16-EVPN Command Reference

HomeSupportResource CenterH3C S6805 & S6825 & S6850 & S9850 Command References-Release 66xx-6W10316-EVPN Command Reference
02-MVXLAN commands
Title Size Download
02-MVXLAN commands 102.52 KB

MVXLAN commands

MVXLAN commands are supported only in Release 6616 and later.

address-family ipv4

Use address-family ipv4 to create an MVXLAN IPv4 address family and enter its view, or enter the view of the existing MVXLAN IPv4 address family.

Use undo address-family ipv4 to delete the MVXLAN IPv4 address family and all settings in MVXLAN IPv4 address family view.

Syntax

address-family ipv4

undo address-family ipv4

Default

No MVXLAN IPv4 address family exists.

Views

MVXLAN view

Predefined user roles

network-admin

Examples

# In MVXLAN view of VPN instance vpna, create an MVXLAN IPv4 address family and enter its view.

<Sysname> system-view

[Sysname] multicast-vpn vxlan vpn-instance vpna mode mdt

[Sysname-mvxlan-vpna] address-family ipv4

[Sysname-mvxlan-vpna-ipv4]

data-delay

Use data-delay to set the data-delay period (delay period before the device switches over from the default MDT to the data MDT).

Use undo data-delay to restore the default.

Syntax

data-delay delay

undo data-delay

Default

The data-delay period is 3 seconds.

Views

MVXLAN IPv4 address family view

Predefined user roles

network-admin

Parameters

delay: Specifies a data-delay period in the range of 1 to 60 seconds.

Examples

# In MVXLAN IPv4 address family view of VPN instance vpna, set the data-delay period to 10 seconds.

<Sysname> system-view

[Sysname] multicast-vpn vxlan vpn-instance vpna mode mdt

[Sysname-mvxlan-vpna] address-family ipv4

[Sysname-mvxlan-vpna-ipv4] data-delay 10

data-group

Use data-group to specify a data group range and optionally configure the criteria for the device to initiate a switchover of the default MDT to a data MDT.

Use undo data-group to restore the default.

Syntax

data-group group-address { mask-length | mask } [ acl acl-number ]

undo data-group

Default

No data group range exists, and the device never initiates a switchover of the default MDT to a data MDT.

Views

MVXLAN IPv4 address family view

Predefined user roles

network-admin

Parameters

group-address: Specifies a multicast group address in the range of 224.0.1.0 to 239.255.255.255.

mask-length: Specifies a mask length for the multicast group address. The value range for this argument is 25 to 32.

mask: Specifies a subnet mask for the multicast group address, in dotted decimal notation.

acl acl-number: Specifies an advanced ACL by its number in the range of 3000 to 3999. If you specify an ACL, the multicast data permitted by the ACL can trigger the switchover. If you do not specify an ACL, any multicast data can trigger the switchover.

Usage guidelines

This command enables the device to initiate a switchover of the default MDT to a data MDT if the multicast data permitted by the specified ACL keeps arriving for a data-delay period.

On a VTEP, the data group range for an MVXLAN cannot include the following objects:

·     Default group of any other MVXLAN.

·     The multicast group address for VXLAN flood traffic configured by using the group command in VXLAN view.

·     Data groups of any other MVXLAN.

If you execute the data-group command multiple times in the same MVXLAN IPv4 address family view, the most recent configuration takes effect.

Examples

# In MVXLAN IPv4 address family view of VPN instance vpna, specify 239.1.0.0 through 239.1.0.255 as the data group range.

<Sysname> system-view

[Sysname] multicast-vpn vxlan vpn-instance vpna mode mdt

[Sysname-mvxlan-vpna] address-family ipv4

[Sysname-mvxlan-vpna-ipv4] data-group 239.1.0.0 25

Related commands

default-group

group (VXLAN Command Reference)

default-group

Use default-group to specify a default group.

Use undo default-group to restore the default.

Syntax

default-group group-address

undo default-group

Default

No default group exists.

Views

MVXLAN IPv4 address family view

Predefined user roles

network-admin

Parameters

group-address: Specifies a default group in the range of 224.0.1.0 to 239.255.255.255.

Usage guidelines

The default group for an MVXLAN must be different from the following objects:

·     The default group used by any other MVXLAN.

·     The data group used by any other MVXLAN.

·     The multicast group address for VXLAN flood traffic configured by using the group command in VXLAN view.

Examples

# In MVXLAN IPv4 address family view of VPN instance vpna, specify 236.0.0.1 as the default group.

<Sysname> system-view

[Sysname] multicast-vpn vxlan vpn-instance vpna mode mdt

[Sysname-mvxlan-vpna] address-family ipv4

[Sysname-mvxlan-vpna-ipv4] default-group 236.0.0.1

Related commands

data-group

group (VXLAN Command Reference)

display multicast-vpn vxlan data-group receive

Use display multicast-vpn vxlan data-group receive to display received data group information in an MVXLAN.

Syntax

display multicast-vpn vxlan { vpn-instance instance-name | public-instance } data-group receive [ brief | [ active | group group-address | sender source-address | vpn-source-address [ mask { mask-length | mask } ] | vpn-group-address [ mask { mask-length | mask } ] ] * ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

vpn-instance instance-name: Specifies an MPLS L3VPN instance by its name, a case-sensitive string of 1 to 31 characters.

public-instance: Specifies the public instance.

brief: Displays brief information. If you do not specify this keyword, the command displays detailed information.

active: Specifies data groups that have joined the data MDT.

group group-address: Specifies a data group by its IP address in the range of 224.0.1.0 to 239.255.255.255.

sender source-address: Specifies an MVXLAN source interface by its IP address.

vpn-source-address: Specifies a multicast source address of the specified VPN instance.

vpn-group-address: Specifies a multicast group address of the specified VPN instance. The value range for this argument is 224.0.1.0 to 239.255.255.255.

mask-length: Specifies a mask length of the specified multicast source address or multicast group address. The value range for this argument is 0 to 32, and the default is 32.

mask: Specifies a subnet mask of the specified multicast source address or multicast group address. The default is 255.255.255.255.

Usage guidelines

If you do not specify any parameters, this command displays detailed information about all received data groups in the MVXLAN of the specified VPN instance or the public instance.

Examples

# Display detailed information about received data groups in the MVXLAN of VPN instance vpna.

<Sysname> display multicast-vpn vxlan vpn-instance vpna data-group receive

VPN instance: vpna

Total 2 data-groups for 8 entries

Total 2 data-groups and 8 entries matched

 

Data-group: 226.1.1.0  Reference count: 4   Active count: 2

  Sender: 1.1.1.1   Active count: 1

    (192.6.1.5, 239.1.1.1)       Remaining lifetime: 00:03:10 active

    (192.6.1.5, 239.1.1.158)     Remaining lifetime: 00:03:10

  Sender: 181.100.1.1   Active count: 1

    (195.6.1.2, 239.1.2.12)      Remaining lifetime: 00:03:10 active

    (195.6.1.2, 239.1.2.197)     Remaining lifetime: 00:03:10

 

Data-group: 229.1.1.0   Reference count: 4   Active count: 2

  Sender: 185.100.1.1   Active count: 1

    (198.6.1.5, 239.1.3.62)      Remaining lifetime: 00:03:10 active

    (198.6.1.5, 225.1.1.109)     Remaining lifetime: 00:03:10

  Sender: 190.100.1.1   Active count: 1

    (200.6.1.2, 225.1.4.80)      Remaining lifetime: 00:03:10 active

    (200.6.1.2, 225.1.4.173)     Remaining lifetime: 00:03:10

# Display brief information about received data groups in the MVXLAN of VPN instance vpna.

<Sysname> display multicast-vpn vxlan vpn-instance vpna data-group receive brief

VPN instance: vpna

Total 2 data-groups for 8 entries

Total 2 data-groups and 8 entries matched

 

Data-group: 226.1.1.0   Reference count: 4   Active count: 2

Data-group: 229.1.1.0   Reference count: 4   Active count: 2

Table 1 Command output

Field

Description

Total 2 data-groups for 8 entries

A total of 2 data groups, associated with 8 (S, G) entries.

Total 2 data-groups and 8 entries matched

A total of 2 matching data groups, associated with 8 (S, G) entries.

Data-group

IP address of the received data group.

Reference count

Number of (S, G) entries that use the data group in the VPN instance.

Active count

Number of active (S, G) entries (entries with active receivers) that use the data group in the VPN instance.

Sender

Address of the VTEP that sent the data group.

Remaining lifetime

Remaining lifetime for the (S, G) entry that uses the data group in the VPN instance.

active

Indicates that the (S, G) entry is active.

 

display multicast-vpn vxlan data-group send

Use display multicast-vpn vxlan data-group send to display sent data group information in an MVXLAN.

Syntax

display multicast-vpn vxlan { vpn-instance instance-name | public-instance } data-group send [ group group-address | vpn-source-address [ mask { mask-length | mask } ] | vpn-group-address [ mask { mask-length | mask } ] ] *

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

vpn-instance instance-name: Specifies an MPLS L3VPN instance by its name, a case-sensitive string of 1 to 31 characters.

public-instance: Specifies the public instance.

group group-address: Specifies a data group by its IP address in the range of 224.0.1.0 to 239.255.255.255.

vpn-source-address: Specifies a multicast source address of the specified VPN instance. The value range for this argument is 224.0.1.0 to 239.255.255.255.

vpn-group-address: Specifies a multicast group address of the specified VPN instance. The value range for this argument is 224.0.1.0 to 239.255.255.255.

mask-length: Specifies a mask length of the specified multicast source address or multicast group address. The value range for this argument is 0 to 32, and the default is 32.

mask: Specifies a subnet mask of the specified multicast source address or multicast group address. The default is 255.255.255.255.

Usage guidelines

If you do not specify any parameters, this command displays information about all sent data groups in the MVXLAN of the specified VPN instance or the public instance.

Examples

# Display information about all sent data groups in the MVXLAN of VPN instance vpna.

<Sysname> display multicast-vpn vxlan vpn-instance vpna data-group send

VPN instance: vpna

Total 2 data-groups for 6 entries

Total 2 data-groups and 6 entries matched

 

Data-group: 226.1.1.0   Reference count: 3

  (192.6.1.5, 239.1.1.1)                  Switchover time: 00:00:21

  (192.6.1.5, 239.1.1.158)                Switchover time: 00:00:21

  (192.6.1.5, 239.1.2.50)                 Switchover time: 00:00:05

Data-group: 226.1.1.1   Reference count: 3

  (192.6.1.2, 225.1.1.1)                  Switchover time: 00:00:21

  (192.6.1.2, 225.1.2.50)                 Switchover time: 00:00:05

  (192.6.1.5, 239.1.1.159)                Switchover time: 00:00:21

Table 2 Command output

Field

Description

Total 2 data-groups for 6 entries

A total of 2 data groups, associated with 6 (S, G) entries.

Total 2 data-groups and 6 entries matched

A total of 2 matching data groups, associated with 6 (S, G) entries.

Data-group

Data group address.

Reference count

Number of (S, G) entries that use the data group in the VPN instance.

Switchover time

Switchover time of the (S, G) entry that uses the data group in the VPN instance.

 

display multicast-vpn vxlan default-group

Use display multicast-vpn vxlan default-group to display information about default groups.

Syntax

display multicast-vpn vxlan [ vpn-instance instance-name | public-instance ] default-group { local | remote }

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

vpn-instance instance-name: Specifies an MPLS L3VPN instance by its name, a case-sensitive string of 1 to 31 characters.

public-instance: Specifies the public instance.

local: Specifies local default groups.

remote: Specifies remote default groups.

Usage guidelines

If you do not specify the vpn-instance instance-name option or the public-instance keyword, this command displays default group information for all VPN instances and the public instance.

Examples

# Display information about local default groups in all VPN instances and the public instance.

<Sysname> display multicast-vpn vxlan default-group local

MVXLAN local default-group information:

 Group address    Source address   Interface     VPN instance

 239.1.1.1        1.1.1.1          MTunnel0      vpna

 239.2.1.1        1.1.1.1          MTunnel1      vpnb

 239.3.1.1        --               MTunnel2      vpnc

# Display information about remote default groups in all VPN instances and the public instance.

<Sysname> display multicast-vpn vxlan default-group remote

MVXLAN remote default-group information:

 Group address   Source address  Next hop         VPN instance

 239.1.1.1       1.2.0.1         1.2.0.1          a

 239.1.1.1       1.2.0.2         1.2.0.2          a

 239.1.1.1       1.2.0.3         1.2.0.3          a

 239.1.1.2       1.2.0.1         1.2.0.1          b

 239.1.1.2       1.2.0.2         1.2.0.2          b

 239.1.1.3       1.2.0.1         1.2.0.1          c

Table 3 Command output

Field

Description

Group address

IP address of the default group.

Source address

IP address of the MVXLAN source interface.

This field displays two hyphens (--) if no source interface IP address is configured for the MVXLAN.

Interface

MVXLAN tunnel outgoing interface.

Next hop

Next hop address.

VPN instance

VPN instance to which the default group belongs.

 

drni local

Use drni local to specify the IP addresses of the DR member devices in a DR system.

Use undo drni local to restore the default.

 

 

NOTE:

This command is supported only in Release 6635 and later.

 

Syntax

drni local local-ipv4-address remote remote-ipv4-address

undo drni local

Default

The IP addresses of the DR member devices in a DR system are not specified.

Views

MVXLAN IPv4 address family view

Predefined user roles

network-admin

Parameters

local-ipv4-address: Specifies the IPv4 address of the local DR member device.

remote-ipv4-address: Specifies the IPv4 address of the peer DR member device.

Usage guidelines

Execute this command on the VTEPs or border devices that form a DR system on an MVXLAN network.

When both the IPL and keepalive link go down, a DR member device uses its local IP address as the source address of multicast tunnels. As a best practice, use the public IP address of a loopback interface as the local IP address and make sure downstream devices have Layer 3 connectivity to the local IP address.

The remote IP address is used to identify the SBD-SMET and S-PMSI A-D routes sent by the peer DR member device. Specify an IP address configured on the peer DR member device as the remote IP address.

Examples

# Specify the IP addresses of the local and peer DR member devices in the DR system as 2.2.2.2 and 3.3.3.3, respectively.

<Sysname> system-view

[Sysname] multicast-vpn vxlan vpn-instance vpna mode mdt

[Sysname-mvxlan-vpn-instance-vpna] address-family ipv4

[Sysname-mvxlan-vpn-instance-vpna-ipv4] drni local 2.2.2.2 remote 3.3.3.3

multicast extranet select-rpf

Use multicast extranet select-rpf to configure an IPv4 MVXLAN extranet RPF selection policy.

Use undo multicast extranet select-rpf to delete an IPv4 MVXLAN extranet RPF selection policy.

Syntax

multicast extranet select-rpf [ vpn-instance vpn-instance-name ] { group group-address { mask | mask-length } | source source-address { mask | mask-length } } *

undo multicast extranet select-rpf [ vpn-instance vpn-instance-name ] { group group-address { mask | mask-length } | source source-address { mask | mask-length } } *

Default

No IPv4 MVXLAN extranet RPF selection policies are configured.

Views

MRIB view

Predefined user roles

network-admin

Parameters

vpn-instance vpn-instance-name: Specifies the MPLS L3VPN instance to which the multicast source belongs. The vpn-instance-name argument is a case-sensitive string of 1 to 31 characters. The PIM routing entry will select this VPN instance for the upstream RPF neighbor. If the multicast source belongs to the public network, do not specify this option.

group group-address: Specifies a multicast group address in the policy. The address range is 224.0.1.0 to 239.255.255.255. If you do not this option, all multicast traffic that matches the source address in the policy in the source VPN instance will be directed to the receiver VPN instance.

source source-address: Specifies a source address in the policy, which can a multicast source address or the address of the RP designated to multicast groups. If you do not specify this option, all multicast traffic that matches the multicast group in the policy in the source VPN instance will be directed to the receiver VPN instance.

mask-length: Specifies a mask length for the multicast source address or the multicast group address. For a multicast group address, the value range for this argument is 4 to 32. For a multicast source address, the value range for this argument is 0 to 32.

mask: Specifies a subnet mask for the multicast source address or the multicast group address.

Usage guidelines

On multicast receiver-side VTEPs, MVXLAN extranet RPF routing policies are used for multicast transmission when multicast sources and receivers are located in different VPNs.

The PIM mode in the source VPN instance and the receiver VPN instance must be the same. Only PIM-SM and PIM-SSM are supported.

When you use PIM-SM, use one of the following schemes as a best practice:

·     Specifying only the multicast source address—Configure two RPF selection policies as follows:

¡     In one policy, configure the multicast source address as the RP address of the multicast group that requires inter-VPN transmission.

¡     In the other policy, specify the multicast source address of the source VPN instance.

If multiple multicast groups require inter-VPN transmission, configure a dedicated RP for the multicast groups and specify the multicast source address as the RP address in RPF selection policies.

·     Specifying only the multicast group address—Configure one RPF selection policy that specifies the multicast group address of the source VPN instance.

When you use PIM-SSM, configure one RPF selection policy that contains both the multicast source address and multicast group address as a best practice.

If an MVXLAN extranet RPF selection policy with only the multicast group address specified is configured in the receiver VPN instance, multicast traffic transmission will be interrupted in the source VPN instance.

Multicast source addresses in different MVXLAN extranet RPF routing policies cannot be the same, but they can overlap. The same restriction applies to the multicast group addresses in different MVXLAN extranet RPF routing policies. If multiple routing policies exist for an (S, G) entry, the device selects the policy in which the multicast group address has the longest mask. If multiple policies have the same mask length, the device selects the policy in which the multicast source address has the longest mask.

Examples

# Configure an IPv4 MVXLAN extranet RPF selection policy to direct multicast traffic from VPN instance vpn-source to VPN instance vpn-receiver.

<Sysname> system-view

[Sysname] multicast routing vpn-instance vpn-receiver

[Sysname-mrib-vpn-receiver] multicast extranet select-rpf vpn-instance vpn-source source 192.168.10.0 24

[Sysname-mrib-vpn-receiver] multicast extranet select-rpf vpn-instance  vpn-source source 1.1.1.1 24

multicast-vpn vxlan public-instance

Use multicast-vpn vxlan public-instance to create an MVXLAN for the public instance and enter its view, or enter the view of the existing public instance MVXLAN.

Use undo multicast-vpn vxlan public-instance to delete the public instance MVXLAN and all settings in public instance MVXLAN view.

Syntax

multicast-vpn vxlan public-instance mode mdt

undo multicast-vpn vxlan public-instance

Default

No MVXLAN exists in the public instance.

Views

System view

Predefined user roles

network-admin

Parameters

mode: Specifies the MVXLAN mode.

mdt: Sets the mode to MDT.

Examples

# Create an MDT-based MVXLAN for the public instance and enter public instance MVXLAN view.

<Sysname> system-view

[Sysname] multicast-vpn vxlan public-instance mode mdt

[Sysname—mvxlan-public-instance]

multicast-vpn vxlan vpn-instance

Use multicast-vpn vxlan vpn-instance to create an MVXLAN for a VPN instance and enter its view, or enter the view of an existing VPN instance MVXLAN.

Use undo multicast-vpn vxlan vpn-instance to delete a VPN instance MVXLAN and all settings in its view.

Syntax

multicast-vpn vxlan vpn-instance instance-name mode mdt

undo multicast-vpn vxlan vpn-instance instance-name

Default

No MVXLAN exists in a VPN instance.

Views

System view

Predefined user roles

network-admin

Parameters

instance-name: Specifies an MPLS L3VPN instance by its name, a case-sensitive string of 1 to 31 characters.

mode: Specifies the MVXLAN mode.

mdt: Sets the mode to MDT.

Examples

# Create an MDT-based MVXLAN for VPN instance vpna and enter VPN instance MVXLAN view.

<Sysname> system-view

[Sysname] multicast-vpn vxlan vpn-instance vpna mode mdt

[Sysname—mvxlan-vpna]

source

Use source to specify an MVXLAN source interface.

Use undo source to restore the default.

Syntax

source interface-type interface-number [ evpn-drni-group ]

undo source

Default

No MVXLAN source interface is specified.

Views

MVXLAN IPv4 address family view

Predefined user roles

network-admin

Parameters

interface-type interface-number: Specify an interface by its type and number.

evpn-drni-group: Configures the specified interface to provide the virtual IP address for the DR system.

 

 

NOTE:

This keyword is supported only in Release 6635 and later.

 

Usage guidelines

Do not specify the evpn-drni-group keyword if the device is not a DR member device. For the VTEP to obtain correct routing information, you must specify the interface used for establishing BGP peer relationship as the MVXLAN source interface.

You must specify the evpn-drni-group keyword if you execute this command on the DR member devices in a DR system. You must assign the same IP address to the MVXLAN source interfaces on them and specify that IP address as the virtual VTEP address. You do not need to use the source interface for establishing BGP peer relationships as the MVXLAN source interface.

In a DR system, each DR member device uses the MVXLAN source interface (virtual IP address of the DR system) to set up multicast MVXLAN tunnels when the DR member devices are operating correctly. When both the IPL and keepalive link go down, each DR member device uses the local IP address specified by using the drni local command to set up multicast MVXLAN tunnels.

Examples

# In MVXLAN IPv4 address family view of VPN instance vpna, specify Loopback 0 as the MVXLAN source interface. (Loopback 0 is the source interface used for establishing BGP peer relationship.)

<Sysname> system-view

[Sysname] multicast-vpn vxlan vpn-instance vpna mode mdt

[Sysname-mvxlan-vpna] address-family ipv4

[Sysname-mvxlan-vpna-ipv4] source loopback 0