15-High Availability Command Reference

HomeSupportResource CenterReference GuidesCommand ReferencesH3C Access Controllers Command References(R5426P02)-6W10415-High Availability Command Reference
04-Load balancing commands
Title Size Download
04-Load balancing commands 566.74 KB

Contents

Load balancing commands· 1

activate (link group view) 2

auto-alloc address· 2

bandwidth busy-protection enable (transparent DNS proxy view) 3

bandwidth busy-protection enable (virtual server view) 4

bandwidth busy-rate (link view) 4

bandwidth interface statistics enable· 6

bandwidth weight 6

class· 7

connection-limit (virtual server view) 7

connection-limit max (link view) 8

cost 9

cost weight 9

default dns-server-pool 10

default link-group· 10

default-class action· 11

description· 12

display loadbalance action· 13

display loadbalance alg· 14

display loadbalance class· 15

display loadbalance dns-proxy· 16

display loadbalance dns-proxy statistics· 18

display loadbalance dns-server 18

display loadbalance dns-server statistics· 20

display loadbalance dns-server-pool 21

display loadbalance isp· 24

display loadbalance link· 25

display loadbalance link out-interface statistics· 29

display loadbalance link statistics· 30

display loadbalance link-group· 31

display loadbalance policy· 34

display loadbalance proximity· 35

display loadbalance snat-pool 36

display parameter-profile· 37

display sticky· 38

display sticky-group· 40

display virtual-server 42

display virtual-server statistics· 44

dns-server-pool (LB action view) 45

dns-server-pool (DNS server view) 46

fail-action (link group view) 46

fallback-action continue· 47

forward all 48

frequency· 48

ip· 49

ip address (transparent DNS proxy view) 50

ip address (DNS server view) 50

ip address (ISP view) 51

ip mask· 52

ip range (SNAT address pool view) 52

ipv6· 53

ipv6 address (transparent DNS proxy view) 54

ipv6 address (DNS server view) 54

ipv6 address (ISP view) 55

ipv6 prefix· 56

ipv6 range· 56

isp· 57

lb-policy (transparent DNS proxy view) 57

lb-policy (virtual server view) 58

link (DNS server view) 59

link-group (LB action view) 59

link-group (link view) 60

loadbalance action· 61

loadbalance alg· 61

loadbalance alg all-enable· 62

loadbalance class· 63

loadbalance dns-proxy· 63

loadbalance dns-server 64

loadbalance dns-server-pool 65

loadbalance isp file· 65

loadbalance isp name· 66

loadbalance link· 66

loadbalance link-group· 67

loadbalance log enable bandwidth-busy· 68

loadbalance log enable base· 68

loadbalance log enable nat 69

loadbalance policy· 69

loadbalance probe-template· 70

loadbalance proximity· 71

loadbalance region· 71

loadbalance schedule-test ip· 72

loadbalance schedule-test ipv6· 73

loadbalance snat-pool 74

match· 75

match acl 76

match app-group· 76

match class· 77

match default 78

match destination· 79

match destination domain-name· 80

match domain-name· 80

match interface· 81

match isp· 82

match source· 82

match user 83

match user-group· 84

max-bandwidth (link view) 85

max-number 86

override-limit enable· 86

parameter 87

parameter-profile· 88

port (transparent DNS proxy view) 88

port (DNS server view) 89

port (virtual server view) 89

predictor (DNS server pool view) 90

predictor (link group view) 91

priority (DNS server view) 93

priority (link view) 93

probe (DNS server pool view) 94

probe (DNS server view) 95

probe (link group view) 96

probe (link view) 96

proximity enable (link group view) 97

rate-limit bandwidth (link view) 98

rate-limit bandwidth (virtual server view) 99

rate-limit connection (link view) 99

rate-limit connection (virtual server view) 100

reset loadbalance connections· 101

reset loadbalance dns-proxy statistics· 101

reset loadbalance dns-server statistics· 101

reset loadbalance link statistics· 102

reset loadbalance proximity· 102

reset virtual-server statistics· 103

router interface· 103

router ip· 104

router ipv6· 105

rtt weight 105

selected-link· 106

selected-server (DNS server pool view) 106

service enable (transparent DNS proxy view) 107

service enable (virtual server view) 108

set ip tos (LB action view) 108

set ip tos (parameter profile view) 109

shutdown (link view) 109

skip current-dns-proxy· 110

slow-online (link group view) 110

slow-shutdown enable (link view) 111

snat-pool (link group view) 112

snmp-agent trap enable loadbalance· 112

sticky-group· 113

success-criteria (DNS server pool view) 114

success-criteria (DNS server view) 114

success-criteria (link group view) 115

success-criteria (link view) 116

timeout (proximity view) 117

timeout (sticky group view) 117

timeout (template view) 118

topology region· 118

transparent enable (link group view) 119

ttl weight 120

virtual ip address· 120

virtual ipv6 address· 121

virtual-server (system view) 121

virtual-server-pool 122

weight (DNS server view) 123

weight (link view) 123


Load balancing commands

The following compatibility matrixes show the support of hardware platforms for load balancing:

 

Hardware series

Model

Product code

Load balancing compatibility

WX1800H series

WX1804H

EWP-WX1804H-PWR-CN

Yes

WX2500H series

WX2508H-PWR-LTE

WX2510H

WX2510H-F

WX2540H

WX2540H-F

WX2560H

EWP-WX2508H-PWR-LTE

EWP-WX2510H-PWR

EWP-WX2510H-F-PWR

EWP-WX2540H

EWP-WX2540H-F

EWP-WX2560H

Yes

WX3000H series

WX3010H

WX3010H-X

WX3010H-L

WX3024H

WX3024H-L

WX3024H-F

EWP-WX3010H

EWP-WX3010H-X-PWR

EWP-WX3010H-L-PWR

EWP-WX3024H

EWP-WX3024H-L-PWR

EWP-WX3024H-F

No

WX3500H series

WX3508H

WX3510H

WX3520H

WX3520H-F

WX3540H

EWP-WX3508H

EWP-WX3510H

EWP-WX3520H

EWP-WX3520H-F

EWP-WX3540H

No

WX5500E series

WX5510E

WX5540E

EWP-WX5510E

EWP-WX5540E

No

WX5500H series

WX5540H

WX5560H

WX5580H

EWP-WX5540H

EWP-WX5560H

EWP-WX5580H

No

Access controller modules

LSUM1WCME0

EWPXM1WCME0

LSQM1WCMX20

LSUM1WCMX20RT

LSQM1WCMX40

LSUM1WCMX40RT

EWPXM2WCMD0F

EWPXM1MAC0F

LSUM1WCME0

EWPXM1WCME0

LSQM1WCMX20

LSUM1WCMX20RT

LSQM1WCMX40

LSUM1WCMX40RT

EWPXM2WCMD0F

EWPXM1MAC0F

No

Hardware series

Model

Product code

Load balancing compatibility

WX1800H series

WX1804H

WX1810H

WX1820H

WX1840H

EWP-WX1804H-PWR

EWP-WX1810H-PWR

EWP-WX1820H

EWP-WX1840H-GL

Yes

WX3800H series

WX3820H

WX3840H

EWP-WX3820H-GL

EWP-WX3840H-GL

No

WX5800H series

WX5860H

EWP-WX5860H-GL

No

activate (link group view)

Use activate to set the criteria to determine whether a link group is available.

Use undo activate to restore the default.

Syntax

activate lower lower-percentage upper upper-percentage

undo activate

Default

A link group is available when a minimum of one link is available.

Views

Link group view

Predefined user roles

network-admin

Parameters

lower lower-percentage: Specifies the lower percentage value in the range of 1 to 99.

upper upper-percentage: Specifies the upper percentage value in the range of 1 to 99. The upper percentage value must be greater than or equal to the lower percentage value.

Usage guidelines

When the percentage of available links in a primary link group is smaller than the lower percentage value, the primary link group becomes unavailable. Then the backup link group takes over. When the percentage of available links in a primary link group is greater than the upper percentage value, the primary link group becomes available again to process services.

If no backup link group is configured on the virtual server, this configuration does not take effect.

Examples

# Set the lower percentage value to 20 and upper percentage value to 80 for the link group lg.

<Sysname> system-view

[Sysname] loadbalance link-group lg

[Sysname-lb-lgroup-lg] activate lower 20 upper 80

auto-alloc address

Use auto-alloc address to enable the device to automatically obtain the IP address of a DNS server.

Use undo auto-alloc address to disable the device from automatically obtaining the IP address of a DNS server.

Syntax

auto-alloc address

undo auto-alloc address

Default

The device is disabled from automatically obtaining the IP address of a DNS server.

Views

DNS server view

Predefined user roles

network-admin

Usage guidelines

This command is mutually exclusive with the ip address and ipv6 address commands.

Before configuring this command, you must configure the router interface command. Otherwise, the IP address of the DNS server cannot be obtained.

If the device obtains multiple DNS server IP addresses, it uses the smallest available IP address.

Examples

# Enable the device to automatically obtain the IP address of DNS server ds1.

<Sysname> system-view

[Sysname] loadbalance dns-server ds1

[Sysname-lb-ds-ds1] auto-alloc address

Related commands

display loadbalance dns-server

bandwidth busy-protection enable (transparent DNS proxy view)

Use bandwidth busy-protection enable to enable the link protection feature for a transparent DNS proxy.

Use undo bandwidth busy-protection enable to disable the link protection feature for a transparent DNS proxy.

Syntax

bandwidth busy-protection enable

undo bandwidth busy-protection enable

Default

The link protection feature is disabled for a transparent DNS proxy.

Views

Transparent DNS proxy view

Predefined user roles

network-admin

Usage guidelines

This feature enables a transparent DNS proxy to select a DNS server from the DNS server pool based on the link bandwidth ratio. If the bandwidth ratio of a link exceeds the specified value, the corresponding DNS server is not selected.

If the link bandwidth ratio of all DNS servers in the DNS server pool exceeds the specified value, the link protection feature is automatically disabled. If the link bandwidth ratio of any DNS server drops below the specified value, the link protection feature is automatically enabled, and the corresponding DNS server is selected.

Examples

# Enable the link protection feature for transparent DNS proxy dns-proxy1.

<Sysname> system-view

[Sysname] loadbalance dns-proxy dns-proxy1

[Sysname-lb-dp-udp-dns-proxy1] bandwidth busy-protection enable

Related commands

bandwidth busy-rate (link view)

bandwidth busy-protection enable (virtual server view)

Use bandwidth busy-protection enable to enable the link protection feature.

Use undo bandwidth busy-protection enable to disable the link protection feature.

Syntax

bandwidth busy-protection enable

undo bandwidth busy-protection enable

Default

The link protection feature is disabled.

Views

Virtual server view

Predefined user roles

network-admin

Usage guidelines

The link protection feature takes effect only when bandwidth statistics collection by interfaces is enabled.

Examples

# Enable the link protection feature for the IP-type virtual server vs3.

<Sysname>system-view

[Sysname] virtual-server vs3 type ip

[Sysname-vs-ip-vs3] bandwidth busy-protection enable

Related commands

bandwidth interface statistics enable

bandwidth busy-rate (link view)

Use bandwidth busy-rate to set the bandwidth ratio for an LB link.

Use undo bandwidth busy-rate to restore the default.

Syntax

bandwidth [ inbound | outbound ] busy-rate busy-rate-number [ recovery recovery-rate-number ]

undo bandwidth [ inbound | outbound ] busy-rate

Default

The bandwidth ratio is 70.

Views

LB link view

Predefined user roles

network-admin

Parameters

inbound: Specifies the inbound bandwidth ratio.

outbound: Specifies the outbound bandwidth ratio.

busy-rate-number: Specifies bandwidth ratio in the range of 1 to 100.

recovery recovery-rate-number: Specifies bandwidth recovery ratio in the range of 1 to 100. By default, if the bandwidth ratio is greater than 10, the bandwidth recovery ratio equals the bandwidth ratio minus 10; if the bandwidth ratio is smaller than or equal to 10, the bandwidth recovery ratio equals the bandwidth ratio.

Usage guidelines

If the bandwidth of an LB link exceeds the maximum expected bandwidth multiplied by the bandwidth ratio, the LB link is busy and will not be selected. If the bandwidth of the LB link drops below the maximum expected bandwidth multiplied by the bandwidth recovery ratio, the LB link participates in scheduling again.

If you do not specify the inbound or outbound keyword, this command sets the total bandwidth ratio.

The bandwidth ratio equals the current bandwidth divided by the maximum bandwidth of the LB link. If the maximum bandwidth is not limited, the supported maximum bandwidth is used for calculating the bandwidth ratio.

The bandwidth recovery ratio must be smaller than or equal to the bandwidth ratio of an LB link.

This command takes effect only on new sessions and does not take effect on existing sessions.

Examples

# Set the total bandwidth ratio and bandwidth recovery ratio for the LB link lk1 to 90 and 85.

<Sysname> system-view

[Sysname] loadbalance link lk1

[Sysname-lb-link-link1] bandwidth busy-rate 90 recovery 85

Related commands

display loadbalance link

max-bandwidth (link view)

bandwidth interface statistics enable

Use bandwidth interface statistics enable to enable bandwidth statistics collection by interfaces.

Use undo bandwidth interface statistics enable to disable bandwidth statistics collection by interfaces.

Syntax

bandwidth interface statistics enable

undo bandwidth interface statistics enable

Default

Bandwidth statistics collection by interfaces is disabled.

Views

Virtual server view

Predefined user roles

network-admin

Examples

# Enable bandwidth statistics collection by interfaces for the IP-type virtual server vs3.

<Sysname> system-view

[Sysname] virtual-server vs3 type ip

[Sysname-vs-ip-vs3] bandwidth interface statistics enable

bandwidth weight

Use bandwidth weight to set the bandwidth weight for proximity calculation.

Use undo bandwidth weight to restore the default.

Syntax

bandwidth { inbound | outbound } weight bandwidth-weight

undo bandwidth { inbound | outbound } weight

Default

The inbound or outbound bandwidth weight for proximity calculation is 100.

Views

Proximity view

Predefined user roles

network-admin

Parameters

inbound: Specifies the inbound bandwidth weight.

outbound: Specifies the outbound bandwidth weight.

bandwidth-weight: Specifies the bandwidth weight for proximity calculation, in the range of 0 to 255. A larger value indicates a higher bandwidth weight.

Examples

# Set the inbound bandwidth weight for proximity calculation to 200.

<Sysname> system-view

[Sysname] loadbalance proximity

[Sysname-lb-proximity] bandwidth inbound weight 200

# Set the outbound bandwidth weight for proximity calculation to 200.

<Sysname> system-view

[Sysname] loadbalance proximity

[Sysname-lb-proximity] bandwidth outbound weight 200

class

Use class to specify an LB action for the specified LB class.

Use undo class to delete an LB class.

Syntax

class class-name [ insert-before before-class-name ] action action-name

undo class class-name

Default

No LB action is specified for the LB class.

Views

LB policy view

Predefined user roles

network-admin

Parameters

class-name: Specifies an LB class by its name, a case-insensitive string of 1 to 63 characters.

insert-before before-class-name: Inserts the target class before an LB class (which must already be referenced by the current LB policy), a case-insensitive string of 1 to 63 characters.

action-name: Specifies an LB action by its name, a case-insensitive string of 1 to 63 characters.

Usage guidelines

This command sets an LB action for packets matching the specified LB class.

You can specify an LB action for different LB classes.

A DNS LB policy can reference DNS LB actions only.

Examples

# Specify the LB action lba1 for the LB class lbc1 in the DNS LB policy lbp1, and insert lbc1 before the LB class lbc0.

<Sysname> system-view

[Sysname] loadbalance policy lbp1 type dns

[Sysname-lbp-dns-lbp1] class lbc1 insert-before lbc0 action lba1

connection-limit (virtual server view)

Use connection-limit max to set the maximum number of connections of a virtual server.

Use undo connection-limit max to restore the default.

Syntax

connection-limit max max-number

undo connection-limit max

Default

The maximum number of connections of a virtual server is 0, which means the number is not limited.

Views

Virtual server view

Predefined user roles

network-admin

Parameters

max-number: Specifies the maximum number of connections, in the range of 0 to 4294967295. If the value of this argument takes 0, the number is not limited.

Usage guidelines

This command takes effect only on new sessions and does not take effect on existing sessions.

Examples

# Set the maximum number of connections for the IP-type virtual server vs3 to 10000.

<Sysname> system-view

[Sysname] virtual-server vs3 type ip

[Sysname-vs-ip-vs3] connection-limit max 10000

connection-limit max (link view)

Use connection-limit max to set the maximum number of connections of a link.

Use undo connection-limit max to restore the default.

Syntax

connection-limit max max-number

undo connection-limit max

Default

The maximum number of connections of a link is 0, which means the number is not limited.

Views

Link view

Predefined user roles

network-admin

Parameters

max-number: Specifies the maximum number of connections, in the range of 0 to 4294967295. If the value of this argument takes 0, the number is not limited.

Usage guidelines

This command takes effect only on new sessions and does not take effect on existing sessions.

Examples

# Set the maximum number of connections of the link lk to 10000.

<Sysname> system-view

[Sysname] loadbalance link lk

[Sysname-lb-link-lk] connection-limit max 10000

cost

Use cost to set the link cost for proximity calculation.

Use undo cost to restore the default.

Syntax

cost cost-value

undo cost

Default

The link cost for proximity calculation is 0.

Views

Link view

Predefined user roles

network-admin

Parameters

cost-value: Specifies the link cost for proximity calculation, in the range of 0 to 10240.

Examples

# Set the link cost for proximity calculation to 200 for the link lk1.

<Sysname> system-view

[Sysname] loadbalance link lk1

[Sysname-lb-link-lk1] cost 200

cost weight

Use cost weight to set the cost weight for proximity calculation.

Use undo cost weight to restore the default.

Syntax

cost weight cost-weight

undo cost weight

Default

The cost weight for proximity calculation is 100.

Views

Proximity view

Predefined user roles

network-admin

Parameters

cost-weight: Specifies the cost weight for proximity calculation, in the range of 0 to 255. A larger value indicates a higher cost weight.

Examples

# Set the cost weight for proximity calculation to 200.

<Sysname> system-view

[Sysname] loadbalance proximity

[Sysname-lb-proximity] cost weight 200

default dns-server-pool

Use default dns-server-pool to specify the default (primary) DNS server pool for a transparent DNS proxy.

Use undo default dns-server-pool to restore the default.

Syntax

default dns-server-pool pool-name [ sticky sticky-name ]

undo default dns-server-pool

Default

No default DNS server pool is specified for a transparent DNS proxy.

Views

Transparent DNS proxy view

Predefined user roles

network-admin

Parameters

pool-name: Specifies a primary DNS server pool by its name, a case-insensitive string of 1 to 63 characters.

sticky sticky-name: Specifies a sticky group by its name, a case-insensitive string of 1 to 63 characters. If you do not specify a sticky group, the DNS server pool does not correspond to any sticky group.

Usage guidelines

If you execute the default dns-server-pool command multiple times, the most recent configuration takes effect.

Examples

# Specify the primary DNS server pool dns-pool1 and the sticky group st1 for the transparent DNS proxy dns-proxy1.

<Sysname> system-view

[Sysname] loadbalance dns-proxy dns-proxy1

[Sysname-lb-dp-udp-dns-proxy1] default dns-server-pool dns-pool1 sticky st1

default link-group

Use default link-group to specify the default (primary) link group.

Use undo default link-group to restore the default.

Syntax

default link-group link-group-name [ backup backup-link-group-name ] [ sticky sticky-name ]

undo default link-group

Default

No default link group is specified.

Views

Link-IP virtual server view

Predefined user roles

network-admin

Parameters

link-group-name: Specifies a primary link group by its name, a case-insensitive string of 1 to 63 characters.

backup backup-link-group-name: Specifies a backup link group by its name, a case-insensitive string of 1 to 63 characters.

sticky sticky-name: Specifies a sticky group by its name, a case-insensitive string of 1 to 63 characters.

Usage guidelines

When the primary link group is available (contains links), the virtual server forwards packets through the primary link group. When the primary link group is not available, the virtual server forwards packets through the backup link group.

Examples

# Specify the primary link group link1, the backup link group link2, and the sticky group sg1 for the link-IP-type virtual server vs3.

<Sysname> system-view

[Sysname] virtual-server vs3 type link-ip

[Sysname--vs-link-ip-vs3] default link-group link1 backup link2 sticky sg1

default-class action

Use default-class action to specify the default LB action.

Use undo default-class to restore the default.

Syntax

default-class action action-name

undo default-class

Default

No default LB action is specified.

Views

LB policy view

Predefined user roles

network-admin

Parameters

action-name: Specifies an LB action by its name, a case-insensitive string of 1 to 63 characters.

Usage guidelines

This command sets the default LB action for packets that fail to match any LB class.

A DNS LB policy can reference DNS LB actions only.

Examples

# Specify the default LB action lba1 for the DNS LB policy lbp1.

<Sysname> system-view

[Sysname] loadbalance policy lbp1 type dns

[Sysname-lbp-dns-lbp1] default-class action lba1

description

Use description to configure a description.

Use undo description to restore the default.

Syntax

description text

undo description

Default

No description is configured.

Views

ISP view

LB action view

LB class view

LB policy view

SNAT address pool view

Parameter profile view

Sticky group view

Virtual server view

Link group view

Link view

DNS server pool view

DNS server view

Predefined user roles

network-admin

Parameters

text: Specifies a description, a case-sensitive string of 1 to 127 characters.

Examples

# Configure the description LB action LBA1 for the DNS LB action lba1.

<Sysname> system-view

[Sysname] loadbalance action lba1 type dns

[Sysname-lba-dns-lba1] description LB action LBA1

display loadbalance action

Use display loadbalance action to display LB action information.

Syntax

display loadbalance action [ name action-name ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

name action-name: Specifies an LB action by its name, a case-insensitive string of 1 to 63 characters. If you do not specify this option, the command displays information about all LB actions.

Examples

# Display information about all LB actions.

<Sysname> display loadbalance action

LB action: lba3

  Description: sina

  Type: Link-generic

  State: Active

  Forward type: link group

  Link group: lg1 (in use)

  Backup link group: lg2

  Sticky:

  IP ToS:

  Fallback-action: None

 

LB action: lba4

  Description: xx

  Type: DNS

  State: Active

  Forward type: DNS server pool

  DNS server pool: dsp1

  Sticky: st

  IP ToS:

  Fallback-action: Disabled

  Busy-action: Force

 

Table 1 Command output

Field

Description

LB action

LB action name.

Description

Description for the LB action.

Type

LB action type:

·     DNS.

·     Link-generic.

State

LB action state:

·     Active.

·     Inactive.

Forward type

Packet forwarding mode of the LB action:

·     Drop—Discards packets.

·     Forward—Forwards packets.

·     Link group—Forwards packets through the link group (applicable to link-generic LB actions).

·     DNS server pool—Forwards packets through the DNS server pool (applicable to DNS LB actions).

·     Skip current DNS proxy (applicable to DNS LB actions).

·     Redirect—Redirects packets.

·     Response—Responds to client requests by using a file.

Link group

Default link group name. (in use) indicates the link group is in use.

Backup link group

Backup link group name. (in use) indicates the link group is in use.

IP ToS

ToS field value of IP packets.

Fallback-action

Action taken upon load balancing failure:

·     None—Does not take any action.

·     Continue—Matches the next rule.

·     Response—Responds to client requests by using a file.

Busy-action

Action taken upon busyness:

·     Continue—Matches the next rule.

·     Force—Assigns packets to links or DNS servers regardless of whether they are busy.

DNS server pool

DNS server pool name. This field is displayed only when the packet forwarding mode is DNS server pool.

display loadbalance alg

Use display loadbalance alg to display the ALG status for all protocols.

Syntax

display loadbalance alg

Views

Any view

Predefined user roles

network-admin

network-operator

Examples

# Display the ALG status for all protocols.

<Sysname> display loadbalance alg

LB ALG:

  DNS         : Enable

  FTP         : Enable

  H323        : Disabled

  ICMP-ERROR  : Enable

  ILS         : Disabled

  MGCP        : Disabled

  NBT         : Disabled

  PPTP        : Enable

  RSH         : Disabled

  RTSP        : Enable

  SCCP        : Disabled

  SIP         : Disabled

  SQLNET      : Disabled

  TFTP        : Disabled

  XDMCP       : Disabled

display loadbalance class

Use display loadbalance class to display LB class information.

Syntax

display loadbalance class [ name class-name ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

name class-name: Specifies an LB class by its name, a case-insensitive string of 1 to 63 characters. If you do not specify this option, the command displays information about all LB classes.

Examples

# Display information about all LB classes.

<Sysname> display loadbalance class

LB class: lbc3

  Description:

  Type: Link-generic

  Match type: Match-any

  Match rule:

    match 1 class cla3

    match 2 source ip address 1.2.3.0 24

    match 3 source ipv6 address 1::12

    match 4 acl ipv4 number 3002

    match 5 acl ipv6 number 3003

    match 6 acl ipv4 name ccc

    match 7 acl ipv6 name ddd

    match 8 isp name isp2

    match 9 user u1

    match 10 user-group lb-group

    match 11 interface GE1/0/1

 

LB class: lbc4

  Description:

  Type: DNS

  Match type: Match-any

  Match rule:

    match 1 class cla2

    match 2 source ip address 1.2.3.0 24

    match 3 source ipv6 address 1::12

    match 4 acl ipv4 number 3002

    match 5 acl ipv6 number 3003

    match 6 acl ipv4 name ccc

    match 7 acl ipv6 name ddd

    match 8 destination ip address 1.2.3.0 24

    match 9 destination ipv6 address 1::12

    match 10 domain-name www.h3c.com

Table 2 Command output

Field

Description

LB class

LB class name.

Description

Description for the LB class.

Type

LB class type:

·     DNS.

·     Link-generic.

Match type

Match type for the LB class:

·     Match-all—Requires matching all rules of the LB class.

·     Match-any—Requires matching any rule of the LB class.

Match rule

Match rules for the LB class.

 

display loadbalance dns-proxy

Use display loadbalance dns-proxy to display transparent DNS proxy information.

Syntax

display loadbalance dns-proxy [ brief | name dns-proxy-name ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

brief: Displays brief transparent DNS proxy information. If you do not specify this keyword, the command displays detailed transparent DNS proxy information.

name dns-proxy-name: Specifies a transparent DNS proxy by its name, a case-insensitive string of 1 to 63 characters. If you do not specify this option, the command displays information about all transparent DNS proxies.

Examples

# Display brief information about all transparent DNS proxies.

<Sysname> display loadbalance dns-proxy brief

DNS proxy     State       Type    VPN instance    IP address     Port

dns-proxy1    Active      UDP                     1.2.3.0/24     53

dns-proxy2    Inactive    UDP                     --             5353

 

# Display information about transparent DNS proxy dns-proxy1.

<Sysname> display loadbalance dns-proxy name dns-proxy1

DNS proxy: dns-proxy1

  Type: UDP

  State: Active

  Service state: Enabled

  VPN instance:

  IPv4 address: 1.2.3.0/24

  IPv6 address: --

  Port: 53

  DNS server pool: dns-pool1

  Sticky: st

  LB policy: dns-policy1

  Connection synchronization: Enabled

  Sticky synchronization: Enabled

  Bandwidth busy protection: Disabled

Table 3 Command output

Field

Description

DNS proxy

Transparent DNS proxy name.

Type

Transparent DNS proxy type. Only UDP is supported.

State

Transparent DNS proxy state:

·     Active—The transparent DNS proxy is available.

·     Inactive—The transparent DNS proxy is unavailable for any reason except that the transparent DNS proxy feature is disabled.

·     Inactive (disabled)—The transparent DNS proxy is unavailable because the transparent DNS proxy feature is disabled.

Service state

Transparent DNS proxy state: Enabled or Disabled.

VPN instance

This field is not supported in the current software version.VPN instance to which the transparent DNS proxy belongs.

DNS server pool

Default DNS server pool used by the transparent DNS proxy.

Sticky

Sticky group used by the transparent DNS proxy.

Bandwidth busy protection

Link protection state: Enabled or Disabled.

 

display loadbalance dns-proxy statistics

Use display loadbalance dns-proxy statistics to display transparent DNS proxy statistics.

Syntax

display loadbalance dns-proxy statistics [ name dns-proxy-name ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

name dns-proxy-name: Specifies a transparent DNS proxy by its name, a case-insensitive string of 1 to 63 characters. If you do not specify this option, the command displays statistics for all transparent DNS proxies.

Examples

# Display statistics for the transparent DNS proxy dns-proxy1.

<Sysname> display loadbalance dns-proxy statistics name dns-proxy1

DNS proxy: dns-proxy1

Received requests: 100

Dropped requests: 2

Received responses: 98

Dropped responses: 0

Table 4 Command output

Field

Description

DNS proxy

Transparent DNS proxy name.

Received requests

Number of DNS requests received by the transparent DNS proxy.

Dropped requests

Number of DNS requests dropped by the transparent DNS proxy.

Received responses

Number of DNS responses received by the transparent DNS proxy.

Dropped responses

Number of DNS responses dropped by the transparent DNS proxy.

 

display loadbalance dns-server

Use display loadbalance dns-server to display DNS server information.

Syntax

display loadbalance dns-server [ brief | name dns-server-name ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

brief: Displays brief DNS server information. If you do not specify this keyword, the command displays detailed DNS server information.

name dns-server-name: Displays detailed information about a DNS server. The dns-server-name argument specifies a DNS server by its name, a case-insensitive string of 1 to 63 characters.

Usage guidelines

If you do not specify any parameter, the command displays detailed information about all DNS servers.

If the device obtains multiple DNS server IP addresses, it uses the smallest available IP address.

If no health monitoring method is specified, the device determines that all obtained DNS server IP addresses are available. If a health monitoring method is specified, the device determines that only the DNS server IP addresses that pass health monitoring are available.

Examples

# Display brief information about all DNS servers.

<Sysname> display loadbalance dns-server brief

(*) – Auto-alloc address using

DNS server   Address             Port    Link         State         DNS server pool

ds1          10.150.100.100(*)   0       link1        Active        dns_pool

ds2          20.150.100.100      5353    link2        Probe-failed  dns_pool

ds3          --                  0       link3        Inactive      dns_pool

ds4          --(*)               0       link3        Inactive      dns_pool

# Display detailed information about DNS server ds1.

<Sysname> display loadbalance dns-server name ds1

(*) – Auto-alloc address using

DNS server: ds1

  Description:

  State: Active

  Auto-alloc address: Enabled

  IPv4 address: 10.150.100.100(*)

                10.160.100.1

                10.154.60.2

  IPv6 address: --

 

  Port: 0 (port number in original packet)

  Link: link1

  DNS server pool: dns-pool

  Weight: 100

  Priority: 4

  Probe information:

    Probe success criteria: All

    Probe method      State

    t4                Succeeded

Table 5 Command output

Field

Description

DNS server

DNS server name.

Address

IP address of the DNS server. The asterisk (*) indicates that the IP address is automatically obtained and is being used. If all obtained IP addresses are unavailable, this field displays --(*). If no IP address is obtained and no IP address is manually configured, this field displays two hyphens (--).

Link

Link of the DNS server.

Parent state/State

DNS server state:

·     Active—The DNS server is available.

·     Busy—The DNS server is busy. When the DNS server is in Active state and enabled with the link protection feature, this field displays Busy if the maximum expected bandwidth is reached.

·     Inactive—The DNS server is unavailable, because the configuration is not complete or the server is not referenced.

·     Probe-failed—Health monitoring has failed.

·     Unknown—Health monitoring is not configured.

Description

Description for the DNS server.

Auto-alloc address

Whether the device is enabled to automatically obtain the IP address of a DNS server: Disabled or Enabled.

IPv4 address

IPv4 address of the DNS server.

IPv6 address

IPv6 address of the DNS server.

Port

Port number of the DNS server. 0 means the port number in the packet is used.

Weight

Weight of the DNS server.

Priority

Priority of the DNS server.

Probe information

Detailed health monitoring information for the DNS server.

Probe success criteria

Health monitoring success criteria for the DNS server:

·     All—Health monitoring succeeds only when all the specified health monitoring methods succeed.

·     At least—Health monitoring succeeds when a specified minimum number of health monitoring methods succeed.

Probe method

Name of the NQA template used by the health monitoring method.

State

State of the health monitoring method:

·     Failed—Health monitoring has failed.

·     In progress—Health monitoring is in progress.

·     Invalid—Health monitoring is unavailable (because the configuration of the NQA template is not complete), or the DNS server is unavailable.

·     Succeeded—Health monitoring has succeeded.

 

display loadbalance dns-server statistics

Use display loadbalance dns-server statistics to display DNS server statistics.

Syntax

display loadbalance dns-server statistics [ name dns-server-name ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

name dns-server-name: Specifies a DNS server by its name, a case-insensitive string of 1 to 63 characters. If you do not specify this option, the command displays statistics for all DNS servers.

Examples

# Display statistics for the DNS server ds1.

<Sysname> display loadbalance dns-server statistics name ds1

DNS server: ds1

Received requests: 100

Send requests: 98

Dropped requests: 2

Received responses: 98

Send responses: 98

Dropped responses: 0

Table 6 Command output

Field

Description

DNS server

DNS server name.

Received requests

Number of DNS requests received by the DNS server.

Send requests

Number of DNS requests sent by the DNS server.

Dropped requests

Number of DNS requests dropped by the DNS server.

Received responses

Number of DNS responses received by the DNS server.

Send responses

Number of DNS responses sent by the DNS server.

Dropped responses

Number of DNS responses dropped by the DNS server.

 

display loadbalance dns-server-pool

Use display loadbalance dns-server-pool to display DNS server pool information.

Syntax

display loadbalance dns-server-pool [ brief | name pool-name ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

brief: Displays brief DNS server pool information. If you do not specify this keyword, the command displays detailed DNS server pool information.

name pool-name: Displays detailed information about a DNS server pool. The pool-name argument specifies a DNS server pool by its name, a case-insensitive string of 1 to 63 characters.

Usage guidelines

If you do not specify any parameter, the command displays detailed information about all DNS server pools.

Examples

# Display brief information about all DNS server pools.

<Sysname> display loadbalance dns-server-pool brief

Predictor: RR - Round robin, RD - Random,

           BW - Bandwidth, MBW - Max bandwidth,

           IBW - Inbound bandwidth, OBW - Outbound bandwidth,

           MIBW - Max inbound bandwidth, MOBW - Max outbound bandwidth,

           HASH(SIP) - Hash address source IP,

           HASH(DIP) - Hash address destination IP,

           HASH(SIP-PORT) - Hash address source IP-port

DNS server pool    Predictor     Total    Active

dns-pool           RR            3        2

dns-pool1          RR            0        0

dns-pool2          RD            3        0

 

# Display detailed information about DNS server pool dns-pool.

<Sysname> display loadbalance dns-server-pool name dns-pool

DNS server pool: dns-pool

Description:

Predictor: Round robin

Selected server: Enabled

Min servers: 3

  Max servers: 5

Probe information:

  Probe success criteria: At-least 2

  Probe method: t4

Total DNS servers: 3

Active DNS servers: 0

DNS server list:

Name        State         Address          port    Link        Weight   Priority

ds1         Active        10.150.100.100   0       link1       100      4

ds2         Probe-failed  20.150.100.100   5353    link2       100      4

ds3         Inactive      --               0       link3       100      4

Table 7 Command output

Field

Description

Predictor

Scheduling algorithm of the DNS server pool:

·     RR—Weighted round robin algorithm.

·     RD—Random algorithm.

·     BW—Bandwidth algorithm.

·     IBW—Inbound bandwidth algorithm.

·     OBW—Outbound bandwidth algorithm.

·     MBW—Maximum bandwidth algorithm.

·     MIBW—Maximum inbound bandwidth algorithm.

·     MOBW—Maximum outbound bandwidth algorithm.

·     HASH(SIP)—Hash algorithm based on source IP address.

·     HASH(DIP)—Hash algorithm based on destination IP address.

·     HASH(SIP-PORT)—Hash algorithm based on source IP address and port number.

DNS server pool

DNS server pool name.

Total

Total number of DNS servers.

Active

Number of active DNS servers.

Description

Description for the DNS server pool.

Selected server

State of DNS server limit to participate in scheduling: disabled or enabled. If the state is enabled, the following fields are displayed:

·     Min servers—Minimum number of DNS servers that can participate in scheduling.

·     Max servers—Maximum number of DNS servers that can participate in scheduling.

Probe information

Detailed health monitoring information for the DNS server pool.

Probe success criteria

Health monitoring success criteria for the DNS server pool:

·     All—Health monitoring succeeds only when all the specified health monitoring methods succeed.

·     At least—Health monitoring succeeds when a specified minimum number of health monitoring methods succeed.

Probe method

Name of the NQA template used by the health monitoring method.

Total DNS servers

Total number of DNS servers.

Active DNS servers

Number of active DNS servers.

Name

DNS server name.

State

DNS server state:

·     Active—The DNS server is available.

·     Busy—The DNS server is busy. When the DNS server is in Active or Ramp state and enabled with link protection, this field displays Busy if the maximum expected bandwidth is reached.

·     Inactive—The DNS server is unavailable, because the configuration is not complete or the server is not referenced.

·     Probe-failed—Health monitoring has failed.

Address

IP address of the DNS server. The asterisk (*) indicates that the IP address is automatically obtained and is being used. If all obtained IP addresses are unavailable, this field displays --(*). If no IP address is obtained and no IP address is manually configured, this field displays two hyphens (--).

Port

Port number of the DNS server.

Link

Name of the link corresponding to the DNS server.

Weight

Weight of the DNS server.

Priority

Priority of the DNS server.

 

display loadbalance isp

Use display loadbalance isp to display ISP information.

Syntax

display loadbalance isp [ ip ipv4-address | ipv6 ipv6-address | name isp-name ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

ip ipv4-address: Specifies an IPv4 address. If you do not specify this option, the command displays information about all ISPs.

ipv6 ipv6-address: Specifies an IPv6 address. If you do not specify this option, the command displays information about all ISPs.

name isp-name: Specifies an ISP by its name, a case-insensitive string of 1 to 63 characters. If you do not specify this option, the command displays information about all ISPs.

Examples

# Display information about all ISPs.

<Sysname> display loadbalance isp

(*) - User-defined object

Last successful auto update time: 04:09:00 UTC Fri 03/16/2012

Last auto update time: 04:09:00 UTC Fri 03/16/2012

Last auto update result: Successful

  ISP update count: 1

 

LB ISP: isp1

    Whois maintainer object name:

        MAINT-CHINANET

    Description: ISP1

    IPv4 address/Mask length: --

    IPv6 address/Prefix length: --

 

LB ISP: isp2(*)

    Description:

    IPv4 address/Mask length:

        1.2.3.0/32(*)           1.2.3.4/32              3.3.3.6/32(*)

        192.168.6.131/32(*)     192.168.195.189/32(*)

    IPv6 address/Prefix length:

        1::2/128

        FFFF:FFFF:FFFF:FFFF:FFFF:FFFF:FFFF:FFFF/128(*)

# Display information about the ISP corresponding to the IP address 1.2.3.0.

<Sysname> display loadbalance isp ip 1.2.3.0

ISP name            Source                   IPv4 address/Mask length

isp2                user-set                 1.2.3.0/28

isp2                user-set                 1.2.3.0/29

isp2                user-set                 1.2.3.0/30

isp2                file-load                1.2.3.0/31

                    auto-update

isp2                user-set                 1.2.3.0/32

                    file-load

# Display information about the ISP corresponding to the IPv6 address 1::1234.

<Sysname> display loadbalance isp ipv6 1::1234

ISP name            Source                   IPv6 address/Prefix length

isp2                user-set                 1::1234/126

isp2                user-set                 1::1234/127

isp2                file-load                1::1234/128

Table 8 Command output

Field

Description

(*) - User-defined object

(*) indicates that the ISP information is manually configured. If the ISP information is also imported from a file, (*) is not displayed.

Last successful auto update time

Time of the most recent successful update.

Last auto update time

Time of the most recent update.

Last auto update result

Result of the most recent auto update:

·     Successful.

·     Failed to connect to WHOIS server.

·     Connection failed.

·     Failed to query DNS (which means failed to send DNS requests).

ISP update count

Number of ISPs in the most recent update.

LB ISP

ISP name.

Description

Description for the ISP.

Source

Source of the ISP:

·     user-set—Manually configured.

·     file-load—Imported from a file.

·     auto-update—ISP auto update.

 

display loadbalance link

Use display loadbalance link to display LB link information.

Syntax

display loadbalance link [ brief | name link-name ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

brief: Displays brief information about all LB links. If you do not specify this keyword, the command displays detailed LB link information.

name link-name: Displays detailed information about the specified LB link. The link-name argument specifies an LB link name, a case-insensitive string of 1 to 63 characters.

Usage guidelines

If you do not specify the brief keyword or the name link-name option, the command displays detailed information about all LB links.

Examples

# Display brief information about all LB links.

<Sysname> display loadbalance link brief

Link         Router IP/Interface    State        VPN instance     Link group

Lk1          192.168.1.1            Busy         --               lg

Lk2          192.168.2.1            Active       --               lg

Lk3          Dialer0                Inactive     --               lg

# Display detailed information about the LB link lk.

<Sysname> display loadbalance link name lk

Link: lk                                                                        

  Description: lk

  State: Busy

  VPN instance: --

  Inherit VPN: Disabled

  Router IP: 1.2.3.4

  Router IPv6: --

  Link-group: lg

  Weight: 100

  Priority: 4

  Cost: 0

  Slow-shutdown: Disabled

  Connection limit: 0

  Rate limit:

    Connections: 10000

    Bandwidth: 10000 Kbytes/s

    Inbound bandwidth: 5000 Kbytes/s

    Outbound bandwidth: 5000 Kbytes/s

Bandwidth busy:                                                              

    Max bandwidth: 10000 Kbytes/s

    Max inbound bandwidth: 5000 Kbytes/s

    Max outbound bandwidth: 5000 Kbytes/s

    Busy rate: 80

    Inbound busy rate: 70

    Outbound busy rate: 60

    Busy recovery rate: 60

    Inbound busy recovery rate: 60

    Outbound busy recovery rate: 60

Probe information:

    Probe success criteria: All

    Probe method                    State

t4                              Inactive

 

Link: lk2

  Description: link2

  State: Inactive

  VPN instance: --

  Inherit VPN: Disabled

  IPv4 address state: Active

  IPv6 address state: Inactive

  Router interface: Dialer0

  Link group: lg

  Weight: 150

  Priority: 3

  Cost: 100

  Slow shutdown: Enabled

  Connection limit: 10000

  Rate limit:

    Connections: 10000

    Bandwidth: 10000 Kbytes/s

    Inbound bandwidth: 5000 Kbytes/s

    Outbound bandwidth: 5000 Kbytes/s

  Bandwidth busy:

    Max bandwidth: 10000 Kbytes/s

    Max inbound bandwidth: 5000 Kbytes/s

    Max outbound bandwidth: 5000 Kbytes/s

    Busy rate: 80

    Inbound busy rate: 70

    Outbound busy rate: 60

    Busy recovery rate: 60

    Inbound busy recovery rate: 60

    Outbound busy recovery rate: 60

Probe information:

  Probe success criteria: All

  Probe method                    State

  t4                              Inactive

Table 9 Command output

Field

Description

Link

LB link name.

Router IP/Interface

Gateway IP address or outgoing interface of the LB link.

Parent state/State

LB link state:

·     Active—The LB link is available.

·     Busy—The LB link is busy.

·     Inactive—The LB link is unavailable, because the configuration is not complete, the LB link is not referenced, or the virtual server is not enabled.

·     Probe-failed—Health monitoring has failed.

·     Ramp—Ramp-up phase of slow online.

·     Shutdown—The LB link is shut down.

·     Standby—Standby phase of slow online.

·     Unknown—Health monitoring is not configured.

VPN instance

This field is not supported in the current software version.VPN instance of the LB link and source of the VPN instance.

·     Config—Manually configured.

·     Inherit—Inherited.

Link group

Link group to which the LB link belongs.

Description

Description for the LB link.

Inherit VPN

This field is not supported in the current software version.State of VPN instance inheritance: Enabled or Disabled.

IPv4 address state

IPv4 address state of the LB link:

·     Active—An available IPv4 address is obtained through the outgoing interface of the LB link.

·     Inactive—No available IPv4 address is obtained through the outgoing interface of the LB link.

This field is displayed only if an outgoing interface is specified for an LB link.

IPv6 address state

IPv6 address state of the link:

·     Active—An available IPv6 address is obtained through the outgoing interface of the LB link.

·     Inactive—No available IPv6 address is obtained through the outgoing interface of the LB link.

This field is displayed only if an outgoing interface is specified for an LB link.

Weight

Weight of the LB link.

Priority

Priority of the LB link.

Cost

Cost for proximity calculation.

Slow shutdown

Slow offline state of the LB link:

·     Disabled.

·     Enabled.

Connection limit

Maximum number of connections for the LB link.

Connection rate limit

Maximum number of connections per second for the LB link.

Rate limit

Rate limit of the LB link.

Connections

Maximum number of connections per second for the LB link.

Bandwidth

Maximum bandwidth for the LB link in KBps.

Inbound bandwidth

Maximum inbound bandwidth for the LB link in KBps.

Outbound bandwidth

Maximum outbound bandwidth for the LB link in KBps.

Bandwidth busy

Bandwidth ratio.

Max bandwidth

Maximum expected bandwidth for the LB link in KBps.

Max inbound bandwidth

Maximum inbound expected bandwidth for the LB link in KBps.

Max outbound bandwidth

Maximum outbound expected bandwidth for the LB link in KBps.

Busy rate

Bandwidth ratio for the LB link.

Inbound busy rate

Inbound bandwidth ratio for the LB link.

Outbound busy rate

Outbound bandwidth ratio for the LB link.

Busy recovery rate

Bandwidth recovery ratio for the LB link.

Inbound busy recovery rate

Inbound bandwidth recovery ratio for the LB link.

Outbound busy recovery rate

Outbound bandwidth recovery ratio for the LB link.

Probe information

Detailed health monitoring information for the LB link.

Probe success criteria

Health monitoring success criteria for the LB link:

·     All—Health monitoring succeeds only when all the specified health monitoring methods succeed.

·     At least—Health monitoring succeeds when a specified minimum number of health monitoring methods succeed.

Probe method

Name of the NQA template used by the health monitoring method.

State

State of the health monitoring method:

·     Failed—Health monitoring has failed.

·     In progress—Health monitoring is in progress.

·     Invalid—Health monitoring is unavailable (because the configuration of the NQA template is not complete), or the link is unavailable.

·     Succeeded—Health monitoring has succeeded.

 

display loadbalance link out-interface statistics

Use display loadbalance link out-interface statistics to display link outbound interface statistics.

Syntax

display loadbalance link out-interface statistics [ name link-name ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

name link-name: Specifies a link by its name, a case-insensitive string of 1 to 63 characters. If you do not specify this option, the command displays outbound interface statistics for all links.

Usage guidelines

If the link outbound interface is a logical interface, the rate statistics are calculated based on the interface traffic.

Examples

# Display outbound interface statistics for the link lk1.

<Sysname> display loadbalance link out-interface statistics name lk1

Loadbalance link: lk1     

Input rate: 1524 bytes/s   

  Output rate: 90 bytes/s

Field

Description

Loadbalance link

LB link name.

Input rate

Input rate of the outbound interface in Bps.

Output rate

Output rate of the outbound interface in Bps.

 

display loadbalance link statistics

Use display loadbalance link statistics to display link statistics.

Syntax

display loadbalance link statistics [ name link-name ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

name link-name: Specifies a link by its name, a case-insensitive string of 1 to 63 characters. 

Examples

# Display statistics for the link lk1.

<Sysname> display loadbalance link statistics name lk1

Loadbalance link: lk1     

  Total connections: 1798

  Active connections: 788

  Max connections: 803

  Connections per second: 157

  Max connections per second: 163

  Downstream traffic: 333332 bytes

  Upstream traffic: 472054 bytes

  Throughput: 4396 bytes/s

  Inbound throughput: 1214 bytes/s

  Outbound throughput: 3128 bytes/s

  Max throughput: 4564 bytes/s

  Max inbound throughput: 1214 bytes/s

  Max outbound throughput: 3320 bytes/s

  Received packets: 1798

  Sent packets: 0

  Dropped packets: 0

Table 10 Command output

Field

Description

Loadbalance link

Link name.

Total connections

Total number of connections.

Active connections

Number of active connections.

Max connections

Maximum number of connections.

Connections per second

Number of connections per second.

Max connections per second

Maximum number of connections per second.

Downstream traffic

Downstream traffic (in bytes) received by the LB device.

Upstream traffic

Upstream traffic (in bytes) sent by the LB device.

Throughput

Total packet throughput in Bps.

Inbound throughput

Inbound packet throughput in Bps.

Outbound throughput

Outbound packet throughput in Bps.

Max throughput

Maximum packet throughput in Bps.

Max inbound throughput

Maximum inbound packet throughput in Bps.

Max outbound throughput

Maximum outbound packet throughput in Bps.

Received packets

Number of received packets.

Sent packets

Number of sent packets.

Dropped packets

Number of dropped packets.

 

display loadbalance link-group

Use display loadbalance link-group to display link group information.

Syntax

display loadbalance link-group [ brief | name link-group-name ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

brief: Displays brief information about all link groups. If you do not specify this keyword, the command displays detailed link group information.

name link-group-name: Specifies a link group by its name, a case-insensitive string of 1 to 63 characters. If you do not specify this option, the command displays information about all link groups.

Usage guidelines

If you do not specify any parameters, the command displays detailed information about all link groups.

A link is displayed as unavailable if the link group configuration is not complete, the link group is not referenced, or the virtual server is not enabled. This does not mean that the link is not available.

Examples

# Display brief information about all link groups.

<Sysname> display loadbalance link-group brief

Predictor: RR - Round robin, RD - Random, LC - Least connection,

           BW – Bandwidth, MBW – Max bandwidth,

           IBW – Inbound bandwidth, OBW – Outbound bandwidth,

           MIBW – Max inbound bandwidth, MOBW – Max outbound bandwidth,

           HASH(SIP) - Hash address source IP,

           HASH(DIP) - Hash address destination IP,

           HASH(SIP-PORT) - Hash address source IP-port

NAT/SNAT: Y - Enabled, N - Disabled

 

Link group       Predictor    NAT   SNAT  Total  Active

lg               RR           Y     N     3      3

# Display detailed information about all link groups.

<Sysname> display loadbalance link-group

Link group: lg1

  Description:

  Predictor: Hash address

  Proximity: Disabled

  NAT: Enabled

  SNAT pool:

  Failed action: Keep

  Active threshold: Enabled

    Lower: 80

    Upper: 90

  Slow-online: Enabled

  Standby time: 5s

  Ramp-up time: 10s

  Selected link: Enabled

    Min link: 100

    Max link: 600

  Probe information:

    Probe success criteria: All

    Probe method:

    aaa

    ddd

  Total link: 1

  Active link: 1

  Link list:

  Name             State         VPN instance    Router IP    Weight    Priority

  Link1            Inactive      --              1.2.3.4      4         100

Table 11 Command output

Field

Description

Link group

Link group name.

Description

Description for the link group.

Predictor

Scheduling algorithm of the link group:

·     RR—Weighted round robin algorithm.

·     RD—Random algorithm.

·     LC—Weighted least connection algorithm.

·     BW—Bandwidth algorithm.

·     IBW—Inbound bandwidth algorithm.

·     OBW—Outbound bandwidth algorithm.

·     MBW—Maximum bandwidth algorithm.

·     MIBW—Maximum inbound bandwidth algorithm.

·     MOBW—Maximum outbound bandwidth algorithm.

·     HASH(SIP)—Hash algorithm based on source IP address.

·     HASH(DIP)—Hash algorithm based on destination IP address.

·     HASH(SIP-PORT)—Hash algorithm based on source IP address and port number.

Proximity

Proximity state of the link group:

·     Disabled.

·     Enabled.

NAT

NAT state of the link group:

·     Disabled.

·     Enabled.

SNAT pool

Name of the SNAT address pool referenced by the link group.

Failed action

Fault processing method of the link group:

·     Keep—Keeps existing connections.

·     Reschedule—Redirects connections.

·     Reset—Terminates existing connections.

Active threshold

State of the criteria to determine that the link group is available: disabled or enabled. If the state is enabled, the following fields are displayed:

·     Lower—Lower percentage value.

·     Upper—Upper percentage value.

Slow-online

State of the slow online feature: disabled or enabled. If the state is enabled, the following fields are displayed:

·     Standby time.

·     Ramp-up time.

Selected link

State of link limit to participate in scheduling: disabled or enabled. If the state is enabled, the following fields are displayed:

·     Min server—Minimum number of links that participate in scheduling.

·     Max server—Maximum number of links that participate in scheduling.

Probe success criteria

Health monitoring success criteria for the link group:

·     All—Health monitoring succeeds only when all the specified health monitoring methods succeed.

·     At least X—Health monitoring succeeds when a minimum of X health monitoring methods succeed.

Probe method

Name of the NQA template used by the health monitoring method.

Total link

Total number of links.

Active link

Number of active links.

Name

Link name.

State

Link state:

·     Active—The link is available.

·     Busy—The link is busy. When the link is in Active or Ramp state and enabled with bandwidth statistics collection and link protection, this field displays Busy if the maximum expected bandwidth is reached.

·     Inactive—The link is unavailable, because the configuration is not complete, the link is not referenced, or the virtual server is not enabled.

·     Probe-failed—Health monitoring has failed.

·     Ramp—Ramp-up phase of slow online.

·     Shutdown—The link is shut down.

·     Standby—Standby phase of slow online.

VPN instance

This field is not supported in the current software version.VPN instance of the link.

Router IP

IPv4 and IPv6 addresses of the link.

Weight

Weight of the link.

Priority

Priority of the link.

 

display loadbalance policy

Use display loadbalance policy to display LB policy information.

Syntax

display loadbalance policy [ name policy-name ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

name policy-name: Specifies an LB policy by its name, a case-insensitive string of 1 to 63 characters. If you do not specify this option, the command displays information about all LB policies.

Examples

# Display information about all LB policies.

<Sysname> display loadbalance policy

LB policy: lbp3

  Description:

  Type: Link-generic

  Class: lbc3

  Action: lba3

  Default class action: lba3

 

LB policy: lbp4

  Description:

  Type: DNS

  Class: lbc4

  Action: lba4

  Default class action: lba4

 

Table 12 Command output

Field

Description

LB policy

LB policy name.

Description

Description for the LB policy.

Type

LB policy type:

·     DNS.

·     Link-generic.

Class

LB class for the LB policy.

Action

LB action for the LB class.

Default class action

Default LB action.

 

display loadbalance proximity

Use display loadbalance proximity to display proximity entry information.

Syntax

display loadbalance proximity [ ip [ ipv4-address ] | ipv6 [ ipv6-address ] ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

ip [ ipv4-address ]: Displays IPv4 proximity entry information. If you specify the ipv4-address argument, this command displays detailed information about the proximity entry corresponding to the IPv4 address. If you do not specify the ipv4-address argument, this command displays brief information about all IPv4 proximity entries.

ipv6 [ ipv6-address ]: Displays IPv6 proximity entry information. If you specify the ipv6-address argument, this command displays detailed information about the proximity entry corresponding to the IPv6 address. If you do not specify the ipv6-address argument, this command displays brief information about all IPv6 proximity entries.

Usage guidelines

If you do not specify the ip or ipv6 keyword, this command displays brief information about all IPv4 and IPv6 proximity entries.

Examples

# Display brief information about all IPv4 and IPv6 proximity entries for the public network.

<Sysname> display loadbalance proximity

(*) – Real server object

Slot :1

  IPv4 address/Mask length       Timeout     Best link

  ------------------------------------------------------------

  1.2.3.0/24                     59          lk1

  1.2.15.0/24                    58          lk2

 

  IPv6 address/Prefix length     Timeout     Best link

  ------------------------------------------------------------

  11:22::/96                     40          lk1

# Display detailed information about the proximity entry corresponding to the IP address 1.2.3.1 for the public network.

<Sysname> display loadbalance proximity ip 1.2.3.1

(*) – Real server object

IPv4 address/Mask length: 1.2.3.0/24

Timeout: 40

Link list:

  lk1

  lk2

Table 13 Command output

Field

Description

(*) – Real server object

This field is not supported in the current software version.The link corresponds to a real server object.

Slot

Card for which proximity entry information is displayed.

Timeout

Remaining time of the proximity entries, in seconds.

Link list

Links for the proximity entry. They are listed in descending priority order.

 

display loadbalance snat-pool

Use display loadbalance snat-pool to display SNAT address pool information.

Syntax

display loadbalance snat-pool [ name pool-name ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

name pool-name: Specifies an SNAT address pool by its name, a case-insensitive string of 1 to 63 characters. If you do not specify this option, the command displays information about all SNAT address pools.

Examples

# Display information about all SNAT address pools.

<Sysname> display loadbalance snat-pool

SNAT pool: lbsp1

  Description:

  IPv4 range:

    Start address                       End address

    202.110.10.10                       202.110.10.15

  IPv6 range:

    Start address                       End address

    2002::2                             2002::100

  ARP/ND interfaces:

    GigabitEthernet1/0/1

    GigabitEthernet1/0/3

 

SNAT pool: lbsp2

  Description:

  IPv4 range:

    Start address                       End address

    203.110.10.10                       203.110.10.15

  IPv6 range:

    Start address                       End address

    2003::2                             2003::100

  ARP/ND interfaces:

    GigabitEthernet1/0/2

Table 14 Command output

Field

Description

SNAT pool

SNAT address pool name.

Description

Description for the SNAT address pool.

IPv4 range

IPv4 address range.

IPv6 range

IPv6 address range.

ARP/ND interfaces

Interfaces from which gratuitous ARP packets and ND packets are sent out.

 

display parameter-profile

Use display parameter-profile to display parameter profile information.

Syntax

display parameter-profile [ name parameter-name ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

name parameter-name: Specifies a parameter profile by its name, a case-insensitive string of 1 to 63 characters. If you do not specify this option, the command displays information about all parameter profiles.

Examples

# Display information about all parameter profiles.

<Sysname> display parameter-profile

Parameter profile: pp1

  Description:

  Type: IP

  IP ToS: 20

Table 15 Command output

Field

Description

Parameter profile

Parameter profile name.

Description

Description for the parameter profile.

Type

Parameter profile type:

IP.

IP ToS

ToS field of the IP packets sent to the server.

display sticky

Use display sticky to display sticky entry information.

Syntax

display sticky { dns-proxy [ dns-proxy-name ] | virtual-server [ virtual-server-name ] } [ class class-name | default-class | default-dns-server-pool | default-link-group ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

dns-proxy dns-proxy-name: Specifies a transparent DNS proxy by its name, a case-insensitive string of 1 to 63 characters. If you do not specify this option, the command displays sticky entry information for all transparent DNS proxies.

virtual-server virtual-server-name: Specifies a virtual server by its name, a case-insensitive string of 1 to 63 characters. If you do not specify this option, the command displays sticky entry information for all virtual servers.

class class-name: Specifies an LB class by its name, a case-insensitive string of 1 to 63 characters.

default-class: Specifies the default LB action.

default-dns-server-pool: Specifies the default DNS server pool.

default-link-group: Specifies the default link group.

Examples

# Display sticky entry information for all virtual services.

<Sysname> display sticky virtual-server

Virtual server name: vs4

  Sticky zone type: Default link group

  Class name:

  Sticky group name: sg3

  Sticky method: Both IP and port

  Timeout: 60

Sticky entry                      Link                  Expired time Count

-----------------------------------------------------------------------------

192.168.6.206/2606                Dialer0               57           0

192.168.6.40/80

192.168.6.206/2605                192.168.6.206/0       55           0

192.168.6.40/80

 

# Display sticky entry information for all transparent DNS proxies.

<Sysname> display sticky dns-proxy

DNS proxy name: dns-proxy1

  Sticky zone type: Default DNS server pool

  Sticky group name: st

  Sticky method: Source IP

  Timeout: 60

Sticky entry               DNS server           Expired time   Count

--------------------------------------------------------------------

192.168.6.206/2606         192.168.6.206/0      57             0

DNS proxy name: dns-proxy3

  Sticky zone type: Default class

  Sticky group name: sg3

  Sticky method: Both IP and port

  Timeout: 60

Sticky entry               DNS server         Expired time    Count

-------------------------------------------------------------------

192.168.6.206/2606         192.168.6.206/0    57              0

Table 16 Command output

Field

Description

Sticky zone type

Sticky entry source:

·     Class—Generated by the class and action in the policy referenced by the virtual service.

·     Default class—Generated by the default action in the policy referenced by the virtual service.

·     Default DNS server pool—Generated by the default DNS server pool of the transparent DNS proxy.

·     Default link group—Generated by the default primary or backup link group of the virtual service.

Class name

LB class name. The LB class name is displayed only when the sticky entries are generated by the class and action.

Sticky group name

Name of the sticky group that generates the sticky entries.

Sticky method

Sticky method corresponding to the sticky entries:

·     Source IP—Source IPv4 address sticky method.

·     Source IPv6—Source IPv6 address sticky method.

·     Source IP and port—Source IPv4 address + source port sticky method.

·     Source IPv6 and port—Source IPv6 address + source port sticky method.

·     Destination IP—Destination IPv4 address sticky method.

·     Destination IPv6—Destination IPv6 address sticky method.

·     Destination IP and port—Destination IPv4 address + destination port sticky method.

·     Destination IPv6 and port—Destination IPv6 address + destination port sticky method.

·     Both IP—Source IPv4 address + destination IPv4 address sticky method.

·     Both IPv6—Source IPv6 address + destination IPv6 address sticky method.

·     Both IP and port—Source IPv4 address + source port + destination IPv4 address + destination port sticky method.

·     Both IPv6 and port—Source IPv6 address + source port + destination IPv6 address + destination port sticky method.

Timeout

Timeout time of the sticky entries, in seconds.

Sticky entry

Key value corresponding to the sticky entry.

DNS server

IP address and port number of the DNS server.

Link

Outbound next hop IP address and port number of the link or outgoing interface of the link.

Expired time

Remaining lifetime of the sticky entry. If the reference count is not 0, the configured value is displayed.

Count

Reference count of the sticky entry.

display sticky-group

Use display sticky-group to display sticky group information.

Syntax

display sticky-group [ name group-name ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

name group-name: Specifies a sticky group by its name, a case-insensitive string of 1 to 63 characters. If you do not specify this option, the command displays information about all sticky groups.

Examples

# Display information about all sticky groups.

<Sysname> display sticky-group

Sticky group: sg1

  Description:

  Timeout: 60

  Override limit: Disabled

  Stickiness-over-busyness: Enabled

  Sticky group type: Address-port

    Method: Both IP and port

      Mask: 32

Table 17 Command output

Field

Description

Sticky group

Sticky group name.

Description

Description for the sticky group.

Timeout

Timeout time for sticky entries in seconds.

Override limit

Whether the feature of ignoring the limits for sessions that match sticky entries is enabled: Enabled or Disabled.

Stickiness-over-busyness

Whether the stickiness-over-busyness feature is enabled: Enabled or Disabled.

Sticky group type

Sticky group type:

Address-port—Address and port.

Table 18 Detailed information for sticky groups

Sticky group type

Field

Description

Address-port

Method

Sticky method:

·     Source IP—Source IPv4 address sticky method.

·     Source IPv6—Source IPv6 address sticky method.

·     Source IP and port—Source IPv4 address + source port sticky method.

·     Source IPv6 and port—Source IPv6 address + source port sticky method.

·     Destination IP—Destination IPv4 address sticky method.

·     Destination IPv6—Destination IPv6 address sticky method.

·     Destination IP and port—Destination IPv4 address + destination port sticky method.

·     Destination IPv6 and port—Destination IPv6 address + destination port sticky method.

·     Both IP—Source IPv4 address + destination IPv4 address sticky method.

·     Both IPv6—Source IPv6 address + destination IPv6 address sticky method.

·     Both IP and port—Source IPv4 address + source port + destination IPv4 address + destination port sticky method.

·     Both IPv6 and port—Source IPv6 address + source port + destination IPv6 address + destination port sticky method.

Mask

Mask length for the sticky method. This field is displayed only for IPv4 sticky methods.

Prefix

Prefix length for the sticky method. This field is displayed only for IPv6 sticky methods.

display virtual-server

Use display virtual-server to display virtual server information.

Syntax

display virtual-server [ brief | name virtual-server-name ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

brief: Displays brief virtual server information. If you do not specify this keyword, the command displays detailed virtual server information.

name virtual-server-name: Displays information about the specified virtual server. The virtual-server-name argument specifies a virtual server name, a case-insensitive string of 1 to 63 characters. If you do not specify this option, the command displays information about all virtual servers.

Examples

# Display brief information about all virtual servers.

<Sysname> display virtual-server brief

Virtual server   State    Type      VPN instance     Virtual address     Port

vs3              Active   LINK-IP                    51.139.4.100/32     0

# Display detailed information about the virtual server lk.

<Sysname> display virtual-server name lk

Virtual server: lk

  Description:

  Type: Link-IP

  State: Active

  VPN instance: --

  Virtual IPv4 address: 1.1.1.1/32

  Virtual IPv6 address: 1001::1/128

  Port: 0

  Primary link group: lg1 (in use)

  Backup link group: lg2

  Sticky: sg3

  LB policy: lbp2

  LB limit-policy:

  Connection limit: 10000

  Rate limit:

    Connections: 10000

    Bandwidth: 10000 Kbytes/s

    Inbound bandwidth: 5000 Kbytes/s

    Outbound bandwidth: 5000 Kbytes/s

  Connection synchronization: Disabled

  Sticky synchronization: Disabled

  Bandwidth busy protection: Disabled

  Interface bandwidth statistics: Disabled

  Route advertisement: Disabled

  ARP/ND interfaces:

    GigabitEthernet1/0/1

Table 19 Command output

Field

Description

Virtual server

Virtual server name.

State

Virtual server state:

·     Active—The virtual server is available.

·     Inactive—The virtual server is unavailable.

·     Inactive (disabled)—The virtual server is unavailable because the virtual server is disabled.

Type

Virtual server type: Link-IP.

VPN instance

This field is not supported in the current software version.Name of the VPN instance to which the virtual server belongs.

Virtual address

IPv4 address and mask of the virtual server.

Port

Port number of the virtual server. 0 means any port.

Description

Description of the virtual server.

Virtual IPv4 address

IPv4 address and mask of the virtual server.

Virtual IPv6 address

IPv6 address and prefix of the virtual server.

Primary link group

Default primary link group name. (in use) indicates the link group is in use.

Backup link group

Default backup link group name. (in use) indicates the link group is in use.

Sticky

Default sticky group name.

LB policy

LB policy referenced by the virtual server.

IP parameter profile

IP parameter profile referenced by the virtual server. This field is displayed only if an IP parameter profile is configured.

Connection limit

Maximum number of connections of the virtual server.

Rate limit

Rate limit of the virtual server.

Connections

Maximum number of connections per second of the virtual server.

Bandwidth

Maximum bandwidth for the virtual server in KBps.

Inbound bandwidth

Maximum inbound bandwidth for the virtual server in KBps.

Outbound bandwidth

Maximum outbound bandwidth for the virtual server in KBps.

Bandwidth busy protection

Link protection state: Enabled or Disabled.

display virtual-server statistics

Use display virtual-server statistics to display virtual server statistics.

Syntax

display virtual-server statistics [ name virtual-server-name ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

name virtual-server-name: Specifies a virtual server by its name, a case-insensitive string of 1 to 63 characters. If you do not specify this option, the command displays statistics of all virtual servers.

Examples

# Display statistics for the virtual server vs.

<Sysname> display virtual-server statistics name vs

Virtual server: vs

  Total connections: 979

  Active connections: 618

  Max connections: 661

  Connections per second: 146

  Max connections per second: 156

  Client input: 333332 bytes

  Client output: 472054 bytes

  Throughput: 4088 bytes/s

  Inbound throughput: 1214 bytes/s

  Outbound throughput: 2874 bytes/s

  Max throughput: 4368 bytes/s

  Max inbound throughput: 1214 bytes/s

  Max outbound throughput: 3154 bytes/s

  Received packets: 979

  Sent packets: 0

  Dropped packets: 0

  Received requests: 0

Table 20 Command output

Field

Description

Virtual server

Virtual server name.

Total connections

Total number of connections.

Active connections

Number of active connections.

Max connections

Maximum number of connections.

Connections per second

Number of connections per second.

Max connections per second

Maximum number of connections per second.

Client input

Traffic (in bytes) received from the client.

Client output

Traffic (in bytes) sent to the client.

Throughput

Total packet throughput in Bps.

Inbound throughput

Inbound packet throughput in Bps.

Outbound throughput

Outbound packet throughput in Bps.

Max throughput

Maximum packet throughput in Bps.

Max throughput

Maximum inbound packet throughput in Bps.

Max throughput

Maximum outbound packet throughput in Bps.

Received packets

Number of received packets.

Sent packets

Number of packets sent by the virtual server to the client.

Dropped packets

Number of dropped packets.

Related commands

reset virtual-server statistics

dns-server-pool (LB action view)

Use dns-server-pool to specify a DNS server pool for guiding packet forwarding.

Use undo dns-server-pool to restore the default.

Syntax

dns-server-pool pool-name [ sticky sticky-name ]

undo dns-server-pool

Default

No DNS server pool is specified for guiding packet forwarding.

Views

DNS LB action view

Predefined user roles

network-admin

Parameters

pool-name: Specifies a DNS server pool by its name, a case-insensitive string of 1 to 63 characters.

sticky sticky-name: Specifies a sticky group by its name, a case-insensitive string of 1 to 63 characters. If you do not specify a sticky group, the DNS server pool does not correspond to any sticky group.

Usage guidelines

This command is mutually exclusive with the forward all or skip current-dns-proxy command. If you configure one command, the other command (if configured) is automatically cancelled.

Examples

# Specify the DNS server pool dsp and the sticky group sg1 for DNS LB action lba1.

<Sysname> system-view

[Sysname] loadbalance action lba1 type dns

[Sysname-lba-dns-lba1] dns-server-pool dsp sticky st1

Related commands

forward all

dns-server-pool (DNS server view)

Use dns-server-pool to specify a DNS server pool for a DNS server.

Use undo dns-server-pool to restore the default.

Syntax

dns-server-pool pool-name

undo dns-server-pool

Default

A DNS server does not belong to any DNS server pool.

Views

DNS server view

Predefined user roles

network-admin

Parameters

pool-name: Specifies a DNS server pool by its name, a case-insensitive string of 1 to 63 characters.

Usage guidelines

You can specify a DNS server pool that has not been created.

Examples

# Specify DNS server pool dns-pool1 for DNS server ds1.

<Sysname> system-view

[Sysname] loadbalance dns-server ds1

[Sysname-lb-ds-ds1] dns-server-pool dns-pool1

Related commands

display loadbalance dns-server

fail-action (link group view)

Use fail-action to specify the fault processing method for a link group.

Use undo fail-action to restore the default.

Syntax

fail-action { keep | reschedule | reset }

undo fail-action

Default

The fault processing method is to keep existing connections.

Views

Link group view

Predefined user roles

network-admin

Parameters

keep: Keeps the connection with the failed link. Keeping or terminating the connection depends on the timeout mechanism of the protocol.

reschedule: Redirects the connection to another available link in the link group.

reset: Terminates the connection with the failed link by sending RST packets (for TCP packets) or ICMP unreachable packets (for other types of packets).

Usage guidelines

The fault processing method applies when the link that processes packets fails.

Examples

# Specify the fault processing method for the link group lg as reschedule.

<Sysname> system-view

[Sysname] loadbalance link-group lg

[Sysname-lb-lgroup-lg] fail-action reschedule

fallback-action continue

Use fallback-action continue to match the next rule upon failure to find an available server.

Use undo fallback-action continue to restore the default.

Syntax

fallback-action continue

undo fallback-action continue

Default

The next rule is not matched when no servers are available for the current LB action.

Views

LB action view

Predefined user roles

network-admin

Usage guidelines

This command enables packets to match the next rule in an LB policy when no servers are available for the current LB action.

Examples

# Match the next rule upon failure to find a DNS server for the DNS LB action a2.

<Sysname> system-view

[Sysname] loadbalance action a2 type dns

[Sysname-lba-dns-a2] fallback-action continue

forward all

Use forward all to configure the packet forwarding mode.

Use undo forward to restore the default.

Syntax

forward all

undo forward

Default

The packet forwarding mode is to discard packets.

Views

DNS/Link-generic LB action view

Predefined user roles

network-admin

Usage guidelines

In DNS LB action view, this command is mutually exclusive with the dns-server-pool or skip current-dns-proxy command. In link-generic LB action view, the forward all and link-group commands are mutually exclusive. If you configure one command, the other command (if configured) is automatically cancelled.

Examples

# Configure the packet forwarding mode for the DNS LB action lba1.

<Sysname> system-view

[Sysname] loadbalance action lba1 type dns

[Sysname-lba-dns-lba1] forward all

Related commands

dns-server-pool

link-group (LB action view)

frequency

Use frequency to set the probe interval for a load balancing probe template.

Use undo frequency to restore the default.

Syntax

frequency interval

undo frequency

Default

The probe interval is 300 seconds.

Views

Load balancing probe template view

Predefined user roles

network-admin

Parameters

interval: Specifies the probe interval in the range of 1 to 604800 seconds.

Usage guidelines

This command specifies the interval for sending probe packets.

Examples

# Set the probe interval to 3600 seconds for ICMP probe template icmptplt.

<Sysname> system-view

[Sysname] loadbalance probe-template icmp icmptplt

[Sysname-lb-pt-icmp-icmptplt] frequency 3600

ip

Use ip to configure the IPv4 sticky method.

Use undo ip to restore the default.

Syntax

ip [ port ] { both | destination | source } [ mask mask-length ]

undo ip

Default

No IPv4 sticky method is configured.

Views

Sticky group view

Predefined user roles

network-admin

Parameters

port: Specifies the sticky method as IPv4 address + port number. If you do not specify this keyword, the sticky method is IPv4 address.

both: Specifies the sticky method as source IPv4 address + destination IPv4 address (if you do not specify the port keyword), or source IPv4 address + source port number + destination IPv4 address + destination port number (if you specify the port keyword).

destination: Specifies the sticky method as destination IPv4 address if you do not specify the port keyword, or destination IPv4 address + destination port number if you specify the port keyword.

source: Specifies the sticky method as source IPv4 address if you do not specify the port keyword, or source IPv4 address + source port number if you specify the port keyword.

mask mask-length: Specifies the mask length for the sticky method.

Examples

# Configure the sticky method for the address and port-based sticky group sg1 as source IPv4 address.

<Sysname> system-view

[Sysname] sticky-group sg1 type address-port

[Sysname-sticky-address-port-sg1] ip source

# Configure the sticky method for the address and port-based sticky group sg1 as source IPv4 address + source port number.

<Sysname> system-view

[Sysname] sticky-group sg1 type address-port

[Sysname-sticky-address-port-sg1] ip port source

Related commands

sticky-group

ip address (transparent DNS proxy view)

Use ip address to specify an IPv4 address for a transparent DNS proxy.

Use undo ip address to restore the default.

Syntax

ip address ipv4-address [ mask-length | mask ]

undo ip address

Default

No IPv4 address is specified for a transparent DNS proxy.

Views

Transparent DNS proxy view

Predefined user roles

network-admin

Parameters

ipv4-address: Specifies an IPv4 address, which cannot be a loopback address, multicast address, broadcast address, or an address in the format of 0.X.X.X.

mask-length: Specifies a mask length in the range of 0 to 32.

mask: Specifies a subnet mask.

Usage guidelines

A transparent DNS proxy processes a DNS request only when the destination IP address and port number of the DNS request match those of the transparent DNS proxy.

If server load balancing is configured, configure different IP addresses and port numbers for the transparent DNS proxy and the virtual server of the UDP type.

If you execute this command multiple times, the most recent configuration takes effect.

Examples

# Specify the IPv4 address for transparent DNS proxy dns-proxy1 as 1.2.3.4/24.

<Sysname> system-view

[Sysname] loadbalance dns-proxy dns_proxy1

[Sysname-lb-dp-udp-dns-proxy1] ip address 1.2.3.4 24

ip address (DNS server view)

Use ip address to specify an IPv4 address for a DNS server.

Use undo ip address to restore the default.

Syntax

ip address ipv4-address

undo ip address

Default

No IPv4 address is specified for a DNS server.

Views

DNS server view

Predefined user roles

network-admin

Parameters

ipv4-address: Specifies an IPv4 address, which cannot be a loopback address, multicast address, broadcast address, or an address in the format of 0.X.X.X.

Usage guidelines

If you execute this command multiple times, the most recent configuration takes effect.

Examples

# Specify the IPv4 address for DNS server ds1 as 1.2.3.4.

<Sysname> system-view

[Sysname] loadbalance dns-server ds1

[Sysname-lb-ds-ds1] ip address 1.2.3.4

ip address (ISP view)

Use ip address to configure an IPv4 address for an ISP.

Use undo ip address to restore the default.

Syntax

ip address ipv4-address { mask-length | mask }

undo ip address ipv4-address { mask-length | mask }

Default

No IPv4 address is configured for an ISP.

Views

ISP view

Predefined user roles

network-admin

Parameters

ipv4-address: Specifies an IPv4 address.

mask-length: Specifies the mask length for the IPv4 address, in the range of 0 to 32.

mask: Specifies the mask for the IPv4 address.

Examples

# Configure the IPv4 address for the ISP isp1 as 1.1.1.1.

<Sysname> system-view

[Sysname] loadbalance isp name isp1

[Sysname-lbisp-isp1] ip address 1.1.1.1 24

ip mask

Use ip mask to set the mask length for IPv4 proximity entries.

Use undo ip mask to restore the default.

Syntax

ip mask { mask-length | mask }

undo ip mask

Default

The mask length for IPv4 proximity entries is 24.

Views

Proximity view

Predefined user roles

network-admin

Parameters

mask-length: Specifies the mask length for IPv4 proximity entries, in the range of 0 to 32. A value of 0 indicates the natural mask.

mask: Specifies the mask for IPv4 proximity entries.

Examples

# Set the mask length for IPv4 proximity entries to 30.

<Sysname> system-view

[Sysname] loadbalance proximity

[Sysname-lb-proximity] ip mask 30

ip range (SNAT address pool view)

Use ip range to specify an IPv4 address range for an SNAT address pool.

Use undo ip range to restore the default.

Syntax

ip range start start-ipv4-address end end-ipv4-address

undo ip range

Default

No IPv4 address range is specified for an SNAT address pool.

Views

SNAT address pool view

Predefined user roles

network-admin

Parameters

start start-ipv4-address: Specifies the start IPv4 address.

end end-ipv4-address: Specifies the end IPv4 address, which must be greater than or equal to the start IPv4 address.

Usage guidelines

An SNAT address pool can have a maximum of 256 IPv4 addresses. No overlapping IPv4 addresses are allowed in different SNAT address pools.

Examples

# Specify IPv4 address range 1.1.1.1 to 1.1.1.100 for the SNAT address pool lbsp.

<Sysname> system-view

[Sysname] loadbalance snat-pool lbsp

[Sysname-lbsnat-pool-lbsp] ip range start 1.1.1.1 end 1.1.1.100

ipv6

Use ipv6 to configure the IPv6 sticky method.

Use undo ipv6 to restore the default.

Syntax

ipv6 [ port ] { both | destination | source } [ prefix prefix-length ]

undo ipv6

Default

No IPv6 sticky method is configured.

Views

Sticky group view

Predefined user roles

network-admin

Parameters

port: Specifies the sticky method as IPv6 address + port number. If you do not specify this keyword, the sticky method is IPv6 address.

both: Specifies the sticky method as source IPv6 address + destination IPv6 address if you do not specify the port keyword, or source IPv6 address + source port number + destination IPv6 address + destination port number if you specify the port keyword.

destination: Specifies the sticky method as destination IPv6 address if you do not specify the port keyword, or destination IPv6 address + destination port number if you specify the port keyword.

source: Specifies the sticky method as source IPv6 address if you do not specify the port keyword, or source IPv6 address + source port number if you specify the port keyword.

prefix prefix-length: Specifies the prefix length for the sticky method.

Examples

# Configure the sticky method for the address- and port-based sticky group sg1 as source IPv6 address.

<Sysname> system-view

[Sysname] sticky-group sg1 type address-port

[Sysname-sticky-address-port-sg1] ipv6 source

# Configure the sticky method for the address- and port-based sticky group sg1 as source IPv6 address + source port number.

<Sysname> system-view

[Sysname] sticky-group sg1 type address-port

[Sysname-sticky-address-port-sg1] ipv6 port source

Related commands

sticky-group

ipv6 address (transparent DNS proxy view)

Use ipv6 address to configure an IPv6 address for a transparent DNS proxy.

Use undo ipv6 address to restore the default.

Syntax

ipv6 address ipv6-address [ prefix-length ]

undo ipv6 address

Default

No IPv6 address is configured for a transparent DNS proxy.

Views

Transparent DNS proxy view

Predefined user roles

network-admin

Parameters

ipv6-address: Specifies an IPv6 address, which cannot be a loopback address, IPv6 multicast address, link-local address, or all-zero address (If the prefix length is 0, you can specify the all-zero address.).

prefix-length: Specifies a prefix length for the IPv6 address, in the range of 0 to 128.

Usage guidelines

A transparent DNS proxy processes a DNS request only when the destination IP address and port number of the DNS request match those of the transparent DNS proxy.

If server load balancing is configured, configure different IP addresses and port numbers for the transparent DNS proxy and the virtual server of the UDP type.

If you execute this command multiple times, the most recent configuration takes effect.

Examples

# Configure the IPv6 address for transparent DNS proxy dns-proxy1 as 1::2:3/112.

<Sysname> system-view

[Sysname] loadbalance dns-proxy dns-proxy1

[Sysname-lb-dp-udp-dns-proxy1] ipv6 address 1::2:3 112

ipv6 address (DNS server view)

Use ipv6 address to configure an IPv6 address for a DNS server.

Use undo ipv6 address to restore the default.

Syntax

ipv6 address ipv6-address

undo ipv6 address

Default

No IPv6 address is configured for a DNS server.

Views

DNS server view

Predefined user roles

network-admin

Parameters

ipv6-address: Specifies an IPv6 address, which cannot be a loopback address, IPv6 multicast address, link-local address, or all-zero address.

Usage guidelines

If you execute this command multiple times, the most recent configuration takes effect.

Examples

# Configure the IPv6 address for DNS server ds1 as 1001::1.

<Sysname> system-view

[Sysname] loadbalance dns-server ds1

[Sysname-lb-ds-ds1] ipv6 address 1001::1

ipv6 address (ISP view)

Use ipv6 address to configure an IPv6 address for an ISP.

Use undo ipv6 address to restore the default.

Syntax

ipv6 address ipv6-address prefix-length

undo ipv6 address ipv6-address prefix-length

Default

No IPv6 address is configured for an ISP.

Views

ISP view

Predefined user roles

network-admin

Parameters

ipv6-address: Specifies an IPv6 address.

prefix-length: Specifies the prefix length for the IPv6 address, in the range of 1 to 128.

Examples

# Configure the IPv6 address for the ISP isp1 as 200::1.

<Sysname> system-view

[Sysname] loadbalance isp name isp1

[Sysname-lbisp-isp1] ipv6 address 200::1 100

ipv6 prefix

Use ipv6 prefix to configure the prefix length for IPv6 proximity entries.

Use undo ipv6 prefix to restore the default.

Syntax

ipv6 prefix prefix-length

undo ipv6 prefix

Default

The prefix length for IPv6 proximity entries is 96.

Views

Proximity view

Predefined user roles

network-admin

Parameters

prefix-length: Specifies the prefix length for IPv6 proximity entries, in the range of 1 to 128.

Examples

# Specify the prefix length for IPv6 proximity entries as 64.

<Sysname> system-view

[Sysname] loadbalance proximity

[Sysname-lb-proximity] ipv6 prefix 64

ipv6 range

Use ip range to specify an IPv6 address range for an SNAT address pool.

Use undo ip range to restore the default.

Syntax

ipv6 range start start-ipv6-address end end-ipv6-address

undo ipv6 range

Default

No IPv6 address range is specified for an SNAT address pool.

Views

SNAT address pool view

Predefined user roles

network-admin

Parameters

start start-ipv6-address: Specifies the start IPv6 address.

end end-ipv6-address: Specifies the end IPv6 address, which must be greater than or equal to the start IPv6 address.

Usage guidelines

An SNAT address pool can have a maximum of 65536 IPv6 addresses. No overlapping IPv6 addresses are allowed in different SNAT address pools.

Examples

# Specify IPv6 address range 1001::1 to 1001::100 for the SNAT address pool lbsp.

<Sysname> system-view

[Sysname] loadbalance snat-pool lbsp

[Sysname-lbsnat-pool-lbsp] ipv6 range start 1001::1 end 1001::100

isp

Use isp to add an ISP to a region.

Use undo isp to delete an ISP from a region.

Syntax

isp isp-name

undo isp isp-name

Default

A region does not contain any ISPs.

Views

Region view

Predefined user roles

network-admin

Parameters

isp-name: Specifies an ISP by its name, a case-insensitive string of 1 to 63 characters.

Examples

# Add the ISP isp-ct to the region region-ct.

<Sysname> system-view

[Sysname] loadbalance region region-ct

[Sysname-lb-region-region-ct] isp isp-ct

Related commands

loadbalance region

lb-policy (transparent DNS proxy view)

Use lb-policy to specify an LB policy to be referenced by a transparent DNS proxy.

Use undo lb-policy to restore the default.

Syntax

lb-policy policy-name

undo lb-policy

Default

No LB policy is referenced by a transparent DNS proxy.

Views

Transparent DNS proxy view

Predefined user roles

network-admin

Parameters

policy-name: Specifies an LB policy by its name, a case-insensitive string of 1 to 63 characters.

Usage guidelines

By referencing an LB policy, a transparent DNS proxy implements load balancing for matching packets based on the packet contents.

A transparent DNS proxy can reference only a DNS policy template.

Examples

# Specify the LB policy dns-policy1 to be referenced by transparent DNS proxy dns-proxy1.

<Sysname> system-view

[Sysname] loadbalance dns-proxy dns-proxy1

[Sysname-lb-dp-udp-dns-proxy1] lb-policy dns-policy1

lb-policy (virtual server view)

Use lb-policy to specify an LB policy to be referenced by the specified virtual server.

Use undo lb-policy to restore the default.

Syntax

lb-policy policy-name

undo lb-policy

Default

No LB policy is referenced by a virtual server.

Views

Virtual server view

Predefined user roles

network-admin

Parameters

policy-name: Specifies an LB policy by its name, a case-insensitive string of 1 to 63 characters.

Usage guidelines

By referencing an LB policy, the virtual server implements load balancing for matching packets based on the packet contents.

Examples

# Specify the LB policy lbp1 to be referenced by the IP-type virtual server vs3.

<Sysname> system-view

[Sysname] virtual-server vs3 type ip

[Sysname-vs-ip-vs3] lb-policy lbp1

link (DNS server view)

Use link to associate a link with a DNS server.

Use undo link to restore the default.

Syntax

link link-name

undo link

Default

No link is associated with a DNS server.

Views

DNS server view

Predefined user roles

network-admin

Parameters

link-name: Specifies a link by its name, a case-insensitive string of 1 to 63 characters.

Usage guidelines

A DNS server can be associated with only one link. A link can be associated with multiple DNS servers.

Examples

# Associate link link1 with DNS server ds1.

<Sysname> system-view

[Sysname] loadbalance dns-server ds1

[Sysname-lb-ds-ds1] link link1

link-group (LB action view)

Use link-group to specify the primary link group.

Use undo link-group to restore the default.

Syntax

link-group link-group-name [ backup backup-link-group-name ] [ sticky sticky-name ]

undo link-group

Default

No primary link group is specified.

Views

LB action view

Predefined user roles

network-admin

Parameters

link-group-name: Specifies a primary link group name, a case-insensitive string of 1 to 63 characters.

backup backup-link-group-name: Specifies a backup link group name, a case-insensitive string of 1 to 63 characters.

sticky sticky-name: Specifies the name of the sticky group corresponding to the link group. It is a case-insensitive string of 1 to 63 characters.

Usage guidelines

The link-group and forward all commands are mutually exclusive. If you configure one command, the other command (if configured) is automatically cancelled.

When the primary link group is available (contains links), packets are forwarded through the primary link group. When the primary link group is not available, packets are forwarded through the backup link group.

Examples

# Specify the primary link group lg, the backup link group lgb, and the sticky group sg1 for the link-generic LB action lba1.

<Sysname> system-view

[Sysname] loadbalance action lba1 type link-generic

[Sysname-lba-link-generic-lba1] server-farm sf backup sfb sticky sg1

Related commands

forward all

link-group (link view)

Use link-group to specify a link group for a link.

Use undo link-group to restore the default.

Syntax

link-group link-group-name

undo link-group

Default

A link does not belong to any link group.

Views

Link view

Predefined user roles

network-admin

Parameters

link-group-name: Specifies a link group name, a case-insensitive string of 1 to 63 characters.

Usage guidelines

The device selects the best link from the matching link group to perform link load balancing.

Examples

# Specify the link group lkg1 for the link lk1.

<Sysname> system-view

[Sysname] loadbalance link lk1

[Sysname-lb-link-lk1] link-group lkg1

loadbalance action

Use loadbalance action to create an LB action and enter its view, or enter the view of an existing LB action.

Use undo loadbalance action to delete the specified LB action.

Syntax

loadbalance action action-name [ type { dns | link-generic } ]

undo loadbalance action action-name

Default

No LB actions exist.

Views

System view

Predefined user roles

network-admin

Parameters

action-name: Specifies the LB action name, a case-insensitive string of 1 to 63 characters.

type { dns | link-generic }: Specifies an LB action type.

·     dns: DNS load balancing action.

·     link-generic: Link load balancing action.

Usage guidelines

When you create an LB action, you must specify the LB action type. You can enter an existing LB action view without entering the type of the LB action.

Examples

# Create the LB action lba1 with the DNS type, and enter LB action view.

<Sysname> system-view

[Sysname] loadbalance action lba1 type dns

[Sysname-lba-dns-lba1]

loadbalance alg

Use loadbalance alg to enable ALG for the specified protocols.

Use undo loadbalance alg to disable ALG for the specified protocols.

Syntax

loadbalance alg { dns | ftp | h323 | icmp-error | ils | mgcp | nbt | pptp | rsh | rtsp | sccp | sip | sqlnet | tftp | xdmcp }

undo loadbalance alg { dns | ftp | h323 | icmp-error | ils | mgcp | nbt | pptp | rsh | rtsp | sccp | sip | sqlnet | tftp | xdmcp }

Default

ALG is enabled for the DNS, FTP, PPTP, and RTSP protocols and ICMP error packets.

Views

System view

Predefined user roles

network-admin

Parameters

dns: Specifies the DNS protocol.

ftp: Specifies the FTP protocol.

h323: Specifies the H.323 protocol.

icmp-error: Specifies the ICMP error packets.

ils: Specifies the Internet Locator Service (ILS) protocol.

mgcp: Specifies the Media Gateway Control Protocol (MGCP).

nbt: Specifies the NetBIOS over TCP/IP (NBT) protocol.

pptp: Specifies the Point-to-Point Tunneling Protocol (PPTP).

rsh: Specifies the Remote Shell (RSH) protocol.

rtsp: Specifies the Real Time Streaming Protocol (RTSP).

sccp: Specifies the Skinny Client Control Protocol (SCCP).

sip: Specifies the Session Initiation Protocol (SIP).

sqlnet: Specifies the SQLNET protocol.

tftp: Specifies the TFTP protocol.

xdmcp: Specifies the X Display Manager Control Protocol (XDMCP).

Usage guidelines

The ALG feature distributes parent and child sessions to the same link.

Examples

# Enable ALG for TFTP.

<Sysname> system-view  

[Sysname] loadbalance alg tftp

loadbalance alg all-enable

Use loadbalance alg all-enable to enable ALG for all protocols.

Use loadbalance alg all-disable to disable ALG for all protocols.

Syntax

loadbalance alg all-enable

loadbalance alg all-disable

Default

ALG is enabled for the DNS, FTP, PPTP, and RTSP protocols and ICMP error packets.

Views

System view

Predefined user roles

network-admin

Examples

# Enable ALG for all protocols.

<Sysname> system-view

[Sysname] loadbalance alg all-enable

loadbalance class

Use loadbalance class to create an LB class and enter its view, or enter the view of an existing LB class.

Use undo loadbalance class to delete the specified LB class.

Syntax

loadbalance class class-name [ type { dns| link-generic } [ match-all | match-any ] ]

undo loadbalance class class-name

Default

No LB classes exist.

Views

System view

Predefined user roles

network-admin

Parameters

class-name: Specifies the LB class name, a case-insensitive string of 1 to 63 characters.

type { dns | link-generic }: Specifies an LB action type.

·     dns: DNS load balancing action.

·     link-generic: Link load balancing action.

[ match-all | match-any ]: Requires matching all rules or any rule of the LB class. match-all is the default match mode.

Usage guidelines

When you create an LB class, you must specify an LB class type. You can enter an existing LB class view without entering the type of the LB class.

Examples

# Create the LB class lbc1 with the DNS type, and enter LB class view.

<Sysname> system-view

[Sysname] loadbalance class lbc1 type dns

[Sysname-lbc-dns-lbc1]

loadbalance dns-proxy

Use loadbalance dns-proxy to create a transparent DNS proxy and enter its view, or enter the view of an existing transparent DNS proxy.

Use undo loadbalance dns-proxy to delete a transparent DNS proxy.

Syntax

loadbalance dns-proxy dns-proxy-name type udp

undo loadbalance dns-proxy dns-proxy-name

Default

No transparent DNS proxies exist.

Views

System view

Predefined user roles

network-admin

Parameters

dns-proxy-name: Specifies the transparent DNS proxy name, a case-insensitive string of 1 to 63 characters.

type udp: Specifies the transparent DNS proxy type as UDP.

Examples

# Create the UDP transparent DNS proxy dns-proxy1, and enter UDP transparent DNS proxy view.

<Sysname> system-view

[Sysname] loadbalance dns-proxy dns-proxy1 type udp

[Sysname-lb-dp-udp-dns-proxy1]

Related commands

display loadbalance dns-proxy

loadbalance dns-server

Use loadbalance dns-server to create a DNS server and enter its view, or enter the view of an existing DNS server.

Use undo loadbalance dns-server to delete a DNS server.

Syntax

loadbalance dns-server dns-server-name

undo loadbalance dns-server dns-server-name

Default

No DNS servers exist.

Views

System view

Predefined user roles

network-admin

Parameters

dns-server-name: Specifies the DNS server name, a case-insensitive string of 1 to 63 characters.

Examples

# Create the DNS server ds1, and enter DNS server view.

<Sysname> system-view

[Sysname] loadbalance dns-server ds1

[Sysname-lb-ds-ds1]

loadbalance dns-server-pool

Use loadbalance dns-server-pool to create a DNS server pool and enter its view, or enter the view of an existing DNS server pool.

Use undo loadbalance dns-server-pool to delete a DNS server pool.

Syntax

loadbalance dns-server-pool pool-name

undo loadbalance dns-server-pool pool-name

Default

No DNS server pools exist.

Views

System view

Predefined user roles

network-admin

Parameters

pool-name: Specifies the DNS server pool name, a case-insensitive string of 1 to 63 characters.

Examples

# Create the DNS server pool dns-pool1, and enter DNS server pool view.

<Sysname> system-view

[Sysname] loadbalance dns-server-pool dns-pool1

[Sysname-lb-dspool-dns-pool1]

loadbalance isp file

Use loadbalance isp file to import an ISP file.

Use undo loadbalance isp file to delete an ISP file.

Syntax

loadbalance isp file isp-file-name

undo loadbalance isp file

Views

System view

Predefined user roles

network-admin

Parameters

isp-file-name: Specifies the ISP file name, a case-insensitive string of 1 to 255 characters.

Usage guidelines

The system keeps the imported information intact when detecting the following problems:

·     The file does not exist.

·     The file name is invalid.

·     File decryption occurs.

If the system quits the import operation because of IP address parsing failure, the system performs the following operations:

·     Clears the most recently imported information.

·     Saves the information imported this time.

You cannot delete the imported ISP and its IPv4 or IPv6 address. If the manually configured and imported ISP information overlaps, you can delete the manually configured ISP information.

To perform an active/standby MPU switchover, make sure the standby MPU has the same ISP file as the active MPU.

If you execute this command multiple times, the most recent configuration takes effect.

Examples

# Import the ISP file isp2.

<Sysname> system-view

[Sysname] loadbalance isp file isp2

loadbalance isp name

Use loadbalance isp name to create an ISP and enter its view, or enter the view of an existing ISP.

Use undo loadbalance isp name to delete the specified ISP.

Syntax

loadbalance isp name isp-name

undo loadbalance isp name isp-name

Default

No ISPs exist.

Views

System view

Predefined user roles

network-admin

Parameters

isp-name: Specifies the ISP name, a case-insensitive string of 1 to 63 characters.

Examples

# Create ISP isp1, and enter ISP view.

<Sysname> system-view

[Sysname] loadbalance isp name isp1

[Sysname-lbisp-isp1]

loadbalance link

Use loadbalance link to create an LB link and enter its view, or enter the view of an existing LB link.

Use undo loadbalance link to delete an LB link.

Syntax

loadbalance link link-name

undo loadbalance link link-name

Default

No LB links exist.

Views

System view

Predefined user roles

network-admin

Parameters

link-name: Specifies the LB link name, a case-insensitive string of 1 to 63 characters.

Usage guidelines

Each physical link connected to the external network corresponds to an LB link.

Examples

# Create the LB link lk1, and enter LB link view.

<Sysname> system-view

[Sysname] loadbalance link lk1

[Sysname-lb-link-lk1]

loadbalance link-group

Use loadbalance link-group to create a link group and enter its view, or enter the view of an existing link group.

Use undo loadbalance link-group to delete a link group.

Syntax

loadbalance link-group link-group-name

undo loadbalance link-group link-group-name

Default

No link groups exist.

Views

System view

Predefined user roles

network-admin

Parameters

link-group-name: Specifies the link group name, a case-insensitive string of 1 to 63 characters.

Usage guidelines

You can add links that contain similar functions to a link group to facilitate management.

Examples

# Create the link group lg, and enter link group view.

<Sysname> system-view

[Sysname] loadbalance link-group lg

[Sysname-lb-lgroup-lg]

loadbalance log enable bandwidth-busy

Use loadbalance log enable bandwidth-busy to enable load balancing link busy state logging.

Use undo loadbalance log enable bandwidth-busy to disable load balancing link busy state logging.

Syntax

loadbalance log enable bandwidth-busy

undo loadbalance log enable bandwidth-busy

Default

Load balancing link busy state logging is disabled.

Views

System view

Predefined user roles

network-admin

Usage guidelines

Load balancing link busy state logging records busy states for all links.

Examples

# Enable load balancing link busy state logging.

<Sysname> system-view

[Sysname] loadbalance log enable bandwidth-busy

loadbalance log enable base

Use loadbalance log enable base to enable load balancing basic logging.

Use undo loadbalance log enable base to disable load balancing basic logging.

Syntax

loadbalance log enable base

undo loadbalance log enable base

Default

Load balancing basic logging is enabled.

Views

System view

Predefined user roles

network-admin

Usage guidelines

Load balancing basic logging generates logs for the following events:

·     The state of a link,or link group changes.

·     The health monitoring result of a link changes.

·     The number of connections on a virtual server or link reaches or drops below the upper limit.

·     The connection establishment rate on a virtual server or link reaches or drops below the upper limit.

·     A primary/backup link group switchover occurs between link groups specified for a virtual server.

·     A primary/backup link group switchover occurs between link groups specified for an LB action.

Examples

# Enable load balancing basic logging.

<Sysname> system-view

[Sysname] loadbalance log enable base

loadbalance log enable nat

Use loadbalance log enable nat to enable load balancing NAT logging.

Use undo loadbalance log enable nat to disable load balancing NAT logging.

Syntax

loadbalance log enable nat

undo loadbalance log enable nat

Default

Load balancing NAT logging is disabled.

Views

System view

Predefined user roles

network-admin

Usage guidelines

Load balancing NAT logging records NAT session information, including IP address and port translation information and access information.

Examples

# Enable load balancing NAT logging.

<Sysname> system-view

[Sysname] loadbalance log enable nat

loadbalance policy

Use loadbalance policy to create an LB policy and enter its view, or enter the view of an existing LB policy.

Use undo loadbalance policy to delete the specified LB policy.

Syntax

loadbalance policy policy-name [ type { dns | link-generic } ]

undo loadbalance policy policy-name

Default

No LB policies exist.

Views

System view

Predefined user roles

network-admin

Parameters

policy-name: Specifies the LB policy name, a case-insensitive string of 1 to 63 characters.

type { dns | link-generic }: Specifies an LB policy type.

·     dns: DNS load balancing policy.

·     link-generic: Link load balancing policy.

Usage guidelines

When you create an LB policy, you must specify the LB policy type. You can enter existing LB policy view without entering the type of the LB policy.

Examples

# Create the LB policy lbp1 with the DNS type, and enter LB policy view.

<Sysname> system-view

[Sysname] loadbalance policy lbp1 type dns

[Sysname-lbp-dns-lbp1]

loadbalance probe-template

Use loadbalance probe-template to create a load balancing probe template and enter its view, or enter the view of an existing load balancing probe template.

Use undo loadbalance probe-template to delete a load balancing probe template.

Syntax

loadbalance probe-template icmp template-name

undo loadbalance probe-template icmp template-name

Default

No load balancing probe templates exist.

Views

System view

Predefined user roles

network-admin

Parameters

icmp: Specifies the ICMP-type template.

template-name: Specifies a template name, a case-insensitive string of 1 to 32 characters.

Examples

# Create a load balancing probe template named icmptplt, and enter load balancing probe template view.

<Sysname> system-view

[Sysname] loadbalance probe-template icmp icmptplt

[Sysname-lb-pt-icmp-icmptplt]

loadbalance proximity

Use loadbalance proximity to create proximity and enter its view, or enter the view of the existing proximity.

Use undo loadbalance proximity to delete proximity view and clear all configuration in proximity view.

Syntax

loadbalance proximity

undo loadbalance proximity

Views

System view

Predefined user roles

network-admin

Examples

# Create proximity and enter its view.

<Sysname> system-view

[Sysname] loadbalance proximity

[Sysname-lb-proximity]

loadbalance region

Use loadbalance region to create a region and enter its view, or enter the view of an existing region.

Use undo loadbalance region to delete a region.

Syntax

loadbalance region region-name

undo loadbalance region region-name

Default

No regions exist.

Views

System view

Predefined user roles

network-admin

Parameters

region-name: Specifies the region name, a case-insensitive string of 1 to 63 characters.

Usage guidelines

A region contains network segments corresponding to different ISPs.

Examples

# Create the region isp-ct, and enter region view.

<Sysname> system-view

[Sysname] loadbalance region isp-ct

[Sysname-lb-region-isp-ct]

loadbalance schedule-test ip

Use loadbalance schedule-test ip to perform an IPv4 load balancing test.

Syntax

loadbalance schedule-test ip protocol { protocol-number | icmp | tcp | udp } destination destination-address destination-port destination-port source source-address source-port source-port

Views

Any view

Predefined user roles

network-admin

Parameters

protocol { protocol-number | icmp | tcp | udp }: Specifies a protocol by its number in the range of 0 to 255 or by its name. For ICMP (1), TCP (6), and UDP (17), you can enter the protocol number or protocol name.

destination destination-address: Specifies the destination IPv4 address.

destination-port destination-port: Specifies the destination port number in the range of 0 to 65535. This option is not supported by some protocols.

source source-address: Specifies the source IPv4 address.

source-port source-port: Specifies the source port number in the range of 0 to 65535. This option is not supported by some protocols.

Examples

# Perform an IPv4 load balancing test for the TCP protocol.

<Sysname> loadbalance schedule-test ip protocol tcp destination 7.7.7.7 destination-port 4 source 2.2.2.2 source-port 5

    Matched virtual server: vs2

    Matched default link group: lg

    Forward type: Forwarding to link

    Selected link: link2

        Scheduling algorithm: Predictor

Table 21 Command output

Field

Description

Forward type

Forwarding mode:

·     The destination address is not supported. Load balancing is not performed.

·     Forward all—Forwards packets.

·     Forwarding to link—Forwards packets to the link.

·     Drop—Drops packets.

·     Redirect—Redirects packets.

·     Waiting—Enqueues packets.

Drop reason

Packet drop reason:

·     Number of connections or bandwidth for the virtual server exceeded the limit.

·     No class matched and no valid default link group configured.

·     No valid link in the link group.

·     Action is drop.

·     A sticky entry was matched but the number of connections or bandwidth for the link exceeded the limit.

·     A class was matched but no valid link group exists in the action of the class.

·     Queue overflow (which means the wait queue is full).

Scheduling algorithm

Scheduling algorithm used to select the link:

·     Predictor—The link is selected by using the scheduling algorithm.

·     Sticky method—The link is selected by using the sticky method.

·     Proximity—The link is selected by using the proximity feature.

loadbalance schedule-test ipv6

Use loadbalance schedule-test ipv6 to perform an IPv6 load balancing test.

Syntax

loadbalance schedule-test ipv6 protocol { protocol-number | icmpv6 | tcp | udp } destination destination-address destination-port destination-port source source-address source-port source-port

Views

Any view

Predefined user roles

network-admin

Parameters

protocol { protocol-number | icmpv6 | tcp | udp }: Specifies a protocol by its number in the range of 0 to 255 or by its name. For ICMPv6 (58), TCP (6), and UDP (17), you can enter the protocol number or protocol name.

destination destination-address: Specifies the destination IPv6 address.

destination-port destination-port: Specifies the destination port number in the range of 0 to 65535. This option is not supported by some protocols.

source source-address: Specifies the source IPv6 address.

source-port source-port: Specifies the source port number in the range of 0 to 65535. This option is not supported by some protocols.

Examples

# Schedule an IPv6 load balancing test for the ICMPv6 protocol.

<Sysname> loadbalance schedule-test ipv6 protocol icmpv6 destination 10::1 source 12::2

    Matched virtual server: vs2

    Matched default link group: lg

    Forward type: Forwarding to link

    Selected link: link2

        Scheduling algorithm: Predictor

Table 22 Command output

Field

Description

Forward type

Forwarding mode:

·     The destination address is not supported. Load balancing is not performed.

·     Forward all—Forwards packets.

·     Forwarding to link—Forwards packets to the link.

·     Drop—Drops packets.

·     Redirect—Redirects packets.

·     Waiting—Enqueues packets.

Drop reason

Packet drop reason:

·     Number of connections or bandwidth for the virtual server exceeded the limit.

·     No class matched and no valid default link group configured.

·     No valid link in the link group.

·     Action is drop.

·     A sticky entry was matched but the number of connections or bandwidth for the link exceeded the limit.

·     A class was matched but no valid link group exists in the action of the class.

·     Queue overflow (which means the wait queue is full).

Scheduling algorithm

Scheduling algorithm used to select the link:

·     Predictor—The link is selected by using the scheduling algorithm.

·     Sticky method—The link is selected by using the sticky method.

·     Proximity—The link is selected by using the proximity feature.

loadbalance snat-pool

Use loadbalance snat-pool to create an SNAT address pool and enter its view, or enter the view of an existing SNAT address pool.

Use undo loadbalance snat-pool to delete the specified SNAT address pool.

Syntax

loadbalance snat-pool pool-name

undo loadbalance snat-pool pool-name

Default

No SNAT address pools exist.

Views

System view

Predefined user roles

network-admin

Parameters

pool-name: Specifies the SNAT address pool name, a case-insensitive string of 1 to 63 characters.

Examples

# Create the SNAT address pool lbsp, and enter SNAT address pool view.

<Sysname> system-view

[Sysname] loadbalance snat-pool lbsp

[Sysname-lbsnat-pool-lbsp]

match

Use match to specify the proximity probe method for packets.

Use undo match to restore the default.

Syntax

match [ match-id ] tcp { lb-probe lb-template | probe nqa-template }

undo match match-id

Default

No proximity probe method is specified.

Views

Proximity view

Predefined user roles

network-admin

Parameters

match-id: Specifies a proximity probe method by its ID in the range of 1 to 65535. If the rule does not exist, the command creates the proximity probe method. If the rule already exists, the command modifies the proximity probe method. If you do not specify this argument, the system automatically assigns an available rule ID with the smallest available ID.

tcp: Specifies TCP packets.

lb-probe lb-template: Specifies a load balancing probe template by its name, a case-insensitive string of 1 to 32 characters.

probe nqa-template: Specifies an NQA template by its name, a case-insensitive string of 1 to 32 characters.

Usage guidelines

If the match command is configured, the specified proximity probe method applies. If no packets match the type in the match command or the match command is not configured, the default proximity probe method specified by using the match default command applies.

You can specify only one proximity probe method for each type of packets.

If both the match command and the match default command are configured, specify the same template type in the two commands as a best practice for both templates to take effect. If you specify different template types, the NQA template does not take effect.

Examples

# Create the ICMP-type NQA template t4, and specify the NQA template as the proximity probe method for TCP packets.

<Sysname> system-view

[Sysname] nqa template icmp t4

[Sysname-nqatplt-icmp-t4] quit

[Sysname] loadbalance proximity

[Sysname-lb-proximity] match tcp probe t4

Related commands

match default

match acl

Use match class to create an ACL match rule or modify an existing ACL match rule.

Use undo match to delete a match rule.

Syntax

match [ match-id ] acl [ ipv6 ] { acl-number | name acl-name }

undo match match-id

Default

No match rules exist.

Views

LB class view

Predefined user roles

network-admin

Parameters

match-id: Specifies a match rule by its ID in the range of 1 to 65535. If you do not specify this argument, the system automatically assigns an available rule ID with the smallest number.

ipv6: Specifies an IPv6 ACL. If you do not specify this keyword, the command creates an IPv4 ACL.

acl-number: Specifies the ACL number in the range of 2000 to 3999.

name acl-name: Specifies an ACL by its name, a case-insensitive string of 1 to 63 characters starting with a letter.

Usage guidelines

If the specified ACL does not exist, this rule is not matched.

You can create a maximum of 65535 match rules for an LB class.

Examples

# Create an ACL match rule for the DNS LB class lbc1.

<Sysname> system-view

[Sysname] loadbalance class lbc1 type dns

[Sysname-lbc-dns-lbc1] match acl 2000

match app-group

Use match app-group to create an application group match rule or modify an existing application group match rule.

Use undo match app-group to delete a match rule.

Syntax

match [ match-id ] app-group group-name

undo match match-id

Default

No match rules exist.

Views

Link-generic LB class view

Predefined user roles

network-admin

Parameters

match-id: Specifies a match rule ID in the range of 1 to 65535. If you do not specify this argument, the system automatically assigns an available rule ID with the smallest number.

app-group group-name: Specifies an application group by its name, a case-insensitive string of 1 to 63 characters.

Usage guidelines

If the specified application group does not exist, the rule does not take effect.

Examples

# Create an application group match rule for the link-generic LB class lbc1.

<Sysname> system-view

[Sysname] loadbalance class lbc1 type link-generic

[Sysname-lbc-link-generic-lbc1] match app-group http

Related commands

app-group (Security Command Reference)

match class

Use match class to create a match rule that references an LB class or modify an existing match rule that references an LB class.

Use undo match to delete a match rule.

Syntax

match [ match-id ] class class-name

undo match match-id

Default

An LB class does not have a match rule.

Views

LB class view

Predefined user roles

network-admin

Parameters

match-id: Specifies a match rule by its ID in the range of 1 to 65535. If you do not specify this argument, the system automatically assigns an available rule ID with the smallest number.

class-name: Specifies an LB class by its name, a case-insensitive string of 1 to 63 characters, to be referenced by the match rule. The current LB class cannot be referenced.

Usage guidelines

A match rule cannot reference an LB class that has already been referenced.

You can create a maximum of 65535 match rules for an LB class.

Examples

# Create a match rule that references the LB class lbc2 for the DNS LB class lbc1.

<Sysname> system-view

[Sysname] loadbalance class lbc1 type dns

[Sysname-lbc-dns-lbc1] match class lbc2

match default

Use match default to specify the default proximity probe method.

Use undo match default to restore the default.

Syntax

match default { lb-probe lb-template | probe nqa-template }

undo match default

Default

The default proximity probe method is not specified.

Views

Proximity view

Predefined user roles

network-admin

Parameters

lb-probe lb-template: Specifies a load balancing probe template by its name, a case-insensitive string of 1 to 32 characters.

probe nqa-template: Specifies an NQA template by its name, a case-insensitive string of 1 to 32 characters.

Usage guidelines

If the match command is configured, the specified proximity probe method applies. If no packets match the type in the match command or the match command is not configured, the default proximity probe method applies.

If both the match command and the match default command are configured, you must specify the same template type (load balancing or NQA) in the two commands as a best practice for both templates to take effect. If you specify different template types, the NQA template does not take effect.

Examples

# Create the ICMP-type NQA template t4, and specify the NQA template as the default proximity probe method.

<Sysname> system-view

[Sysname] nqa template icmp t4

[Sysname-nqatplt-icmp-t4] quit

[Sysname] loadbalance proximity

[Sysname-lb-proximity] match default probe t4

Related commands

loadbalance probe-template

match

nqa template (Network Management and Monitoring Command Reference)

match destination

Use match destination to create a destination IP address match rule or modify an existing destination IP address match rule.

Use undo match to delete a match rule.

Syntax

match [ match-id ] destination { ip address ipv4-address [ mask-length | mask ] | ipv6 address ipv6-address [ prefix-length ] }

undo match match-id

Default

An LB class does not have a match rule.

Views

DNS/Link-generic LB class view

Predefined user roles

network-admin

Parameters

match-id: Specifies a match rule by its ID in the range of 1 to 65535. If you do not specify this argument, the system automatically assigns an available rule ID with the smallest number.

ip address ipv4-address: Specifies an IPv4 address.

mask-length: Specifies a mask length in the range of 0 to 32. The default is 32.

mask: Specifies a subnet mask. The default is 255.255.255.255.

ipv6 address ipv6-address: Specifies an IPv6 address.

prefix-length: Specifies a prefix length in the range of 0 to 128. The default is 128.

Usage guidelines

You can create a maximum of 65535 match rules for an LB class.

Examples

# Create a match rule to match destination IPv4 address 1.1.1.1/32 for the DNS LB class lbc1.

<Sysname> system-view

[Sysname] loadbalance class lbc1 type dns

[Sysname-lbc-dns-lbc1] match destination ip address 1.1.1.1

# Create a match rule to match destination IPv4 address 1.1.1.1/32 for the link-generic LB class lbc2.

<Sysname> system-view

[Sysname] loadbalance class lbc2 type link-generic

[Sysname-lbc-link-generic-lbc2] match destination ip address 1.1.1.1

match destination domain-name

Use match destination domain-name to create a domain name match rule or modify an existing domain name match rule.

Use undo match to delete a match rule.

Syntax

match [ match-id ] destination domain-name domain-name

undo match match-id

Default

An LB class does not have a match rule.

Views

Link-generic LB class view

Predefined user roles

network-admin

Parameters

match-id: Specifies a match rule by its ID in the range of 1 to 65535. If you do not specify this argument, the system automatically assigns an available rule ID with the smallest number.

domain-name: Specifies a domain name, a case-insensitive string of 1 to 253 characters. Each dot-separated part in the domain name can contain a maximum of 63 characters. The domain name can contain letters, digits, hyphens (-), underscores (_), dots (.), and wildcards (asterisks and question marks).

Usage guidelines

When you use wildcards (asterisks and question marks) in a domain name, follow these guidelines:

·     The wildcards can substitute any characters except for dots (.).

·     An asterisk (*) can substitute a character string.

·     A question mark (?) can substitute a single character.

You can create a maximum of 65535 match rules for an LB class.

Examples

# Create a domain name match rule for the link-generic LB class lbc1 to match domain name www.abc.com.

<Sysname> system-view

[Sysname] loadbalance class lbc1 type link-generic

[Sysname-lbc-link-generic-lbc1] match destination domain-name www.aaa.com

match domain-name

Use match domain-name to create a domain name match rule or modify an existing domain name match rule.

Use undo match to delete a match rule.

Syntax

match [ match-id ] domain-name domain-name

undo match match-id

Default

An LB class does not have a match rule.

Views

DNS LB class view

Predefined user roles

network-admin

Parameters

match-id: Specifies a match rule by its ID in the range of 1 to 65535. If you do not specify this argument, the system automatically assigns an available rule ID with the smallest number.

domain-name: Specifies a domain name, a case-insensitive string of 1 to 253 characters. Each dot-separated part in the domain name can contain a maximum of 63 characters. The domain name can contain letters, digits, hyphens (-), underscores (_), dots (.), and wildcards (asterisks and question marks).

Usage guidelines

When you use wildcards (asterisks and question marks) in a domain name, follow these guidelines:

·     The wildcards can substitute any characters except for dots (.).

·     An asterisk (*) can substitute a character string.

·     A question mark (?) can substitute a single character.

You can create a maximum of 65535 match rules for an LB class.

Examples

# Create a domain name match rule for DNS LB class lbc1 to match domain name www.abc.com.

<Sysname> system-view

[Sysname] loadbalance class lbc1 type dns

[Sysname-lbc-dns-lbc1] match domain-name www.abc.com

match interface

Use match interface to create an interface match rule or modify an existing interface match rule.

Use undo match to delete a match rule.

Syntax

match [ match-id ] interface interface-type interface-number

undo match match-id

Default

An LB class does not have a match rule.

Views

Link-generic LB class view

Predefined user roles

network-admin

Parameters

match-id: Specifies a match rule by its ID in the range of 1 to 65535. If you do not specify this argument, the system automatically assigns an available rule ID with the smallest number.

interface interface-type interface-number: Specifies an interface by its type and number. The interface type can be Layer 3 Ethernet interface and Layer 3 aggregate interface.

Usage guidelines

If the specified interface does not exist, the rule does not take effect.

Examples

# Create an interface match rule for the link-generic LB class lbc1 to match interface GigabitEthernet 1/0/1.

<Sysname> system-view

[Sysname] loadbalance class lbc1 type link-generic

[Sysname-lbc-link-generic-lbc1] match interface gigabitethernet 1/0/1

match isp

Use match isp to create an ISP match rule or modify an existing ISP match rule.

Use undo match to delete a match rule.

Syntax

match [ match-id ] isp isp-name

undo match match-id

Default

An LB class does not have a match rule.

Views

LB class view

Predefined user roles

network-admin

Parameters

match-id: Specifies a match rule by its ID in the range of 1 to 65535. If you do not specify this argument, the system automatically assigns an available rule ID with the smallest number.

isp-name: Specifies an ISP name, a case-insensitive string of 1 to 63 characters.

Usage guidelines

If the specified ISP does not exist or is not configured with an IP network segment, this rule is not matched.

You can create a maximum of 65535 match rules for an LB class.

Examples

# Create an ISP match rule for the link-generic LB class lbc1. Specify the ISP name as isp1.

<Sysname> system-view

[Sysname] loadbalance class lbc1 type link-generic

[Sysname-lbc-link-generic-lbc1] match isp isp1

match source

Use match source to create a source IP address match rule or modify an existing source IP address match rule.

Use undo match to delete a match rule.

Syntax

match [ match-id ] source { ip address ipv4-address [ mask-length | mask ] | ipv6 address ipv6-address [ prefix-length ] }

undo match match-id

Default

An LB class does not have a match rule.

Views

LB class view

Predefined user roles

network-admin

Parameters

match-id: Specifies a match rule by its ID in the range of 1 to 65535. If you do not specify this argument, the system automatically assigns an available rule ID with the smallest number.

source: Specifies the match rule type as source IP address.

ip address ipv4-address: Specifies an IPv4 address.

mask-length: Specifies a mask length in the range of 0 to 32. The default is 32.

mask: Specifies a subnet mask. The default is 255.255.255.255.

ipv6 address ipv6-address: Specifies an IPv6 address.

prefix-length: Specifies a prefix length in the range of 0 to 128. The default is 128.

Usage guidelines

You can create a maximum of 65535 match rules for an LB class.

Examples

# Create a match rule that matches source IP address 1.1.1.1/32 for the link-generic LB class lbc1.

<Sysname> system-view

[Sysname] loadbalance class lbc1 type link-generic

[Sysname-lbc-link-generic-lbc1] match source ip address 1.1.1.1

match user

Use match user to create a user match rule or modify an existing user match rule.

Use undo match to delete a match rule.

Syntax

match [ match-id ] [ identity-domain domain-name ] user user-name

undo match match-id

Default

An LB class does not have a match rule.

Views

Link-generic LB class view

Predefined user roles

network-admin

Parameters

match-id: Specifies a match rule by its ID in the range of 1 to 65535. If you do not specify this argument, the system automatically assigns an available rule ID with the smallest number.

identity-domain domain-name: Matches the user in an identity domain. The domain-name argument represents the identity domain name, a case-insensitive string of 1 to 255 characters excluding question marks (?). If you do not specify this option, the system matches the user among users that do not belong to any identity domain.

user-name: Specifies a username, a case-sensitive string of 1 to 55 characters.

Usage guidelines

If the specified user does not exist, the rule does not take effect.

Examples

# Create a user match rule for the link-generic LB class lbc1 to match user u1 in identity domain domain1.

<Sysname> system-view

[Sysname] loadbalance class lbc1 type link-generic

[Sysname-lbc-link-generic-lbc1] match identity-domain domain1 user u1

Related commands

display loadbalance class

match user-group

Use match user-group to create a user group match rule or modify an existing user group match rule.

Use undo match to delete a match rule.

Syntax

match [ match-id ] [ identity-domain domain-name ] user-group user-group-name

undo match match-id

Default

An LB class does not have a match rule.

Views

Link-generic LB class view

Predefined user roles

network-admin

Parameters

match-id: Specifies a match rule by its ID in the range of 1 to 65535. If you do not specify this argument, the system automatically assigns an available rule ID with the smallest number.

identity-domain domain-name: Matches the user group in an identity domain. The domain-name argument represents the identity domain name, a case-insensitive string of 1 to 255 characters excluding question marks (?). If you do not specify this option, the system matches the user group among user groups that do not belong to any identity domain.

user-group-name: Specifies a user group by its name, a case-insensitive string of 1 to 200 characters.

Usage guidelines

If the specified user group does not exist, the rule does not take effect.

Examples

# Create a user group match rule for the link-generic LB class lbc1 to match user group lb-group in identity domain domain1.

<Sysname> system-view

[Sysname] loadbalance class lbc1 type link-generic

[Sysname-lbc-link-generic-lbc1] match identity-domain domain1 user-group lb-group

Related commands

display loadbalance class

max-bandwidth (link view)

Use max-bandwidth to set the maximum expected bandwidth of an LB link.

Use undo max-bandwidth to restore the default.

Syntax

max-bandwidth [ inbound | outbound ] bandwidth-value

undo max-bandwidth [ inbound | outbound ]

Default

The maximum expected bandwidth of an LB link is not limited.

Views

Link view

Predefined user roles

network-admin

Parameters

inbound: Specifies the maximum inbound expected bandwidth.

outbound: Specifies the maximum outbound expected bandwidth.

bandwidth-value: Specifies the maximum expected bandwidth in the range of 0 to 4294967295 in KBps. The value 0 means the bandwidth is not limited.

Usage guidelines

If you do not specify the inbound or outbound keyword, the maximum expected bandwidth equals the inbound expected bandwidth plus the outbound expected bandwidth.

This command takes effect only on new sessions and does not take effect on existing sessions.

In addition to being used for link protection, the maximum expected bandwidth is used for remaining bandwidth calculation in the bandwidth algorithm, maximum bandwidth algorithm, and dynamic proximity algorithm.

Examples

# Set the maximum expected bandwidth of the LB link lk1 to 1 KBps.

<Sysname> system-view

[Sysname] loadbalance link lk1

[Sysname-lb-link-lk1] max-bandwidth 1

# Set the maximum inbound expected bandwidth of the LB link lk1 to 1 KBps.

<Sysname> system-view

[Sysname] loadbalance link lk1

[Sysname-lb-link-lk1] max-bandwidth inbound 1

# Set the maximum outbound expected bandwidth of the LB link lk1 to 1 KBps.

<Sysname> system-view

[Sysname] loadbalance link lk1

[Sysname-lb-link-lk1] max-bandwidth outbound 1

max-number

Use max-number to set the maximum number of proximity entries.

Use undo max-number to restore the default.

Syntax

max-number number

undo max-number

Default

The maximum number of proximity entries is not set.

Views

Proximity view

Predefined user roles

network-admin

Parameters

number: Specifies the maximum number of proximity entries, in the range of 0 to 10000000. The default value is 0, which indicates that the maximum number of proximity entries is not limited.

Examples

# Set the maximum number of proximity entries to 100.

<Sysname> system-view

[Sysname] loadbalance proximity

[Sysname-lb-proximity] max-number 100

override-limit enable

Use override-limit enable to ignore the limits for sessions that match sticky entries.

Use undo override-limit enable to remove the configuration.

Syntax

override-limit enable

undo override-limit enable

Default

The session limits apply to sessions that match sticky entries.

Views

Sticky group view

Predefined user roles

network-admin

Usage guidelines

Use this command to ignore the following limits for sessions that match sticky entries:

·     Bandwidth and connection parameters on links.

·     Bandwidth ratios and maximum expected bandwidths for links.

·     LB connection limit policies on virtual servers.

This command takes effect only on new sessions and does not take effect on existing sessions.

Examples

# Ignore the limits for sessions that match sticky entries generated in the sticky group st.

<Sysname> system-view

[Sysname] sticky-group st type address-port

[Sysname-sticky-address-port-st] override-limit enable

parameter

Use parameter to specify a parameter profile to be referenced by a virtual server.

Use undo parameter to restore the default.

Syntax

parameter ip profile-name

undo parameter ip

Default

No parameter profile is referenced by a virtual server.

Views

Virtual server view

Predefined user roles

network-admin

Parameters

ip: Specifies the IP parameter profile type.

profile-name: Specifies a parameter profile by its name, a case-insensitive string of 1 to 63 characters.

Usage guidelines

The virtual server references the parameter profile to implement analysis, processing, and optimization for service traffic.

Examples

# Specify the IP parameter profile pp2 to be referenced by the IP-type virtual server vs3.

<Sysname> system-view

[Sysname] virtual-server vs3 type ip

[Sysname-vs-ip-vs3] parameter ip pp2

parameter-profile

Use parameter-profile to create a parameter profile and enter its view, or enter the view of an existing parameter profile.

Use undo parameter-profile to delete the specified parameter profile.

Syntax

parameter-profile profile-name [ type ip ]

undo parameter-profile profile-name

Default

No parameter profiles exist.

Views

System view

Predefined user roles

network-admin

Parameters

profile-name: Specifies a parameter profile name, a case-insensitive string of 1 to 63 characters.

type ip: Specifies the IP parameter profile type.

Usage guidelines

You can configure advanced parameters through the parameter profile. The virtual server references the parameter profile to implement analysis, processing, and optimization for service traffic.

Examples

# Create the IP parameter profile pp2, and enter parameter profile view.

<Sysname> system-view

[Sysname] parameter-profile pp2 type ip

[Sysname-para-ip-pp2]

port (transparent DNS proxy view)

Use port to configure the port number of a transparent DNS proxy.

Use undo port to restore the default.

Syntax

port port-number

undo port

Default

The port number of a transparent DNS proxy is 53.

Views

Transparent DNS proxy view

Predefined user roles

network-admin

Parameters

port-number: Specifies a port number in the range of 1 to 65535.

Usage guidelines

A transparent DNS proxy processes a DNS request only when the destination IP address and port number of the DNS request matches those of the transparent DNS proxy.

If you execute this command multiple times, the most recent configuration takes effect.

Examples

# Specify the port number of transparent DNS proxy dns-proxy1 as 5353.

<Sysname> system-view

[Sysname] loadbalance dns-proxy dns-proxy1

[Sysname-lb-dp-dns-proxy1] port 5353

Related commands

display loadbalance dns-proxy

port (DNS server view)

Use port to configure the port number of a DNS server.

Use undo port to restore the default.

Syntax

port port-number

undo port

Default

The port number of a DNS server is 0.

Views

DNS server view

Predefined user roles

network-admin

Parameters

port-number: Specifies a port number in the range of 0 to 65535. The value 0 means that the original port number is used.

Usage guidelines

If you execute this command multiple times, the most recent configuration takes effect.

Examples

# Specify the port number of DNS server ds1 as 5353.

<Sysname> system-view

[Sysname] loadbalance dns-server ds1

[Sysname-lb-ds-ds1] port 5353

port (virtual server view)

Use port to configure the port number of a virtual server.

Use undo port to restore the default.

Syntax

port { port-number [ to port-number ] } &<1-n>

undo port

Default

The port number is 0 (indicates any port) for a virtual server.

Views

Virtual server view

Predefined user roles

network-admin

Parameters

port-number [ to port-number ] &<1-n>: Specifies a space-separated list of up to n port number items. Each port number item specifies a port number or a range of port numbers in the form of start-port-number to end-port-number. The value range for the port-number argument is 0 to 65535 (0 means any port) and the value range for n is 1 to 8.

Examples

# Specify the port number of the link-IP-type virtual server vs3 as 8080.

<Sysname> system-view

[Sysname] virtual-server vs3 type link-ip

[Sysname-vs-link-ip-vs3] port 8080

predictor (DNS server pool view)

Use predictor to specify a scheduling algorithm for a DNS server pool.

Use undo predictor to restore the default.

Syntax

predictor hash address { destination | source | source-ip-port } [ mask mask-length ] [ prefix prefix-length ]

predictor { random | round-robin | { bandwidth | max-bandwidth } [ inbound | outbound ] }

undo predictor

Default

The scheduling algorithm for a DNS server pool is weighted round robin.

Views

DNS server pool view

Predefined user roles

network-admin

Parameters

hash address: Specifies the hash algorithm based on the IP address.

destination: Specifies the hash algorithm based on the destination IP address.

source: Specifies the hash algorithm based on the source IP address.

source-ip-port: Specifies the hash algorithm based on the source IP address and port number.

mask mask-length: Specifies the mask length of the IPv4 address used in the hash algorithm. The value range for the mask-length argument is 0 to 32. The default is 32.

prefix prefix-length: Specifies the prefix length of the IPv6 address used in the hash algorithm. The value range for the prefix-length argument is 0 to 128. The default is 128.

random: Specifies the random algorithm, which randomly assigns DNS requests to DNS servers.

round-robin: Specifies the weighted round robin algorithm, which assigns DNS requests to DNS servers based on the weights of the DNS servers. A higher weight indicates more DNS requests will be assigned.

bandwidth: Specifies the bandwidth algorithm, which assigns DNS requests to DNS servers based on the weight and remaining bandwidth of the DNS servers. The weight value used in this algorithm is configured in DNS server view.

max-bandwidth: Specifies the maximum bandwidth algorithm, which always assigns DNS requests to the DNS server corresponding to the idle link with the largest remaining bandwidth.

inbound: Selects a DNS server based on the inbound bandwidth.

outbound: Selects a DNS server based on the outbound bandwidth.

Usage guidelines

If you do not specify the inbound or outbound keyword, the total bandwidth is used to select a DNS server.

In the bandwidth algorithm and maximum bandwidth algorithm, the remaining bandwidth is the maximum expected bandwidth minus the current bandwidth. If the maximum expected bandwidth is not configured, the remaining bandwidth is the maximum bandwidth of the link minus the current bandwidth.

Examples

# Specify the scheduling algorithm as random for DNS server pool dns-pool.

<Sysname> system-view

[Sysname] loadbalance dns-server-pool dns-pool

[Sysname-lb-dspool-dns-pool] predictor random

Related commands

max-bandwidth (link view)

rate-limit bandwidth (link view)

predictor (link group view)

Use predictor to specify a scheduling algorithm for a link group.

Use undo predictor to restore the default.

Syntax

predictor hash address { destination | source | source-ip-port } [ mask mask-length ] [ prefix prefix-length ]

predictor { least-connection | { bandwidth | max-bandwidth } [ inbound | outbound ] | random | round-robin }

undo predictor

Default

The scheduling algorithm for a link group is weighted round robin.

Views

Link group view

Predefined user roles

network-admin

Parameters

hash address: Performs the hash algorithm based on IP address.

destination: Performs the hash algorithm based on destination IP address.

source: Performs the hash algorithm based on source IP address.

source-ip-port: Performs the hash algorithm based on source IP address and port number.

mask mask-length: Specifies the IPv4 address mask length, in the range of 0 to 32. The default is 32.

prefix prefix-length: Specifies the IPv6 address prefix length, in the range of 0 to 128. The default is 128.

least-connection: Specifies the link-based weighted least connection algorithm. This algorithm always assigns new connections to the link with the fewest number of weighted active connections (the total number of active connections in all link groups divided by weight). The weight value used in this algorithm is configured in link view.

random: Specifies the random algorithm, which randomly assigns new connections to links.

round-robin: Specifies the weighted round robin algorithm, which assigns new connections to links based on the weights of links. A higher weight indicates more new connections will be assigned.

bandwidth: Specifies the bandwidth algorithm, which assigns packets to links based on the weight of the links and the bandwidth ratio. The weight value used in this algorithm is configured in link view.

max-bandwidth: Specifies the maximum bandwidth algorithm, which always assigns packets to the idle link with the largest remaining bandwidth.

inbound: Selects a link based on the inbound bandwidth.

outbound: Selects a link based on the outbound bandwidth.

Usage guidelines

If you do not specify the inbound or outbound keyword, the total bandwidth is used to select a link.

In the bandwidth algorithm and maximum bandwidth algorithm, the remaining bandwidth is the maximum expected bandwidth minus the current bandwidth. If the maximum expected bandwidth is not configured, the remaining bandwidth is the maximum bandwidth of the link minus the current bandwidth.

If you execute this command multiple times, the most recent configuration takes effect.

Examples

# Specify the scheduling algorithm random for the link group lg.

<Sysname> system-view

[Sysname] loadbalance link-group lg

[Sysname-lb-lgroup-lg] predictor random

Related commands

max-bandwidth (link view)

rate-limit bandwidth (link view)

priority (DNS server view)

Use priority to set the priority of a DNS server.

Use undo priority to restore the default.

Syntax

priority priority

undo priority

Default

The priority of a DNS server is 4.

Views

DNS server view

Predefined user roles

network-admin

Parameters

priority: Specifies the priority value in the range of 1 to 8. A greater value means a higher priority.

Usage guidelines

Typically, only the DNS servers with the highest priority participate in scheduling. If the number of such DNS servers is smaller than the required minimum number, more DNS servers are selected by priority in descending order. If the allowed maximum number is exceeded after DNS servers with a certain priority are added, only some of the DNS servers with that priority are added.

Use this command together with the selected-server command in DNS server pool view.

Examples

# Set the priority of DNS server ds1 to 3.

<Sysname> system-view

[Sysname] loadbalance dns-server ds1

[Sysname-lb-ds-ds1] priority 3

Related commands

selected-server (DNS server pool view)

priority (link view)

Use priority to set the priority of a link.

Use undo priority to restore the default.

Syntax

priority priority

undo priority

Default

The priority of a link is 4.

Views

Link view

Predefined user roles

network-admin

Parameters

priority: Specifies the priority value in the range of 1 to 8. A greater value means a higher priority.

Usage guidelines

Typically only the links with the highest priority participate in scheduling. If the number of such links is smaller than the required minimum number, more links are selected by priority in descending order.

Examples

# Set the priority of the link lk1 to 3.

<Sysname> system-view

[Sysname] loadbalance link lk1

[Sysname-lb-link-lk1] priority 3

Related commands

selected-link

probe (DNS server pool view)

Use probe to specify a health monitoring method for a DNS server pool.

Use undo probe to restore the default.

Syntax

probe template-name

undo probe template-name

Default

No health monitoring method is specified for a DNS server pool.

Views

DNS server pool view

Predefined user roles

network-admin

Parameters

template-name: Specifies an NQA template by its name, a case-insensitive string of 1 to 32 characters.

Usage guidelines

Use the nqa template command to create an NQA template to be referenced by the health monitoring method. The DNS server pool uses the parameters defined in the NQA template to detect the availability of DNS servers.

The health monitoring method configuration in DNS server view takes precedence over the configuration in DNS server pool view.

Examples

# Create the ICMP-type NQA template t4, and specify the health monitoring method for the DNS server pool dns-pool as t4.

<Sysname> system-view

[Sysname] nqa template icmp t4

[Sysname-nqatplt-icmp-t4] quit

[Sysname] loadbalance dns-server-pool dns-pool

[Sysname-lb-dspool-dns-pool] probe t4

Related commands

nqa template (Network Management and Monitoring Command Reference)

success-criteria (DNS server pool view)

probe (DNS server view)

Use probe to specify a health monitoring method for a DNS server.

Use undo probe to restore the default.

Syntax

probe template-name

undo probe template-name

Default

No health monitoring method is specified for a DNS server.

Views

DNS server view

Predefined user roles

network-admin

Parameters

template-name: Specifies an NQA template by its name, a case-insensitive string of 1 to 32 characters.

Usage guidelines

Use the nqa template command to create an NQA template to be referenced by the health monitoring method.

The health monitoring method configuration in DNS server view takes precedence over the configuration in DNS server pool view.

Examples

# Create the ICMP-type NQA template t4, and specify the health monitoring method for DNS server ds1 as t4.

<Sysname> system-view

[Sysname] nqa template icmp t4

[Sysname-nqatplt-icmp-t4] quit

[Sysname] loadbalance dns-server ds1

[Sysname-lb-ds-ds1] probe t4

Related commands

nqa template (Network Management and Monitoring Command Reference)

success-criteria (DNS server view)

probe (link group view)

Use probe to specify a health monitoring method for a link group.

Use undo probe to restore the default.

Syntax

probe template-name

undo probe template-name

Default

No health monitoring method is specified for a link group.

Views

Link group view

Predefined user roles

network-admin

Parameters

template-name: Specifies an NQA template by its name, a case-insensitive string of 1 to 32 characters.

Usage guidelines

The link group uses the parameters defined in the NQA template to detect the availability of links.

The health monitoring method configuration in link view takes precedence over the configuration in link group view.

Examples

# Create the ICMP-type NQA template t4, and specify the health monitoring method for the link group lg as t4.

<Sysname> system-view

[Sysname] nqa template icmp t4

[Sysname-nqatplt-icmp-t4] quit

[Sysname] loadbalance link-group lg

[Sysname-lb-lgroup-lg] probe t4

Related commands

nqa template (Network Management and Monitoring Command Reference)

success-criteria (link group view)

probe (link view)

Use probe to specify a health monitoring method for an LB link.

Use undo probe to restore the default.

Syntax

probe template-name

undo probe template-name

Default

No health monitoring method is specified for an LB link.

Views

Link view

Predefined user roles

network-admin

Parameters

template-name: Specifies an NQA template by its name, a case-insensitive string of 1 to 32 characters.

Usage guidelines

Use the nqa template command to create an NQA template to be referenced by the health monitoring method.

You can configure multiple health monitoring methods for an LB link. By default, health monitoring succeeds only when all the specified health monitoring methods succeed. You can use the success-criteria command to specify the health monitoring success criteria for the LB link.

Examples

# Create the ICMP-type NQA template t4, and specify the health monitoring method for the LB link lk1 as t4.

<Sysname> system-view

[Sysname] nqa template icmp t4

[Sysname-nqatplt-icmp-t4] quit

[Sysname] loadbalance link lk1

[Sysname-lb-link-lk1] probe t4

Related commands

nqa template (Network Management and Monitoring Command Reference)

success-criteria (link view)

proximity enable (link group view)

Use proximity enable to enable the proximity feature for a link group.

Use undo proximity enable to disable the proximity feature for a link group.

Syntax

proximity enable

undo proximity enable

Default

The proximity feature is disabled for a link group.

Views

Link group view

Predefined user roles

network-admin

Usage guidelines

The proximity feature takes precedence over the scheduling algorithm in selecting a link. If no link is selected according to the proximity feature, the scheduling algorithm is used.

Examples

# Enable the proximity feature for the link group lg.

<Sysname> system-view

[Sysname] loadbalance link-group lg

[Sysname-lb-lgroup-lg] proximity enable

rate-limit bandwidth (link view)

Use rate-limit bandwidth to set the maximum bandwidth of a link.

Use undo rate-limit bandwidth to restore the default.

Syntax

rate-limit bandwidth [ inbound | outbound ] bandwidth-value

undo rate-limit bandwidth [ inbound | outbound ]

Default

The maximum bandwidth of a link is not limited.

Views

Link view

Predefined user roles

network-admin

Parameters

inbound: Specifies the maximum inbound bandwidth.

outbound: Specifies the maximum outbound bandwidth.

bandwidth-value: Specifies the maximum bandwidth in the range of 0 to 4294967295 in KBps. The value 0 means the bandwidth is not limited.

Usage guidelines

If you do not specify the inbound or outbound keyword, the maximum bandwidth equals the inbound bandwidth plus the outbound bandwidth.

This command takes effect only on new sessions and does not take effect on existing sessions.

Examples

# Set the maximum bandwidth of the link lk1 to 1 KBps.

<Sysname> system-view

[Sysname] loadbalance link lk1

[Sysname-lb-link-lk1] rate-limit bandwidth 1

# Set the maximum inbound bandwidth of the link lk1 to 1 KBps.

<Sysname> system-view

[Sysname] loadbalance link lk1

[Sysname-lb-link-lk1] rate-limit bandwidth inbound 1

# Set the maximum outbound bandwidth of the link lk1 to 1 KBps.

<Sysname> system-view

[Sysname] loadbalance link lk1

[Sysname-lb-link-lk1] rate-limit bandwidth outbound 1

rate-limit bandwidth (virtual server view)

Use rate-limit bandwidth to set the maximum bandwidth of a virtual server.

Use undo rate-limit bandwidth to restore the default.

Syntax

rate-limit bandwidth [ inbound | outbound ] bandwidth-value

undo rate-limit bandwidth [ inbound | outbound ]

Default

The maximum bandwidth of a virtual server is not limited.

Views

Virtual server view

Predefined user roles

network-admin

Parameters

inbound: Specifies the maximum inbound bandwidth.

outbound: Specifies the maximum outbound bandwidth.

bandwidth-value: Specifies the maximum bandwidth in the range of 0 to 4294967295 in KBps. The value 0 means the bandwidth is not limited.

Usage guidelines

If you do not specify the inbound or outbound keyword, the maximum bandwidth equals the inbound bandwidth plus the outbound bandwidth.

Examples

# Set the maximum bandwidth of the IP-type virtual server vs3 to 1 KBps.

<Sysname> system-view

[Sysname] virtual-server vs3 type ip

[Sysname-vs-ip-vs3] rate-limit bandwidth 1

# Set the maximum inbound bandwidth of the IP-type virtual server vs3 to 1 KBps.

<Sysname> system-view

[Sysname] virtual-server vs3 type ip

[Sysname-vs-ip-vs3] rate-limit bandwidth inbound 1

# Set the maximum outbound bandwidth of the IP-type virtual server vs3 to 1 KBps.

<Sysname> system-view

[Sysname] virtual-server vs3 type ip

[Sysname-vs-ip-vs3] rate-limit bandwidth outbound 1

rate-limit connection (link view)

Use rate-limit connection to set the maximum number of connections per second of a link.

Use undo rate-limit connection to restore the default.

Syntax

rate-limit connection connection-number

undo rate-limit connection

Default

The maximum number of connections per second of a link is 0.

Views

Link view

Predefined user roles

network-admin

Parameters

connection-number: Specifies the maximum number of connections per second in the range of 0 to 4294967295. 0 means the number is not limited.

Usage guidelines

This command takes effect only on new sessions and does not take effect on existing sessions.

Examples

# Set the maximum number of connections per second of the link lk1 to 10000.

<Sysname> system-view

[Sysname] loadbalance link lk1

[Sysname-lb-link-lk1] rate-limit connection 10000

rate-limit connection (virtual server view)

Use rate-limit connection to set the maximum number of connections per second of a virtual server.

Use undo rate-limit connection to restore the default.

Syntax

rate-limit connection connection-number

undo rate-limit connection

Default

The maximum number of connections per second of a virtual server is 0.

Views

Virtual server view

Predefined user roles

network-admin

Parameters

connection-number: Specifies the maximum number of connections per second in the range of 0 to 4294967295. 0 means the number is not limited.

Examples

# Set the maximum number of connections per second of the IP-type virtual server vs3 to 10000.

<Sysname> system-view

[Sysname] virtual-server vs3 type ip

[Sysname-vs-ip-vs3] rate-limit connection 10000

reset loadbalance connections

Use reset loadbalance connections to clear application layer connections.

Syntax

reset loadbalance connections

Views

User view

Predefined user roles

network-admin

Usage guidelines

This command clears all application layer connections, including reused idle connections.

Examples

# Clear application layer connections.

<Sysname> reset loadbalance connection

reset loadbalance dns-proxy statistics

Use reset loadbalance dns-proxy statistics to clear transparent DNS proxy statistics.

Syntax

reset loadbalance dns-proxy statistics [ dns-proxy-name ]

Views

User view

Predefined user roles

network-admin

Parameters

dns-proxy-name: Specifies a transparent DNS proxy by its name, a case-insensitive string of 1 to 63 characters. If you do not specify this argument, the command clears statistics for all DNS transparent proxies.

Examples

# Clear statistics for transparent DNS proxy dns-proxy1.

<Sysname> reset loadbalance dns-proxy statistics dns-proxy1

Related commands

display loadbalance dns-proxy statistics

reset loadbalance dns-server statistics

Use reset loadbalance dns-server statistics to clear DNS server statistics.

Syntax

reset loadbalance dns-server statistics [ dns-server-name ]

Views

User view

Predefined user roles

network-admin

Parameters

dns-server-name: Specifies a DNS server by its name, a case-insensitive string of 1 to 63 characters. If you do not specify this argument, the command clears statistics for all DNS servers.

Examples

# Clear statistics for DNS server ds1.

<Sysname> reset loadbalance dns-server statistics ds1

Related commands

display loadbalance dns-server statistics

reset loadbalance link statistics

Use reset loadbalance link statistics to clear link statistics.

Syntax

reset loadbalance link statistics [ link-name ]

Views

User view

Predefined user roles

network-admin

Parameters

link-name: Specifies a link by its name, a case-insensitive string of 1 to 63 characters. If you do not specify this argument, the command clears statistics about all links.

Examples

# Clear statistics about all links.

<Sysname> reset loadbalance link statistics

reset loadbalance proximity

Use reset loadbalance proximity to clear proximity entry information.

Syntax

reset loadbalance proximity [ ip [ ipv4-address ] | ipv6 [ ipv6-address ] ]

Views

User view

Predefined user roles

network-admin

Parameters

ip [ ipv4-address ]: Clears IPv4 proximity entry information. If you specify the ipv4-address argument, this command clears information about the proximity entry corresponding to the IPv4 address. If you do not specify the ipv4-address argument, this command clears information about all IPv4 proximity entries.

ipv6 [ ipv6-address ]: Clears IPv6 proximity entry information. If you specify the ipv6-address argument, this command clears information about the proximity entry corresponding to the IPv6 address. If you do not specify the ipv6-address argument, this command clears information about all IPv6 proximity entries.

Usage guidelines

If you do not specify the ip or ipv6 keyword, this command clears information about all IPv4 and IPv6 proximity entries for the public network.

Examples

# Clear information about all IPv6 proximity entries for the public network.

<Sysname> reset loadbalance proximity ipv6

reset virtual-server statistics

Use reset virtual-server statistics to clear virtual server statistics.

Syntax

reset virtual-server statistics [ virtual-server-name ]

Views

User view

Predefined user roles

network-admin

Parameters

virtual-server-name: Clears statistics of the specified virtual server. The virtual-server-name argument specifies a virtual server name, a case-insensitive string of 1 to 63 characters. If you do not specify this argument, the command clears statistics of all virtual servers.

Examples

# Clear statistics of all virtual servers.

<Sysname> reset virtual-server statistics

Related commands

display virtual-server statistics

router interface

Use router interface to specify an outgoing interface for an LB link.

Use undo router interface to delete the outgoing interface for an LB link.

Syntax

router interface interface-type interface-number

undo router interface

Default

No outgoing interface is specified for an LB link.

Views

LB link view

Predefined user roles

network-admin

Parameters

interface-type interface-number: Specifies an outgoing interface.

Usage guidelines

In scenarios where IP addresses are obtained through PPPoE, use this command to dynamically obtain the outbound next hop IP address through the specified outgoing interface.

The specified outgoing interface must be an interface that can dynamically obtain IP addresses.

You can configure both this command and the router ip or router ipv6 command. The command configured later overwrites the command configured first.

Examples

# Specify Dialer0 as the outgoing interface for the LB link cnc.

<Sysname> system-view

[Sysname] loadbalance link cnc

[Sysname-lb-link-cnc] router interface Dialer0

router ip

Use router ip to specify the outbound next hop for an LB link.

Use undo router ip to restore the default.

Syntax

router ip ipv4-address

undo router ip

Default

The outbound next hop is not specified for an LB link.

Views

LB link view

Predefined user roles

network-admin

Parameters

ipv4-address: Specifies an IPv4 address, which cannot be a loopback address, multicast address, broadcast address, or an address in the format of 0.X.X.X.

Usage guidelines

You can specify only one outbound next hop for an LB link.

Examples

# Specify the outbound next hop as 1.2.3.4 for the LB link lk1.

<Sysname> system-view

[Sysname] loadbalance link lk1

[Sysname-lb-link-lk1] router ip 1.2.3.4

router ipv6

Use router ipv6 to specify the outbound next hop for an LB link.

Use undo router ipv6 to restore the default.

Syntax

router ipv6 ipv6-address

undo router ipv6

Default

The outbound next hop is not specified for an LB link.

Views

LB link view

Predefined user roles

network-admin

Parameters

ipv6-address: Specifies an IPv6 address, which cannot be an all-zero address, a multicast address, a loopback address, or a link-local address.

Usage guidelines

You can specify only one outbound next hop for an LB link.

Examples

# Specify the outbound next hop as 8008::8  for the LB link lk1.

<Sysname> system-view

[Sysname] loadbalance link lk1

[Sysname-lb-link-lk1] router ipv6 8008::8

rtt weight

Use rtt weight to set the network delay weight for proximity calculation.

Use undo rtt weight to restore the default.

Syntax

rtt weight rtt-weight

undo rtt weight

Default

The network delay weight for proximity calculation is 100.

Views

Proximity view

Predefined user roles

network-admin

Parameters

rtt-weight: Specifies the network delay weight for proximity calculation, in the range of 0 to 255. A larger value indicates a higher weight.

Examples

# Set the network delay weight for proximity calculation to 200.

<Sysname> system-view

[Sysname] loadbalance proximity

[Sysname-lb-proximity] rtt weight 200

selected-link

Use selected-link to specify the number of links to participate in scheduling.

Use undo selected-link to restore the default.

Syntax

selected-link min min-number max max-number

undo selected-link

Default

The links with the highest priority participate in scheduling.

Views

Link group view

Predefined user roles

network-admin

Parameters

min min-number: Specifies the minimum number of links to participate in scheduling, in the range of 1 to 1000.

max max-number: Specifies the maximum number of links to participate in scheduling, in the range of 1 to 1000. The value of the max-number argument must be greater than or equal to the value of the min-number argument.

Usage guidelines

If the number of links available to participate in scheduling exceeds the max-number setting, the max-number setting applies.

If the number of links available to participate in scheduling is smaller than the min-number setting, more links are selected by priority in descending order.

Examples

# Configure the minimum number and maximum number of links in the link group lg to participate in scheduling as 20 and 30, respectively.

<Sysname> system-view

[Sysname] loadbalance link-group lg

[Sysname-lb-lgroup-lg] selected-link min 20 max 30

Related commands

predictor (link group view)

priority (link view)

selected-server (DNS server pool view)

Use selected-server to specify the number of DNS servers to participate in scheduling.

Use undo selected-server to restore the default.

Syntax

selected-server min min-number max max-number

undo selected-server

Default

The DNS servers with the highest priority participate in scheduling.

Views

DNS server pool view

Predefined user roles

network-admin

Parameters

min min-number: Specifies the minimum number of DNS servers to participate in scheduling, in the range of 1 to 1000.

max max-number: Specifies the maximum number of DNS servers to participate in scheduling, in the range of 1 to 1000. The value of the max-number argument must be greater than or equal to the value of the min-number argument.

Usage guidelines

If the number of DNS servers available to participate in scheduling exceeds the max-number setting, the max-number setting applies.

If the number of DNS servers available to participate in scheduling is less than the min-number setting, more DNS servers are selected by priority in descending order.

Examples

# Configure the minimum number and maximum number of DNS servers in DNS server pool dns-pool to participate in scheduling as 20 and 30, respectively.

<Sysname> system-view

[Sysname] loadbalance dns-server-pool dns-pool

[Sysname-lb-dspool-dns-pool] selected-server min 20 max 30

service enable (transparent DNS proxy view)

Use service enable to enable the transparent DNS proxy feature.

Use undo service enable to disable the transparent DNS proxy feature.

Syntax

service enable

undo service enable

Default

The transparent DNS proxy feature is disabled.

Views

Transparent DNS proxy view

Predefined user roles

network-admin

Examples

# Enable the transparent DNS proxy feature for transparent DNS proxy dns-proxy1.

<Sysname> system-view

[Sysname] loadbalance dns-proxy dns-proxy1

[Sysname-lb-dp-udp-dns-proxy1] service enable

service enable (virtual server view)

Use service enable to enable a virtual server.

Use undo service enable to disable a virtual server.

Syntax

service enable

undo service enable

Default

A virtual server is disabled.

Views

Virtual server view

Predefined user roles

network-admin

Examples

# Enable the IP-type virtual server vs3.

<Sysname> system-view

[Sysname] virtual-server vs3 type ip

[Sysname-vs-ip-vs3] service enable

set ip tos (LB action view)

Use set ip tos to set the ToS field value of IP packets sent to the server.

Use undo set ip tos to restore the default.

Syntax

set ip tos tos-number

undo set ip tos

Default

The ToS field of IP packets sent to the server is not changed.

Views

LB action view

Predefined user roles

network-admin

Parameters

tos-number: Specifies the ToS field value in the range of 0 to 255.

Examples

# Set the ToS field value to 20 for IP packets sent to the server for the link-generic LB action lba1.

<Sysname> system-view

[Sysname] loadbalance action lba1 type link-generic

[Sysname-lba-link-generic-lba1] set ip tos 20

set ip tos (parameter profile view)

Use set ip tos to set the ToS field value of IP packets sent to the client.

Use undo set ip tos to restore the default.

Syntax

set ip tos tos-number

undo set ip tos

Default

The ToS field of IP packets sent to the client is not changed.

Views

Parameter profile view

Predefined user roles

network-admin

Parameters

tos-number: Specifies the ToS field value in the range of 0 to 255.

Usage guidelines

This command is available in IP parameter profile view only.

Examples

# Set the ToS field value to 20 for IP packets sent to the client for the IP parameter profile pp2.

<Sysname> system-view

[Sysname] parameter-profile pp2 type ip

[Sysname-para-ip-pp2] set ip tos 20

shutdown (link view)

Use shutdown to shut down a link.

Use undo shutdown to activate a link.

Syntax

shutdown

undo shutdown

Default

A link is activated.

Views

Link view

Predefined user roles

network-admin

Examples

# Shut down the link lk1.

<Sysname> system-view

[Sysname] loadbalance link lk1

[Sysname-lb-link-lk1] shutdown

skip current-dns-proxy

Use skip current-dns-proxy to skip the current transparent DNS proxy.

Use undo skip current-dns-proxy to restore the default.

Syntax

skip current-dns-proxy

undo skip current-dns-proxy

Default

The forwarding mode is to discard packets.

Views

DNS LB action view

Predefined user roles

network-admin

Usage guidelines

This command enables DNS requests to skip the current transparent DNS proxy and match the next transparent DNS proxy or virtual server.

A DNS request can skip a maximum of five transparent DNS proxies and virtual servers.

This command is mutually exclusive with the dns-server-pool or forward all command. If you configure one command, the other command (if configured) is automatically cancelled.

Examples

# Skip the current transparent DNS proxy in DNS LB action lba1.

<Sysname> system-view

[Sysname] loadbalance action lba1 type dns

[Sysname-lba-dns-lba1] skip current-dns-proxy

slow-online (link group view)

Use slow-online to enable the slow online feature for a link group.

Use undo slow-online to disable the slow online feature for a link group.

Syntax

slow-online [ standby-time standby-time ramp-up-time ramp-up-time ]

undo slow-online

Default

The slow online feature is disabled for a link group.

Views

Link group view

Predefined user roles

network-admin

Parameters

standby-time standby-time: Specifies the standby timer in the range of 0 to 600 seconds. The default is 5 seconds.

ramp-up-time ramp-up-time: Specifies the ramp-up timer in the range of 3 to 600 seconds. The default is 5 seconds.

Usage guidelines

The links newly added to a link group might be unable to immediately process large numbers of services assigned by the LB device. To resolve this issue, enable the slow online feature for the link group. The feature uses the standby timer and ramp-up timer. When a link is added, the LB device does not assign any service to the link until the standby timer expires.

When the standby timer expires, the ramp-up timer starts. During the ramp-up time, the LB device increases the service amount according to the processing capability of the link, until the ramp-up timer expires.

Examples

# Enable the slow online feature for the link group lg.

<Sysname> system-view

[Sysname] loadbalance link-group lg

[Sysname-lb-lgroup-lg] slow-online

slow-shutdown enable (link view)

Use slow-shutdown enable to enable the slow offline feature for a link.

Use undo slow-shutdown enable to disable the slow offline feature for a link.

Syntax

slow-shutdown enable

undo slow-shutdown enable

Default

The slow offline feature is disabled for a link.

Views

Link view

Predefined user roles

network-admin

Usage guidelines

The shutdown command immediately terminates existing connections of a link. The slow offline feature ages out the connections, and does not establish new connections.

To enable the slow offline feature for a link, you must execute the slow-shutdown enable command and then the shutdown command. If you execute the shutdown command and then the slow-shutdown enable command, the slow offline feature does not take effect and the link is shut down.

Examples

# Enable the slow offline feature for the link lk1.

<Sysname> system-view

[Sysname] loadbalance link lk1

[Sysname-lb-link-lk1] slow-shutdown enable

Related commands

shutdown (link view)

snat-pool (link group view)

Use snat-pool to specify the SNAT address pool to be referenced by a link group.

Use undo snat-pool to restore the default.

Syntax

snat-pool pool-name

undo snat-pool

Default

No SNAT address pool is referenced by a link group.

Views

Link group view

Predefined user roles

network-admin

Parameters

pool-name: Specifies the SNAT address pool name, a case-insensitive string of 1 to 63 characters.

Usage guidelines

After a link group references an SNAT address pool, the LB device replaces the source address of packets it receives with an SNAT address before forwarding the packets.

Examples

# Specify the SNAT address pool lbsp to be referenced by the link group lg.

<Sysname> system-view

[Sysname] loadbalance link-group lg

[Sysname-lb-lgroup-lg] snat-pool lbsp

snmp-agent trap enable loadbalance

Use snmp-agent trap enable loadbalance to enable SNMP notifications for load balancing.

Use undo snmp-agent trap enable loadbalance to disable SNMP notifications for load balancing.

Syntax

snmp-agent trap enable loadbalance

undo snmp-agent trap enable loadbalance

Default

All SNMP notifications are enabled for load balancing.

Views

System view

Predefined user roles

network-admin

Usage guidelines

To report critical load balancing events to an NMS, enable SNMP notifications for load balancing. For load balancing event notifications to be sent correctly, you must also configure SNMP as described in the network management and monitoring configuration guide for the device.

Examples

# Disable SNMP notifications for load balancing.

<Sysname> system-view

[Sysname] undo snmp-agent trap enable loadbalance

sticky-group

Use sticky-group to create a sticky group and enter its view, or enter the view of an existing sticky group.

Use undo sticky-group to delete the specified sticky group.

Syntax

sticky-group group-name [ type address-port ]

undo sticky-group group-name

Default

No sticky groups exist.

Views

System view

Predefined user roles

network-admin

Parameters

group-name: Specifies a sticky group name, a case-insensitive string of 1 to 63 characters.

type address-port: Specifies the address-port sticky group type. When you create a sticky group, you must specify the sticky group type. You can enter an existing sticky group view without entering the type of the sticky group.

Usage guidelines

A sticky group uses a specific sticky method to distribute similar sessions to the same link. The sticky method applies to the first packet of a session. Subsequent packets of the session are distributed to the same link.

Examples

# Create the address- and port-type sticky group sg1 and enter sticky group view.

<Sysname> system-view

[Sysname] sticky-group sg1 type address-port

[Sysname-sticky-address-port-sg1]

success-criteria (DNS server pool view)

Use success-criteria to specify the health monitoring success criteria for a DNS server pool.

Use undo success-criteria to restore the default.

Syntax

success-criteria { all | at-least min-number }

undo success-criteria

Default

Health monitoring succeeds only when all the specified health monitoring methods succeed.

Views

DNS server pool view

Predefined user roles

network-admin

Parameters

all: Specifies the health monitoring success criteria as all successful health monitoring methods.

at-least min-number: Specifies the health monitoring success criteria as the specified minimum number of successful health monitoring methods, in the range of 1 to 4294967295.

Usage guidelines

If the min-number setting exceeds the number of existing health monitoring methods on the device, the number of existing health monitoring methods applies.

The health monitoring success criteria configuration in DNS server view takes precedence over the configuration in DNS server pool view.

Examples

# Configure the health monitoring success criteria for the DNS server pool dns-pool as a minimum number of 2 successful health monitoring methods.

<Sysname> system-view

[Sysname] loadbalance dns-server-pool dns-pool

[Sysname-lb-dspool-dns-pool] success-criteria at-least 2

Related commands

success-criteria (DNS server view)

success-criteria (DNS server view)

Use success-criteria to specify the health monitoring success criteria for a DNS server.

Use undo success-criteria to restore the default.

Syntax

success-criteria { all | at-least min-number }

undo success-criteria

Default

Health monitoring succeeds only when all the specified health monitoring methods succeed.

Views

DNS server view

Predefined user roles

network-admin

Parameters

all: Specifies the health monitoring success criteria as all successful health monitoring methods.

at-least min-number: Specifies the health monitoring success criteria as the specified minimum number of successful health monitoring methods, in the range of 1 to 4294967295.

Usage guidelines

If the min-number setting exceeds the number of existing health monitoring methods on the device, the number of existing health monitoring methods applies.

The health monitoring success criteria configuration in DNS server view takes precedence over the configuration in DNS server pool view.

Examples

# Configure the health monitoring success criteria for DNS server ds1 as a minimum number of 2 successful health monitoring methods.

<Sysname> system-view

[Sysname] loadbalance dns-server ds1

[Sysname-lb-ds-ds1] success-criteria at-least 2

Related commands

success-criteria (DNS server pool view)

success-criteria (link group view)

Use success-criteria to specify the health monitoring success criteria for a link group.

Use undo success-criteria to restore the default.

Syntax

success-criteria { all | at-least min-number }

undo success-criteria

Default

Health monitoring succeeds only when all the specified health monitoring methods succeed.

Views

Link group view

Predefined user roles

network-admin

Parameters

all: Specifies the health monitoring success criteria as all successful health monitoring methods.

at-least min-number: Specifies the health monitoring success criteria as the specified minimum number of successful health monitoring methods, in the range of 1 to 4294967295.

Usage guidelines

If the min-number setting exceeds the number of existing health monitoring methods on the device, the number of existing health monitoring methods applies.

The health monitoring success criteria configuration in link view takes precedence over the configuration in link group view.

Examples

# Configure the health monitoring success criteria for the link group lg as a minimum number of 2 successful health monitoring methods.

<Sysname> system-view

[Sysname] loadbalance link-group lg

[Sysname-lb-lgroup-lg] success-criteria at-least 2

Related commands

success-criteria (link view)

success-criteria (link view)

Use success-criteria to specify the health monitoring success criteria for an LB link.

Use undo success-criteria to restore the default.

Syntax

success-criteria { all | at-least min-number }

undo success-criteria

Default

Health monitoring succeeds only when all the specified health monitoring methods succeed.

Views

LB link view

Predefined user roles

network-admin

Parameters

all: Specifies the health monitoring success criteria as all successful health monitoring methods.

at-least min-number: Specifies the health monitoring success criteria as the specified minimum number of successful health monitoring methods, in the range of 1 to 4294967295.

Usage guidelines

If the min-number setting exceeds the number of existing health monitoring methods on the device, the number of existing health monitoring methods applies.

Examples

# Configure the health monitoring success criteria for the LB link lk1 as a minimum number of 2 successful health monitoring methods.

<Sysname> system-view

[Sysname] loadbalance link lk1

[Sysname-lb-link-lk1] success-criteria at-least 2

Related commands

success-criteria (link group view)

timeout (proximity view)

Use timeout to set the timeout timer for proximity entries.

Use undo timeout to restore the default.

Syntax

timeout timeout-value

undo timeout

Default

The timeout timer for proximity entries is 60 seconds.

Views

Proximity view

Predefined user roles

network-admin

Parameters

timeout-value: Specifies the timeout timer in the range of 60 to 3600 seconds.

Examples

# Set the timeout timer for proximity entries to 80 seconds.

<Sysname> system-view

[Sysname] loadbalance proximity

[Sysname-lb-proximity] timeout 80

timeout (sticky group view)

Use timeout to set the timeout timer for sticky entries.

Use undo timeout to restore the default.

Syntax

timeout timeout-value

undo timeout

Default

The timeout timer for sticky entries is 60 seconds.

Views

Sticky group view

Predefined user roles

network-admin

Parameters

timeout-value: Specifies the timeout timer in the range of 10 to 604800 seconds.

Examples

# Set the timeout timer for sticky entries to 100 seconds in the address- and port-type sticky group sg1.

<Sysname> system-view

[Sysname] sticky-group sg1 type address-port

[Sysname-sticky-address-port-sg1] timeout 100

timeout (template view)

Use timeout to set the timeout time for probe responses.

Use undo timeout to restore the default.

Syntax

timeout timeout-value

undo timeout

Default

The timeout time for probe responses is 3 seconds.

Views

Load balancing template view

Predefined user roles

network-admin

Parameters

timeout-value: Specifies the timeout time for probe responses, in the range of 1 to 60 seconds.

Usage guidelines

As a best practice, set the timeout time for probe responses to be smaller than the probe interval.

Examples

# Set the timeout time for probe responses to 5 seconds in the ICMP template icmptplt.

<Sysname> system-view

[Sysname] loadbalance probe-template icmp icmptplt

[Sysname-lb-pt-icmp-icmptplt] timeout 5

topology region

Use topology region to configure a topology.

Use undo topology region to restore the default.

Syntax

topology region region-name { ip ipv4-address { mask-length | mask } | ipv6 ipv6-address prefix-length } [ weight weight-value ]

undo topology region region-name [ ip ipv4-address [ mask-length | mask ] | ipv6 ipv6-address [ prefix-length ] ]

Default

No topologies exist.

Views

System view

Predefined user roles

network-admin

Parameters

region-name: Specifies a region by its name, a case-insensitive string of 1 to 63 characters.

ip ipv4-address: Specifies the IPv4 address of a virtual server.

mask-length: Specifies the mask length for the IPv4 address, in the range of 0 to 32. The default is 32.

mask: Specifies the mask for the IPv4 address. The default is 255.255.255.255.

ipv6 ipv6-address prefix-length: Specifies the IPv6 address of a virtual server.

prefix-length: Specifies the prefix length for the IPv6 address, in the range of 0 to 128. The default is 128.

weight-value: Specifies the weight of the topology, in the range of 1 to 255. The default weight is 100.

Usage guidelines

A topology associates the region where the local DNS server resides with the IP address of a virtual server.

When the static proximity algorithm (topology) is specified for the virtual server pool by using the predictor command, you must configure a topology.

When a DNS request matches multiple topology records, the topology record with the highest weight is selected.

You can execute this command multiple times to configure multiple IP address ranges for a region.

If you only specify a region when deleting a topology, all topologies for the region are deleted.

Examples

# Configure a topology by associating the region region-ct with the IPv4 address 1.2.3.4.

<Sysname> system-view

[Sysname] topology region region-ct ip 1.2.3.4 24 weight 200

Related commands

loadbalance region

predictor (virtual server pool view)

transparent enable (link group view)

Use transparent enable to disable NAT for a link group.

Use undo transparent enable to enable NAT for a link group.

Syntax

transparent enable

undo transparent enable

Default

NAT is enabled for a link group.

Views

Link group view

Predefined user roles

network-admin

Examples

# Disable NAT for the link group lg.

<Sysname> system-view

[Sysname] loadbalance link-group lg

[Sysname-lb-lgroup-sinalab] transparent enable

ttl weight

Use ttl weight to set the TTL weight for proximity calculation.

Use undo ttl weight to restore the default.

Syntax

ttl weight ttl-weight

undo ttl weight

Default

The TTL weight for proximity calculation is 100.

Views

Proximity view

Predefined user roles

network-admin

Parameters

ttl-weight: Specifies the TTL weight for proximity calculation, in the range of 0 to 255. A larger value indicates a higher weight.

Examples

# Set the TTL weight for proximity calculation to 200.

<Sysname> system-view

[Sysname] loadbalance proximity

[Sysname-lb-proximity] ttl weight 200

virtual ip address

Use virtual ip address to configure an IPv4 address (VSIP) for a virtual server.

Use undo virtual ip address to restore the default.

Syntax

virtual ip address ipv4-address [ mask-length | mask ]

undo virtual ip address

Default

No IPv4 address is configured for a virtual server.

Views

Virtual server view

Predefined user roles

network-admin

Parameters

ipv4-address: Specifies an IPv4 address. It cannot be a loopback address, multicast address, broadcast address, or an address in the format of 0.X.X.X (with a mask length of 32).

mask-length: Specifies a mask length in the range of 0 to 32. The default is 32.

mask: Specifies a subnet mask. The default is 255.255.255.255.

Examples

# Configure the IPv4 address for the link-IP-type virtual server vs3 as 1.1.1.1/24.

<Sysname> system-view

[Sysname] virtual-server vs3 type link-ip

[Sysname-vs-link-ip-vs3] virtual ip address 1.1.1.1 24

virtual ipv6 address

Use virtual ipv6 address to configure an IPv6 address (VSIP) for a virtual server.

Use undo virtual ipv6 address to restore the default.

Syntax

virtual ipv6 address ipv6-address [ prefix-length ]

undo virtual ipv6 address

Default

No IPv6 address is configured for a virtual server.

Views

Virtual server view

Predefined user roles

network-admin

Parameters

ipv6-address: Specifies an IPv6 address, which cannot be a loopback address, IPv6 multicast address, link-local address, or all-zero address (when the prefix length is not 0).

prefix-length: Specifies a prefix length in the range of 0 to 128. The default is 128.

Examples

# Configure the IPv6 address for the link-IP-type virtual server vs3 as 1001::1/64.

<Sysname> system-view

[Sysname] virtual-server vs3 type link-ip

[Sysname-vs-link-ip-vs3] virtual ipv6 address 1001::1 64

virtual-server (system view)

Use virtual-server to create a virtual server and enter its view, or enter the view of an existing virtual server.

Use undo virtual-server to delete the specified virtual server.

Syntax

virtual-server virtual-server-name [ type { link-ip ]

undo virtual-server virtual-server-name

Default

No virtual servers exist.

Views

System view

Predefined user roles

network-admin

Parameters

virtual-server-name: Specifies the virtual server name, a case-insensitive string of 1 to 63 characters.

type link-ip: Specifies the link-IP virtual server type. When you create a virtual server, you must specify a virtual server type. You can enter an existing virtual server view without entering the type of the virtual server.

Examples

# Create the virtual server vs3 with the IP type, and enter virtual server view.

<Sysname> system-view

[Sysname] virtual-server vs3 type ip

[Sysname-vs-ip-vs3]

virtual-server-pool

Use virtual-server-pool to specify a virtual server pool for a DNS mapping.

Use undo virtual-server-pool to restore the default.

Syntax

virtual-server-pool pool-name

undo virtual-server-pool pool-name

Default

No virtual server pool is specified for a DNS mapping.

Views

DNS mapping view

Predefined user roles

network-admin

Parameters

pool-name: Specifies the virtual server pool name, a case-insensitive string of 1 to 63 characters.

Usage guidelines

If you execute this command multiple times, the most recent configuration takes effect.

Examples

# Specify the virtual server pool pool1 for the DNS mapping dm1.

<Sysname> system-view

[Sysname] loadbalance dns-map dm1

[Sysname-lb-dm-dm1] virtual-server-pool pool1

weight (DNS server view)

Use weight to set the weight of a DNS server to be used by the weighted round robin algorithm and bandwidth algorithm.

Use undo weight to restore the default.

Syntax

weight weight-value

undo weight

Default

The weight of a DNS server is 100.

Views

DNS server view

Predefined user roles

network-admin

Parameters

weight-value: Specifies the weight in the range of 1 to 255. A greater value means a higher priority in scheduling.

Examples

# Set the weight of the DNS server ds1 to 150.

<Sysname> system-view

[Sysname] loadbalance dns-server ds1

[Sysname-lb-ds-ds1] weight 150

weight (link view)

Use weight to set the weight of a link to be used by the weighted round robin and weighted least connection algorithms.

Use undo weight to restore the default.

Syntax

weight weight-value

undo weight

Default

The weight of a link is 100.

Views

Link view

Predefined user roles

network-admin

Parameters

weight-value: Specifies the weight in the range of 1 to 255. For the weighted round robin or weighted least connection algorithm, a greater value means a higher priority to be referenced.

Examples

# Set the weight of the link lk1 to 150.

<Sysname> system-view

[Sysname] loadbalance link lk1

[Sysname-lb-link-lk1] weight 150