- Table of Contents
- Related Documents
-
Title | Size | Download |
---|---|---|
01-EVPN commands | 388.39 KB |
Contents
address-family evpn (public instance view)
address-family evpn (VPN instance view)
address-family ipv4 (public instance view)
display evpn ipv6 auto-discovery
display evpn route arp suppression
display evpn route nd suppression
display evpn route xconnect-group
display l2vpn forwarding evpn split-horizon
evpn df-election algorithm (interface view)
evpn df-election algorithm (system view)
evpn df-election preference non-revertive
evpn frr local (cross-connect group EVPN instance view)
evpn frr local (VSI EVPN instance view)
evpn local-service-id remote-service-id
evpn multihoming advertise disable
evpn multihoming timer df-delay
evpn multihoming vpls-frr local
evpn multihoming vpws-frr local
evpn route arp-mobility suppression
evpn route mac-mobility suppression
peer advertise vpn-reoriginate ibgp (BGP EVPN address family view)
route-distinguisher (EVPN instance view)
route-distinguisher (public instance view)
Basic EVPN commands
The device does not support VXLAN-DCI or EVPN-DCI.
ac interface
Use ac interface to map an interface to a cross-connect.
Use undo ac interface to delete the mapping between a cross-connect and an interface.
Syntax
ac interface interface-type interface-number [ access-mode { ethernet | vlan } ]
undo ac interface interface-type interface-number
Default
No interface is mapped to a cross-connect.
Views
Cross-connect view
Predefined user roles
network-admin
Parameters
interface-type interface-number: Specifies an interface by its type and number.
access-mode: Specifies an access mode. The default access mode varies by AC type.
· For a VLAN interface, the default access mode is VLAN. For a Layer 3 interface of another type, the default access mode is Ethernet.
· For a Layer 3 subinterface, the default access mode is VLAN.
ethernet: Specifies the Ethernet access mode.
vlan: Specifies the VLAN access mode.
Usage guidelines
After you execute this command, packets received from the mapped Layer 3 interface are forwarded to the PW or another AC bound to the cross-connect.
The access mode determines how the PE treats the VLAN tag in Ethernet frames received from the AC. It also determines how the PE forwards Ethernet frames out of the AC.
· VLAN access mode—Ethernet frames received from the AC must carry a VLAN tag in the Ethernet header. The VLAN tag is called a P-tag, which is assigned by the service provider. Ethernet frames sent out of the AC must also carry the P-tag.
· Ethernet access mode—If Ethernet frames from the AC have a VLAN tag in the header, the VLAN tag is called a U-tag, and the PE ignores it. Ethernet frames sent out of the AC do not carry the P-tag.
Examples
# Map GigabitEthernet 0/0/1 to cross-connect aaa in cross-connect group vpna.
[Sysname] xconnect-group vpna
[Sysname-xcg-vpna] connection aaa
[Sysname-xcg-vpna-aaa] ac interface gigabitethernet 0/0/1
Related commands
connection (MPLS Command Reference)
display l2vpn interface (MPLS Command Reference)
pw-type (MPLS Command Reference)
address-family evpn (public instance view)
Use address-family evpn to enter public instance EVPN view.
Use undo address-family evpn to delete all settings in public instance EVPN view.
Syntax
address-family evpn
undo address-family evpn
Views
Public instance view
Predefined user roles
network-admin
Usage guidelines
You can configure EVPN settings such as route targets in public instance EVPN view.
Examples
# Enter public instance EVPN view.
<Sysname> system-view
[Sysname] ip public-instance
[Sysname-public-instance] address-family evpn
[Sysname-public-instance-evpn]
address-family evpn (VPN instance view)
Use address-family evpn to enter VPN instance EVPN view.
Use undo address-family evpn to delete all settings in VPN instance EVPN view.
Syntax
address-family evpn
undo address-family evpn
Views
VPN instance view
Predefined user roles
network-admin
Usage guidelines
You can configure EVPN settings such as route targets and routing policies in VPN instance EVPN view.
Examples
# Enter EVPN view of VPN instance tenant.
<Sysname> system-view
[Sysname] ip vpn-instance tenant
[Sysname-vpn-instance-tenant] address-family evpn
[Sysname-vpn-evpn-tenant]
address-family ipv4 (public instance view)
Use address-family ipv4 to enter public instance IPv4 address family view.
Use undo address-family ipv4 to delete all settings in public instance IPv4 address family view.
Syntax
address-family ipv4
undo address-family ipv4
Views
Public instance view
Predefined user roles
network-admin
Examples
# Enter public instance IPv4 address family view.
<Sysname> system-view
[Sysname] ip public-instance
[Sysname-public-instance] address-family ipv4
[Sysname-public-instance-ipv4]
address-family l2vpn evpn
Use address-family l2vpn evpn to create the BGP EVPN address family and enter its view, or enter the view of the existing BGP EVPN address family.
Use undo address-family l2vpn evpn to delete the BGP EVPN address family and all settings in BGP EVPN address family view.
Syntax
address-family l2vpn evpn
undo address-family l2vpn evpn
Default
The BGP EVPN address family does not exist.
Views
BGP instance view
Predefined user roles
network-admin
Usage guidelines
Configuration made in BGP EVPN address family view takes effect only on routes and peers of the BGP EVPN address family that are on the public network.
Examples
# Create the BGP EVPN address family and enter its view.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp-default] address-family l2vpn evpn
[Sysname-bgp-default-evpn]
advertise l2vpn evpn
Use advertise l2vpn evpn to enable BGP EVPN route advertisement to the local site.
Use undo advertise l2vpn evpn to disable BGP EVPN route advertisement to the local site.
Syntax
advertise l2vpn evpn
undo advertise l2vpn evpn
Default
BGP EVPN route advertisement to the local site is enabled.
Views
BGP-VPN IPv4 unicast address family view
BGP-VPN IPv6 unicast address family view
Predefined user roles
network-admin
Usage guidelines
This command enables the device to advertise private BGP EVPN routes to the local site after the device adds the routes to the routing table of a VPN instance.
Examples
# Enable BGP EVPN route advertisement to the local site for VPN instance vpn1.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp-default] ip vpn-instance vpn1
[Sysname-bgp-default-vpn1] address-family ipv4
[Sysname-bgp-default-ipv4-vpn1] advertise l2vpn evpn
arp mac-learning disable
Use arp mac-learning disable to disable an EVPN instance from learning MAC addresses from ARP information.
Use undo arp mac-learning disable to restore the default.
Syntax
arp mac-learning disable
undo arp mac-learning disable
Default
An EVPN instance learns MAC addresses from ARP information.
Views
VSI EVPN instance view (VXLAN encapsulation)
Predefined user roles
network-admin
Usage guidelines
The MAC information and ARP information advertised by a remote VTEP overlap. To avoid duplication, use this command to disable the learning of MAC addresses from ARP information. EVPN will learn remote MAC addresses only from the MAC information advertised from remote sites.
Examples
# Disable an EVPN instance from learning MAC addresses from ARP information.
<Sysname> system-view
[Sysname] vsi aaa
[Sysname-vsi-aaa] evpn encapsulation vxlan
[Sysname-vsi-aaa-evpn-vxlan] arp mac-learning disable
arp proxy-send enable
Use arp proxy-send enable to enable ARP request proxy.
Use undo arp proxy-send enable to disable ARP request proxy.
Syntax
arp proxy-send enable
undo arp proxy-send enable
Default
ARP request proxy is disabled on VSI interfaces.
Views
VSI interface view
Predefined user roles
network-admin
Usage guidelines
ARP request proxy allows a VSI interface to send an ARP request sourced from itself when the VTEP forwards an ARP request. This feature helps resolve certain communication issues.
In an EVPN VXLAN network, VM 1 and VM 2 are attached to VTEP 1 and VTEP 2, respectively, and the VMs are in the same subnet. The gateway interfaces of VM 1 and VM 2 are VSI-interface 1 on VTEP 1 and VSI-interface 2 on VTEP 2, respectively. The following conditions exist on the VTEPs:
· The VTEPs have established BGP EVPN neighbor relationships.
· EVPN is disabled from learning MAC addresses from ARP information.
· MAC address advertisement is disabled, and advertised MAC addresses are withdrawn.
· Remote-MAC address learning is disabled.
· Local proxy ARP is enabled on the VSI interfaces.
· The VSI interfaces use different IP addresses and MAC addresses.
In this network, when VM 1 attempts to communicate with VM 2, the following procedure occurs:
1. VM 1 sends an ARP request.
2. VTEP 1 learns the MAC address of VM 1 from the ARP request, replies to VM 1 on behalf of VM 2, and sends an ARP request to obtain the MAC address of VM 2.
3. VTEP 2 forwards the ARP request, and VM 2 replies to VTEP 1.
4. VTEP 2 forwards the ARP reply sent by VM 2 without learning the MAC address of VM 2 because EVPN is disabled from learning MAC addresses from ARP information.
5. VTEP 1 does not learn the MAC address of VM 2 because remote-MAC address learning is disabled.
As a result, VM 1 fails to communicate with VM 2.
For VM 1 to communicate with VM 2, enable ARP request proxy on VSI-interface 2 of VTEP 2. When receiving the ARP request sent by VTEP 1, VTEP 2 forwards it and sends an ARP request sourced from VSI-interface 2 simultaneously, and VM 2 replies to both ARP requests. Then, VTEP 2 learns the MAC address of VM 2 from the ARP reply destined from VSI-interface 2 and advertises the MAC address to VTEP 1 through BGP EVPN routes. In this way, VTEP 1 obtains the MAC address of VM 2, and VM 1 and VM 2 can communicate.
Examples
# Enable ARP request proxy on VSI-interface 100.
<Sysname> system-view
[Sysname] interface vsi-interface 100
[Sysname-vsi-interface100] arp proxy-send enable
Related commands
local-proxy-arp enable (Layer 3—IP Services Command Reference)
arp-advertising disable
Use arp-advertising disable to disable ARP information advertisement for an EVPN instance.
Use undo arp-advertising disable to restore the default.
Syntax
arp-advertising disable
undo arp-advertising disable
Default
ARP information advertisement is enabled for an EVPN instance.
Views
VSI EVPN instance view (VXLAN encapsulation)
Predefined user roles
network-admin
Usage guidelines
In an EVPN network with distributed gateways, you can disable ARP information advertisement for a VXLAN to save resources if all its user terminals use the same EVPN gateway device. The EVPN instance of the VXLAN will stop advertising ARP information through MAC/IP advertisement routes and withdraw advertised ARP information. When ARP information advertisement is disabled, user terminals in other VXLANs still can communicate with that VXLAN through IP prefix advertisement routes.
Examples
# Disable ARP information advertisement for an EVPN instance.
<Sysname> system-view
[Sysname] vsi aaa
[Sysname-vsi-aaa] evpn encapsulation vxlan
[Sysname-vsi-aaa-evpn-vxlan] arp-advertising disable
bestroute ipv6-nexthop
Use bestroute ipv6-nexthop to enable BGP to prefer routes with an IPv6 next hop during optimal route selection.
Use undo bestroute ipv6-nexthop to restore the default.
Syntax
bestroute ipv6-nexthop
undo bestroute ipv6-nexthop
Default
BGP prefers routes with an IPv4 next hop during optimal route selection.
Views
BGP EVPN address family view
Predefined user roles
network-admin
Usage guidelines
Execute this command for the VXLAN packets in an EVPN network to be forwarded through IPv6 routes when both IPv4 and IPv6 routes exist.
Examples
# In BGP EVPN address family view, enable BGP to prefer routes with an IPv6 next hop during optimal route selection.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp-default] address-family l2vpn evpn
[Sysname-bgp-default-evpn] bestroute ipv6-nexthop
display bgp l2vpn evpn
Use display bgp l2vpn evpn to display BGP EVPN routes.
Syntax
display bgp [ instance instance-name ] l2vpn evpn [ peer { ipv4-address | ipv6-address } { advertised-routes | received-routes } [ statistics ] | [ route-distinguisher route-distinguisher | route-type { auto-discovery | es | igmp-js | igmp-ls | imet | ip-prefix | mac-ip | smet } ] * [ { evpn-route route-length | evpn-prefix } [ advertise-info ] | ipv4-address | ipv6-address | mac-address ] | statistics ]
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
instance instance-name: Specifies a BGP instance by its name, a case-sensitive string of 1 to 31 characters. If you do not specify this option, the command displays BGP EVPN routes for the default BGP instance.
peer { ipv4-address | ipv6-address }: Specifies a peer by its IPv4 address or IPv6 address.
advertised-routes: Specifies the routes advertised to the specified peer.
received-routes: Specifies the routes received from the specified peer.
statistics: Displays BGP EVPN route statistics.
route-distinguisher route-distinguisher: Specifies a route distinguisher (RD), a string of 3 to 21 characters. The RD can use one of the following formats:
· 16-bit AS number:32-bit user-defined number. For example, 101:3.
· 32-bit IP address:16-bit user-defined number. For example, 192.168.122.15:1.
· 32-bit AS number:16-bit user-defined number. For example, 65536:1. The AS number must be equal to or greater than 65536.
route-type: Specifies a route type.
auto-discovery: Specifies Ethernet auto-discovery routes.
es: Specifies Ethernet segment (ES) routes.
igmp-ls: Specifies IGMP leave synch routes.
igmp-js: Specifies IGMP join synch routes.
imet: Specifies inclusive multicast Ethernet tag (IMET) routes.
ip-prefix: Specifies IP prefix advertisement routes.
mac-ip: Specifies MAC/IP advertisement routes.
smet: Specifies selective multicast Ethernet tag (SMET) routes.
evpn-route: Specifies a BGP EVPN route, a case-insensitive string of 1 to 512 characters.
route-length: Specifies the route length in bits, in the range of 0 to 65535.
evpn-prefix: Specifies a BGP EVPN route in the format of evpn-route/route-length, a case-insensitive string of 1 to 512 characters.
advertise-info: Displays advertisement information for BGP EVPN routes.
ipv4-address: Specifies an IPv4 address.
ipv6-address: Specifies an IPv6 address.
mac-address: Specifies a MAC address in MAC/IP advertisement routes. If you specify the route-type keyword, to use this argument, you must also specify the mac-ip keyword.
Usage guidelines
If you do not specify any parameter, this command displays brief information about all BGP EVPN routes.
Examples
# Display brief information about all BGP EVPN routes.
<Sysname> display bgp l2vpn evpn
BGP local router ID is 1.1.1.9
Status codes: * - valid, > - best, d - dampened, h - history,
s - suppressed, S - stale, i - internal, e - external
a – additional-path
Origin: i - IGP, e - EGP, ? - incomplete
Total number of routes from all PEs: 6
Route distinguisher: 100:1
Total number of routes: 3
Network NextHop MED LocPrf PrefVal Path/Ogn
* > [2][0][48][00aa.00bb.00cc][4][0.0.0.0]/136
10.1.1.2 0 32768 ?
* e 10.1.1.1 0 0 65410?
* > [3][300][16][::ffff:1.1.1.1]/176
127.0.0.1 0 32768 ?
Route distinguisher: 200:1
Total number of routes: 2
Network NextHop MED LocPrf PrefVal Path/Ogn
* >i [2][0][48][00aa.00cc.00dd][4][1.1.1.1]/136
3.3.3.9 0 100 0 ?
* >i [3][300][16][::ffff:2.2.2.2]/176
3.3.3.9 0 100 0 65420?
Route distinguisher of public instance: 1:15
Total number of routes: 1
Network NextHop MED LocPrf PrefVal Path/Ogn
* >e [2][0][48][0011.0022.0033][32][11.22.33.55]/136
30.30.1.2 0 0 100i
Table 1 Command output
Field |
Description |
Status codes |
Route status codes: · * - valid—Valid route. · > - best—Optimal route. · d - dampened—Dampened route. · h - history—History route. · i - internal—Internal route. · e - external—External route. · s - suppressed—Suppressed route. · S - stale—Stale route. · a - additional-path—Add-Path optimal route. |
Origin |
Origin of the route: · i – IGP—Originated in the AS. The origin of routes advertised by using the network command is IGP. · e – EGP—Learned through EGP. · ? – incomplete—Unknown origin. The origin of routes redistributed from IGP protocols is incomplete. |
Network |
BGP EVPN route/route length. For example, in the entry [2][0][48][1485-247c-0506][32][10.1.2.20]/136, [2][0][48][1485-247c-0506][32][10.1.2.20] is the route, and 136 is the route length in bytes. BGP EVPN routes are as follows: · [1][ESI][EthernetTagID] ¡ 1—Ethernet auto-discovery route. ¡ ESI—Ethernet segment identifier (ESI). ¡ EthernetTagID—Ethernet tag ID. · [2][EthernetTagID][MACLength][MAC][IPAddressLength][IPAddress] ¡ 2—MAC/IP advertisement route. ¡ EthernetTagID—Ethernet tag ID. ¡ MACLength—MAC address length. ¡ MAC—MAC address. ¡ IPAddressLength—IP address length. ¡ IPAddress—IP address. · [3][EthernetTagID][IPAddressLength][IPAddress] ¡ 3—IMET route. ¡ IPAddressLength—IP address length. ¡ IPAddress—IP address of the originating router. · [4][ESI][IPAddressLength][IPAddress] ¡ 4—ES route. ¡ ESI—ESI. ¡ IPAddressLength—IP address length. ¡ IPAddress—IP address of the originating router. · [5][EthernetTagID][IPAddressLength][IPAddress] ¡ 5—IP prefix advertisement route. ¡ EthernetTagID—Ethernet tag ID. ¡ IPAddressLength—IP address length. ¡ IPAddress—IP address of the originating router. · [6][EthernetTagID][Source Len][Source IP][Group Len][Group IP][Originator Len][Originator IP] ¡ 6—Selective multicast Ethernet tag route. ¡ EthernetTagID—Ethernet tag ID. ¡ Source Len—Length of the multicast source address. This field displays 0 if the multicast source is any (*, G). ¡ Source IP—Source IP address of IGMP membership reports. This field is not displayed if the multicast source is any (*, G). ¡ Group Len—Length of the multicast group address. ¡ Group IP—Multicast group address of IGMP membership reports. ¡ Originator Len—Length of the originating router's IP address. ¡ Originator IP—IP address of the originating router. · [7][ESI][EthernetTagID][Source Len][Source IP][Group Len][Group IP][Originator Len][Originator IP] ¡ 7—IGMP join synch route. ¡ ESI—ESI. ¡ EthernetTagID—Ethernet tag ID. ¡ Source Len—Length of the multicast source address. This field displays 0 if the multicast source is any (*, G). ¡ Source IP—Source IP address of IGMP membership reports. This field is not displayed if the multicast source is any (*, G). ¡ Group Len—Length of the multicast group address. ¡ Group IP—Multicast group address of IGMP membership reports. ¡ Originator Len—Length of the originating router's IP address. ¡ Originator IP—IP address of the originating router. · [8][ESI][EthernetTagID] [Source Len][Source IP][Group Len][Group IP][Originator Len][Originator IP][ [LeaveGroup Synchronization] ¡ 8—IGMP leave synch route. ¡ ESI—ESI. ¡ EthernetTagID—Ethernet tag ID. ¡ Source Len—Length of the multicast source address. This field displays 0 if the multicast source is any (*, G). ¡ Source IP—Source IP address of IGMP membership reports. This field is not displayed if the multicast source is any (*, G). ¡ Group Len—Length of the multicast group address. ¡ Group IP—Multicast group address of IGMP membership reports. ¡ Originator Len—Length of the originating router's IP address. ¡ Originator IP—IP address of the originating router. ¡ LeaveGroup Synchronization—Leave group synchronization sequence number. |
NextHop |
Next hop IP address. |
MED |
Multi-Exit Discriminator (MED) attribute. |
LocPrf |
Local precedence. |
PrefVal |
Preferred value. |
Path/Ogn |
AS_PATH and ORIGIN attributes of the route. |
# Display detailed information about BGP EVPN route [1][00:01:02:03:04:05:06:07:08:09][5]/120 with RD 1.1.1.1:100.
<Sysname> display bgp l2vpn evpn route-distinguisher 1.1.1.1:100 [1][00:01:02:03:04:05:06:07:08:09][5] 120
BGP local router ID: 172.16.250.133
Local AS number: 100
Route distinguisher: 1.1.1.1:100
Total number of routes: 1
Paths: 1 available, 1 best
BGP routing table information of [1][00:01:02:03:04:05:06:07:08:09][5]/120:
From : 10.1.1.2 (192.168.56.17)
Rely nexthop : 10.1.1.2
Original nexthop: 10.1.1.2
OutLabel : 0
Ext-Community : <RT: 1:2>, <Encapsulation Type: VXLAN >, <ESI Label: Flag 0,
Label 1>
RxPathID : 0x0
TxPathID : 0x0
AS-path : 200
Origin : igp
Attribute value : MED 0, pref-val 0
State : valid, external, best
IP precedence : N/A
QoS local ID : N/A
Traffic index : N/A
EVPN route type : Ethernet auto-discovery route
ESI : 00:01:02:03:04:05:06:07:08:09
Ethernet tag ID : 5
MPLS label : 10
Table 2 Command output
Field |
Description |
Paths |
Number of routes: · available—Number of valid routes. · best—Number of optimal routes. |
From |
IP address of the BGP peer that advertised the route. |
Rely nexthop |
Next hop after route recursion. If no next hop is found, this field displays not resolved. |
Original nexthop |
Original next hop of the route. If the route was obtained from a BGP update message, the original next hop is the next hop IP address in the message. |
OutLabel |
Outgoing label of the route. |
Ext-Community |
Extended community attributes: · RT. · Encapsulation Type. · ESI Label. |
RxPathID |
Add-Path ID value of the received route. This field is not supported by the BGP EVPN address family. |
TxPathID |
Add-Path ID value of the sent route. This field is not supported by the BGP EVPN address family. |
AS-path |
AS_PATH attribute of the route. This attribute records the ASs the route has passed and avoids routing loops. |
Origin |
Origin of the route: · igp—Originated in the AS. The origin of routes advertised by using the network command is IGP. · egp—Learned through EGP. · incomplete—Unknown origin. The origin of routes redistributed from IGP protocols is incomplete. |
Attribute value |
Attributes of the route: · MED—MED value for the destination network. · localpref—Local preference value. · pref-val—Preferred value. · pre—Route preference value. |
State |
Current state of the route: · valid. · internal. · external. · local. · synchronize. · best. |
IP precedence |
IP precedence in the range of 0 to 7. N/A indicates that the IP precedence is invalid. |
QoS local ID |
QoS local ID in the range of 1 to 4095. N/A indicates that the QoS local ID is invalid. |
Traffic index |
Traffic index in the range of 1 to 64. N/A indicates that the traffic index is invalid. |
MPLS label |
MPLS label. The current software version does not support this field. |
# Display detailed information about BGP EVPN route [2][5][48][0001-0203-0405][32][4.5.5.5]/136 with RD 1.1.1.1:100.
<Sysname> display bgp l2vpn evpn route-distinguisher 1.1.1.1:100 [2][5][48][0001-0203-0405][32][5.5.5.5] 136
BGP local router ID: 172.16.250.133
Local AS number: 100
Route distinguisher: 1.1.1.1:100
Total number of routes: 1
Paths: 1 available, 1 best
BGP routing table information of [2][5][48][0001-0203-0405][32][5.5.5.5]/136:
From : 10.1.1.2 (192.168.56.17)
Rely nexthop : 10.1.1.2
Original nexthop: 10.1.1.2
OutLabel : 0
Ext-Community : <RT: 1:2>, <RT: 1:3>, <RT: 1:4>, <RT: 1:5>, <RT: 1:6>, <RT: 1:7
>, <Encapsulation Type: VXLAN>, <Router's Mac: 0006-0708-0910
>, <MAC Mobility: Flag 0, SeqNum 2>, <Default GateWay>
RxPathID : 0x0
TxPathID : 0x0
AS-path : 200
Origin : igp
Attribute value : MED 0, pref-val 0
State : valid, external, best
IP precedence : N/A
QoS local ID : N/A
Traffic index : N/A
EVPN route type : MAC/IP advertisement route
ESI : 00:01:02:03:04:05:06:07:08:09
Ethernet tag ID : 5
MAC address : 0001-0203-0405
IP address : 5.5.5.5/32
MPLS label1 : 10
MPLS label2 : 0
Table 3 Command output
Field |
Description |
Ext-Community |
Extended community attributes: · RT. · Encapsulation Type. · Router's Mac. · MAC Mobility—MAC mobility. ¡ Flag—Indicates whether the MAC address can move. A value of 1 indicates that the MAC address cannot move, and a value of 0 indicates that the MAC address can move. ¡ SeqNum—Identifies the most recent move of the MAC address. · Default GateWay—Route for the default gateway. |
MPLS label1 |
VXLAN ID used for Layer 2 forwarding. |
MPLS label2 |
L3 VXLAN ID used for Layer 3 forwarding. |
# Display detailed information about BGP EVPN route [3][0][32][5.5.5.5]/80 with RD 1.1.1.1:100.
<Sysname> display bgp l2vpn evpn route-distinguisher 1.1.1.1:100 [3][0][32][4.5.5.5] 80
BGP local router ID: 172.16.250.133
Local AS number: 100
Route distinguisher: 1.1.1.1:100
Total number of routes: 1
Paths: 1 available, 1 best
BGP routing table information of [3][0][32][4.5.5.5]/80:
From : 10.1.1.2 (192.168.56.17)
Rely nexthop : 10.1.1.2
Original nexthop: 10.1.1.2
OutLabel : 0
Ext-Community : <RT: 1:2>, <Encapsulation Type: VXLAN>
RxPathID : 0x0
TxPathID : 0x0
AS-path : 200
Origin : igp
Attribute value : MED 0,pref-val 0
State : valid, external, best
IP precedence : N/A
QoS local ID : N/A
Traffic index : N/A
EVPN route type : Inclusive multicast Ethernet tag route
Ethernet tag ID : 0
Origin address : 5.5.5.5/32
Table 4 Command output
Field |
Description |
Ext-Community |
Extended community attributes: · RT. · Encapsulation Type. |
Origin address |
IP address of the originating router. |
# Display detailed information about BGP EVPN route [4][00:00:00:00:00:00:00:00:00:0a][32][4.5.5.5]/128 with RD 1.1.1.1:100.
<Sysname> display bgp l2vpn evpn route-distinguisher 1.1.1.1:100 [4][00:00:00:00:00:00:00:00:00:0a][32][4.5.5.5] 128
BGP local router ID: 172.16.250.133
Local AS number: 100
Route distinguisher: 1.1.1.1:100
Total number of routes: 1
Paths: 1 available, 1 best
BGP routing table information of [4][00:00:00:00:00:00:00:00:00:0a][32] [4.5.5
.5]/128:
From : 10.1.1.2 (192.168.56.17)
Rely nexthop : 10.1.1.2
Original nexthop: 10.1.1.2
OutLabel : 0
Ext-Community : <RT: 1:2>, <Encapsulation Type: VXLAN>, <ES-Import RT: 1:1>
RxPathID : 0x0
TxPathID : 0x0
AS-path : 200
Origin : igp
Attribute value : MED 0,pref-val 0
State : valid, external, best
IP precedence : N/A
QoS local ID : N/A
Traffic index : N/A
EVPN route type : Ethernet segment route
ESI : 00:00:00:00:00:00:00:00:00:0a
Origin address : 4.5.5.5/32
Table 5 Command output
Field |
Description |
Ext-Community |
Extended community attributes: · RT. · Encapsulation Type. · ES-Import RT. |
Origin address |
IP address of the originating router. |
# Display detailed information about BGP EVPN route [5][10][32][4.5.5.5]/80 with RD 1.1.1.1:100.
<Sysname> display bgp l2vpn evpn route-distinguisher 1.1.1.1:100 [5][10][32][4.5.5.5] 80
BGP local router ID: 172.16.250.133
Local AS number: 100
Route distinguisher: 1.1.1.1:100
Total number of routes: 1
Paths: 1 available, 1 best
BGP routing table information of [5][10][32][4.5.5.5]/80:
From : 10.1.1.2 (192.168.56.17)
Rely nexthop : 10.1.1.2
Original nexthop: 10.1.1.2
OutLabel : 0
Ext-Community : <RT: 1:2>, <Encapsulation Type: VXLAN>, <Router's Mac:
0006-0708-0910>
RxPathID : 0x0
TxPathID : 0x0
AS-path : 200
Origin : igp
Attribute value : MED 0,pref-val 0
State : valid, external, best
IP precedence : N/A
QoS local ID : N/A
Traffic index : N/A
EVPN route type : IP prefix advertisement route
ESI : 00:00:00:00:00:00:00:00:00:0a
Ethernet tag ID : 10
IP address : 4.5.5.5/32
Gateway address : 0.0.0.0
MPLS Label : 1
Table 6 Command output
Field |
Description |
Ext-Community |
Extended community attributes: · RT. · Encapsulation Type. · Router's Mac. |
IP address |
IP address and prefix length. |
MPLS Label |
L3 VXLAN ID used for Layer 3 forwarding. |
# Display detailed information about BGP EVPN route [6][0][32][10.1.1.1][32][224.224.224.224][32][192.168.3.1]/160 with RD 1.1.1.1:100.
<Sysname> display bgp l2vpn evpn route-distinguisher 1.1.1.1:100 [6][0][32][10.1.1.1][32][224.224.224.224][32][192.168.3.1] 160
BGP local router ID: 172.16.250.133
Local AS number: 100
Route distinguisher: 1.1.1.1:100
Total number of routes: 1
Paths: 1 available, 1 best
BGP routing table information of [6][0][32][10.1.1.1][32][224.224.224.224][32][192.168.3.1]/160:
From : 10.1.1.2
Rely nexthop : 10.1.1.2
Original nexthop: 10.1.1.2
OutLabel : NULL
Ext-Community : <RT: 1:2>, <Encapsulation Type: VXLAN>,
RxPathID : 0x0
TxPathID : 0x0
AS-path : 200
Origin : igp
Attribute value : MED 0,pref-val 0
State : valid, external, best
IP precedence : N/A
QoS local ID : N/A
Traffic index : N/A
EVPN route type : Selective multicast Ethernet tag route
Ethernet tag ID : 0
Source length : 32
Source address : 10.1.1.1
Group length : 32
Group address : 224.224.224.224
Origin address : 192.168.3.1
IGMP flags : v3, include
Table 7 Command output
Field |
Description |
Ext-Community |
Extended community attributes: · RT. · Encapsulation Type. |
Source length |
Length of the multicast source address. |
Source address |
Multicast source address. |
Group length |
Length of the multicast group address. |
Group address |
Multicast group address. |
Origin address |
IP address of the originating router. |
# Display detailed information about BGP EVPN route [7][00:00:00:00:00:00:00:00:00][0][32][10.1.1.1][32][224.224.224.224][32][192.168.3.1]/240 with RD 1.1.1.1:100.
<Sysname> display bgp l2vpn evpn route-distinguisher 1.1.1.1:100 [7][0000.0000.0000.0000.0000][0][32][10.1.1.1][16][224.224.224.224][32][192.168.3.1] 240
BGP local router ID: 172.16.250.133
Local AS number: 100
Route distinguisher: 1.1.1.1:100
Total number of routes: 1
Paths: 1 available, 1 best
BGP routing table information of [7][0000.0000.0000.0000.0000][0][32][10.1.1.1][32][224.224.224.224][32][192.168.3.1]/240:
From : 10.1.1.2
Rely nexthop : 10.1.1.2
Original nexthop: 10.1.1.2
OutLabel : NULL
Ext-Community : <RT: 1:2>, <Encapsulation Type: VXLAN>, < ESI-RT: 0:0>
RxPathID : 0x0
TxPathID : 0x0
AS-path : 200
Origin : igp
Attribute value : MED 0,pref-val 0
State : valid, external, best
IP precedence : N/A
QoS local ID : N/A
Traffic index : N/A
EVPN route type : IGMP join synch route
ESI : 0000.0000.0000.0000.0000
Ethernet tag ID : 0
Source length : 32
Source address : 10.1.1.1
Group length : 32
Group address : 224.224.224.224
Origin address : 192.168.3.1
IGMP flags : v3, include
Table 8 Command output
Field |
Description |
Ext-Community |
Extended community attributes: · RT. · Encapsulation Type. · EVI-RT—Route target associated with EVI. |
Source length |
Length of the multicast source address. |
Source address |
Multicast source address. |
Group length |
Length of the multicast group address. |
Group address |
Multicast group address. |
Origin address |
IP address of the originating router. |
# Display detailed information about BGP EVPN route [8][ 00:00:00:00:00:00:00:00:00][0][32][10.1.1.1][32][224.224.224.224][32][192.168.3.1][0]/272 with RD 1.1.1.1:100.
<Sysname> display bgp l2vpn evpn route-distinguisher 1.1.1.1:100 [8][0000.0000.0000.0000.0000][0][32][10.1.1.1][32][224.224.224.224][32][192.168.3.1][0] 272
BGP local router ID: 172.16.250.133
Local AS number: 100
Route distinguisher: 1.1.1.1:100
Total number of routes: 1
Paths: 1 available, 1 best
BGP routing table information of [8][0000.0000.0000.0000.0000] [0][32][10.1.1.1][32][224.224.224.224][32][192.168.3.1][0]/272:
From : 10.1.1.2
Rely nexthop : 10.1.1.2
Original nexthop: 10.1.1.2
OutLabel : NULL
Ext-Community : <RT: 1:2>, <Encapsulation Type: VXLAN>, < ESI-RT: 1:200>
RxPathID : 0x0
TxPathID : 0x0
AS-path : 200
Origin : igp
Attribute value : MED 0,pref-val 0
State : valid, external, best
IP precedence : N/A
QoS local ID : N/A
Traffic index : N/A
EVPN route type : IGMP leave synch route
ESI : 0000.0000.0000.0000.0000
Ethernet tag ID : 0
Source length : 32
Source address : 10.1.1.1
Group length : 32
Group address : 224.224.224.224
Origin address : 192.168.3.1
Leave group sync: 0
Max ResponseTime: 2500ms
Max ResponseCode: 25
IGMP flags : v3, include
Field |
Description |
Ext-Community |
Extended community attributes: · RT. · Encapsulation Type. · ESI-RT—Route target associated with the ESI. |
Source length |
Length of the multicast source address. |
Source address |
Multicast source address. |
Group length |
Length of the multicast group address. |
Group address |
Multicast group address. |
Origin address |
IP address of the originating router. |
Leave group sync |
Leave group synchronization sequence number. |
Max ResponseTime |
Maximum response time in milliseconds. |
Max ResponseCode |
Maximum response time in the received packet, in deciseconds. |
# Display detailed information about BGP EVPN route [4][00:00:00:00:00:00:00:00:00:0a][32][4.5.5.5]/128 with RD 1.1.1.1:100.
<Sysname> display bgp l2vpn evpn route-distinguisher 1.1.1.1:100 [4][00:00:00:00:00:00:00:00:00:0a] [32][4.5.5.5] 128 advertise-info
BGP local router ID: 172.16.250.133
Local AS number: 100
Route distinguisher: 1.1.1.1:100
Total number of routes: 1
Paths: 1 best
BGP routing table information of [4][00:00:00:00:00:00:00:00:00:0a][32][4.5.5.5]/128:
Advertised to peers (1 in total):
10.2.1.2
Table 10 Command output
Field |
Description |
Paths |
Number of optimal routes. |
Advertised to peers (1 in total) |
Peers to whom the route has been advertised and the number of the peers. |
display evpn auto-discovery
Use display evpn auto-discovery to display information about peers that are automatically discovered through BGP.
Syntax
display evpn auto-discovery { { imet [ mpls | vxlan ] | mac-ip [ mpls | srv6 | vxlan ] } [ peer peer-address] [ vsi vsi-name ] | macip-prefix [ nexthop next-hop ] [ count ] }
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
imet: Specifies peers discovered through IMET routes.
mac-ip: Specifies MAC/IP advertisement routes.
mpls: Specifies the EVPN VPLS network.
srv6: Specifies the EVPN VPLS over SRv6 network. For more information about EVPN VPLS over SRv6, see Segment Routing Configuration Guide.
vxlan: Specifies the EVPN VXLAN network.
peer peer-address: Specifies a peer by its IP address. If you do not specify this option, the command displays information about all automatically discovered peers.
vsi vsi-name: Specifies a VSI by its name, a case-sensitive string of 1 to 31 characters. If you do not specify this option, the command displays peer information for all VSIs.
macip-prefix: Specifies peers discovered through MAC/IP advertisement routes and IP prefix advertisement routes.
nexthop next-hop: Specifies a next hop. If you do not specify this option, the command displays peer information for all next hops.
count: Displays the number of peers. If you do not specify this keyword, the command displays detailed peer information.
Usage guidelines
If you do not specify a network type, this command displays peer information for all network types.
Examples
# Display information about peers discovered through IMET routes for EVPN VXLAN.
<Sysname> display evpn auto-discovery imet vxlan
Total number of automatically discovered peers: 2
VSI name: vpna
RD PE_address Tunnel_address Tunnel mode VXLAN ID
1:10 2.2.2.2 2.2.2.2 VXLAN 10
2:100 3.3.3.3 3.3.3.3 VXLAN 10
# Display information about peers discovered through IMET routes for EVPN VPLS.
<Sysname> display evpn auto-discovery imet mpls
Total number of automatically discovered peers: 1
VSI name: vpna
RD PE_address In/Out label Tunnel mode
1:1 1.1.1.1 1151/1151 PW
# Display information about peers discovered through IMET routes for EVPN VPLS over SRv6.
<Sysname> display evpn auto-discovery imet srv6
Total number of automatically discovered peers: 1
VSI name: vpnc
RD : 1:1 Tunnel mode : SRv6
PE_address : 1::1
In SID : 100::10::0
Out SID : 200::20::0
Table 11 Command output
Field |
Description |
PE_address |
Identifier of the remote VTEP on the VSI. |
Tunnel_address |
Tunnel destination IP address. |
Tunnel mode |
Tunnel mode: · VXLAN. · VXLAN-DCI. · PW. · SRv6. |
In/Out label |
Incoming and outgoing labels for the PW. If the labels are invalid, this field displays a hyphen (-). |
In SID |
Incoming SID. |
Out SID |
Outgoing SID. |
# Display information about IPv4 peers discovered through MAC/IP advertisement routes for EVPN VXLAN.
<Sysname> display evpn auto-discovery mac-ip vxlan
Total number of automatically discovered peers: 1
VSI name: vpna
Destination IP Source IP VXLAN ID Tunnel mode Tunnel name
6.6.6.6 1.1.1.9 100 VXLAN Tunnel1
# Display information about IPv4 peers discovered through MAC/IP advertisement routes for EVPN VPLS.
<Sysname> display evpn auto-discovery mac-ip mpls
Total number of automatically discovered peers: 1
VSI name: vpnb
Destination IP In/Out label Tunnel Mode
7.7.7.7 1420/1419 PW
# Display information about IPv4 peers discovered through MAC/IP advertisement routes for EVPN VPLS over SRv6.
<Sysname> display evpn auto-discovery mac-ip srv6
VSI name: vpnb
RD : 1:1 Tunnel mode : SRv6
Destination IP : 1::1
In SID : 100::10::0
Out SID : 200::20::0
Table 12 Command output
Field |
Description |
Tunnel mode |
Tunnel mode: · VXLAN. · PW. · SRv6. |
In/Out label |
Incoming and outgoing labels for the PW. If the labels are invalid, this field displays a hyphen (-). |
In SID |
Incoming SID. |
Out SID |
Outgoing SID. |
# Display information about peers discovered through MAC/IP advertisement routes and IP prefix advertisement routes.
<Sysname> display evpn auto-discovery macip-prefix
Destination IP Source IP L3VNI Tunnel mode Outgoing interface
1.1.1.1 3.3.3.3 200 VXLAN Vsi-interface3
2.2.2.2 3.3.3.3 200 VXLAN Vsi-interface3
# Display the total number of peers discovered through MAC/IP advertisement routes and IP prefix advertisement routes.
<Sysname> display evpn auto-discovery macip-prefix count
Total number of entries: 2
Table 13 Command output
Field |
Description |
Destination IP |
Tunnel destination IP address. |
Source IP |
Tunnel source IP address. |
L3VNI |
L3 VXLAN ID used for Layer 3 forwarding. |
Tunnel mode |
Tunnel mode: · VXLAN. · VXLAN-DCI. |
Outgoing interface |
VSI interface associated with the L3 VXLAN ID. |
display evpn es
Use display evpn es to display EVPN ES information.
Syntax
display evpn es { local [ count | [ vsi vsi-name | xconnect-group group-name ] [ esi esi-id ] [ verbose ] ] | remote [ vsi vsi-name | xconnect-group group-name ] [ esi esi-id ] [ nexthop next-hop ] [ verbose ] }
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
local: Specifies local ES information.
count: Displays the number of local ESs.
vsi vsi-name: Specifies a VSI by its name, a case-sensitive string of 1 to 31 characters. If you do not specify this option, the command displays ES information about all VSIs.
xconnect-group group-name: Specifies a cross-connect group by its name, a case-sensitive string of 1 to 31 characters. If you do not specify a cross-connect group, this command displays EVPN local or remote ES information about all cross-connect groups.
esi esi-id: Specifies an ES by its ESI in XXXX.XXXX.XXXX.XXXX.XXXX format. Each X represents a hexadecimal digit. The ESI must begin with 00 and cannot be all zeros. If you do not specify this option, the command displays information about all ESs.
verbose: Displays detailed ES information. If you do not specify this keyword, the command displays brief ES information.
remote: Specifies remote ES information.
nexthop next-hop: Specifies a next hop. If you do not specify this option, the command displays ES information received from all next hops.
Examples
# Display the number of local ESs.
<Sysname> display evpn es local count
Total number of ES entries: 1
# Display brief information about local ESs of VSI vpna for EVPN VPLS.
<Sysname> display evpn es local vsi vpna
Redundancy mode: A – All-active, S – Single-active
VSI name : vpna
ESI Tag ID DF address Mode State ESI label
0001.0002.0002.0002.0002 - 1.1.1.1 A Up 1000
0001.0002.0003.0004.0005 - 1.1.1.1 A Up 1001
0003.0003.0003.0003.0003 2 2.2.2.2 A Up 1002
# Display brief information about local ESs of VSI vpna for EVPN VPLS over SRv6.
<Sysname> display evpn es local vsi vpna
Redundancy mode: A – All-active, S – Single-active
VSI name : vpna
ESI : 0001.0001.0001.0001.0001
Tag ID : -
DF address : 1.1.1.1
Mode : A
State : Down
Argument : ::1
# Display brief information about local ESs of cross-connect group vpna for EVPN VPWS.
<Sysname> display evpn es local xconnect-group vpna
Redundancy mode: A – All-active, S – Single-active
Xconnect group name: vpna
ESI Tag ID DF address Mode State ESI label
0001.0002.0002.0002.0002 - 1.1.1.1 A Up -
0001.0002.0003.0004.0005 - 1.1.1.1 A Up -
0003.0003.0003.0003.0003 2 2.2.2.2 A Up -
# Display brief information about local ESs of cross-connect group vpna for EVPN VPLS over SRv6.
<Sysname> display evpn es local xconnect-group vpna
Redundancy mode: A – All-active, S – Single-active
Xconnect-group name : vpna
ESI : 0001.0001.0001.0001.0001
Tag ID : -
DF address : 1.1.1.1
Mode : A
State : Up
Argument : -
Table 14 Command output
Field |
Description |
Xconnect group name |
Cross-connect group name. |
Tag ID |
Ethernet tag ID. |
DF address |
Router ID of the VTEP or PE elected as the DF. |
Mode |
Redundancy mode of the ES: · A—All-active mode. · S—Single-active mode. |
State |
State of the ES: · Up. · Down. |
ESI label |
ESI label. For EVPN VPWS and EVPN VXLAN, this field is invalid and displays a hyphen (-). |
Argument |
Argument that identifies a leaf AC. E-tree isolates traffic among leaf ACs based on arguments in an EVPN VPLS over SRv6 network. This field displays a hyphen (-) if no argument exists. |
# Display detailed information about local ESs of all VSIs.
<Sysname> display evpn es local verbose
VSI name : v1
ESI : 0003.0003.0003.0003.0003
Interface : GigabitEthernet0/0/1
Redundancy mode : All-active
State : Up
AD-delay remaining time : 10
ACs :
Link ID Service instance ID Tag ID DF address ESI label
0 1 1 1.1.1.1 1001
1 3 3 3.3.3.3 1002
2 10 10 2.2.2.2 1003
VSI name : v2
ESI : 0004.0004.0004.0004.0004
Interface : -
Redundancy mode : All-active
State : Up
AD-delay remaining time : 10
UPWs :
Link ID Tag ID DF address ESI label
0 1 1.1.1.1 1004
VSI name : vpna
ESI : 0001.0002.0002.0002.0002
Interface : GigabitEthernet0/0/2
Redundancy mode : All-active
State : Up
AD-delay remaining time : 10
ACs :
Link ID Service instance ID Tag ID DF address ESI label
1 - - 1.1.1.1 -
VSI name : vpnb
ESI : 0001.0001.0001.0001.0001
Interface : GigabitEthernet0/0/3
Redundancy mode : All-active
State : Down
ACs :
Link ID : 0
Service instance ID : -
Tag ID : -
DF address : 1.1.1.1
Argument : ::1
Xconnect group name : vpna
Connection name : aa
ESI : 0003.0003.0003.0003.0003
AC : GE0/0/5 srv1
Redundancy mode : All-active
State : Up
Link ID : 0
Tag ID : 10
DF address : 1.1.1.1
Xconnect group name : vpnd
Connection name : dd
ESI : 0006.0006.0006.0006.0006
Redundancy mode : All-active
State : Up
UPW Link ID : 0
Tag ID : 10
DF address : 1.1.1.1
Table 15 Command output
Field |
Description |
Xconnect group name |
Cross-connect group name. |
Connection name |
Cross-connect name. |
AC |
|
Redundancy mode |
Redundancy mode of the ES: · A—All-active mode. · S—Single-active mode. |
State |
State of the ES: · Up. · Down. If the ES is not manually assigned an ESI, a hyphen (-) is displayed. |
AD-delay remaining time |
Remaining time of the advertisement delay timer for Ethernet auto-discovery routes, in seconds. |
ACs |
The VSI's ACs on the ES. |
UPWs |
The VSI's UPWs on the ES. |
Link ID |
The AC's link ID on the VSI. |
Tag ID |
Ethernet tag ID. |
DF address |
Router ID of the VTEP or PE elected as the DF. If the device is not the DF of an AC, a hyphen (-) is displayed. |
ESI label |
ESI label. For EVPN VPWS and EVPN VXLAN, this field is invalid and displays a hyphen (-). |
Argument |
Argument that identifies a leaf AC. E-tree isolates traffic among leaf ACs based on arguments in an EVPN VPLS over SRv6 network. This field displays a hyphen (-) if no argument exists. |
UPW link ID |
The UPW's link ID on the VSI. |
# Display information about remote ESs of all VSIs.
<Sysname> display evpn es remote
Control Flags: P - Primary, B - Backup, C - Control word
VSI name : vpna
ESI : 0001.0000.0000.0000.0001
Ethernet segment routes :
1.1.1.1
3.3.3.3
A-D per ES routes :
Peer IP Remote Redundancy mode
1.1.1.1 All-active
3.3.3.3 All-active
A-D per EVI routes :
Tag ID Peer IP
- 1.1.1.1
- 3.3.3.3
ESI : 0001.0002.0003.0004.0005
Ethernet segment routes :
1.1.1.1
A-D per ES routes :
Peer IP Remote Redundancy mode
1.1.1.1 All-active
A-D per EVI routes :
Tag ID Peer IP
- 1.1.1.1
Xconnect group name : a
ESI : 0001.0000.0000.0000.0001
Ethernet segment routes :
123.123.123.123
3.3.3.3
A-D per ES routes :
Peer IP Remote Redundancy mode
123.123.123.123 All-active
3.3.3.3 All-active
A-D per EVI routes :
Tag ID Peer IP Control Flags
2 3.3.3.3 P
4 123.123.123.123 PC
# Display detailed information about remote ESs.
<Sysname> display evpn es remote
Control Flags: P - Primary, B - Backup, C - Control word
VSI name : vpna
ESI : 0001.0001.0001.0001.0001
A-D per ES routes :
Peer IP : 2::2
Remote Redundancy mode: All-active
Argument : ::1
A-D per EVI routes :
Tag ID : 1
Peer IP : 2::2
Xconnect group name : vpna
ESI : 0001.0001.0001.0001.0001
Ethernet segment routes :
2::2
A-D per ES routes :
Peer IP : 2::2
Remote Redundancy mode: All-active
A-D per EVI routes :
Tag ID : 1
Control Flags : P
Peer IP : 2::2
# Display remote ES information received from next hop 3.3.3.3 for VSI vpna.
<Sysname> display evpn es remote vsi vpna nexthop 3.3.3.3
VSI name : vpna
ESI : 0001.0000.0000.0000.0001
Redundancy mode : All-active
Ethernet segment routes :
3.3.3.3
A-D per ES routes :
3.3.3.3
A-D per EVI routes :
Tag ID Peer IP
- 3.3.3.3
Table 16 Command output
Field |
Description |
Xconnect group name |
Cross-connect group name. |
Argument |
Argument that identifies a leaf AC. E-tree isolates traffic among leaf ACs based on arguments in an EVPN VPLS over SRv6 network. This field displays a hyphen (-) if no argument exists. |
Ethernet segment routes |
Ethernet segment routes for the ES. |
A-D per Ethernet segment routes |
A-D per Ethernet segment routes for the ES. |
A-D per EVI routes |
A-D per EVI routes for the ES. |
Tag ID |
Ethernet tag ID. |
Peer IP |
IP address of the remote peer. |
Remote Redundancy mode |
Redundancy mode of the remote ES: · All-active. · Single-active. |
Control Flags |
Layer 2 attributes control flags of the remote route: · P—Primary flag. · B—Backup flag. · C—Control word flag. |
display evpn instance
Use display evpn instance to display EVPN instance information.
Syntax
display evpn instance [ vsi vsi-name | xconnect-group group-name ] [ verbose ]
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
vsi vsi-name: Specifies a VSI by its name, a case-sensitive string of 1 to 31 characters.
xconnect-group group-name: Specifies a cross-connect group by its name, a case-sensitive string of 1 to 31 characters.
verbose: Displays detailed EVPN instance information. If you do not specify this keyword, the command displays brief EVPN instance information.
Usage guidelines
If you do not specify a VSI or cross-connect group, this command displays information about all EVPN instances.
Examples
# Display brief information about all EVPN instances.
<Sysname> display evpn instance
Total number of EVPN instances: 4
EVPN name EVPN index
aaa 0x1
abc 0x0
bbb 0x80000000
vpna 0x80000001
Table 17 Command output
Field |
Description |
EVPN name |
EVPN instance name. |
EVPN index |
EVPN instance index. |
# Display detailed information about all EVPN instances.
<Sysname> display evpn instance verbose
VSI Name: aaa
EVPN index : 0x2
Encapsulation : MPLS
Route distinguisher : 200:200
Export VPN targets : 200:200
Import VPN targets : 200:200
MAC advertisement : Enabled
ARP advertisement : Enabled
ARP-based MAC learning : Enabled
ND-based MAC learning : Enabled
MPLS label : 1151
IMET MPLS label : 1150
Tunnel policy : -
PW class : -
Control Word : Disabled
E-Tree : Disabled
PW type : VLAN
Sequencing : -
Flow label : -
Import routing policy : -
Export routing policy : -
VSI Name: bbb
EVPN index : 0x3
Encapsulation : VXLAN
Route distinguisher : 500:1
Export VPN targets : 500:1
Import VPN targets : 500:1
MAC advertisement : Enabled
ARP advertisement : Enabled
ARP-based MAC learning : Enabled
ND-based MAC learning : Enabled
VXLAN ID : -
VSI Name: ccc
EVPN index : 0x4
Encapsulation : SRv6
Route distinguisher : -
Export VPN targets : -
Import VPN targets : -
MAC advertisement : Enabled
ARP advertisement : Enabled
ARP-based MAC learning : Enabled
ND-based MAC learning : Enabled
Dt2u SID : -
Dt2ul SID : -
Dt2m SID : -
Dt2uLocatorName : abc
Dt2ulLocatorName : abc
Dt2mLocatorName : abc
E-Tree : Disabled
Best-Effort : Disabled
Traffic-Engineering : Disabled
Import routing policy : -
Export routing policy : -
Xconnect-group Name: bbb
EVPN index : 0x80000001
Encapsulation : SRv6
Route distinguisher : 1:1
Export VPN targets : 1:1
Import VPN targets : 1:1
Best-Effort : Enabled
Traffic-Engineering : Disabled
Import routing policy : -
Export routing policy : -
Xconnect-group Name: ccc
EVPN index : 0x80000002
Encapsulation : MPLS
Route distinguisher : 1:1
Export VPN targets : 1:1
Import VPN targets : 1:1
Import routing policy : -
Export routing policy : -
Table 18 Command output
Field |
Description |
Encapsulation |
EVPN encapsulation type: · VXLAN. · MPLS. · SRv6. |
MAC advertisement |
Status of MAC address advertisement: · Enabled. · Disabled. |
ARP advertisement |
Status of ARP advertisement: · Enabled. · Disabled. |
ARP-based MAC learning |
Whether EVPN learns MAC addresses from ARP information: · Enabled. · Disabled. |
ND-based MAC learning |
Whether EVPN learns MAC addresses from ND information: · Enabled. · Disabled. |
MPLS label |
MPLS label in MAC/IP advertisement routes. |
IMET MPLS label |
MPLS label in IMET routes. |
Tunnel policy |
Tunnel policy used by the EVPN instance. |
PW class |
PW class used by the EVPN instance. |
Control word |
Status of the control word feature: · Enabled. · Disabled. |
E-Tree |
Status of EVPN E-tree: · Enabled. · Disabled. |
PW type |
PW type: · Ethernet. · VLAN. |
Sequencing |
Sequencing on the PW. The value is Both. A hyphen (-) in this field indicates that sequencing is disabled on the PW. |
Flow label |
Flow label capability: · Both—Flow label sending and receiving capabilities. · Send—Flow label sending capability. · Recv—Flow label receiving capability. This field displays a hyphen (-) if the flow label feature is disabled. |
Dt2u SID |
SRv6 SID used for unicast forwarding in the EVPN VPLS over SRv6 network. The values in parentheses are the length of each segment in the SID, which are the locator length, dynamic opcode length, static opcode length, and argument length in sequence. The total length of those segments is 128. |
Dt2ul SID |
SRv6 SID used for unicast forwarding over the bypass tunnel at the multihomed EVPN VPLS over SRv6 site. The values in parentheses are the length of each segment in the SID, which are the locator length, dynamic opcode length, static opcode length, and argument length in sequence. The total length of those segments is 128. |
Dt2m SID |
SRv6 SID used for multicast forwarding in the EVPN VPLS over SRv6 network. The values in parentheses are the length of each segment in the SID, which are the locator length, dynamic opcode length, static opcode length, and argument length in sequence. The total length of those segments is 128. |
Dt2uLocatorName |
Locator name used for requesting the DT2U SID. If dynamic SID assignment is disabled, this field displays auto-sid-disable. |
Dt2ulLocatorName |
Locator name used for requesting the DT2UL SID. If dynamic SID assignment is disabled, this field displays auto-sid-disable. |
Dt2mLocatorName |
Locator name used for requesting the DT2M SID. If dynamic SID assignment is disabled, this field displays auto-sid-disable. |
Best-Effort |
Whether SID-route-recursion is enabled: · Enabled. · Disabled. |
Import routing policy |
Importing routing policy used by the EVPN instance. If the EVPN instance does not have an import routing policy, this field displays a hyphen (-). This field is available only when the encapsulation type is MPLS or SRv6. |
Export routing policy |
Exporting routing policy used by the EVPN instance. If the EVPN instance does not have an export routing policy, this field displays a hyphen (-). This field is available only when the encapsulation type is MPLS or SRv6. |
Related commands
evpn encapsulation
vsi
display evpn ipv6 auto-discovery
Use display evpn ipv6 auto-discovery to display information about IPv6 peers that are automatically discovered through BGP.
Syntax
display evpn ipv6 auto-discovery { { imet | mac-ip } [ srv6 | vxlan ] [ peer ipv6-address ] [ vsi vsi-name ] | macip-prefix [ nexthop next-hop ] [ count ] }
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
imet: Specifies IPv6 peers discovered through IMET routes.
mac-ip: Specifies IPv6 peers discovered through MAC/IP advertisement routes.
srv6: Specifies the EVPN VPLS over SRv6 network. For more information about EVPN VPLS over SRv6, see Segment Routing Configuration Guide.
vxlan: Specifies the EVPN VXLAN network.
peer ipv6-address: Specifies a peer by its IPv6 address. If you do not specify this option, the command displays information about all automatically discovered IPv6 peers.
vsi vsi-name: Specifies a VSI by its name, a case-sensitive string of 1 to 31 characters. If you do not specify this option, the command displays IPv6 peer information for all VSIs.
macip-prefix: Specifies IPv6 peers discovered through MAC/IP advertisement routes that carry L3 VXLAN IDs or IP prefix advertisement routes that carry L3 VXLAN IDs.
nexthop next-hop: Specifies a next hop. If you do not specify this option, the command displays IPv6 peer information for all next hops.
count: Displays the number of IPv6 peers. If you do not specify this keyword, the command displays detailed IPv6 peer information.
Examples
# Display information about IPv6 peers discovered through IMET routes for EVPN VXLAN.
<Sysname> display evpn ipv6 auto-discovery imet
Total number of automatically discovered peers: 2
VSI name: vpna
RD : 1:10
PE address : 11::8
Tunnel address : 11::8
Tunnel mode : VXLAN
VXLAN ID : 10
RD : 2:100
PE address : 12::8
Tunnel address : 12::8
Tunnel mode : VXLAN
VXLAN ID : 10
# Display information about IPv6 peers discovered through IMET routes for EVPN VPLS over SRv6.
<Sysname> display evpn ipv6 auto-discovery imet srv6
Total number of automatically discovered peers: 1
VSI name: vpnc
RD : 1:1 Tunnel mode : SRv6
PE_address : 3::3
In SID : 111::1
Out SID : 333::1
Table 19 Command output
Field |
Description |
PE address |
Identifier of the remote VTEP on the VSI. |
Tunnel address |
Tunnel destination IP address. |
Tunnel mode |
Tunnel mode: · VXLAN. · VXLAN-DCI. · SRv6. |
In SID |
Incoming SID of the SRv6 tunnel. |
Out SID |
Outgoing SID of the SRv6 tunnel. |
# Display information about IPv6 peers discovered through MAC/IP advertisement routes that do not carry L3 VXLAN IDs for EVPN VXLAN.
<Sysname> display evpn ipv6 auto-discovery mac-ip
Total number of automatically discovered peers: 1
VSI name: vpna
Destination IP : 6:6::6:8
Source IP : 1:1::1:7
VXLAN ID : 100
Tunnel mode : VXLAN
Tunnel name : Tunnel1
# Display information about IPv6 peers discovered through MAC/IP advertisement routes that do not carry L3 VXLAN IDs for EVPN VPLS over SRv6.
<Sysname> display evpn ipv6 auto-discovery mac-ip srv6
Total number of automatically discovered peers: 1
VSI name: vpnc
Destination IP : 1::1
Tunnel mode : SRv6
In SID : 100::10::0
Out SID : 200::20::0
Table 20 Command output
Field |
Description |
Destination IP |
Tunnel destination IP address. |
Source IP |
Tunnel source IP address. |
Tunnel mode |
Tunnel mode: · VXLAN. · SRv6. |
In SID |
Incoming SID of the SRv6 tunnel. |
Out SID |
Outgoing SID of the SRv6 tunnel. |
# Display information about IPv6 peers discovered through MAC/IP advertisement routes that carry L3 VXLAN IDs or IP prefix advertisement routes that carry L3 VXLAN IDs.
<Sysname> display evpn ipv6 auto-discovery macip-prefix
Destination IP : 6:6::6:8
Source IP : 1:1::1:7
L3VNI : 100
Tunnel mode : VXLAN
OutInterface : Vsi-interface3
# Display the total number of IPv6 peers discovered through MAC/IP advertisement routes that carry L3 VXLAN IDs or IP prefix advertisement routes that carry L3 VXLAN IDs.
<Sysname> display evpn ipv6 auto-discovery macip-prefix count
Total number of entries: 1
Table 21 Command output
Field |
Description |
Destination IP |
Tunnel destination IP address. |
Source IP |
Tunnel source IP address. |
L3VNI |
L3 VXLAN ID used for Layer 3 forwarding. |
Tunnel mode |
Tunnel mode: · VXLAN. · VXLAN-DCI. |
OutInterface |
VSI interface associated with the L3 VXLAN ID. |
display evpn ipv6 route mac
Use display evpn ipv6 route mac to display IPv6 EVPN MAC address entries.
Syntax
display evpn ipv6 route mac [ mpls | srv6 | vxlan ] [ local | remote ] [ vsi vsi-name ] [ count ]
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
mpls: Specifies the EVPN VPLS network.
srv6: Specifies the EVPN VPLS over SRv6 network. For more information about EVPN VPLS over SRv6, see Segment Routing Configuration Guide.
vxlan: Specifies the EVPN VXLAN network.
local: Specifies local MAC address entries.
remote: Specifies remote MAC address entries.
vsi vsi-name: Specifies a VSI by its name, a case-sensitive string of 1 to 31 characters. If you do not specify this option, the command displays MAC address entries for all VSIs.
count: Displays the number of MAC address entries. If you do not specify this keyword, the command displays detailed information about MAC address entries.
Usage guidelines
If you do not specify a network type, this command displays IPv6 EVPN MAC address entries for all network types. If you do not specify the local or remote keyword, this command displays both local and remote IPv6 EVPN MAC address entries.
Examples
# Display all IPv6 EVPN MAC address entries for EVPN VXLAN.
<Sysname> display evpn ipv6 route mac vxlan
Flags: D - Dynamic B - BGP L - Local active
G - Gateway S - Static M - Mapping I - Invalid
E - Multihoming ES sync F - Leaf
VSI name: vpna
MAC address : 622a-c56d-0402
Link ID/Name : 0x0
Flags : DL
Encap : VXLAN
Next hop : -
Color : -
# Display all IPv6 EVPN MAC address entries for EVPN VPLS over SRv6.
<Sysname> display evpn route mac srv6
Flags: D - Dynamic B - BGP L - Local active
G - Gateway S - Static M - Mapping I - Invalid
E - Multihoming ES sync F - Leaf
VSI name: vpnb
MAC address : 68ba-0573-0606
Link ID/Name : 0x0
Flags : DL
Encap : SRv6
Next hop : -
Color : -
MAC address : 68ba-0b4f-0706
Link ID/Name : 0x9000000
Flags : B
Encap : SRv6
Next hop : 2::2
Color : -
# Display the total number of IPv6 EVPN MAC address entries.
<Sysname> display evpn ipv6 route mac count
Total number of entries: 3
Table 22 Command output
Field |
Description |
EVPN instance |
EVPN instance name. This field displays a hyphen (-) for a VSI EVPN instance. |
Link ID/Name |
This field displays an AC's or SRv6 tunnel's link ID on the VSI or a VXLAN tunnel interface name. |
Flags |
MAC address entry type: · D—The entry is dynamically learned. · B—The entry is learned from BGP EVPN routes. · L—The local entry is active. If this flag is not set and the B flag is set, the entry learned from BGP EVPN routes is active. · G—The entry for the gateway is active. · S—The static entry is active. · M—The entry from a remote VXLAN mapped to a local VXLAN is active. · I—The entry is invalid. Possible reasons: ¡ The VSI has been administratively shut down by using the shutdown command. ¡ The outgoing tunnel interface does not exist. · E—The entry is synchronized from another edge device at the multihomed local site. · F—The entry is from a leaf AC of EVPN E-tree. |
Encap |
Packet encapsulation type: · MPLS. · VXLAN. · SRv6. |
Nexthop |
IP address of the remote VTEP or PE. If the MAC address entry is a local entry, a hyphen (-) is displayed. |
Color |
Color attribute of the MAC address entry. If the MAC address entry does not have this attribute, a hyphen (-) is displayed. This field is available only when the encapsulation type is SRv6. |
display evpn route arp
Use display evpn route arp to display EVPN ARP entries.
Syntax
display evpn route arp [ local | remote ] [ public-instance | vpn-instance vpn-instance-name ] [ ip ip-address ] [ count ]
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
local: Specifies local ARP entries.
remote: Specifies remote ARP entries.
public-instance: Specifies the public instance.
vpn-instance vpn-instance-name: Specifies an MPLS L3VPN instance by its name, a case-sensitive string of 1 to 31 characters.
ip ip-address: Specifies an IPv4 address in dotted decimal notation. If you do not specify this option, the command displays all ARP entries that match the criteria you specify.
count: Displays the number of ARP entries. If you do not specify this keyword, the command displays detailed information about ARP entries.
Usage guidelines
If you do not specify the local or remote keyword, this command displays both local and remote EVPN ARP entries.
If you do not specify the public-instance keyword or the vpn-instance vpn-instance-name option, this command displays EVPN ARP entries for the public instance and all VPN instances.
Examples
# Display all EVPN ARP entries.
<Sysname> display evpn route arp
Flags: D - Dynamic B - BGP L - Local active
G - Gateway S - Static M - Mapping
VPN instance: vpn1 Interface: Vsi-interface1
IP address MAC address Router MAC VSI index Flags
10.1.1.1 0003-0003-0003 a0ce-7e40-0400 0 GL
10.1.1.11 0001-0001-0001 a0ce-7e40-0400 0 DL
10.1.1.12 0001-0001-0011 a0ce-7e41-0401 0 B
10.1.1.13 0001-0001-0021 a0ce-7e42-0402 0 B
Public instance Interface: Vsi-interface2
IP address MAC address Router MAC VSI index Flags
11.1.1.1 0033-0033-0033 a0ce-7e40-0400 0 GL
11.1.1.11 0011-0011-0011 a0ce-7e40-0400 0 DL
# Display the total number of EVPN ARP entries.
<Sysname> display evpn route arp count
Total number of entries: 6
Table 23 Command output
Field |
Description |
Interface |
VSI interface. |
Router MAC |
Router MAC address of the device. A hyphen (-) is displayed for an SRv6 network with distributed gateways. |
Flags |
ARP entry type: · D—The entry is dynamically learned. · B—The entry is learned from BGP EVPN routes. · L—The local entry is active. If this flag is not set and the B flag is set, the entry learned from BGP EVPN routes is active. · G—The entry for the gateway is active. · S—The static entry is active. · M—The entry from a remote VXLAN mapped to a local VXLAN is active. |
display evpn route arp suppression
Use display evpn route arp suppression to display EVPN ARP flood suppression entries.
Syntax
display evpn route arp suppression [ mpls | srv6 | vxlan ] [ local | remote ] [ vsi vsi-name ] [ ip ip-address ] [ count ]
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
mpls: Specifies the EVPN VPLS network.
srv6: Specifies the EVPN VPLS over SRv6 network. For more information about EVPN VPLS over SRv6, see Segment Routing Configuration Guide.
vxlan: Specifies the EVPN VXLAN network.
local: Specifies local ARP flood suppression entries.
remote: Specifies remote ARP flood suppression entries.
vsi vsi-name: Specifies a VSI by its name, a case-sensitive string of 1 to 31 characters. If you do not specify this option, the command displays ARP flood suppression entries for all VSIs.
ip ip-address: Specifies an IPv4 address in dotted decimal notation. If you do not specify this option, the command displays all ARP flood suppression entries that match the criteria you specify.
count: Displays the number of ARP flood suppression entries. If you do not specify this keyword, the command displays detailed information about ARP flood suppression entries.
Usage guidelines
If you do not specify a network type, this command displays EVPN ARP flood suppression entries for all network types. If you do not specify the local or remote keyword, this command displays both local and remote EVPN ARP flood suppression entries.
Examples
# Display all EVPN ARP flood suppression entries.
<Sysname> display evpn route arp suppression
Flags: D - Dynamic B - BGP L - Local active
G - Gateway S - Static M - Mapping
VSI name: vpna
IP address MAC address Flags
10.1.1.12 0002-0002-0002 B
# Display the total number of ARP flood suppression entries.
<Sysname> display evpn route arp suppression count
Total number of entries: 1
Table 24 Command output
Field |
Description |
Flags |
ARP flood suppression entry type: · D—The entry is dynamically learned. · B—The entry is learned from BGP EVPN routes. · L—The local entry is active. If this flag is not set and the B flag is set, the entry learned from BGP EVPN routes is active. · G—The entry for the gateway is active. · S—The static entry is active. · M—The entry from a remote VXLAN mapped to a local VXLAN is active. |
display evpn route mac
Use display evpn route mac to display EVPN MAC address entries.
Syntax
display evpn route mac [ mpls | srv6 | vxlan ] [ local | remote ] [ vsi vsi-name ] [ mac-address mac-address ] [ count ]
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
mpls: Specifies the EVPN VPLS network.
srv6: Specifies the EVPN VPLS over SRv6 network. For more information about EVPN VPLS over SRv6, see Segment Routing Configuration Guide.
vxlan: Specifies the EVPN VXLAN network.
local: Specifies local MAC address entries.
remote: Specifies remote MAC address entries.
vsi vsi-name: Specifies a VSI by its name, a case-sensitive string of 1 to 31 characters. If you do not specify this option, the command displays MAC address entries for all VSIs.
mac-address mac-address: Specifies a MAC address in the format of H-H-H. You can omit the consecutive zeros at the beginning of each segment. For example, you can enter f-e2-1 for 000f-00e2-0001. If you do not specify a MAC address, this command displays all MAC address entries that match the criteria you specify.
count: Displays the number of MAC address entries. If you do not specify this keyword, the command displays detailed information about MAC address entries.
Usage guidelines
If you do not specify a network type, this command displays EVPN MAC address entries for all network types. If you do not specify the local or remote keyword, this command displays both local and remote EVPN MAC address entries.
Examples
# Display all EVPN MAC address entries for EVPN VXLAN.
<Sysname> display evpn route mac
Flags: D - Dynamic B - BGP L - Local active
G - Gateway S - Static M - Mapping I - Invalid
E - Multihoming ES sync F - Leaf
VSI name: bbb
EVPN instance: -
MAC address Link ID/Name Flags Encap Next hop
0000-0000-000a 1 DL VXLAN -
0000-0000-0009 Tunnel1 B VXLAN 2.2.2.2
0001-2000-4000 - BI VXLAN 3.3.3.3
# Display all EVPN MAC address entries for EVPN VPLS over SRv6.
<Sysname> display evpn route mac srv6
Flags: D - Dynamic B - BGP L - Local active
G - Gateway S - Static M - Mapping I - Invalid
E - Multihoming ES sync F - Leaf
VSI name: vpnb
MAC address : 68ba-0573-0606
Link ID/Name : 0x0
Flags : DL
Encap : SRv6
Next hop : -
Type : TE
Color : -
MAC address : 68ba-0b4f-0706
Link ID/Name : 0x9000000
Flags : B
Encap : SRv6
Next hop : 2::2
Type : TE
Color : -
# Display the total number of EVPN MAC address entries.
<Sysname> display evpn route mac count
Total number of entries: 2
Table 25 Command output
Field |
Description |
Link ID/Name |
For a local MAC address, this field displays the AC's link ID on the VSI. For a remote MAC address, this field displays the tunnel interface name. |
Flags |
MAC address entry type: · D—The entry is dynamically learned. · B—The entry is learned from BGP EVPN routes. · L—The local entry is active. If this flag is not set and the B flag is set, the entry learned from BGP EVPN routes is active. · G—The entry for the gateway is active. · S—The static entry is active. · M—The entry from a remote VXLAN mapped to a local VXLAN is active. · I—The entry is invalid. Reasons: ¡ The VSI has been administratively shut down by using the shutdown command. ¡ The outgoing tunnel interface does not exist. · E—The entry is synchronized between devices at a multihomed site. · F—The entry is from a leaf AC of EVPN E-tree. |
Encap |
Packet encapsulation type: · MPLS. · VXLAN. · SRv6. |
Next hop |
IP address of the remote VTEP. If the MAC address entry is a local entry, a hyphen (-) is displayed. |
Type |
Outgoing interface type: · BE—SRv6 best-effort tunnel. · TE—SRv6 TE policy tunnel. |
Color |
Color attribute of the MAC address entry. If the MAC address entry does not have this attribute, a hyphen (-) is displayed. This field is available only when the encapsulation type is SRv6. |
display evpn route nd
Use display evpn route nd to display EVPN ND entries.
Syntax
display evpn route nd [ local | remote ] [ public-instance | vpn-instance vpn-instance-name ] [ ipv6 ipv6-address ] [ count ]
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
local: Specifies local ND entries.
remote: Specifies remote ND entries.
public-instance: Specifies the public instance.
vpn-instance vpn-instance-name: Specifies an MPLS L3VPN instance by its name, a case-sensitive string of 1 to 31 characters.
ipv6 ipv6-address: Specifies an IPv6 address. If you do not specify this option, the command displays all ND entries that match the criteria you specify.
count: Displays the number of ND entries. If you do not specify this keyword, the command displays detailed information about ND entries.
Usage guidelines
If you do not specify the local or remote keyword, this command displays both local and remote EVPN ND entries.
If you do not specify the public-instance keyword or the vpn-instance vpn-instance-name option, this command displays EVPN ND entries for the public instance and all VPN instances.
Examples
# Display all EVPN ND entries.
<Sysname> display evpn route nd
Flags: D - Dynamic B - BGP L - Local active
G - Gateway S - Static M - Mapping I - Invalid
VPN instance: vpn1 Interface: Vsi-interface1
IPv6 address : AD80:0300:1000:0050:0200:0300:0100:0012
MAC address : 0001-0001-0001 Router MAC : a0ce-7e40-0400
VSI index : 0 Flags : GL
IPv6 address : AD10:0300:1000:0020:0200:0300:0100:0022
MAC address : 0001-0001-0002 Router MAC : a0ce-7e40-0411
VSI index : 0 Flags : GL
Public instance Interface: Vsi-interface1
IPv6 address : BC80:0300:1000:0050:0200:0300:0100:0033
MAC address : 0002-0002-0001 Router MAC : a0ce-7e40-0422
VSI index : 0 Flags : GL
IPv6 address : BC10:0300:1000:0020:0200:0300:0100:0034
MAC address : 0002-0002-0002 Router MAC : a0ce-7e40-0433
VSI index : 0 Flags : GL
# Display the total number of EVPN ND entries.
<Sysname>display evpn route nd count
Total number of entries: 2
Table 26 Command output
Field |
Description |
Interface |
VSI interface. |
Flags |
ND entry type: · D—The entry is dynamically learned. · B—The entry is learned from BGP EVPN routes. · L—The local entry is active. If this flag is not set and the B flag is set, the entry learned from BGP EVPN routes is active. · G—The entry for the gateway is active. · S—The static entry is active. · M—The entry from a remote VXLAN mapped to a local VXLAN is active. · I—The entry is invalid. Reasons: ¡ The VSI has been administratively shut down by using the shutdown command. ¡ The outgoing tunnel interface does not exist. |
display evpn route nd suppression
Use display evpn route nd suppression to display EVPN ND flood suppression entries.
Syntax
display evpn route nd suppression [ local | remote ] [ vsi vsi-name ] [ ipv6 ipv6-address ] [ count ]
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
local: Specifies local ND flood suppression entries.
remote: Specifies remote ND flood suppression entries.
vsi vsi-name: Specifies a VSI by its name, a case-sensitive string of 1 to 31 characters. If you do not specify this option, the command displays ND flood suppression entries for all VSIs.
ipv6 ipv6-address: Specifies an IPv6 address. If you do not specify this option, the command displays all ND flood suppression entries that match the criteria you specify.
count: Displays the number of ND flood suppression entries. If you do not specify this keyword, the command displays detailed information about ND flood suppression entries.
Usage guidelines
If you do not specify the local or remote keyword, this command displays both local and remote EVPN ND flood suppression entries.
Examples
# Display all EVPN ND flood suppression entries.
<Sysname> display evpn route nd suppression
Flags: D - Dynamic B - BGP L - Local active
G - Gateway S - Static M - Mapping I - Invalid
VSI name: vpna
IPv6 address MAC address Flags
11::8 72cb-ce9b-0a06 DL
11::9 0001-0001-0001 B
# Display the total number of ND flood suppression entries.
<Sysname> display evpn route nd suppression count
Total number of entries: 2
Table 27 Command output
Field |
Description |
Flags |
ARP flood suppression entry type: · D—The entry is dynamically learned. · B—The entry is learned from BGP EVPN routes. · L—The local entry is active. If this flag is not set and the B flag is set, the entry learned from BGP EVPN routes is active. · G—The entry for the gateway is active. · S—The static entry is active. · M—The entry from a remote VXLAN mapped to a local VXLAN is active. · I—The entry is invalid. Possible reasons: ¡ The VSI has been administratively shut down by using the shutdown command. ¡ The outgoing tunnel interface does not exist. |
display evpn route xconnect-group
Use display evpn route xconnect-group to display EVPN information about cross-connects.
Syntax
display evpn route xconnect-group [ name group-name [ connection connection-name ] ] [ count ]
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
name group-name: Specifies a cross-connect group by its name, a case-sensitive string of 1 to 31 characters. If you do not specify a cross-connect group, this command displays EVPN information about all cross-connect groups.
connection connection-name: Specifies a cross-connect by its name, a case-sensitive string of 1 to 20 characters excluding hyphens (-). If you do not specify a cross-connect, this command displays EVPN information about all cross-connects in the specified cross-connect group.
count: Displays the number of EVPN cross-connects. If you do not specify this keyword, the command displays detailed EVPN information.
Usage guidelines
If you do not specify any parameters, this command displays detailed EVPN information about all cross-connects.
Examples
# Display detailed EVPN information about all cross-connects.
<Sysname> display evpn route xconnect-group
Ctrl Flags: P - Primary, B - Backup, C - Control word
Xconnect group name: aa
Connection name: aaa
ESI : 0001.0002.0002.0002.0002
Local service ID : 16777215
Remote service ID : 16777214
Control word : Enabled
In label : 502
Local MTU : 1500
AC state : Up
PW type : VLAN
Nexthop ESI Out label Flags MTU State
192.123.123.123 0001.0002.0002.0002.0001 1299 PC 1500 Up
192.1.1.1 0001.0002.0002.0002.0001 1026 B 1500 Down
Connection name: aab
ESI : 0000.0000.0000.0000.0000
Local service ID : 1
Remote service ID : 2
Control word : Disabled
In label : 323
Local MTU : 1500
AC state : Up
PW type : VLAN
Nexthop ESI Out label Flags MTU State
192.1.1.1 0002.0002.0002.0002.0001 1234 P 1500 Up
192.2.1.2 0002.0002.0002.0002.0001 603 P 1500 Up
Connection name: aac
ESI : 0000.0000.0000.0000.0000
Local service ID : 3
Remote service ID : 4
Control word : Enabled
In label : -
Local MTU : 1500
AC state : Up
PW type : Ethernet
Nexthop ESI Out label Flags MTU State
192.1.1.3 0000.0000.0000.0000.0000 555 P 1500 Idle
Xconnect group name: vpna
Connection name: pw1
Encapsulation : SRv6
ESI : 0000.0000.0000.0000.0000
Local service ID : 1
Remote service ID : 2
In SID[DX2] : 100::1
In SID[DX2L] : -
Local MTU : 1500
AC State : Up
SRv6 Tunnel:
Next Hop : 2::2
ESI : 0000.0000.0000.0000.0000
Out SID : 200::1
Flags : P
MTU : 1500
State : Up
# Display the total number of EVPN cross-connects.
<Sysname> display evpn route xconnect-group count
Total number of entries: 2
Table 28 Command output
Field |
Description |
Xconnect group name |
Cross-connect group name. |
Connection name |
Cross-connect name. |
Encapsulation |
EVPN encapsulation type: · VXLAN. · MPLS. · SRv6. |
In label |
PW incoming label. |
Local MTU |
Local MTU in bytes. |
AC state |
AC state: · Up. · Down. This field displays a hyphen (-) if no AC is configured. |
PW type |
PW data encapsulation type: · Ethernet. · VLAN. |
Nexthop |
Remote PE address. |
Out label |
PW outgoing label. |
Flags |
PW attribute flags: · P—The received route has the primary flag. A primary PW needs to be set up. · B—The received route has the backup flag. A backup PW needs to be set up. · C—The received route has the control word flag, which indicates that control word is enabled on the peer. For the EVPN PWs to come up, you must enable control word on the local device. |
MTU |
MTU in the received route, in bytes. |
State |
EVPN PW state: · Up. · Down. · Idle—The incoming or outgoing label is not available. |
In SID[DX2] |
Incoming End.DX2 SID. |
In SID[DX2L] |
Incoming End.DX2L SID. |
Out SID |
Outgoing SID. |
display evpn routing-table
Use display evpn routing-table to display EVPN routing table information.
Syntax
display evpn routing-table [ ipv6 ] { public-instance | vpn-instance vpn-instance-name } [ count ]
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
ipv6: Specifies IPv6 information. If you do not specify this keyword, the command displays IPv4 information.
public-instance: Specifies the public instance.
vpn-instance vpn-instance-name: Specifies an MPLS L3VPN instance by its name, a case-sensitive string of 1 to 31 characters.
count: Displays the number of entries in the routing table. If you do not specify this keyword, the command displays detailed information about the routing table.
Examples
# Display the EVPN IPv4 routing table for VPN instance vpn1 of an EVPN network with distributed gateways.
<Sysname> display evpn routing-table vpn-instance vpn1
VPN instance name: vpn1 Local L3VNI: 7
IP address Nexthop Outgoing interface NibID
10.1.1.11 1.1.1.1 Vsi-interface3 0x18000000
10.1.1.12 2.2.2.2 Vsi-interface3 0x18000001
# Display the EVPN IPv4 routing table for VPN instance vpnb of an SRv6 network with distributed gateways.
<Sysname> display evpn routing-table vpn-instance vpnb
Flags: E - with valid ESI A – A-D ready L - Local ES exists
VPN instance: vpnb
Local SID : BC10:0300:1000:0020:0200:0300:0100:0034
IP address : 10.0.0.2
Nexthop : BC10:0300:1000:0020:0200:0300:0100:0035
NibID : 0x18000000
Flags : EA
Remote SID : BC10:0300:1000:0020:0200:0300:0100:0034
# Display the EVPN IPv4 routing table for the public instance of an EVPN network with distributed gateways.
<Sysname> display evpn routing-table public-instance
Public instance Local L3VNI: 3900
IP address Nexthop Outgoing interface NibID
10.1.1.11 1.1.1.1 Vsi-interface3 0x18000000
10.1.1.12 2.2.2.2 Vsi-interface3 0x18000001
# Display the number of EVPN route entries in the IPv4 routing table for VPN instance vpn1.
<Sysname> display evpn routing-table vpn-instance vpn1 count
Total number of entries: 2
# Display the EVPN IPv6 routing table for VPN instance vpna of an EVPN network with distributed gateways.
<Sysname> display evpn routing-table ipv6 vpn-instance vpna
Flags: E - with valid ESI A – A-D ready L - Local ES exists
VPN instance: vpna Local L3VNI: 7
IPv6 address : BC10:0300:1000:0020:0200:0300:0100:0034
Outgoing interface : Vsi-interface3
Next hop : 1.1.1.1
NibID : 0x18000000
Flags : E
IPv6 address : BC10:0300:1000:0020:0200:0300:0100:0035
Outgoing interface : Vsi-interface3
Next hop : 2.2.2.2
NibID : 0x18000001
Flags : E
Table 29 Command output
Field |
Description |
Local L3VNI |
L3 VXLAN ID associated with the VPN instance or the public instance. |
NibID |
Next hop ID. |
Local SID |
SID of the local SRv6 distributed gateway. |
Remote SID |
SID of a remote SRv6 distributed gateway. |
Flags |
Flags of the route: · E—The route carries a valid ESI. · A—An Ethernet auto-discovery route has been received. The ECMP routes to the next hop are ready to be issued. · L—A local active ESI exists. The remote route is not issued. |
display l2vpn forwarding evpn
Use display l2vpn forwarding evpn to display forwarding information of EVPN VPLS/VPWS and EVPN VPLS/VPWS over SRv6.
Syntax
display l2vpn forwarding evpn [ vsi [ name vsi-name ] [ verbose ] ] slot slot-number
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
vsi: Specifies VSI forwarding information. If you do not specify this keyword, the command displays both VSI and cross-connect forwarding information about EVPN.
name vsi-name: Specifies a VSI by its name, a case-sensitive string of 1 to 31 characters. If you do not specify this option, the command displays forwarding information about all VSIs.
verbose: Displays detailed forwarding information. If you do not specify this keyword, the command displays brief forwarding information.
slot slot-number: Specifies a card by its slot number.
Examples
# Display brief forwarding information about all VSIs of EVPN VPLS on slot 1.
<Sysname> display l2vpn forwarding evpn vsi slot 1
Total number of VSIs: 2
VSI name VSI index
vpls1 0
# Display detailed forwarding information about all VSIs of EVPN VPLS on slot 1.
<Sysname> display l2vpn forwarding evpn vsi verbose slot 1
VSI name: vpls1
VSI index : 0
Encapsulation : MPLS
MPLS label : 1150
IMET MPLS label : 1149
Control word : enabled
PW type : Ethernet
Sequencing : Both
Flow label : Both
Table 30 Command output
Field |
Description |
Encapsulation |
EVPN encapsulation type: · MPLS. · SRv6. |
MPLS label |
MPLS label in MAC/IP advertisement routes. |
IMET MPLS label |
MPLS label in IMET routes. |
Control word |
Status of the control word feature: · enabled. · disabled. |
PW type |
PW type: · Ethernet. · VLAN. |
Sequencing |
Sequencing on the PW. The value is Both. A hyphen (-) in this field indicates that sequencing is disabled on the PW. |
Flow label |
Flow label capability: · Both—Flow label sending and receiving capabilities. · Send—Flow label sending capability. · Recv—Flow label receiving capability. This field displays a hyphen (-) if the flow label feature is disabled. |
Dt2u SID |
SRv6 SID used for unicast forwarding. |
Dt2ul SID |
SRv6 SID used for unicast forwarding over the bypass tunnel at the multihomed site. |
Dt2m SID |
SRv6 SID used for multicast forwarding. |
Related commands
evpn encapsulation
vsi
display l2vpn forwarding evpn split-horizon
Use display l2vpn forwarding evpn split-horizon to display site-facing interfaces excluded from traffic forwarding by split horizon.
Syntax
display l2vpn forwarding evpn split-horizon { ac interface interface-type interface-number | tunnel tunnel-number } slot slot-number
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
ac interface interface-type interface-number: Specifies a Layer 3 interface by its type and number. These parameters apply to EVPN VPLS.
tunnel tunnel-number: Specifies a VXLAN tunnel interface number. The value range for the tunnel-number argument is 0 to 10239. If you do not specify this option, the command displays all site-facing interfaces excluded from traffic forwarding by split horizon. This option applies to EVPN VXLAN.
slot slot-number: Specifies a card by its slot number.
Examples
# Display site-facing interfaces excluded from traffic forwarding for Tunnel 0.
<Sysname> display l2vpn forwarding evpn split-horizon tunnel 0
Tunnel name: 0
Total number of filtered interfaces: 2
Filtered interfaces:
GE0/0/1
GE0/0/2
# For EVPN VPLS, display site-facing interfaces excluded from traffic forwarding for AC GigabitEthernet 0/0/1.
<Sysname> display l2vpn forwarding evpn split-horizon ac interface gigabitethernet 0/0/1
Interface name : GigabitEthernet0/0/1
AC link ID : 0
Service instance ID : 100
PW count : 2
VSI name PW link ID ESI label
vpna 8 775128
vpna 9 775128
# For EVPN VPLS over SRv6, display site-facing interfaces excluded from traffic forwarding for AC GigabitEthernet 0/0/1.
<Sysname> display l2vpn forwarding evpn split-horizon ac interface gigabitethernet 0/0/1
Interface name : GigabitEthernet0/0/1
AC link ID : 0
Service instance ID : 100
SRv6 tunnel count : 2
VSI name SRv6 link ID Argument
vpna 0x8 ::1
vpna 0x9 ::1
Table 31 Command output
Field |
Description |
Tunnel name |
VXLAN tunnel interface name. |
Argument |
Argument that identifies a leaf AC. E-Tree isolates traffic among leaf ACs based on arguments in an EVPN VPLS over SRv6 network. This field displays a hyphen (-) if no argument exists. |
Filtered interfaces |
Site-facing interfaces that do not forward the flood traffic received from the VXLAN tunnel. |
esi
Use esi to assign an ESI to an interface or UPW.
Use undo esi to restore the default.
Syntax
esi esi-id
undo esi
Default
No ESI is assigned to an interface or UPW.
Views
Interface view
Predefined user roles
network-admin
Parameters
esi-id: Specifies an ES by its ESI in XXXX.XXXX.XXXX.XXXX.XXXX format. Each X represents a hexadecimal digit. The ESI must begin with 00 and cannot be all zeros.
Usage guidelines
An ESI uniquely identifies an ES. The links on interfaces or UPWs with the same ESI belong to the same ES. Traffic of the ES can be distributed among the links for load sharing.
You can assign ESIs to a main interface and its subinterfaces.
· If you assign an ESI to a subinterface, the subinterface-specific ESI and redundancy mode take precedence over those configured on the main interface.
· If you do not assign an ESI to a subinterface, it inherits the ESI and redundancy mode (if configured) of the main interface. In this scenario, the redundancy mode configured on the subinterface does not take effect.
To modify the ESI of an interface or UPW, first use the undo esi command to delete the original ESI.
Examples
# Assign ESI 0000.0001.0002.0003.0004 to GigabitEthernet 0/0/1.
<Sysname> system-view
[Sysname] interface gigabitethernet 0/0/1
[Sysname-GigabitEthernet0/0/1] esi 0000.0001.0002.0003.0004
evpn encapsulation
Use evpn encapsulation to create an EVPN instance and enter its view, or enter the view of an existing EVPN instance.
Use undo evpn encapsulation to restore the default.
Syntax
In VSI view:
evpn encapsulation vxlan
undo evpn encapsulation
In cross-connect group view:
evpn encapsulation mpls
undo evpn encapsulation
Default
No EVPN instance exists.
Views
VSI view
Cross-connect group view
Predefined user roles
network-admin
Parameters
mpls: Specifies MPLS encapsulation.
vxlan: Specifies VXLAN encapsulation.
Usage guidelines
Before you can configure EVPN settings, you must create an EVPN instance.
Examples
# Create a VSI EVPN instance and enter its view.
<Sysname> system-view
[Sysname] vsi aaa
[Sysname-vsi-aaa] evpn encapsulation vxlan
[Sysname-vsi-aaa-evpn-vxlan]
evpn df-election algorithm (interface view)
Use evpn df-election algorithm to configure the DF election algorithm on an interface.
Use undo evpn df-election algorithm to restore the default.
Syntax
evpn df-election algorithm algorithm
undo evpn df-election algorithm
Default
The DF election algorithm specified in system view takes effect.
Views
Interface view
Predefined user roles
network-admin
Parameters
Algorithm: Specifies a DF election algorithm. The value of this argument can only be preference, which represents the preference-based algorithm.
Usage guidelines
At a multihomed EVPN network site, you can modify the DF election algorithm with this command to control the DF election result.
You can configure the DF election algorithm in system view and in interface view. The global DF election algorithm takes effect on all ESs, and the interface-specific DF election algorithm takes effect only on the ESs on an interface. The interface-specific DF election algorithm takes precedence over the global DF election algorithm.
Examples
# Configure GigabitEthernet 0/0/1 to use the preference-based algorithm for DF election.
<Sysname> system-view
[Sysname] interface gigabitethernet 0/0/1
[Sysname-GigabitEthernet0/0/1] evpn df-election algorithm preference
Related commands
evpn df-election algorithm (system view)
evpn df-election preference
evpn df-election algorithm (system view)
Use evpn df-election algorithm to configure the DF election algorithm globally.
Use undo evpn df-election algorithm to restore the default.
Syntax
evpn df-election algorithm algorithm
undo evpn df-election algorithm
Default
The VLAN tag-based algorithm is used for DF election.
Views
System view
Predefined user roles
network-admin
Parameters
Algorithm: Specifies a DF election algorithm. The value of this argument can only be preference, which represents the preference-based algorithm.
Usage guidelines
At a multihomed EVPN network site, you can modify the DF election algorithm with this command to control the DF election result.
You can configure the DF election algorithm in system view and in interface view. The global DF election algorithm takes effect on all ESs, and the interface-specific DF election algorithm takes effect only on the ESs on an interface. The interface-specific DF election algorithm takes precedence over the global DF election algorithm.
Examples
# Configure the global DF election algorithm as the preference-based algorithm.
<Sysname> system-view
[Sysname] evpn df-election algorithm preference
Related commands
evpn df-election algorithm (interface view)
evpn df-election preference
evpn df-election preference
Use evpn df-election preference to set the DF election preference.
Use undo evpn df-election preference to restore the default.
Syntax
evpn df-election preference preference
undo evpn df-election preference
Default
The DF election preference is 32767.
Views
Interface view
Predefined user roles
network-admin
Parameters
Preference: Sets the DF election preference in the range of 0 to 65535. The larger the value, the higher the preference.
Usage guidelines
Use this command to set the preference used in preference-based DF election. The device with higher preference will be elected as the DF.
This command takes effect after the evpn df-election algorithm preference command is executed in interface view or system view.
Examples
# Set the DF election preference to 100.
<Sysname> system-view
[Sysname] interface gigabitethernet 0/0/1
[Sysname-GigabitEthernet0/0/1] evpn df-election preference 100
Related commands
evpn df-election algorithm (interface view)
evpn df-election algorithm (system view)
evpn df-election preference non-revertive
Use evpn df-election preference non-revertive to enable non-revertive mode for preference-based DF election.
Use undo evpn df-election preference non-revertive to disable non-revertive mode for preference-based DF election.
Syntax
evpn df-election preference non-revertive
undo evpn df-election preference non-revertive
Default
Non-revertive mode is disabled for preference-based DF election.
Views
Interface view
Predefined user roles
network-admin
Usage guidelines
Preference-based DF election selects the device with the highest preference as the DF. The BDF takes over the DF role if one of the following events occurs:
· The DF fails.
· The site-facing link on the DF fails.
· The DF election preference of the BDF is set to be higher than that of the DF.
When the original DF or its site-facing link recovers, or its preference is set to be higher than that of the new DF, the original DF will take over the DF role. To avoid undesired traffic loss, you can disable reversion to the original DF by enabling non-revertive mode for preference-based DF election.
This command takes effect after the evpn df-election algorithm preference command is executed in interface view or system view.
Examples
# Enable non-revertive mode for preference-based DF election.
<Sysname> system-view
[Sysname] interface gigabitethernet 0/0/1
[Sysname-GigabitEthernet0/0/1] evpn df-election preference non-revertive
Related commands
evpn df-election algorithm (interface view)
evpn df-election algorithm (system view)
evpn frr local (cross-connect group EVPN instance view)
Use evpn frr local enable to enable local fast reroute (FRR) on an EVPN instance.
Use evpn frr local disable to disable local FRR on an EVPN instance and delete the existing bypass PW.
undo evpn frr local to restore the default.
Syntax
evpn frr local { disable | enable }
undo evpn frr local
Default
An EVPN instance uses the global local FRR configuration of EVPN VPWS.
Views
Cross-connect group EVPN instance view
Predefined user roles
network-admin
Usage guidelines
Local FRR enables two PEs at a multihomed EVPN VPWS network site to set up a bypass PW between them. This feature helps reduce the traffic loss caused by AC failure.
At a multihomed EVPN VPWS network site, CE 1 is dualhomed to PE 1 and PE 2, and PE 1 is the DF. When the AC on PE 1 fails, PE 1 advertises the local unreachable event to PE 2 and remote PEs for the remote PEs to switch traffic to the PWs to PE 2. In this situation, PE 1 drops the packets that the remote PEs send before they are notified of the local unreachable event. To resolve this issue, enable local FRR on PE 1 and PE 2. When receiving packets from the remote PEs after its AC fails, PE 1 forwards the packets to PE 2 over the bypass PW to prevent traffic loss.
On an EVPN instance, EVPN instance-specific local FRR configuration takes precedence over global local FRR configuration.
Examples
# Enable local FRR on the EVPN instance of cross-connect group aa.
<Sysname> system-view
[Sysname] xconnect-group aa
[Sysname-xcg-1] evpn encapsulation mpls
[Sysname-xcg-1-evpn-mpls] evpn frr local enable
Related commands
evpn multihoming vpws-frr local
evpn frr local (VSI EVPN instance view)
Use evpn frr local enable to enable local FRR on an EVPN instance.
Use evpn frr local disable to disable local FRR on an EVPN instance.
Use undo evpn frr local to restore the default.
Syntax
evpn frr local { disable | enable }
undo evpn frr local
Default
An EVPN instance uses the global local FRR configuration of EVPN VPLS.
Views
VSI EVPN instance view (MPLS encapsulation)
Predefined user roles
network-admin
Usage guidelines
Local FRR enables two PEs at a multihomed EVPN VPLS network site to set up a PW between them. This feature helps reduce the traffic loss caused by AC failure.
At a multihomed EVPN VPLS network site, CE 1 is dualhomed to PE 1 and PE 2, and PE 1 is the DF. When the AC on PE 1 fails, PE 1 deletes the corresponding MAC address entries and advertises the local unreachable event to PE 2 and remote PEs. Then, the remote PEs will switch traffic to the tunnels to PE 2. In this situation, PE 1 drops the packets that the remote PEs send before they are notified of the local unreachable event as the AC's MAC address entries have been deleted. To resolve this issue, enable local FRR on PE 1. If an AC fails, PE 1 changes the outgoing interface of the AC's MAC address entries to the index of the PW between PE 1 and PE 2. When receiving packets from remote PEs after its AC fails, PE 1 forwards the packets to PE 2 over the PW to prevent traffic loss.
On an EVPN instance, EVPN instance-specific local FRR configuration takes precedence over global local FRR configuration.
Examples
# Enable local FRR on the EVPN instance of VSI vpna.
<Sysname> system-view
[Sysname] vsi vpna
[Sysname-vsi-vpna] evpn encapsulation mpls
[Sysname-vsi-vpna-evpn-mpls] evpn frr local enable
Related commands
evpn multihoming vpls-frr local
evpn frr remote
Use evpn frr remote enable to enable remote FRR on an EVPN instance.
Use evpn frr remote disable to disable remote FRR on an EVPN instance and delete existing backup PWs.
Use undo evpn frr remote to restore the default.
Syntax
evpn frr remote [ disable | enable ]
undo evpn frr remote
Default
An EVPN instance uses the global remote FRR configuration of EVPN VPWS.
Views
Cross-connect group EVPN instance view
Predefined user roles
network-admin
Usage guidelines
Remote FRR enables two PEs on an EVPN VPWS network to set up a primary PW and a backup PW between them to ensure high availability. The PEs use the primary PW to forward traffic as long as it is available. When the primary PW fails, the PEs switch traffic to the backup PW.
Remote FRR is supported by cross-connect group EVPN instances that use MPLS encapsulation.
On an EVPN instance, EVPN instance-specific remote FRR configuration takes precedence over global remote FRR configuration.
Examples
# Enable remote FRR on the EVPN instance of cross-connect group xcga.
<Sysname> system-view
[Sysname] xconnect-group xcga
[Sysname-xcg-xcga] evpn encapsulation mpls
[Sysname-xcg-xcga-evpn-mpls] evpn frr remote enable
Related commands
evpn vpws-frr remote
evpn irb asymmetric
Use evpn irb asymmetric to enable asymmetric IRB for EVPN VXLAN.
Use undo evpn irb asymmetric to restore the default.
Syntax
evpn irb asymmetric
undo evpn irb asymmetric
Default
Symmetric IRB is enabled for EVPN VXLAN.
Views
System view
Predefined user roles
network-admin
Usage guidelines
Use this command to set the IRB mode for EVPN VXLAN.
Examples
# Enable asymmetric IRB for EVPN VXLAN.
<Sysname> system-view
[Sysname] evpn irb asymmetric
evpn local-service-id remote-service-id
Use evpn local-service-id remote-service-id to create an EVPN PW.
Use undo evpn local-service-id remote-service-id to delete an EVPN PW.
Syntax
evpn local-service-id local-service-id remote-service-id remote-service-id [ tunnel-policy tunnel-policy-name ] [ pw-class class-name ]
undo evpn local-service-id local-service-id remote-service-id remote-service-id
Default
No EVPN PWs exist.
Views
Cross-connect view
Predefined user roles
network-admin
Parameters
local-service-id: Specifies a local service ID in the range of 1 to 16777215.
remote-service-id: Specifies a remote service ID in the range of 1 to 16777215.
tunnel-policy tunnel-policy-name: Specifies a tunnel policy by its name, a case-sensitive string of 1 to 19 characters. If you do not specify a tunnel policy, the PW uses the default tunnel policy.
pw-class class-name: Specifies a PW class by its name, a case-sensitive string of 1 to 19 characters. You can specify a PW class to configure the PW data encapsulation type and control word for the PW. If you do not specify a PW class, the PW data encapsulation type is determined by the link type of the interface. The control word feature is not supported for PW data encapsulation types that do not require using control word.
Usage guidelines
You can use the evpn local-service-id remote-service-id command to concatenate two EVPN PWs on the same cross-connect.
To modify an EVPN PW, first use the undo evpn local-service-id remote-service-id command to delete the original EVPN PW.
Examples
# Create an EVPN PW, and specify tunnel policy aaa and PW class bbb for it.
<Sysname> system-view
[Sysname] xconnect-group aaa
[Sysname-xcg-aaa] connection ac2pw
[Sysname-xcg-aaa-ac2pw] evpn local-service-id 2 remote-service-id 4 tunnel-policy aaa pw-class bbb
evpn multihoming advertise disable
Use evpn multihoming advertise disable to disable advertisement of EVPN multihoming routes and withdraw the EVPN multihoming routes that have been advertised to remote sites.
Use undo evpn multihoming advertise disable to restore the default.
Syntax
evpn multihoming advertise disable
undo evpn multihoming advertise disable
Default
The device advertises EVPN multihoming routes.
Views
System view
Predefined user roles
network-admin
Usage guidelines
EVPN multihoming routes include Ethernet auto-discovery routes and Ethernet segment routes.
In a multihomed EVPN network, execute this command on a redundant VTEP or PE before you reboot it. This operation allows other VTEPs or PEs to refresh their EVPN routing table to prevent traffic interruption caused by the reboot.
Examples
# Disable advertisement of EVPN multihoming routes and withdraw the EVPN multihoming routes that have been advertised to remote sites.
<Sysname> system-view
[Sysname] evpn multihoming advertise disable
evpn multihoming timer df-delay
Use evpn multihoming timer df-delay to set the DF election delay.
Use undo evpn multihoming timer df-delay to restore the default.
Syntax
evpn multihoming timer df-delay delay-value
undo evpn multihoming timer df-delay
Default
The DF election delay is 3 seconds.
Views
System view
Predefined user roles
network-admin
Parameters
delay-value: Specifies the DF election delay, in the range of 1 to 1200 seconds.
Usage guidelines
DF election delay defines the minimum interval allowed between two DF elections.
The DF election can be triggered by site-facing interface status changes, redundant VTEP or PE membership changes, and interface ESI changes. To prevent frequent DF elections from degrading network performance, set the DF election delay.
Examples
# Set the DF election delay to 5 seconds.
<Sysname> system-view
[Sysname] evpn multihoming timer df-delay 5
evpn multihoming vpls-frr local
Use evpn multihoming vpls-frr local to enable local FRR globally for EVPN VPLS.
Use undo evpn multihoming vpls-frr local to disable local FRR globally for EVPN VPLS.
Syntax
evpn multihoming vpls-frr local
undo evpn multihoming vpls-frr local
Default
Local FRR is disabled globally for EVPN VPLS.
Views
System view
Predefined user roles
network-admin
Usage guidelines
Local FRR enables two PEs at a multihomed EVPN VPLS network site to set up a PW between them. This feature helps reduce the traffic loss caused by AC failure.
At a multihomed EVPN VPLS network site, CE 1 is dualhomed to PE 1 and PE 2, and PE 1 is the DF. When the AC on PE 1 fails, PE 1 deletes the corresponding MAC address entries and advertises the local unreachable event to PE 2 and remote PEs. Then, the remote PEs will switch traffic to the tunnels to PE 2. In this situation, PE 1 drops the packets that the remote PEs send before they are notified of the local unreachable event as the AC's MAC address entries have been deleted. To resolve this issue, enable local FRR on PE 1. If an AC fails, PE 1 changes the outgoing interface of the AC's MAC address entries to the index of the PW between PE 1 and PE 2. When receiving packets from remote PEs after its AC fails, PE 1 forwards the packets to PE 2 over the PW to prevent traffic loss.
On an EVPN instance, EVPN instance-specific local FRR configuration takes precedence over global local FRR configuration.
If you have executed the evpn frr local command on an EVPN instance, the undo evpn multihoming vpls-frr local command does not disable local FRR on the EVPN instance.
Examples
# Enable local FRR globally for EVPN VPLS.
<Sysname> system-view
[Sysname] evpn multihoming vpls-frr local
Related commands
evpn frr local (VSI EVPN instance view)
evpn multihoming vpws-frr local
Use evpn multihoming vpws-frr local to enable local FRR globally for EVPN VPWS.
Use undo evpn multihoming vpws-frr local to disable local FRR globally for EVPN VPWS and delete existing bypass PWs.
Syntax
evpn multihoming vpws-frr local
undo evpn multihoming vpws-frr local
Default
Local FRR is disabled globally for EVPN VPWS.
Views
System view
Predefined user roles
network-admin
Usage guidelines
Local FRR enables two PEs at a multihomed EVPN VPWS network site to set up a bypass PW between them. This feature helps reduce the traffic loss caused by AC failure.
At a multihomed EVPN VPWS network site, CE 1 is dualhomed to PE 1 and PE 2, and PE 1 is the DF. When the AC on PE 1 fails, PE 1 advertises the local unreachable event to PE 2 and remote PEs for the remote PEs to switch traffic to the PWs to PE 2. In this situation, PE 1 drops the packets that the remote PEs send before they are notified of the local unreachable event. To resolve this issue, enable local FRR on PE 1 and PE 2. When receiving packets from the remote PEs after its AC fails, PE 1 forwards the packets to PE 2 over the bypass PW to prevent traffic loss.
On an EVPN instance, EVPN instance-specific local FRR configuration takes precedence over global local FRR configuration.
If you have executed the evpn frr local enable command on an EVPN instance, the undo evpn multihoming vpws-frr local command does not delete the bypass PW of the EVPN instance.
Examples
# Enable local FRR globally for EVPN VPWS.
<Sysname> system-view
[Sysname] evpn multihoming vpws-frr local
Related commands
evpn frr local (cross-connect group EVPN instance view)
evpn redundancy-mode
Use evpn redundancy-mode to set the redundancy mode on an interface or UPW.
Use undo evpn redundancy-mode to restore the default.
Syntax
evpn redundancy-mode { all-active | single-active }
undo evpn redundancy-mode
Default
The all-active redundancy mode is used.
Views
Interface view
Predefined user roles
network-admin
Parameters
single-active: Specifies the single-active mode.
all-active: Specifies the all-active mode.
Usage guidelines
This command is supported only by a multihomed EVPN VPWS, EVPN VPLS, EVPN VPWS over SRv6, or EVPN VPLS over SRv6 network. A multihomed EVPN VXLAN network supports only the all-active mode.
The redundant PEs at a dualhomed site each establish an EVPN PW or SRv6 PW to a remote PE. To use one PW as a backup of the other PW, use the single-active mode. To distribute traffic across the PWs for load sharing, use the all-active mode.
As a best practice, set the same redundancy mode on the interfaces or UPWs that act as ACs or are configured with ACs on the redundant PEs at a multihomed site.
Make sure the interface or UPW where you execute this command is assigned an ESI.
Examples
# Set the redundancy mode to single-active on GigabitEthernet 0/0/1.
<Sysname> system-view
[Sysname] interface gigabitethernet 0/0/1
[Sysname-GigabitEthernet0/0/1] evpn redundancy-mode single-active
Related commands
esi
evpn route arp-mobility suppression
Use evpn route arp-mobility suppression to enable ARP mobility event suppression.
Use undo evpn route arp-mobility suppression to disable ARP mobility event suppression.
Syntax
evpn route arp-mobility suppression [ detect-cycle detect-time | detect-threshold move-times | suppression-time [ suppression-time | permanent ] ] *
undo evpn route arp-mobility suppression
Default
ARP mobility event suppression is disabled.
Views
System view
Predefined user roles
network-admin
Parameters
detect-cycle detect-time: Sets the ARP mobility detection cycle in seconds, in the range of 60 to 900. The default value is 180 seconds.
detect-threshold move-times: Sets the ARP mobility suppression threshold, in the range of 3 to 10. The default is 5. This threshold is the number of ARP moves from the local site to remote sites.
suppression-time: Sets the ARP mobility suppression time. A suppressed ARP entry cannot move until the ARP mobility suppression time expires. If you do not set this parameter, the default setting permanent applies.
suppression-time: Specifies the ARP mobility suppression time in seconds, in the range of 120 to 3600 seconds.
permanent: Suppresses ARP moves permanently.
Usage guidelines
On an EVPN VXLAN network, misconfiguration of IP addresses might cause two sites to contain the same IP address. In this condition, VTEPs or PEs at the two sites constantly synchronize and update EVPN ARP entries and determine that ARP mobility events occur. As a result, an inter-site loop might occur, and the bandwidth is occupied by ARP entry synchronization traffic. To eliminate loops and suppress those ARP mobility events, enable ARP mobility event suppression on the VTEPs or PEs.
The ARP mobility event suppression feature allows an IP address to move at most the specified number of times (ARP mobility suppression threshold) out of a site within an ARP mobility detection cycle. If the suppression threshold has been reached for an IP address within a detection cycle, the VTEP or PE at the site suppresses the subsequent move after the IP address moves back to the site. In addition, the VTEP or PE learns ARP information for the IP address but does not advertise the ARP information.
After you execute the undo evpn route arp-mobility suppression command or when the ARP mobility suppression time expires, a VTEP or PE acts as follows:
· Advertises ARP information immediately for the suppressed ARP entries that have not aged out.
· Relearns ARP information for the suppressed ARP entries that have aged out and advertises the ARP information.
ARP mobility event suppression takes effect only on an EVPN VXLAN network configured with distributed VXLAN IP gateways.
Examples
# Enable ARP mobility event suppression.
<Sysname> system-view
[Sysname] evpn route arp-mobility suppression
Related commands
display evpn route arp-mobility
evpn route mac-mobility suppression
Use evpn route mac-mobility suppression to enable MAC mobility event suppression.
Use undo evpn route mac-mobility suppression to disable MAC mobility event suppression.
Syntax
evpn route mac-mobility suppression [ detect-cycle detect-time | detect-threshold move-times | suppression-time [ suppression-time | permanent ] ] *
undo evpn route mac-mobility suppression
Default
MAC mobility event suppression is disabled.
Views
System view
Predefined user roles
network-admin
Parameters
detect-cycle detect-time: Sets the MAC mobility detection cycle in seconds, in the range of 60 to 900. The default value is 180 seconds.
detect-threshold move-times: Sets the MAC mobility suppression threshold, in the range of 3 to 10. The default is 5. This threshold is the number of MAC moves from the local site to remote sites.
suppression-time: Sets the MAC mobility suppression time. A suppressed MAC entry cannot move until the MAC mobility suppression time expires. If you do not set this parameter, the default setting permanent applies.
suppression-time: Specifies the MAC mobility suppression time in seconds, in the range of 120 to 3600 seconds.
permanent: Suppresses MAC moves permanently.
Usage guidelines
On an EVPN VXLAN or EVPN VPLS network, misconfiguration of MAC addresses might cause two sites to contain the same MAC address. In this condition, VTEPs or PEs at the two sites constantly synchronize and update EVPN MAC entries and determine that MAC mobility events occur. As a result, an inter-site loop might occur, and the bandwidth is occupied by MAC entry synchronization traffic. To eliminate loops and suppress those MAC mobility events, enable MAC mobility event suppression on the VTEPs or PEs.
The MAC mobility event suppression feature allows a MAC address to move at most the specified number of times (MAC mobility suppression threshold) out of a site within an MAC mobility detection cycle. If the suppression threshold has been reached for a MAC address within a detection cycle, the VTEP or PE at the site suppresses the subsequent move after the MAC address moves back to the site. In addition, the VTEP or PE learns the MAC address but does not advertise it.
After you execute the undo evpn route mac-mobility suppression command or when the MAC mobility suppression time expires, a VTEP or PE acts as follows:
· Advertises MAC address entries immediately for the suppressed MAC address entries that have not aged out.
· Relearns the MAC addresses for the suppressed MAC address entries that have aged out and advertises the MAC address entries.
Examples
# Enable MAC mobility event suppression.
<Sysname> system-view
[Sysname] evpn route mac-mobility suppression
Related commands
display evpn route mac-mobility
export route-policy
Use export route-policy to apply an export routing policy to EVPN.
Use undo export route-policy to restore the default.
Syntax
export route-policy route-policy
undo export route-policy
Default
No export routing policy is applied to EVPN.
Views
VSI EVPN instance view
Cross-connect group EVPN instance view
VPN instance EVPN view
Predefined user roles
network-admin
Parameters
route-policy: Specifies a routing policy by its name, a case-sensitive string of 1 to 63 characters.
Usage guidelines
You can specify an export routing policy to filter advertised routes or modify their route attributes for EVPN.
If you execute this command multiple times, the most recent configuration takes effect.
EVPN can use an export routing policy specified in VSI EVPN instance view, cross-connect group EVPN instance view, VPN instance view, or VPN instance EVPN view.
Examples
# Apply export routing policy poly-1 to EVPN on VPN instance vpn1.
<Sysname> system-view
[Sysname] ip vpn-instance vpn1
[Sysname-vpn-instance-vpn1] address-family evpn
[Sysname-vpn-evpn-vpn1] export route-policy poly-1
Related commands
route-policy (Layer 3—IP Routing Command Reference)
import evpn mac-ip
Use import evpn mac-ip to enable the device to redistribute received MAC/IP advertisement routes that contain ARP or ND information into a BGP unicast routing table and advertise the routes.
Use undo import evpn mac-ip to restore the default.
Syntax
import evpn mac-ip
undo import evpn mac-ip
Default
For EVPN VXLAN, received MAC/IP advertisement routes (carrying VXLAN IDs) that contain ARP or ND information are not redistributed into any BGP unicast routing table.
For SRv6, received MAC/IP advertisement routes (carrying SIDs) that contain ARP or ND information are redistributed into BGP unicast routing tables, but the routes are not advertised.
Views
BGP IPv4 unicast address family view
BGP IPv6 unicast address family view
BGP-VPN IPv4 unicast address family view
BGP-VPN IPv6 unicast address family view
Predefined user roles
network-admin
Usage guidelines
This command enables the device to redistribute received MAC/IP advertisement routes that contain ARP or ND information into a BGP unicast routing table.
· If you use this command in BGP IPv4 or IPv6 unicast address family view, the device will redistribute the routes into the BGP IPv4 or IPv6 unicast routing table. In addition, the device will advertise the routes to the local site.
· If you use this command in BGP-VPN IPv4 or IPv6 unicast address family view, the device will redistribute the routes into the BGP-VPN IPv4 or IPv6 unicast routing table of the corresponding VPN instance. To advertise the routes to the local site, you must configure the advertise l2vpn evpn command.
Examples
# Redistribute received MAC/IP advertisement routes into the BGP-VPN IPv4 unicast routing table of VPN instance vpna and advertise the routes.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp-default] ip vpn-instance vpna
[Sysname-bgp-default-vpna] address-family ipv4
[Sysname-bgp-default-ipv4-vpna] import evpn mac-ip
Related commands
advertise l2vpn evpn
import route-policy
Use import route-policy to apply an import routing policy to EVPN.
Use undo import route-policy to restore the default.
Syntax
import route-policy route-policy
undo import route-policy
Default
No import routing policy is applied to EVPN. A VPN instance accepts a route when the export route targets of the route match local import route targets.
Views
VSI EVPN instance view
Cross-connect group EVPN instance view
VPN instance EVPN view
Predefined user roles
network-admin
Parameters
route-policy: Specifies a routing policy by its name, a case-sensitive string of 1 to 63 characters.
Usage guidelines
You can specify an import routing policy to filter received routes or modify their route attributes for EVPN.
If you execute this command multiple times, the most recent configuration takes effect.
EVPN can use an import routing policy specified in VSI EVPN instance view, cross-connect group EVPN instance view, VPN instance view, or VPN instance EVPN view.
Examples
# Apply import routing policy poly-1 to EVPN on VPN instance vpn1.
<Sysname> system-view
[Sysname] ip vpn-instance vpn1
[Sysname-vpn-instance-vpn1] address-family evpn
[Sysname-vpn-evpn-vpn1] import route-policy poly-1
Related commands
route-policy (Layer 3—IP Routing Command Reference)
ip public-instance
Use ip public-instance to create the public instance and enter its view, or enter the view of the existing public instance.
Use undo ip public-instance to delete the public instance.
Syntax
ip public-instance
undo ip public-instance
Default
The public instance does not exist.
Views
System view
Predefined user roles
network-admin
Usage guidelines
A distributed EVPN gateway uses the public instance to perform Layer 3 forwarding for the public network and to enable communication between private and public networks. The public instance is similar to a VPN instance. A distributed EVPN gateway processes traffic of the public instance in the same way it does for a VPN instance.
Examples
# Create the public instance and enter its view.
<Sysname> system-view
[Sysname] ip public-instance
[Sysname-public-instance]
l3-vni
Use l3-vni to configure an L3 VXLAN ID for a VSI interface or for the public instance.
Use undo l3-vni to remove the L3 VXLAN ID for a VSI interface or for the public instance.
Syntax
l3-vni vxlan-id
undo l3-vni
Default
No L3 VXLAN ID is configured for a VSI interface or for the public instance.
Views
VSI interface view
Public instance view
Predefined user roles
network-admin
Parameters
vxlan-id: Specifies a VXLAN ID in the range of 0 to 16777215.
Usage guidelines
On distributed EVPN gateways, you must configure L3 VXLAN IDs for the gateways to differentiate traffic of different VPN instances.
To forward Layer 3 traffic of a VPN instance, you must assign an L3 VXLAN ID to the VSI interface of the VPN instance. To forward Layer 3 traffic of the public network, you must assign the same L3 VXLAN ID to the public instance and the VSI interface of the public instance.
To modify the L3 VXLAN ID for the public instance, you must first delete the original L3 VXLAN ID.
The L3 VXLAN ID specified by using this command cannot be the same as any VXLAN ID specified by using the mapping vni command.
Examples
# Configure the L3 VXLAN ID as 1000 for VSI-interface 100.
<Sysname> system-view
[Sysname] interface vsi-interface 100
[Sysname-Vsi-interface100] l3-vni 1000
mac-advertising disable
Use mac-advertising disable to disable MAC address advertisement and withdraw advertised MAC addresses.
Use undo mac-advertising disable to restore the default.
Syntax
mac-advertising disable
undo mac-advertising disable
Default
MAC address advertisement is enabled.
Views
VSI EVPN instance view
Predefined user roles
network-admin
Usage guidelines
The MAC information and ARP information advertised by the VTEP overlap. To avoid duplication, use this command to disable MAC address advertisement and withdraw the MAC addresses advertised to remote VTEPs.
Examples
# Disable MAC address advertisement and withdraw advertised MAC addresses for an EVPN instance.
<Sysname> system-view
[Sysname] vsi aaa
[Sysname-vsi-aaa] evpn encapsulation vxlan
[Sysname-vsi-aaa-evpn-vxlan] mac-advertising disable
peer advertise vpn-reoriginate ibgp (BGP EVPN address family view)
Use peer advertise vpn-reoriginate ibgp to enable advertising the IP prefix advertisement routes reoriginated for a VPN instance to an IBGP peer or peer group.
Use undo peer advertise vpn-reoriginate ibgp to restore the default.
Syntax
peer { group-name | ipv4-address [ mask-length ] | ipv6-address [ prefix-length ] } advertise vpn-reoriginate ibgp
undo { group-name | ipv4-address [ mask-length ] | ipv6-address [ prefix-length ] } peer advertise vpn-reoriginate ibgp
Default
The device does not advertise the IP prefix advertisement routes reoriginated for a VPN instance to IBGP peers or peer groups.
Views
BGP EVPN address family view
Predefined user roles
network-admin
Parameters
group-name: Specifies a peer group by its name, a case-sensitive string of 1 to 47 characters. The peer group must exist.
ipv4-address: Specifies a peer by its IPv4 address. The peer must exist.
mask-length: Specifies a mask length in the range of 0 to 32. To specify a subnet, you must specify both the ipv4-address and mask-length arguments.
ipv6-address: Specifies a peer by its IPv6 address. The peer must exist.
prefix-length: Specifies a prefix length in the range of 0 to 128. To specify a subnet, you must specify both the ipv6-address and prefix-length arguments.
Usage guidelines
For this command to take effect, you must also execute the advertise route-reoriginate command.
This command enables the device to advertise the IP prefix advertisement routes reoriginated for VPN instances to IBGP peers after the advertise route-reoriginate command is executed for the VPN instances.
Examples
# Enable advertising the IP prefix advertisement routes reoriginated for VPN instances to IBGP peer 1.1.1.1.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp-default] address-family l2vpn evpn
[Sysname-bgp-default-evpn] peer 1.1.1.1 advertise vpn-reoriginate ibgp
Related commands
advertise route-reoriginate (MPLS Command Reference)
peer next-hop-invariable
Use peer next-hop-invariable to configure the device to not change the next hop of routes advertised to an EBGP peer or peer group.
Use undo peer next-hop-invariable to configure the device to use its address as the next hop of routes advertised to an EBGP peer or peer group.
Syntax
peer { group-name | ipv4-address [ mask-length ] | ipv6-address [ prefix-length ] } next-hop-invariable
undo peer { group-name | ipv4-address [ mask-length ] | ipv6-address [ prefix-length ] } next-hop-invariable
Default
The device uses its address as the next hop of routes advertised to EBGP peers or peer groups.
Views
BGP EVPN address family view
Predefined user roles
network-admin
Parameters
group-name: Specifies a peer group by its name, a case-sensitive string of 1 to 47 characters.
ipv4-address: Specifies a peer by its IPv4 address.
mask-length: Specifies a mask length in the range of 0 to 32. To specify a subnet, you must specify both the ipv4-address and mask-length arguments.
ipv6-address: Specifies a peer by its IPv6 address. The peer must exist.
prefix-length: Specifies a prefix length in the range of 0 to 128. To specify a subnet, you must specify both the ipv6-address and prefix-length arguments.
Usage guidelines
This command is exclusive with the peer next-hop-local command.
The next hop in BGP EVPN routes is the IP address of the originating VTEP. By default, the device replaces the next hop of IBGP routes with its address when advertising the routes to an EBGP peer. If the device is a transport network device, it will modify the next hop of BGP EVPN routes. For VTEPs to learn one another's IP address, you must configure the device to not change the next hop of routes advertised to EBGP peers.
Examples
# Configure the device to not change the next hop of routes advertised to EBGP peer 1.1.1.1.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp-default] address-family l2vpn evpn
[Sysname-bgp-default-evpn] peer 1.1.1.1 next-hop-invariable
Related commands
peer next-hop-local (Layer 3—IP Routing Command Reference)
peer re-originated
Use peer re-originated to enable the device to reoriginate BGP EVPN routes based on the BGP EVPN routes received from a peer or peer group.
Use undo peer re-originated to disable the device from reoriginating BGP EVPN routes based on the BGP EVPN routes received from a peer or peer group.
Syntax
peer { group-name | ipv4-address [ mask-length ] | ipv6-address [ prefix-length ] } re-originated
undo peer { group-name | ipv4-address [ mask-length ] | ipv6-address [ prefix-length ] } re-originated
Default
The device does not reoriginate BGP EVPN routes based on received BGP EVPN routes.
Views
BGP EVPN address family view
Predefined user roles
network-admin
Parameters
group-name: Specifies a peer group by its name, a case-sensitive string of 1 to 47 characters. The peer group must exist.
ipv4-address: Specifies a peer by its IPv4 address. The peer must exist.
mask-length: Specifies a mask length in the range of 0 to 32. To specify a subnet, you must specify both the ipv4-address and mask-length arguments.
ipv6-address: Specifies a peer by its IPv6 address. The peer must exist.
prefix-length: Specifies a prefix length in the range of 0 to 128. To specify a subnet, you must specify both the ipv6-address and prefix-length arguments.
Usage guidelines
In an EVPN-DCI network, use this command to hide the L3 VXLAN IDs of data centers or enable communication between data centers that use different L3 VXLAN IDs.
After you execute this command on an ED, the ED performs the following operations after receiving BGP EVPN routes from a VTEP or remote ED:
1. Matches the route targets of the routes with the import route targets of local VPN instances.
2. Replaces the L3 VXLAN ID and RD of the routes with those of the matching local VPN instance.
3. Advertises the routes to a VTEP or remote ED.
After you execute this command, an ED advertises only reoriginated BGP EVPN routes. The original BGP EVPN routes are not advertised.
If the RD of a received BGP EVPN route is identical to the RD of the matching local VPN instance, an ED does not replace the L3 VXLAN ID of the route or reoriginate the route. As a result, the ED does not advertise the route. As a best practice, assign unique RDs to VPN instances on different EVPN gateways and EDs when you use this command.
Examples
# Replace the L3 VXLAN ID and RD of the BGP EVPN routes received from peer 1.1.1.1.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp-default] address-family l2vpn evpn
[Sysname-bgp-default-evpn] peer 1.1.1.1 re-originated
Related commands
peer advertise original-route
peer suppress re-originated
policy vpn-target
Use policy vpn-target to enable route target filtering for BGP EVPN routes.
Use undo policy vpn-target to disable route target filtering for BGP EVPN routes.
Syntax
policy vpn-target
undo policy vpn-target
Default
Route target filtering is enabled for BGP EVPN routes.
Views
BGP EVPN address family view
Predefined user roles
network-admin
Usage guidelines
When route target filtering is enabled for BGP EVPN routes, the EVPN routing table accepts only BGP EVPN routes of which the export route targets match the local import route targets. If the device must save all BGP EVPN routes, use the undo policy vpn-target command to disable route target filtering for BGP EVPN routes.
Examples
# Disable route target filtering for BGP EVPN routes.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp-default] address-family l2vpn evpn
[Sysname-bgp-default-evpn] undo policy vpn-target
pw-class
Use pw-class to specify a PW class for a VSI EVPN instance.
Use undo pw-class to restore the default.
Syntax
pw-class class-name
undo pw-class
Default
No PW class is specified for a VSI EVPN instance.
Views
VSI EVPN instance view (MPLS encapsulation)
Predefined user roles
network-admin
Parameters
class-name: Specifies a PW class by its name, a case-sensitive string of 1 to 19 characters.
Usage guidelines
The specified PW class will be used to establish all PWs on the VSI EVPN instance.
If you execute this command multiple times, the most recent configuration takes effect.
Examples
# Specify PW class pw100 for the EVPN instance on VSI vpna.
<Sysname> system-view
[Sysname] vsi vpna
[Sysname-vsi-aa] evpn encapsulation mpls
[Sysname-vsi-aa-evpn-mpls] pw-class pw100
route-distinguisher (EVPN instance view)
Use route-distinguisher to configure an RD for an EVPN instance.
Use undo route-distinguisher to restore the default.
Syntax
route-distinguisher { route-distinguisher | auto }
undo route-distinguisher
Default
No RD is configured for an EVPN instance.
Views
VSI EVPN instance view
Cross-connect group EVPN instance view
Predefined user roles
network-admin
Parameters
route-distinguisher: Specifies an RD, a string of 3 to 21 characters. The RD cannot be all zeros and can use one of the following formats:
· 16-bit AS number:32-bit user-defined number. For example, 101:3.
· 32-bit IP address:16-bit user-defined number. For example, 192.168.122.15:1.
· 32-bit AS number:16-bit user-defined number. For example, 65536:1. The AS number must be equal to or greater than 65536.
auto: Automatically generates an RD in the N:VXLAN ID format. The initial value of N is 1. If N:VXLAN ID is already in use, the system increases the value of N by 1 until the RD is available.
Usage guidelines
EVPN uses MP-BGP to advertise BGP EVPN routes for automatic VTEP discovery, MAC reachability information advertisement, and host route advertisement. MP-BGP uses the RD to differentiate BGP EVPN routes of different EVPN instances.
Examples
# Configure 22:1 as the RD of an EVPN instance.
<Sysname> system-view
[Sysname] vsi aaa
[Sysname-vsi-aaa] evpn encapsulation vxlan
[Sysname-vsi-aaa-evpn-vxlan] route-distinguisher 22:1
route-distinguisher (public instance view)
Use route-distinguisher to configure an RD for the public instance.
Use undo route-distinguisher to restore the default.
Syntax
route-distinguisher route-distinguisher
undo route-distinguisher
Default
No RD is configured for the public instance.
Views
Public instance view
Predefined user roles
network-admin
Parameters
route-distinguisher: Specifies an RD, a string of 3 to 21 characters. The RD can use one of the following formats:
· 16-bit AS number:32-bit user-defined number. For example, 101:3.
· 32-bit IP address:16-bit user-defined number. For example, 192.168.122.15:1.
· 32-bit AS number:16-bit user-defined number. For example, 65536:1. The AS number must be equal to or greater than 65536.
Usage guidelines
To modify the RD of the public instance, first execute the undo route-distinguisher command to remove the original RD.
Examples
# Configure 22:1 as the RD of the public instance.
<Sysname> system-view
[Sysname] ip public-instance
[Sysname-public-instance] route-distinguisher 22:1
rr-filter
Use rr-filter to create a route reflector (RR) reflection policy.
Use undo rr-filter to restore the default.
Syntax
rr-filter { ext-comm-list-number | ext-comm-list-name }
undo rr-filter
Default
An RR does not filter reflected BGP EVPN routes.
Views
BGP EVPN address family view
Predefined user roles
network-admin
Parameters
ext-comm-list-number: Specifies an extended community attribute list by its number in the range of 1 to 65535.
ext-comm-list-name: Specifies an extended community attribute list by its name, a case-sensitive string of 1 to 63 characters.
Usage guidelines
This command enables an RR to reflect only received BGP EVPN routes that match the attributes in the specified extended community attribute list.
If a cluster contains multiple RRs, you can configure different reflection policies on the RRs for load sharing among the RRs.
For more information about the extended community attribute list, see Layer 3—IP Routing Configuration Guide.
Examples
# Configure a reflection policy for the device to reflect BGP EVPN routes that match extended community attribute list 10.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp-default] address-family l2vpn evpn
[Sysname-bgp-default-evpn] rr-filter 10
Related commands
ip extcommunity-list (Layer 3—IP Routing Command Reference)
tunnel-policy
Use tunnel-policy to specify a tunnel policy for a VSI EVPN instance.
Use undo tunnel-policy to restore the default.
Syntax
tunnel-policy tunnel-policy-name
undo tunnel-policy
Default
No tunnel policy is specified for a VSI EVPN instance.
Views
VSI EVPN instance view (MPLS encapsulation)
Predefined user roles
network-admin
Parameters
tunnel-policy-name: Specifies a tunnel policy by its name, a case-sensitive string of 1 to 19 characters.
Usage guidelines
The PWs of the VSI EVPN instance use the specified tunnel policy to select public tunnels.
If you do not specify a tunnel policy or specify a nonexistent tunnel policy, the default tunnel policy applies. The default tunnel policy selects only one public tunnel for a PW in this order: LSP tunnel, GRE tunnel, CRLSP tunnel, and SRLSP tunnel.
If you execute this command multiple times, the most recent configuration takes effect.
Examples
# Specify tunnel policy policy1 for the EVPN instance on VSI aa.
<Sysname> system-view
[Sysname] vsi aa
[Sysname-vsi-aa] evpn encapsulation mpls
[Sysname-vsi-aa-evpn-mpls] tunnel-policy policy1
vpn-route cross multipath
Use vpn-route cross multipath to enable ECMP VPN route redistribution.
Use undo vpn-route cross multipath to disable ECMP VPN route redistribution.
Syntax
vpn-route cross multipath
undo vpn-route cross multipath
Default
ECMP VPN route redistribution is disabled. If multiple routes have the same prefix and RD, BGP only imports the optimal route into the EVPN routing table.
Views
BGP EVPN address family view
Predefined user roles
network-admin
Usage guidelines
ECMP VPN route redistribution enables BGP to import all routes that have the same prefix and RD into the EVPN routing table.
Examples
# Enable ECMP VPN route redistribution.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp-default] address-family l2vpn evpn
[Sysname-bgp-default-evpn] vpn-route cross multipath
vpn-target
Use vpn-target to configure route targets for EVPN.
Use undo vpn-target to delete route targets for EVPN.
Syntax
In VSI EVPN instance view (VXLAN encapsulation):
vpn-target { vpn-target&<1-8> | auto } [ both | export-extcommunity | import-extcommunity ]
undo vpn-target { vpn-target&<1-8> | auto | all } [ both | export-extcommunity | import-extcommunity ]
VPN instance EVPN view, public instance IPv4 address family view, public instance IPv6 address family view, public instance EVPN view, cross-connect group EVPN instance view, or VSI EVPN instance view (non-VXLAN encapsulation):
vpn-target vpn-target&<1-8> [ both | export-extcommunity | import-extcommunity ]
undo vpn-target { all | vpn-target&<1-8> [ both | export-extcommunity | import-extcommunity ] }
Default
EVPN does not have route targets.
Views
VSI EVPN instance view
Cross-connect group EVPN instance view
VPN instance EVPN view
Public instance EVPN view
Public instance IPv4 address family view
Public instance IPv6 address family view
Predefined user roles
network-admin
Parameters
vpn-target&<1-8>: Specifies a space-separated list of up to eight route targets. Each route target is a string of 3 to 21 characters in one of the following formats:
· 16-bit AS number:32-bit user-defined number. For example, 101:3.
· 32-bit IP address:16-bit user-defined number. For example, 192.168.122.15:1.
· 32-bit AS number:16-bit user-defined number. For example, 65536:1. The AS number must be equal to or greater than 65536.
auto: Automatically generates a route target in the format of BGP AS number:VXLAN ID.
both: Uses the specified route targets as both import and export targets. If you do not specify the both, export-extcommunity, or import-extcommunity keyword, the both keyword applies.
export-extcommunity: Uses the specified route targets as export targets.
import-extcommunity: Uses the specified route targets as import targets.
all: Specifies all route targets.
Usage guidelines
EVPN uses MP-BGP to advertise BGP EVPN routes for automatic VTEP discovery, MAC reachability information advertisement, and host route advertisement. MP-BGP uses route targets to control the advertisement and acceptance of BGP EVPN routes.
A VTEP sets the export targets for BGP EVPN routes before advertising the routes to remote VTEPs. The VTEP checks the export targets of BGP EVPN routes from remote VTEPs and imports only BGP EVPN routes of which the export targets match the local import targets.
If you execute this command multiple times, all configured route targets take effect.
Examples
# Configure import route targets 10:1, 100:1, and 1000:1 for an EVPN instance.
<Sysname> system-view
[Sysname] vsi aaa
[Sysname-vsi-aaa] evpn encapsulation vxlan
[Sysname-vsi-aaa-evpn-vxlan] vpn-target 10:1 100:1 1000:1 import-extcommunity