowed-locator
Use allowed-locator to configure an MS to permit only the specified RLOC address.
Use undo allowed-locator to remove the configuration.
Syntax
allowed-locator rloc-address
undo allowed-locator rloc-address
Default
An MS permits all RLOC addresses.
Views
IPv4 LISP site view
Predefined user roles
network-admin
Parameters
rloc-address: Specifies an RLOC in dotted decimal notation.
Usage guidelines
For an ETR to successfully register with an MS, the RLOC addresses in the Map-Register messages sent by the ETR must be permitted by the MS.
This command applies only to MSs.
You can execute this command multiple times to specify a maximum of eight RLOC addresses.
Examples
# Configure the MS to permit the RLOC address 11.11.11.11.
<Sysname> system-view
[Sysname] lisp
[Sysname-lisp] site site-1
[Sysname-lisp-site-site-1] allowed-locator 11.11.11.11
authentication-mode
Use authentication-mode to set the authentication mode for an MS.
Use undo authentication-mode to restore the default.
Syntax
authentication-mode sha-1 authentication-key { ciphertext | plaintext } string
authentication-mode none
undo authentication-mode
Default
No authentication mode is set for an MS and the MS does not accept Map-Register messages.
Views
IPv4 LISP site view
Predefined user roles
network-admin
Parameters
sha-1: Configures the MS to use SHA-1 to authenticate Map-Register messages sent by the ETRs.
ciphertext: Specifies a key in encrypted form.
plaintext: Specifies a key in plaintext form. For security purposes, the key specified in plaintext form will be stored in encrypted form.
string: Specifies the key. Its plaintext form is a case-sensitive string of 1 to 32 characters. Its encrypted form is a case-sensitive string of 33 to 73 characters.
none: Configures the MS to accept Map-Register messages without authentication.
Usage guidelines
This command applies only to MSs.
For an ETR to successfully register with an MS, make sure the MS and the ETR have the same authentication settings.
Examples
# Configure the MS to use SHA-1 and the plaintext key abc to authenticate Map-Register messages from the ETRs.
<Sysname> system-view
[Sysname] lisp
[Sysname-lisp] site site-1
[Sysname-lisp-site-site-1] authentication-mode sha-1 authentication-key plaintext abc
Related commands
etr map-server
database-mapping (dynamic-EID view)
Use database-mapping to configure an EID-to-RLOC mapping.
Use undo database-mapping to delete an EID-to-RLOC mapping.
Syntax
database-mapping eid-prefix prefix-length locator priority priority weight weight
undo database-mapping eid-prefix prefix-length locator
Default
No EID-to-RLOC mapping is configured.
Views
Dynamic-EID view
Predefined user roles
network-admin
Parameters
eid-prefix prefix-length: Specifies an EID prefix and its length. The eid-prefix argument represents the EID prefix in dotted decimal notation. The prefix-length argument represents the prefix length in the range of 0 to 32.
locator: Specifies an RLOC address. Typically, a loopback interface's address is used.
priority priority: Specifies the priority of the RLOC address, in the range of 0 to 255.
weight weight: Specifies the weight of the RLOC address, in the range of 0 to 100.
Usage guidelines
A host is permitted to roam in and out only if its IP prefix is in the dynamic EID space.
Examples
# Configure an EID-to-RLOC mapping by setting the dynamic EID prefix to 10.1.1.0/24, RLOC address to 11.11.11.11, priority to 1, and weight to 50.
<Sysname> system-view
[Sysname] lisp
[Sysname-lisp] dynamic-eid DE
[Sysname-lisp-dynamic-eid-DE] database-mapping 10.1.1.0 24 11.11.11.11 priority 1 weight 50
Related commands
roaming-eid-prefix
database-mapping (LISP view/LISP-VRF view)
Use database-mapping to configure an EID-to-RLOC mapping.
Use undo database-mapping to delete an EID-to-RLOC mapping.
Syntax
database-mapping eid-prefix prefix-length locator priority priority weight weight
undo database-mapping eid-prefix prefix-length locator
Default
No EID-to-RLOC mapping is configured.
Views
LISP view
LISP-VRF view
Predefined user roles
network-admin
Parameters
eid-prefix prefix-length: Specifies an EID prefix and its length. The eid-prefix argument represents the EID prefix in dotted decimal notation. The prefix-length argument represents the prefix length in the range of 0 to 32.
locator: Specifies an RLOC address. Typically, a loopback interface's address is used.
priority priority: Specifies the priority of the RLOC address, in the range of 0 to 255.
weight weight: Specifies the weight of the RLOC address, in the range of 0 to 100.
Usage guidelines
You can map a maximum of eight RLOC addresses to one EID prefix.
Examples
# Configure an EID-to-RLOC mapping by setting the EID prefix to 10.1.1.0/24, RLOC address to 11.11.11.11, priority to 1, and weight to 50.
<Sysname> system-view
[Sysname] lisp
[Sysname-lisp] database-mapping 10.1.1.0 24 11.11.11.11 priority 1 weight 50
Related commands
eid-prefix
description
Use description to configure a description for an IPv4 LISP site.
Use undo description to restore the default.
Syntax
description text
undo description
Default
The IPv4 LISP site does not have a description.
Views
IPv4 LISP site view
Predefined user roles
network-admin
Parameters
text: Specifies a description, a case-sensitive string of 1 to 255 characters.
Usage guidelines
This command applies only to MSs.
Examples
# Configure the description as abc for the IPv4 LISP site.
<Sysname> system-view
[Sysname] lisp
[Sysname-lisp] site site1
[Sysname-lisp-site-site1] description abc
display lisp dynamic-eid
Use display lisp dynamic-eid to display information about the LISP dynamic EID detection policies and the detected dynamic EIDs.
Syntax
display lisp dynamic-eid [ name dynamic-eid-name ] [ default | vrf vrf-name ] [ verbose ]
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
name dynamic-eid-name: Specifies a LISP dynamic EID detection policy by its name, a case-sensitive string of 1 to 63 characters. If you do not specify a LISP dynamic EID detection policy, this command displays information about all LISP dynamic EID detection policies.
default: Displays information for the public LISP network.
vrf vrf-name: Specifies an MPLS L3VPN instance by its name, a case-sensitive string of 1 to 31 characters.
verbose: Displays detailed information about the LISP dynamic EID detection policies and the detected dynamic EIDs. If you do not specify this keyword, the command displays brief information about the LISP dynamic EID detection policies and the detected dynamic EIDs.
Usage guidelines
If you do not specify any parameters, this command displays information about the LISP dynamic EID detection policies and the detected dynamic EIDs for all IPv4 LISP VRF instances.
Examples
# Display brief information about all LISP dynamic EID detection policies and the detected dynamic EIDs.
<Sysname> display lisp dynamic-eid
LISP dynamic EID information for public VRF
* = Dyn-EID learned by site-based Map-Notify
Dyn-EID name Dynamic EID Uptime Interface
a 1.1.1.2 00:01:05 GigabitEthernet1/0
# Display detailed information about all LISP dynamic EID detection policies and the detected dynamic EIDs.
<Sysname> display lisp dynamic-eid verbose
LISP dynamic EID information for public VRF
Dynamic EID name: a
Database-mapping EID-prefix: 1.1.1.0/24, instance-id: 0, LSBs: 0x00000001
Locator: 10.10.10.4, Priority: 1, Weight: 1
Uptime: 00:03:53, State: up, local
Registering more-specific dynamic-EIDs
Map servers: 10.10.10.3
Site-based multicast Map-Notify group: 239.0.0.2
Roaming dynamic EIDs allowed: 2.2.2.0/24
Number of roaming dynamic EIDs discovered: 1
Last dynamic EID discovered: 1.1.1.2, 00:03:54 ago
Roaming dynamic EIDs:
10.10.10.3, GigabitEthernet1/0, uptime: 00:03:54
discovered by: ip packet reception
10.10.10.4, NULL0, uptime: 00:03:54
discovered by: EID-Notify
EID-Notify Locators:
172.16.0.2
Table 1 Command output
Field |
Description |
Locator |
RLOC address. |
priority |
Priority of the RLOC address. |
weight |
Weight of the RLOC address. |
Uptime |
Time elapsed since the RLOC address became reachable. |
state |
State of the RLOC address. |
Map-Notify group |
Multicast address for Map-Notify messages. |
Roaming dynamic EIDs allowed |
Dynamic EID prefix range in which the dynamic EIDs are permitted to roam in. |
Number of roaming dynamic EIDs discovered |
Number of detected dynamic EIDs. |
Last dynamic EID discovered |
The most recently detected dynamic EID and time when the dynamic EID was detected. |
Roaming dynamic EIDs |
The detected dynamic EIDs. |
Interface |
Interface on which the dynamic EIDs were detected. |
discovered by |
How the roaming host was detected: · ip packet reception—Through IP packets. · arp packet reception—Through gratuitous ARP packets. · site-based Map-Notify—Through Map-Notify messages. · EID-Notify—Through EID-Notify messages. |
EID-Notify Locators |
RLOC addresses that are carried in the EID-Notify message. |
Related commands
reset lisp dynamic-eid
display lisp ipv4
Use display lisp ipv4 to display IPv4 LISP configuration information.
Syntax
display lisp ipv4 [ default | vrf vrf-name ]
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
default: Displays the public LISP network configuration information.
vrf vrf-name: Specifies an MPLS L3VPN instance by its name, a case-sensitive string of 1 to 31 characters.
Usage guidelines
If you do not specify any parameters, this command displays configuration information for all LISP VRF instances.
Examples
# Display the public LISP network configuration information.
<Sysname> display lisp ipv4 default
LISP IP Configuration Information for Public VRF (iid 0)
Ingress Tunnel Router (ITR): disabled
Egress Tunnel Router (ETR): disabled
Proxy-ITR Router (PITR): disabled
Proxy-ETR Router (PETR): disabled
Locator VRF: default
LISP-NAT Interworking: disabled
ITR send Map-Request: disabled
ITR send Data-Probe: disabled
LISP ALT-VRF: not configured
ETR glean mapping: disabled, verify disabled
ETR accept mapping data: disabled, verify disabled
ETR Map-Cache TTL: 1440 minutes
Shortest EID-prefix allowed: /16
Locator Reachability Algorithms:
Echo-nonce algorithm: disabled
TCP-counts algorithm: disabled
RLOC-probe algorithm: disabled
Static mappings configured: 0
Map-Cache limit: 0xFFFFFFFF
Map-Cache size: 0
Map-Resolver (MR): disabled
Map-Server (MS): disabled
Table 2 Command output
Field |
Description |
LISP IP Configuration Information for Public VRF/LISP IP Configuration Information for VRF vrfname |
Indicates that the configuration information is for the public LISP network/LISP VRF instance. |
iid |
Instance ID. |
Ingress Tunnel Router (ITR) |
State of the ITR feature: · enabled · disabled |
Egress Tunnel Router (ETR) |
State of the ETR feature: · enabled · disabled |
Proxy-ITR Router (PITR) |
State of the PITR feature: · enabled · disabled |
Proxy-ETR Router (PETR) |
State of the PETR feature: · enabled · disabled |
Locator VRF |
Name of the LISP VRF instance that the RLOC address space belongs. If this filed displays default, the RLOC address space belongs to the public LISP network. |
LISP-NAT Interworking |
State of the NAT feature: · enabled · disabled |
ITR send Map-Request |
Whether the feature of ITR sending Map-Request messages is enabled: · enabled · disabled |
ITR send Data-Probe |
Whether the feature of ITR sending data-probe messages is enabled: · enabled · disabled |
LISP ALT-VRF |
State of the Alternative Topology (ALT) VRF feature: · vrfname—Name of the ALT VRF. · not configured—The ALT VRF feature is not configured. |
ETR glean mapping |
Whether the feature of ETR gleaning EID-to-RLOC mappings from LISP encapsulated data packets is enabled: · enabled · disabled Whether the feature of ETR verifying the gleaned EID-to-RLOC mappings is enabled: · verify enabled · verify disabled |
ETR accept mapping data |
Whether the feature of ETR accepting the mapping information in Map-Request messages is enabled: · enabled · disabled Whether the feature of ETR verifying the mapping information is enabled: · verify enabled · verify disabled |
ETR Map-Cache TTL |
TTL value in Map-Reply and Map-Register messages, in minutes. |
Shortest EID-prefix allowed |
The minimum prefix length permitted by an ITR for EIDs in Map-Reply messages. |
Locator Reachability Algorithms |
Locator reachability detection algorithm: · Echo-nonce algorithm · TCP-counts algorithm · RLOC-probe algorithm |
Echo-nonce algorithm |
State of the Echo-nonce algorithm: · enabled · disabled |
TCP-counts algorithm |
State of the TCP-counts algorithm: · enabled · disabled |
RLOC-probe algorithm |
State of the RLOC-probe algorithm: · enabled · disabled |
Static mappings configured |
Number of static mapping cache entries. |
Map-Cache limit |
Maximum number of mapping cache entries that can be created. |
Map-Cache size |
Number of existing mapping cache entries. |
Map-Resolver (MR) |
State of the MR feature: · enabled · disabled |
Map-Server (MS) |
State of the MS feature: · enabled · disabled |
display lisp ipv4 database
Use display lisp ipv4 database to display IPv4 LISP local EID prefix information.
Syntax
display lisp ipv4 database [ destination-eid-prefix [ prefix-length ] ] [ default | vrf vrf-name ]
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
destination-eid-prefix [ prefix-length ]: Specifies a local EID prefix in dotted decimal notation. The prefix-length argument specifies the prefix length in the range of 0 to 32. If you do not specify a local EID prefix, this command displays all IPv4 LISP local EID prefix information.
default: Displays information about the local EID prefixes for the public IPv4 LISP network.
vrf vrf-name: Specifies an MPLS L3VPN instance by its name, a case-sensitive string of 1 to 31 characters.
Usage guidelines
This command applies only to ETRs.
If you do not specify any parameters, this command displays information about the local EID prefixes for all IPv4 LISP VRF instances.
Examples
# Display information about the local EID prefixes for the public IPv4 LISP network.
<Sysname> display lisp ipv4 database default
LISP ETR IP Mapping Database for Public VRF (iid 0), 1 entries
EID-prefix: 192.13.1.0/24, instance-id: 0, LSBs: 0x00000007, Sync Flags: 0x0001
Locator: 1.1.1.1, priority: 1, weight: 10
Uptime: 00:17:40, state: up, local
Data in/out: 0/0
Locator: 11.11.11.11, priority: 1, weight: 10
Uptime: 00:17:40, state: up, local
Data in/out: 0/0
Locator: 192.12.1.1, priority: 1, weight: 10
Uptime: 00:17:40, state: up, local
Data in/out: 0/0
Table 3 Command output
Field |
Description |
LISP ETR IP Mapping Database for Public VRF/LISP ETR IP Mapping Database for VRF vrfname |
Indicates that the local EID prefix information is for the public LISP network/LISP VRF instance. |
iid |
Instance ID. |
entries |
Number of EID prefixes. |
LSBs |
The locator status bits. |
Sync Flags |
EID synchronization flag. 0x0001 means that the EIDs are synchronized to the kernel. |
Locator |
RLOC address for the EID. |
priority |
Priority of the RLOC address. |
weight |
Weight of the RLOC address. |
Uptime |
Time during which the RLOC address is reachable. |
Downtime |
Time during which the RLOC address is unreachable. |
state |
State of the RLOC address: · up · down · admin-down · local |
Data in/out |
Number of encapsulated/decapsulated data packets. |
display lisp ipv4 data-cache
Use display lisp ipv4 data-cache to display IPv4 LISP data cache entries.
Syntax
display lisp ipv4 data-cache [ destination-eid-prefix ] [ default | vrf vrf-name ]
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
destination-eid-prefix: Specifies a destination EID prefix in dotted decimal notation. If you do not specify a destination EID prefix, this command displays all IPv4 LISP data cache entries.
default: Displays data cache entries for the public LISP network.
vrf vrf-name: Specifies an MPLS L3VPN instance by its name, a case-sensitive string of 1 to 31 characters.
Usage guidelines
This command applies only to ITRs.
If you do not specify any parameters, this command displays data cache entries for all IPv4 LISP VRF instances.
Examples
# Display data cache entries in the IPv4 LISP VRF instance red.
<Sysname> display lisp ipv4 data-cache vrf red
LISP IP Mapping Data Cache for VRF red (iid 13), 1 entries
192.23.1.3, uptime: 00:00:05, state: incomplete, nonce: 0x8a39f-0x12faf
Table 4 Command output
Field |
Description |
LISP IP Mapping Data Cache for Public VRF/LISP IP Mapping Data Cache for VRF vrfname |
Indicates that the data cache entries are for the public LISP network/LISP VRF instance. |
iid |
Instance ID. |
entries |
Number of data cache entries. |
uptime |
Time when the data cache entry was created. |
state |
State of the data cache entry: · Complete—The ITR received a Map-Reply message. · incomplete—The ITR did not receive a Map-Reply message. |
reset lisp ipv4 data-cache
display lisp ipv4 map-cache
Use display lisp ipv4 map-cache to display IPv4 LISP mapping cache entries.
Syntax
display lisp ipv4 map-cache [ destination-eid-prefix [ prefix-length ] ] [ default | vrf vrf-name ] [ verbose ]
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
destination-eid-prefix [ prefix-length ]: Specifies a destination EID prefix in dotted decimal notation. The prefix-length argument specifies the prefix length in the range of 0 to 32. If you do not specify a destination EID prefix, this command displays all IPv4 LISP mapping cache entries.
default: Displays mapping cache entries for the public LISP network.
vrf vrf-name: Specifies an MPLS L3VPN instance by its name, a case-sensitive string of 1 to 31 characters.
verbose: Displays detailed information about IPv4 LISP mapping cache entries. If you do not specify this keyword, the command displays brief information about IPv4 LISP mapping cache entries.
Usage guidelines
If you do not specify any parameters, this command displays mapping cache entries for all IPv4 LISP VRF instances.
Examples
# Display mapping cache entries for the public LISP network.
<Sysname> display lisp ipv4 map-cache default verbose
LISP IP Mapping Cache for Public VRF (iid 0), 1 entries
192.23.1.0/24, uptime: 00:01:13, expires: 01:58:46, via map-reply
Last activity: 00:00:39
State: complete, last modified: 00:01:13, map-source: 192.22.1.3
Locator Uptime State Priority/ Data Control
Weight in/out in/out
3.3.3.3 00:01:13 up 1/10 0/4 0/0
Last up/down state change: 00:01:13, state change count: 1
Last data packet in/out: never/00:00:39
Last control packet in/out: never/never
Last priority/weight change: never/never
Sync Flags: 0x0003
TnlID: 0x1000000
192.22.1.3 00:01:13 up 1/10 3/0 1/0
Last up/down state change: 00:01:13, state change count: 1
Last data packet in/out: 00:00:39/never
Last control packet in/out: 00:01:13/never
Last priority/weight change: never/never
Sync Flags: 0x0003
TnlID: 0x2000001
Table 5 Command output
Field |
Description |
LISP IP Mapping Cache for Public VRF/LISP IP Mapping Cache for VRF vrfname |
Indicates that the mapping cache entries are for the public LISP network/LISP VRF instance. |
iid |
Instance ID. |
entries |
Number of mapping cache entries. |
uptime |
Time elapsed since the mapping cache entry was created. |
expires |
Mapping cache entry aging time. |
via |
How the mapping cache entry was created: · static—Statically configured. · map-reply—Learned from a Map-Reply message. · map-request—Learned from a Map-Request message. |
Last activity |
Time period during which the mapping cache entry was used for traffic routing and forwarding (traffic input/output) for the most recent time. |
State |
State of the mapping cache entry: · complete—The mapping cache entry is validated. · tentative—The mapping cache entry is tentative. |
last modified |
Most recent mapping cache entry modification time. |
map-source |
Source IP address of the Map-Request or Map-Reply message that was used to create the mapping cache entry. This field displays local if the mapping cache entry was statically configured. |
Locator |
RLOC address. |
Uptime |
Time elapsed since the RLOC address became reachable. |
State |
State of the RLOC address: · up · down · no-route |
Priority/ Weight |
Priority/Weight of the RLOC address. |
Data in/out |
Number of encapsulated/decapsulated data packets. |
Control in/out |
Number of received/sent LISP control messages. |
Last up/down state change |
Time elapsed since the last time the RLOC address state changed. |
Last data packet in/out |
Most recent data packet encapsulation/decapsulation time. |
Last control packet in/out |
Most recent LISP control message receiving/sending time. |
Last priority/weight change |
Most recent RLOC address priority/weight changing time. |
Sync Flags |
RLOC synchronization flag: · 0x0001—The RLOC addresses are synchronized to RIB. · 0x0002—The RLOC addresses are synchronized to the LINUX kernel. |
TnlID |
ID of the tunnel for the RLOC address. |
Related commands
reset lisp ipv4 map-cache
display lisp ipv4 statistics
Use display lisp ipv4 statistics to display IPv4 LISP statistics.
Syntax
display lisp ipv4 statistics [ default | vrf vrf-name ]
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
default: Displays the public LISP network statistics.
vrf vrf-name: Specifies an MPLS L3VPN instance by its name, a case-sensitive string of 1 to 31 characters.
Usage guidelines
If you do not specify any parameters, this command displays statistics about all IPv4 LISP VRF instances.
Examples
# Display the public IPv4 LISP network statistics.
<Sysname> display lisp ipv4 statistics default
LISP IP Statistics Information for Public VRF (iid 0) - last cleared: never
Control Packets:
Map-Requests in/out: 1/9
Encapsulated Map-Requests in/out: 1/9
RLOC-probe Map-Requests in/out: 0/0
SMR-based Map-Requests in/out: 0/0
Map-Replies in/out: 1/1
Authoritative in/out: 1/1
Non-authoritative in/out: 0/0
Negative Map-Replies in/out: 0/0
RLOC-probe Map-Replies in/out: 0/0
Map-Registers in/out: 0/121
Authentication failures: 0
Map-Notifies in/out: 0/0
Authentication failures: 0
Map-Notify-Acks in/out: 0/0
Errors:
Map-Request format errors: 0
Map-Reply format errors: 0
Map-Reply spoof alerts: 0
Table 6 Command output
Field |
Description |
LISP IP Statistics Information for Public VRF/LISP IP Statistics Information for VRF vrfname |
Indicates that the statistics are for the public LISP network/LISP VRF instance. |
iid |
Instance ID. |
last cleared |
Most recent statistics clearing time. |
Control Packets |
LISP control messages. |
Map-Requests in/out |
Number of received/sent Map-Request messages. |
Encapsulated Map-Requests in/out |
Number of received/sent encapsulated Map-Request messages. |
RLOC-probe Map-Requests in/out |
Number of received/sent RLOC-probe Map-Request messages. |
SMR-based Map-Requests in/out |
Number of received/sent SMR-based Map-Request messages. |
Map-Replies in/out |
Number of received/sent Map-Reply messages. |
Authoritative in/out |
Number of received/sent authoritative Map-Reply messages. |
Non-authoritative in/out |
Number of received/sent non-authoritative Map-Reply messages. |
Negative Map-Replies in/out |
Number of received/sent negative Map-Reply messages. |
RLOC-probe Map-Replies in/out |
Number of received/sent RLOC-probe Map-Reply messages. |
Map-Registers in/out |
Number of received/sent Map-Register messages. |
Authentication failures |
Number of Map-Register message authentication failures. |
Map-Notifies in/out |
Number of received/sent Map-Notify messages. |
Authentication failures |
Number of Map-Notify message authentication failures. |
Map-Notify-Acks in/out |
Number of received/sent Map-ACK messages. |
Errors |
Number of error data packets. |
Map-Request format errors |
Number of Map-Request messages with incorrect format. |
Map-Reply format errors |
Number of Map-Reply messages with incorrect format. |
Map-Reply spoof alerts |
Number of unsolicited Map-Reply messages. |
Related commands
reset lisp ipv4 statistics
display lisp site
Use display lisp site to display IPv4 LISP site information.
Syntax
display lisp site [ destination-eid-prefix [ prefix-length ] | name site-name ] [ default | vrf vrf-name ] [ verbose ]
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
destination-eid-prefix [ prefix-length ]: Specifies a destination EID prefix in dotted decimal notation. The prefix-length argument specifies the prefix length in the range of 0 to 32. If you do not specify a destination EID prefix, this command displays all IPv4 LISP site information.
name site-name: Specifies an IPv4 LISP site by its name, a case-sensitive string of 1 to 63 characters. If you do not specify a LISP site, this command displays all IPv4 LISP site information.
default: Displays information about LISP sites for the public LISP network.
vrf vrf-name: Specifies an MPLS L3VPN instance by its name, a case-sensitive string of 1 to 31 characters.
verbose: Displays detailed information about IPv4 LISP sites. If you do not specify this keyword, the command displays brief information about IPv4 LISP sites.
Usage guidelines
If you do not specify any parameters, this command displays information about LISP sites in all IPv4 LISP VRF instances.
Examples
# Display brief information about IPv4 LISP sites for the public LISP network.
<Sysname> display lisp site default
LISP Site Registration Information for Public VRF
Site Name Last Actively Who last EID-prefix Inst
Registered Registered Registered ID
site1 never no -- 192.13.1.0/24 0
00:22:39 no 192.12.1.1 192.13.1.0/24-1 13
site2 never no -- 192.23.1.0/24 0
00:00:39 yes 192.22.1.3 192.23.1.0/24 13
Table 7 Command output
Field |
Description |
LISP Site Registration Information for Public VRF/LISP Site Registration Information for VRF vrfname |
Indicates that the site information is for the public LISP network/LISP VRF instance. |
Last registered |
Most recent EID prefix registration time. |
Actively Registered |
Whether the EID prefix is registered: · yes · no |
Who last registered |
ETR that most recently registered the EID prefix. |
EID-prefix |
EID prefix configured for the LISP site. -cnt indicates the number of EID prefixes that are more specific than the configured EID prefix. |
Inst ID |
ID of the instance to which the EID prefix belongs. |
# Display detailed information about the IPv4 LISP sites for the public network.
<Sysname> display lisp site default verbose
LISP Site Registration Information for Public VRF
Site name: site1
Description: none configured
Allowed configured locators: any
Configured EID-prefix: 192.13.1.0/24, instance-id: 13
Currently registered: yes
First registered: 02:47:44
Last registered: 00:00:07
Who last registered: 192.12.1.1
Routing table tag: 0
Proxy Replying: no
Wants Map-Notifications: no
Registered TTL: 120 minutes
Registered locators:
1.1.1.1 (LR), priority: 1, weight: 10
11.11.11.11 (LR), priority: 1, weight: 10
192.12.1.1 (LR), priority: 1, weight: 10
Registration errors:
Authentication failures: 0
Allowed locators mismatch: 0
More-specific EID-prefix: 192.13.1.9/32, instance-id: 13
Currently registered: yes
First registered: 00:00:04
Last registered: 00:00:04
Who last registered: 192.168.10.1
Routing table tag: 0
Proxy Replying: no
Wants Map-Notifications: no
Registered TTL: 1440 minutes
Registered locators:
192.168.10.1 (LR), priority: 1, weight: 1
Registration errors:
Authentication failures: 0
Allowed locators mismatch: 0
Table 8 Command output
Field |
Description |
Description |
Description of the LISP site. This field displays none configured if no description is configured for the LISP site. |
Allowed configured locators |
RLOC addresses that are permitted to be registered. This field displays any if all RLOC addresses are permitted. |
Configured EID-prefix |
EID prefix configured for the LISP site. |
instance-id |
ID of the instance to which the EID prefix belongs. |
Currently registered |
Whether the EID prefix is registered: · yes · no |
First registered |
Time when the EID prefix was registered for the first time. |
Proxy Replying |
Whether the registrant accepts replies from an MS proxy: · yes · no |
Wants Map-Notifications |
Whether the registrant requires Map-Notify messages: · yes · no |
Registered TTL |
TTL value for the registered EID mapping entry, in minutes. |
Registered locators |
Registered RLOC address for the EID prefix: · L—RLOC address of the registrant. · R—The RLOC address of the registrant is routable. · priority Locator—Priority of the RLOC address. · weight Locator—Weight of the RLOC address. |
Registration errors |
Number of registration errors. |
Authentication failures |
Number of authentication failures. |
Allowed locators mismatch |
Number of RLOCs that failed to match the permitted RLOC addresses. |
More-specifics registered |
Number of EID prefixes that are more specific than the configured EID prefix. |
More-specific EID-prefix |
EID prefixes that are more specific than the configured EID prefix. |
Related commands
reset lisp lisp site
dynamic-eid
Use dynamic-eid to create a dynamic EID detection policy and enter its view, or enter the view of an existing dynamic EID detection policy.
Use undo dynamic-eid to delete a dynamic EID detection policy and all configuration in its view.
Syntax
dynamic-eid dynamic-eid-name
undo dynamic-eid dynamic-eid-name
Default
No dynamic EID detection policies exist.
Views
LISP view
LISP-VRF view
Predefined user roles
network-admin
Parameters
dynamic-eid-name: Assigns a name to the dynamic EID detection policy, a case-sensitive string of 1 to 63 characters.
Usage guidelines
Only the hosts that match the specified dynamic EID detection policy are permitted to roam.
Examples
# Create the dynamic EID detection policy DE and enter its view.
<Sysname> system-view
[Sysname] lisp
[Sysname-lisp] dynamic-eid DE
[Sysname-lisp-dynamic-eid-DE]
eid-notify
On an FHR:
Use eid-notify to enable the FHR to send dynamic EID information and set the authentication mode.
Use undo eid-notify to disable the FHR from sending dynamic EID information.
On an xTR:
Use eid-notify to enable the xTR to accept dynamic EID information and set the authentication mode.
Use undo eid-notify to disable the xTR from accepting dynamic EID information.
Syntax
On an FHR:
eid-notify xtr-address authentication-mode { none | sha-1 authentication-key { ciphertext | plaintext } string }
undo eid-notify xtr-address
On an xTR:
eid-notify authentication-mode { none | sha-1 authentication-key { ciphertext | plaintext } string }
undo eid-notify authentication-mode
Default
An FHR does not send dynamic EID information, and an xTR does not accept dynamic EID information.
Views
Dynamic-EID view
Predefined user roles
network-admin
Parameters
xtr-address: Specifies the IP address of an xTR in the LISP site.
authentication-mode none: Enables the FHR to send dynamic EID information or the xTR to receive EID information without authentication.
authentication-mode sha-1: Specifies the SHA-1 authentication mode.
authentication-key ciphertext: Specifies a key in encrypted form.
authentication-key plaintext: Specifies a key in plaintext form. For security purposes, the key specified in plaintext form will be stored in encrypted form.
string: Specifies the key. Its plaintext form is a case-sensitive string of 1 to 32 characters. Its encrypted form is a case-sensitive string of 33 to 73 characters.
Usage guidelines
If you configure an FHR to send dynamic EID information, you must specify the xtr-address argument in this command. You can specify a maximum of four different xTR IP addresses. If you configure an xTR to accept dynamic EID information, you do not need to specify an xTR IP address in this command.
Make sure both the FHR and xTR have the same authentication settings. If the authentication settings are different, the FHR fails to send the dynamic EID information or the xTR fails to receive the dynamic EID information.
Examples
# Configure the FHR to notify the xTR (with the IP address 172.16.0.2) of dynamic EID information without authentication.
<Sysname> system-view
[Sysname] lisp
[Sysname-lisp] dynamic-eid DE
[Sysname-lisp-dynamic-eid-DE] eid-notify 172.16.0.2 authentication-mode none
eid-prefix
Use eid-prefix to configure an MS to permit an EID prefix for registration.
Use undo eid-prefix to remove a permitted EID prefix.
Syntax
eid-prefix eid-prefix prefix-length [ instance-id id ] [ accept-more-specifics ]
undo eid-prefix eid-prefix prefix-length [ instance-id id ]
Default
An MS does not permit any EID prefixes and does not process any Map-Register messages.
Views
LISP site view
Predefined user roles
network-admin
Parameters
eid-prefix prefix-length: Specifies an EID prefix and its length. The eid-prefix argument represents the EID prefix in dotted decimal notation. The prefix-length argument represents the prefix length in the range of 0 to 32.
instance-id id: Specifies a LISP VRF instance by its ID in the range of 0 to 16777215. If you do not specify an instance ID, LISP VRF instance 0 is specified. The instance ID must be the same as that specified by using the xtr instance-id command.
accept-more-specifics: Configures the MS to permit EID prefixes that are longer than the configured EID prefix. Specify this keyword only if your device supports virtual machine mobility.
Usage guidelines
This command applies only to MSs.
For an ETR to successfully register with an MS, you must configure the MS to permit the same EID prefixes configured on the ETR by using the database-mapping command.
Examples
# Configure the MS to permit the EID prefix 10.1.1.0/24.
<Sysname> system-view
[Sysname] lisp
[Sysname-lisp] site site-1
[Sysname-lisp-site-site-1] eid-prefix 10.1.1.0 24
Related commands
database-mapping (LISP view/LISP-VRF view)
xtr instance-id
etr
Use etr to enable the IPv4 ETR feature.
Use undo etr to disable the IPv4 ETR feature.
Syntax
etr
undo etr
Default
The IPv4 ETR feature is disabled.
Views
LISP view
LISP-VRF view
Predefined user roles
network-admin
Examples
# Enable the IPv4 ETR feature.
<Sysname> system-view
[Sysname] lisp
[Sysname-lisp] etr
etr accept-map-request-mapping
Use etr accept-map-request-mapping to configure an ETR to accept the mapping information in Map-Request messages.
Use undo etr accept-map-request-mapping to restore the default.
Syntax
etr accept-map-request-mapping [ verify ]
undo etr accept-map-request-mapping
Default
An ETR does not accept the mapping information in Map-Request messages.
Views
LISP view
LISP-VRF view
Predefined user roles
network-admin
Parameters
verify: Enables the ETR to verify the mapping information in Map-Request messages. To verify the mapping information in a Map-Request message, the ETR sends its own Map-Request message to the sender of the Map-Request message. If you do not specify this keyword, the ETR directly use the mapping information for packet forwarding.
Examples
# Configure the ETR to accept and use the mapping information in Map-Request messages without verification.
<Sysname> system-view
[Sysname] lisp
[Sysname-lisp] etr accept-map-request-mapping
Related commands
etr
etr map-cache-ttl
Use etr map-cache-ttl command to set the TTL value in Map-Reply messages sent by an ETR.
Use undo etr map-cache-ttl to restore the default.
Syntax
etr map-cache-ttl ttl
undo etr map-cache-ttl
Default
The TTL value in Map-Reply messages is 1440 minutes (24 hours).
Views
LISP view
LISP-VRF view
Predefined user roles
network-admin
Parameters
ttl: Specifies the TTL value in Map-Reply messages, in the range of 60 to 10080 minutes.
Usage guidelines
When an ETR responds to an ITR with Map-Reply messages, it sets a TTL value in the messages. The ITR sets the TTL value for the cache entries according to the TTL value in these messages.
Examples
# Set the TTL value in Map-Reply messages to 120 minutes.
<Sysname> system-view
[Sysname] lisp
[Sysname-lisp] etr map-cache-ttl 120
etr map-server
Use etr map-server to specify an MS address for an IPv4 ETR.
Use undo etr map-server to remove an MS address.
Syntax
etr map-server map-server-address authentication-mode none [ proxy-reply ]
etr map-server map-server-address authentication-mode sha-1 authentication-key { ciphertext | plaintext } string [ proxy-reply ]
undo etr map-server map-server-address
Default
No MS address is specified for an IPv4 ETR.
Views
LISP view
LISP-VRF view
Predefined user roles
network-admin
Parameters
map-server-address: Specifies an MS address.
authentication-mode none: Configures the ETR to register with an MS without authentication.
authentication-mode sha-1: Configures the ETR to use SHA-1 to authenticate to an MS for registration.
authentication-key ciphertext: Specifies a key in encrypted form.
authentication-key plaintext: Specifies a key in plaintext form. For security purposes, the key specified in plaintext form will be stored in encrypted form.
string: Specifies the key. Its plaintext form is a case-sensitive string of 1 to 32 characters. Its encrypted form is a case-sensitive string of 33 to 73 characters.
proxy-reply: Configures the ETR to use the MS as a proxy to respond to the ITR.
Usage guidelines
An ETR periodically sends Map-Register messages to an MS if the following requirements are met:
· The MS address is specified for the ETR by using this command.
· The specified MS address is reachable.
You can specify a maximum of two MS addresses in LISP-VRF view.
Examples
# Specify the MS address 44.44.44.44 for the ETR, and configure the ETR to use SHA-1 and the plaintext key 12345 to authenticate to the MS.
<Sysname> system-view
[Sysname] lisp
[Sysname-lisp] etr map-server 44.44.44.44 authentication-mode sha-1 authentication-key plaintext 123456
Related commands
etr
itr
Use itr to enable the IPv4 ITR feature.
Use undo itr to disable the IPv4 ITR feature.
Syntax
itr
undo itr
Default
The IPv4 ITR feature is disabled.
Views
LISP view
LIPS VRF instance view
Predefined user roles
network-admin
Examples
# Enable the IPv4 ITR feature.
<Sysname> system-view
[Sysname] lisp
[Sysname-lisp] itr
itr map-resolver
Use itr map-resolver to specify an MR address for an IPv4 ITR.
Use undo itr map-resolver to remove an MR address.
Syntax
itr map-resolver map-resolver-address
undo itr map-resolver map-resolver-address
Default
No MR address is specified for an IPv4 ITR.
Views
LISP view
LISP-VRF view
Predefined user roles
network-admin
Parameters
map-resolver-address: Specifies an MR address.
Usage guidelines
You can specify a maximum of two MR addresses in LISP-VRF view.
After you specify an MR address, the ITR encapsulates Map-Request messages in ECM messages and sends them to the MR.
Examples
# Specify the MR address 44.44.44.44 for the ITR.
<Sysname> system-view
[Sysname] lisp
[Sysname-lisp] itr map-resolver 44.44.44.44
lig
Use lig to query the mapping information in the LISP mapping database.
Syntax
lig { destination-eid | hostname | self } [ count count ] [ source source-eid ] [ to map-resolver ] [ timer timeout ] [ vrf vrf-name ]
Views
Any view
Predefined user roles
network-admin
Parameters
destination-eid: Specifies the destination EID.
hostname: Specifies the name of the destination host, a case-insensitive string of 1 to 253 characters.
self: Checks whether the local EID prefix is registered in the LISP mapping database.
count count: Specifies the maximum number of Map-Request messages to be sent, in the range of 1 to 5. The default value is 3.
source source-eid: Specifies the source EID in Map-Request messages. By default, the EID in the first mapping cache entry of the database is used.
to map-resolver: Specifies an MR address as the destination address of Map-Request messages. By default, Map-Request messages are sent to the configured MR.
timer timeout: Specifies the interval for sending another Map-Request message when no Map-Reply message is returned, in the range of 1 to 5 seconds. The default interval is 2 seconds.
vrf vrf-name: Specifies an MPLS L3VPN instance by its name, a case-sensitive string of 1 to 31 characters. If you do not specify a VPN instance, this command queries mapping information in the database of the public LISP network.
Usage guidelines
If you specify the hostname argument, make sure DNS is configured on the local device. If DNS is not configured, the query will fail.
You can press Ctrl + C to terminate the query process.
Examples
# Query mapping information for the EID 1.1.1.1.
<Sysname> lig 1.1.1.1
Sending Map-Request to 10.1.1.5 for 1.1.1.1
Received Map-Reply from 10.1.1.1 with rtt 0.002709 sec
Map-cache entry for EID 1.1.1.1:
1.1.1.1/32; uptime: 00:00:01; expires: 23:59:58; via Map-Reply; auth
Locator Uptime State Priority/Weight Data in/out Control in/out
10.1.1.1 00:00:01 up 1/2 0/0 5/0
# Obtain mapping information for the EID 1.1.1.1 from the MR 10.1.1.2.
<Sysname> lig 1.1.1.1 to 10.1.1.2
Sending Map-Request to 10.1.1.2 for 1.1.1.1 ...
Received Map-Reply from 10.1.1.2 with rtt 0.002709 sec
Map-cache entry for EID 1.1.1.1:
1.1.1.1/32; uptime: 00:00:01; expires: 23:59:58; via Map-Reply; auth
Locator Uptime State Priority/Weight Data in/out Control in/out
10.1.1.1 00:00:01 up 1/2 0/0 5/0
# Check whether the EID prefix is registered in the LISP mapping database.
<Sysname> lig self
Sending loopback Map-Request to 192.168.10.2 for 10.10.10.0 ...
Received Map-Reply from 127.0.0.1 with rtt 0.003030 sec
Map-cache entry for EID 10.10.10.0:
10.10.10.0/24; uptime: 08:51:48; expires: 23:59:58; via Map-Reply; self
Locator Uptime State Priority/Weight Data in/out Control in/out
192.168.10.1 08:51:48 up 1/2 0/0 0/0
Table 9 Command output
Field |
Description |
uptime |
Time elapsed since the EID prefix became up. |
expires |
Remaining EID prefix aging time. |
Locator |
RLOC address. |
Uptime |
Time elapsed since the RLOC address became reachable. |
State |
State of the RLOC address. |
Priority/Weight |
Priority and weight of the RLOC address. |
Data in/out |
Number of received and sent data packets. |
Control in/out |
Number of received and sent LISP control messages. |
lisp
Use lisp to enable LISP and enter its view.
Use undo lisp to disable LISP.
Syntax
lisp
undo lisp
Default
LISP is disabled.
Views
System view
Predefined user roles
network-admin
Examples
# Enable LISP and enter its view.
<Sysname> system-view
[Sysname] lisp
[Sysname-lisp]
lisp extended-subnet-mode
Use lisp extended-subnet-mode to enable support for extended subnets on an interface.
Use undo lisp extended-subnet-mode to disable support for extended subnets on an interface.
Syntax
lisp extended-subnet-mode
undo lisp extended-subnet-mode
Default
Support for extended subnets is disabled on an interface.
Views
Interface view
Predefined user roles
network-admin
Usage guidelines
This command allows an interface to detect virtual machine mobility within the subnet that the interface is attached to.
Examples
# Configure GigabitEthernet 1/0 to support extended subnets.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0
[Sysname-GigabitEthernet1/0] lisp extended-subnet-mode
lisp mobility
Use lisp mobility to apply a dynamic EID detection policy to an interface.
Use undo lisp mobility to remove a dynamic EID detection policy from an interface.
Syntax
lisp mobility dynamic-eid-name
undo lisp mobility dynamic-eid-name
Default
No dynamic EID detection policy is applied to an interface.
Views
Interface view
Predefined user roles
network-admin
Parameters
dynamic-eid-name: Specifies a dynamic EID detection policy by its name, a case-sensitive string of 1 to 63 characters.
Usage guidelines
An interface performs virtual machine mobility detection only if a dynamic EID detection policy is applied to it.
Examples
# Apply the dynamic EID detection policy DE to GigabitEthernet 1/0.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0
[Sysname-GigabitEthernet1/0] lisp mobility DE
locator-down
Use locator-down to configure an RLOC address in the EID-to-RLOC mapping database as unreachable.
Use undo locator-down to remove the configuration.
Syntax
locator-down eid-prefix prefix-length locator
undo locator-down eid-prefix prefix-length locator
Default
No RLOC address in the EID-to-RLOC mapping database is configured as unreachable.
Views
LISP view
LISP-VRF view
Predefined user roles
network-admin
Parameters
eid-prefix prefix-length: Specifies an EID prefix and its length. The eid-prefix argument represents the EID prefix in dotted decimal notation. The prefix-length argument represents the prefix length in the range of 0 to 32.
locator: Specifies an RLOC address.
Usage guidelines
For the command to take effect, make sure the EID-to-RLOC mapping already exists in the database.
Examples
# Configure the RLOC address 11.11.11.11 as unreachable.
<Sysname> system-view
[Sysname] lisp
[Sysname-lisp]
[Sysname-lisp] locator-down 10.1.1.0 24 11.11.11.11
Related commands
database-mapping
locator-vrf
Use locator-vrf to assign the RLOC address space to a VRF instance.
Use undo locator-vrf to restore the default.
Syntax
locator-vrf { default | vrf vrf-name }
undo locator-vrf
Default
The RLOC address space belongs to the LISP VRF instance.
Views
LISP view
LISP-VRF view
Predefined user roles
network-admin
Parameters
default: Assign the RLOC address space to the public LISP network.
vrf vrf-name: Specifies an MPLS L3VPN instance by its name, a case-sensitive string of 1 to 31 characters. The MPLS L3VPN instance must already exist.
Examples
# Assign the RLOC address space to the public network.
<Sysname> system-view
[Sysname] lisp
[Sysname-lisp] locator-vrf default
map-cache
Use map-cache to create a static EID-to-RLOC mapping cache entry.
Use undo map-cache to delete a static EID-to-RLOC mapping cache entry.
Syntax
map-cache destination-eid-prefix prefix-length { locator priority priority weight weight | drop | map-request | native-forward }
undo map-cache destination-eid-prefix prefix-length { locator | drop | map-request | native-forward }
Default
No static EID-to-RLOC mapping cache entry is created.
Views
LISP view
LISP-VRF view
Predefined user roles
network-admin
Parameters
eid-prefix prefix-length: Specifies an EID prefix and its length. The eid-prefix argument represents the EID prefix in dotted decimal notation. The prefix-length argument represents the prefix length in the range of 0 to 32.
locator: Specifies an RLOC address.
priority priority: Specifies the priority for the RLOC address, in the range of 0 to 255. The smaller the priority value, the higher the priority. A value of 255 means that the priority is invalid.
weight weight: Specifies the weight for the RLOC address, in the range of 0 to 100.
drop: Drops packets that match the created static EID-to-RLOC mapping cache entry.
map-request: Sends Map-Request messages for packets that match the created static EID-to-RLOC mapping cache entry.
native-forward: Forwards packets that match the created static EID-to-RLOC mapping cache entry without LISP routing.
Usage guidelines
The EID-to-RLOC mapping cache entries consist of static mapping cache entries and dynamic mapping cache entries.
Examples
# Create a static mapping cache entry in LISP view.
<Sysname> system-view
[Sysname] lisp
[Sysname-lisp] map-cache 10.1.1.0 24 12.1.1.1 priority 1 weight 50
Related commands
map-cache-limit
map-cache-limit
Use map-cache-limit to set the maximum number of EID-to-RLOC mapping cache entries.
Use undo map-cache-limit to restore the default.
Syntax
map-cache-limit cache-limit
undo map-cache-limit
Default
The maximum number of EID-to-RLOC mapping cache entries is not set.
Views
LISP view
LISP-VRF view
Predefined user roles
network-admin
Parameters
cache-limit: Specifies the maximum number of EID-to-RLOC mapping cache entries, in the range of 1 to 4294967295.
Usage guidelines
Follow these restrictions and guidelines to create new mapping cache entries when the maximum number of mapping cache entries (both static and dynamic EID-to-RLOC mapping cache entries) is reached:
· If the database contains both static and dynamic mapping cache entries, you can create only static mapping cache entries. The new static mapping cache entries overwrite the existing dynamic mapping cache entries.
· If the database contains only static mapping cache entries, you cannot create new mapping cache entries.
You can use the reset lisp ipv4 map-cache command to manually clear the dynamic mapping entries or wait for the dynamic mapping entries to age out.
Examples
# Set the maximum number of EID-to-RLOC mapping cache entries to 2000.
<Sysname> system-view
[Sysname] lisp
[Sysname-lisp] map-cache-limit 2000
Related commands
map-cache
map-notify-group
Use map-notify-group to specify a multicast address for Map-Notify messages.
Use undo map-notify-group to restore the default.
Syntax
map-notify-group map-notify-group-address
undo map-notify-group
Default
No multicast address is specified for Map-Notify messages.
Views
Dynamic-EID view
Predefined user roles
network-admin
Parameters
map-notify-group-address: Specifies a multicast address for Map-Notify messages.
Usage guidelines
When an xTR detects a roaming host, it sends Map-Notify messages to the specified multicast address to notify all the other xTRs in the LISP site.
Examples
# Specify the multicast address 239.0.0.2 for Map-Notify messages.
<Sysname> system-view
[Sysname] lisp
[Sysname-lisp] dynamic-eid DE
[Sysname-lisp-dynamic-eid-DE] map-notify-group 239.0.0.2
map-resolver
Use map-resolver to enable the IPv4 MR feature.
Use undo map-resolver to disable the IPv4 MR feature.
Syntax
map-resolver
undo map-resolver
Default
The IPv4 MR feature is disabled.
Views
LISP view
LISP-VRF view
Predefined user roles
network-admin
Usage guidelines
An MR processes and forwards Map-Request messages.
Examples
# Enable the IPv4 MR feature.
<Sysname> system-view
[Sysname] lisp
[Sysname-lisp] map-resolver
map-server (dynamic-EID view)
Use map-server to specify an MS address for the dynamic EID space and set the authentication mode.
Use undo map-server to remove an MS address.
Syntax
map-server map-server-address authentication-mode none [ proxy-reply ]
map-server map-server-address authentication-mode sha-1 authentication-key { ciphertext | plaintext } string [ proxy-reply ]
undo map-server map-server-address
Default
No MS address is specified for the dynamic EID space.
Views
Dynamic-EID view
Predefined user roles
network-admin
Parameters
map-server-address: Specifies an MS address.
authentication-mode none: Configures an xTR to register with an MS without authentication.
authentication-mode sha-1: Configures an xTR to use SHA-1 to authenticate to an MS for registration.
authentication-key ciphertext: Specifies a key in encrypted form.
authentication-key plaintext: Specifies a key in plaintext form. For security purposes, the key specified in plaintext form will be stored in encrypted form.
string: Specifies the key. Its plaintext form is a case-sensitive string of 1 to 32 characters. Its encrypted form is a case-sensitive string of 33 to 73 characters.
proxy-reply: Specifies that the MS can return Map-Reply messages as a proxy.
Usage guidelines
When an xTR detects a roaming virtual machine, it registers the detected dynamic EID information with the MS specified by using this command.
If no MS address is specified for the dynamic EID space, the xTR registers the detected dynamic EID information with the MS in the LISP VRF instance.
You can specify a maximum of two MS addresses.
Examples
# Specify the MS address 44.44.44.44 for the dynamic EID space, configure the xTR to use SHA-1 and the plaintext key 123456 to authenticate to the MS.
<Sysname> system-view
[Sysname] lisp
[Sysname-lisp] dynamic-eid DE
[Sysname-lisp-dynamic-eid-DE] map-server 44.44.44.44 authentication-mode sha-1 authentication-key plaintext 123456
map-server (LISP view/LISP-VRF view)
Use map-server to enable the IPv4 MS feature.
Use undo map-server to disable the IPv4 MS feature.
Syntax
map-server
undo map-server
Default
The IPv4 MS feature is disabled.
Views
LISP view
LISP-VRF view
Predefined user roles
network-admin
Examples
# Enable the IPv4 MS feature.
<Sysname> system-view
[Sysname] lisp
[Sysname-lisp] map-server
native-forward-map-cache timeout
Use native-forward-map-cache timeout to set the aging time for the native-forward type mapping cache entries.
Use undo native-forward-map-cache timeout to restore the default.
Syntax
native-forward-map-cache timeout time
undo native-forward-map-cache timeout
Default
The aging time of the native-forward type mapping cache entries depends on the configuration of the MS and the registration.
Views
LISP view
LISP-VRF view
Predefined user roles
network-admin
Parameters
time: Specifies the aging time for the native-forward type mapping cache entries, in the range 1 to 60 seconds.
Usage guidelines
To speed up LISP communication during the system startup, you can use this command to set a shorter aging time.
Examples
# Set the aging time to 1 second for the native-forward type mapping cache entries.
<Sysname> system-view
[Sysname] lisp
[Sysname-lisp] native-forward-map-cache timeout 1
reset lisp dynamic-eid
Use reset lisp dynamic-eid to clear the detected dynamic EID prefix information.
Syntax
reset lisp dynamic-eid [ default | vrf vrf-name ] [ eid-prefix ]
Views
User view
Predefined user roles
network-admin
Parameters
default: Clears the detected dynamic EID prefix information for the public LISP network.
vrf vrf-name: Specifies an MPLS L3VPN instance by its name, a case-sensitive string of 1 to 31 characters. If you do not specify a VPN instance, this command clears the detected dynamic EID prefix information for the public LISP network and all LISP VRF instances.
eid-prefix: Specifies a dynamic EID prefix in dotted decimal notation. If you do not specify a dynamic EID prefix, this command clears all detected dynamic EID prefix information.
Examples
# Clear information for the detected dynamic EID prefix 1.1.1.1.
<Sysname> reset lisp dynamic-eid 1.1.1.1
display lisp dynamic-eid
reset lisp ipv4 data-cache
Use reset lisp ipv4 data-cache to clear IPv4 LISP data cache entries.
Syntax
reset lisp ipv4 data-cache [ default | vrf vrf-name ] [ destination-eid ]
Views
User view
Predefined user roles
network-admin
Parameters
default: Clears data cache entries for the public LISP network.
vrf vrf-name: Specifies an MPLS L3VPN instance by its name, a case-sensitive string of 1 to 31 characters. If you do not specify a VPN instance, this command clears data cache entries for all LISP VRF instances.
destination-eid: Specifies a destination EID in dotted decimal notation. If you do not specify a destination EID, this command clears all data cache entries.
Examples
# Clear data cache entries for all IPv4 LISP VRF instances.
<Sysname> reset lisp ipv4 data-cache
display lisp ipv4 data-cache
reset lisp ipv4 map-cache
Use reset lisp ipv4 map-cache to clear IPv4 LISP dynamic mapping cache entries.
Syntax
reset lisp ipv4 map-cache [ default | vrf vrf-name ] [ destination-eid-prefix [ prefix-length ] ]
Views
User view
Predefined user roles
network-admin
Parameters
default: Clears dynamic mapping cache entries for the public LISP network.
vrf vrf-name: Specifies an MPLS L3VPN instance by its name, a case-sensitive string of 1 to 31 characters. If you do not specify a VPN instance, this command clears dynamic mapping cache entries for all LISP VRF instances.
destination-eid [ prefix-length ]: Specifies a destination EID prefix in dotted decimal notation. The prefix-length argument specifies the prefix length in the range of 0 to 32. If you do not specify a destination EID prefix, this command clears all dynamic mapping cache entries.
Examples
# Clear dynamic mapping cache entries for all IPv4 LISP VRF instances.
<Sysname> reset lisp ipv4 map-cache
display lisp ipv4 map-cache
reset lisp ipv4 statistics
Use reset lisp ipv4 statistics to clear IPv4 LISP statistics.
Syntax
reset lisp ipv4 statistics [ default | vrf vrf-name ]
Views
User view
Predefined user roles
network-admin
Parameters
default: Clears statistics for the public LISP network.
vrf vrf-name: Specifies an MPLS L3VPN instance by its name, a case-sensitive string of 1 to 31 characters. If you do not specify a VPN instance, this command clears statistics for all IPv4 LISP VRF instances.
Examples
# Clear statistics for all IPv4 LISP VRF instances.
<Sysname> reset lisp ipv4 statistics
display lisp ipv4 statistics
reset lisp site
Use reset lisp site to clear LISP site registration information.
Syntax
reset lisp site [ default | vrf vrf-name ] [ name site-name ]
Views
User view
Predefined user roles
network-admin
Parameters
default: Clears registration information for all LISP sites in the public LISP network.
vrf vrf-name: Specifies an MPLS L3VPN instance by its name, a case-sensitive string of 1 to 31 characters. If you do not specify a VPN instance, this command clears LISP site registration information for all IPv4 LISP VRF instances.
name site-name: Specifies a LISP site by its name. If you do not specify a LISP site, this command clears all LISP site registration information.
Examples
# Clear registration information for the LISP site site1.
<Sysname> reset lisp site name site1 default
display lisp site
roaming-eid-prefix
Use roaming-eid-prefix to specify the dynamic EID range for roaming in.
Use undo roaming-eid-prefix to restore the default.
Syntax
roaming-eid-prefix eid-prefix prefix-length
undo roaming-eid-prefix
Default
The dynamic EID range is 0.0.0.0/0 for roaming in.
Views
Dynamic-EID view
Predefined user roles
network-admin
Parameters
eid-prefix prefix-length: Specifies an EID prefix and its length. The eid-prefix argument represents the EID prefix in dotted decimal notation. The prefix-length argument represents the prefix length in the range of 0 to 32.
Usage guidelines
Use this command to specify the range of the host addresses permitted by the dynamic EID space to roam in.
By default, a host is permitted to roam in if its address is in the dynamic EID space specified by using the database-mapping command in dynamic-EID view. After you execute the roaming-eid-prefix command, the host address must also be in the dynamic EID range for the host to roam in.
Examples
# Specify the dynamic EID range as 1.1.1.1/32 for roaming in.
<Sysname> system-view
[Sysname] lisp
[Sysname-lisp] dynamic-eid DE
[Sysname-lisp-dynamic-eid-DE] roaming-eid-prefix 1.1.1.1 32
Related commands
database-mapping (dynamic-EID view)
shortest-eid-prefix-length
Use shortest-eid-prefix-length to set the minimum permitted length for the EID prefixes in Map-Reply messages and Map-Request messages.
Use undo shortest-eid-prefix-length to restore the default.
Syntax
shortest-eid-prefix-length prefix-length
undo shortest-eid-prefix-length
Default
The minimum permitted length for the EID prefixes in Map-Reply messages and Map-Request messages is 16.
Views
LISP view
LISP-VRF view
Predefined user roles
network-admin
Parameters
prefix-length: Specifies the minimum EID prefix length in the range of 0 to 32.
Examples
# Set the minimum permitted length to 12 for the EID prefixes in Map-Reply messages and Map-Request messages.
<Sysname> system-view
[Sysname] lisp
[Sysname-lisp] shortest-eid-prefix-length 12
site
Use site to create an IPv4 LISP site and enter its view, or enter the view of an existing IPv4 LISP site.
Use undo site to delete a IPv4 LISP site and all configuration in its view.
Syntax
site site-name
undo site site-name
Default
No IPv4 LISP sites exist.
Views
LISP view
LISP-VRF view
Predefined user roles
network-admin
Parameters
site-name: Assigns a name to the IPv4 LISP site, a case-sensitive string of 1 to 63 characters.
Usage guidelines
This command applies only to MSs.
Examples
# Create the IPv4 LISP site site-1 and enter its view.
<Sysname> system-view
[Sysname] lisp
[Sysname-lisp] site site-1
[Sysname-lisp-site-site-1]
vrf
Use vrf to create an IPv4 LISP VRF instance and enter its view, or enter the view of an existing IPv4 LISP VRF instance.
Use undo vrf to remove an IPv4 LISP VRF instance and all configuration in its view.
Syntax
vrf vrf-name
undo vrf vrf-name
Default
No IPv4 LISP VRF instances exist.
Views
LISP view
Predefined user roles
network-admin
Parameters
vrf-name: Specifies an MPLS L3VPN instance by its name, a case-sensitive string of 1 to 31 characters.
Usage guidelines
To configure an IPv4 LISP VRF instance, you need to configure an MPLS L3VPN instance in system view first.
Examples
# Create the IPv4 LISP VRF instance red and enter its view.
<Sysname> system-view
[Sysname] ip vpn-instance red
[Sysname-vpn-instance-red] quit
[Sysname] lisp
[Sysname-lisp] vrf red
[Sysname-lisp-vrf-red]
xtr instance-id
Use xtr instance-id to specify an instance ID for EID prefixes.
Use undo xtr instance-id to restore the default.
Syntax
xtr instance-id instance-id
undo xtr instance-id
Default
The instance ID for EID prefixes is 0.
Views
LISP view
LISP-VRF view
Predefined user roles
network-admin
Parameters
instance-id: Specifies an instance ID in the range of 1 to 16777215.
Examples
# Specify the instance ID 123 for EID prefixes.
<Sysname> system-view
[Sysname] lisp
[Sysname-lisp] xtr instance-id 123
Related commands
eid-prefix