Use backup-peer to configure a static backup SRv6 PW for a cross-connect and enter cross-connect static backup SRv6 PW view, or enter the view of an existing cross-connect static backup SRv6 PW.

Use undo backup-peer to delete a static backup SRv6 PW.

Syntax

backup-peer ipv6-address end-dx2-sid remote-locator locator-name opcode opcode [ color color-value | tunnel-policy tunnel-policy-name ]

undo backup-peer ipv6-address end-dx2-sid remote-locator locator-name opcode opcode

Default

No static backup SRv6 PW exists for a cross-connect.

Views

Cross-connect static SRv6 PW view

Predefined user roles

network-admin

Parameters

ipv6-address: Specifies the address of the remote PE on the backup SRv6 PW.

remote-locator locator-name: Specifies the remote locator name, a case-sensitive string of 1 to 31 characters.

opcode opcode: Specifies the opcode for SRv6 SIDs, in the range of 1 to 2static-length-1, where the static-length is determined by the remote-locator command.

color color-value: Specifies the color value for the backup SRv6 PW, in the range of 0 to 4294967295. If you do not specify this option, the color of the backup SRv6 PW is not specified.

tunnel-policy tunnel-policy-name: Specifies a tunnel policy by its name, a case-sensitive string of 1 to 126 characters. If you do not specify a tunnel policy, the tunnel policy specified by the static-srv6 local-service-id remote-service-id command is used for the backup SRv6 PW.

Usage guidelines

A static backup SRv6 PW provides PW redundancy for its primary SRv6 PW, and is used when the primary SRv6 PW fails.

The remote PE's IPv6 address and remote SID specified for a static backup SRv6 PW cannot both be the same as those of an existing static or dynamic SRv6 PW.

SRv6 PW redundancy and bypass SRv6 PW are mutually exclusive with each other. If you have configured a backup SRv6 PW for a cross-connect by using the backup-peer command, you cannot configure a bypass SRv6 PW for the cross-connect by using the bypass-peer command, and vice versa.

Examples

# Configure a static backup SRv6 PW for a cross-connect and enter its view. Specify the IPv6 address of the remote PE of the PW as 4::4, the remote locator as aaa, and the opcode as 1.

<Sysname> system-view

[Sysname] xconnect-group svpws0

[Sysname-xcg-svpws0] connection 1

[Sysname-xcg-svpws0-1] static-srv6 local-service-id 1 remote-service-id 2 tunnel-policy 1

[Sysname-xcg-svpws0-1-1-2] peer 1::1 end-dx2-sid remote-locator aaa opcode 1

[Sysname-xcg-svpws0-1-1-2-1::1-aaa-1] backup-peer 3::3 end-dx2-sid remote-locator bbb opcode 2

[Sysname-xcg-svpws0-1-1-2-1::1-aaa-1-3::3-bbb-2]

Related commands

bypass-peer

peer

bfd static evpn-vpls-srv6

Use bfd static evpn-vpls-srv6 to create a static BFD session for SRv6 PW connectivity detection in an EVPN VPLS over SRv6 network and enter static BFD session view, or enter the view of an existing static BFD session.

Use undo bfd static to delete a static BFD session and all settings in static BFD session view.

Syntax

bfd static session-name evpn-vpls-srv6 vsi vsi-name remote-peer remote-ipv6-address [ discriminator auto ]

undo bfd static session-name

Default

No static BFD sessions exist.

Views

System view

Predefined user roles

network-admin

Parameters

session-name: Specifies the name of the static BFD session, a case-sensitive string of 1 to 64 characters.

vsi vsi-name: Specifies a VSI by its name, a case-sensitive string of 1 to 31 characters.

remote-peer remote-ipv6-address: Specifies a remote PE by its IPv6 address.

discriminator auto: Enables the device to automatically assign a local discriminator value to the static BFD session. If you do not specify the keywords, you must use the discriminator command to specify the local and remote discriminators for the session.

Usage guidelines

Enable BFD on both ends of an SRv6 PW for quick link connectivity detection. The PEs periodically send BFD control packets to each other through the SRv6 PW associated with the specified VSI. A PE sets the PW state to Down if it does not receive control packets from the remote end within a detection interval. To avoid packet forwarding failure, the PE switches packets to the backup SRv6 PW or an equal-cost SRv6 PW.

Make sure the static BFD session is in Asynchronous mode.

Use this command on both PEs at the two ends of an SRv6 PW.

In a primary/backup SRv6 PW scenario or an equal-cost SRv6 PW scenario, you must configure a static BFD session for each SRv6 PW to detect their connectivity.

Examples

# Create a static BFD session named abc to test the connectivity of the SRv6 PW associated with VSI aaa. The IPv6 address of the remote PE is 20::1.

<Sysname> system-view

[Sysname] bfd static abc evpn-vpls-srv6 vsi aaa remote-peer 20::1

[Sysname-bfd-static-session-abc]

bfd static evpn-vpws-srv6

Use bfd static evpn-vpws-srv6 to create a static BFD session for SRv6 PW connectivity detection in an EVPN VPWS over SRv6 network and enter static BFD session view, or enter the view of an existing static BFD session.

Use undo bfd static to delete a static BFD session and all settings in static BFD session view.

Syntax

bfd static session-name evpn-vpws-srv6 interface interface-type interface-number remote-peer remote-ipv6-address [ discriminator auto ]

undo bfd static session-name

Default

No static BFD sessions exist.

Views

System view

Predefined user roles

network-admin

Parameters

session-name: Specifies the name of the static BFD session, a case-sensitive string of 1 to 64 characters.

interface interface-type interface-number: Specifies a Layer 3 interface mapped to a cross-connect. The interface-type argument represents the interface type and the interface-number argument represents the interface number.

remote-peer remote-ipv6-address: Specifies a remote PE by its IPv6 address.

Usage guidelines

Enable BFD on both ends of an SRv6 PW for quick link connectivity detection. The PEs periodically send BFD control packets to each other out of the Layer 3 interfaces mapped to the cross-connect of the SRv6 PW. A PE sets the PW state to Down if it does not receive control packets from the remote end within a detection interval. To avoid packet forwarding failure, the PE switches packets to the backup SRv6 PW or an equal-cost SRv6 PW.

Make sure the static BFD session is in Asynchronous mode.

Use this command on both PEs at the two ends of an SRv6 PW.

In a primary/backup SRv6 PW scenario or an equal-cost SRv6 PW scenario, you must configure a static BFD session for each SRv6 PW to detect their connectivity.

Examples

# Create a static BFD session named abc to test the connectivity of the SRv6 PW associated with a cross-connect mapped to Ten-GigabitEthernet 3/1/1. The IPv6 address of the remote PE is 20::1.

<Sysname> system-view

[Sysname] bfd static abc evpn-vpws-srv6 interface ten-gigabitethernet 3/1/1 remote-peer 20::1

[Sysname-bfd-static-session-abc]

bum-forwarding dx2l-based

Use bum-forwarding dx2l-based to forward BUM traffic based on an End.DX2L SID through the bypass PW when an AC fails in an EVPN VPLS over SRv6 multihomed network.

Use undo bum-forwarding dx2l-based to restore the default.

Syntax

bum-forwarding dx2l-based

undo bum-forwarding dx2l-based

Default

In an EVPN VPLS over SRv6 multihomed network, BUM traffic is not forwarded through the bypass PW when an AC fails.

Views

VSI EVPN instance view

Predefined user roles

network-admin

Usage guidelines

In an EVPN VPLS over SRv6 multihomed network, a PE by default broadcasts a received packet to all ACs mapped to a VSI in the following situations:

· The packet contains an End.DT2M SID.

· The packet contains an End.DT2U SID, but the PE fails to find a matching MAC address entry for the packet in the VSI to which the End.DT2U SID belongs.

In the situations described above, the packet cannot reach the site connected to an AC when the AC fails.

With this command, the PE assigns an End.DX2L SID to each AC and advertises the SIDs to the peer PE (redundant PE for multihoming) at the local site. When an AC on the peer PE fails, that PE encapsulates the End.DX2L SID corresponding to the AC to BUM traffic and forwards the traffic to the local PE through the bypass PW. Then, the local PE forwards the traffic to the local AC corresponding to the End.DX2L SID. When the peer PE receives traffic that contains an End.DX2L SID, it does not forward the traffic to the bypass PW when the AC corresponding to the End.DX2L SID fails.

Examples

# Configure the device to forward BUM traffic based on an End.DX2L SID through the bypass PW when an AC fails in an EVPN VPLS over SRv6 multihomed network.

<Sysname> system-view

[Sysname] vsi aaa

[Sysname-vsi-aaa] evpn encapsulation srv6

[Sysname-vsi-aaa-evpn-srv6] bum-farwarding dx2l-based

bypass-peer

Use bypass-peer to configure a bypass SRv6 PW for the AC of a cross-connect and enter cross-connect bypass SRv6 PW view, or enter the view of an existing cross-connect bypass SRv6 PW.

undo bypass-peer to delete a bypass SRv6 PW.

Syntax

bypass-peer ipv6-address end-dx2l-sid remote-locator locator-name opcode opcode [ color color-value | tunnel-policy tunnel-policy-name ] ac-bypass

undo bypass-peer ipv6-address end-dx2l-sid remote-locator locator-name opcode opcode ac-bypass

Default

No bypass SRv6 PW exists for a cross-connect.

Views

Cross-connect AC view

Predefined user roles

network-admin

Parameters

ipv6-address: Specifies the address of the remote PE on the bypass SRv6 PW.

remote-locator locator-name: Specifies the remote locator name, a case-sensitive string of 1 to 31 characters.

opcode opcode: Specifies the opcode for SRv6 SIDs, in the range of 1 to 2static-length-1, where the static-length is determined by the remote-locator command.

color color-value: Specifies the color value for the bypass SRv6 PW, in the range of 0 to 4294967295. If you do not specify this option, the color of the bypass SRv6 PW is not specified.

Usage guidelines

The remote PE's IPv6 address and remote SID specified for a bypass SRv6 PW cannot both be the same as those of an existing SRv6 PW.

SRv6 PW redundancy and bypass SRv6 PW are mutually exclusive with each other. If you have configured a bypass SRv6 PW for a cross-connect by using the bypass-peer command, you cannot configure a static backup SRv6 PW for the cross-connect by using the backup-peer command, and vice versa.

Examples

# Configure a bypass SRv6 PW for the AC of a cross-connect and enter its view. Specify the IPv6 address of the remote PE of the PW as 2::2, the remote locator as aaa, and the opcode as 1.

<Sysname> system-view

[Sysname] xconnect-group svpws0

[Sysname-xcg-svpws0] connection 1

[Sysname-xcg-svpws0-1] ac interface ten-gigabitethernet 3/1/1

[Sysname-xcg-svpws0-1-Ten-GigabitEthernet3/1/1] bypass-peer 2::2 end-dx2l-sid remote-locator aaa opcode 1 color 100 ac-bypass

[Sysname-xcg-svpws0-1-Ten-GigabitEthernet3/1/1-bypass]

Related commands

backup-peer

peer

default color

Use default color to specify the default color.

Use undo default color to restore the default.

Syntax

default color color-value

undo default color

Default

No default color is specified.

Views

EVPN instance view

Cross-connect static SRv6 view

Predefined user roles

network-admin

Parameters

color-value: Specifies the default color, in the range of 0 to 4294967295.

Usage guidelines

In case of color-based traffic steering, the default color is used in the following scenarios:

· A BGP EVPN route does not have the color extended community attribute or match a routing policy to obtain a color.

· A static SRv6 PW is not specified with a color value.

Examples

# In VSI EVPN instance view, set the default color to 100.

<Sysname> system-view

[Sysname] vsi aaa

[Sysname-vsi-aaa] evpn encapsulation srv6

[Sysname-vsi-aaa-mpls-srv6] default color 100

# In cross-connect group EVPN instance view, set the default color to 100.

<Sysname> system-view

[Sysname] xconnect-group vpna

[Sysname-xcg-vpna] evpn encapsulation srv6

[Sysname-xcg-vpna-evpn-srv6] default color 100

# In cross-connect static SRv6 view, set the default color to 100.

<Sysname> system-view

[Sysname] xconnect-group vpna

[Sysname-xcg-vpna] connection pw1

[Sysname-xcg-vpna-pw1] static-srv6 local-service-id 1 remote-service-id 2

[Sysname-xcg-vpna-pw1-1-2] default color 100

display l2vpn forwarding srv6

Use display l2vpn forwarding srv6 to display L2VPN SRv6 forwarding information.

Syntax

display l2vpn forwarding srv6 [ vsi vsi-name | xconnect-group group-name ] [ verbose ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

vsi vsi-name: Specifies a VSI by its name, a case-sensitive string of 1 to 31 characters.

xconnect-group group-name: Specifies a cross-connect group by its name, a case-sensitive string of 1 to 31 characters. The group name cannot contain hyphens (-).

verbose: Displays detailed L2VPN SRv6 forwarding information. If you do not specify this keyword, the command displays only brief L2VPN SRv6 forwarding information.

Usage guidelines

If you do not specify a VSI or a cross-connect group, this command displays L2VPN SRv6 forwarding information for all VSIs and cross-connect groups.

Examples

# Display brief L2VPN SRv6 forwarding information.

<Sysname> display l2vpn forwarding srv6

Total number of cross-connections: 1

Total number of VSIs: 1

Total number of SRv6 tunnels: 2, 2 up, 0 blocked, 0 down

VSI Name : vpnb

Link ID : 0x9000000 Type: BE State: Up

In SID : 100::2

Out SID : 200::3

Xconnect-group Name : vpna

Connection Name : pw1

Link ID : 0x1 Type: BE State: Up

In SID : 100::1

Out SID : 200::1

Table 1 Command output

Field	Description
Link ID	Link ID of the SRv6 tunnel on the VSI or cross-connect group.
Type	Route recursion mode. After the PE receives a customer packet destined for an End.DX2, End.DT2M, or End.DT2U SID, it forwards the packet according to the route recursion mode. · BE—SRv6 BE mode. In this mode, the PE first encapsulates the End.DX2, End.DT2M, or End.DT2U SID into the packet. Then, the PE searches the IPv6 routing table based on the SID encapsulated in the packet to forward the encapsulated packet. · TE—SRv6 TE mode. In this mode, the PE first searches the tunnel policies for a matching SRv6 TE policy based on the next hop of a matching route. Then, the PE adds an SRH to the packet. The SRH includes the End.DX2, End.DT2M, or End.DT2U SID and the SID list of the SRv6 TE policy. Finally, the PE forwards the encapsulated packet through the SRv6 TE policy. · BE/TE—SRv6 TE and SRv6 BE hybrid mode. In this mode, the PE preferentially uses the SRv6 TE mode to forward the packet. If no SRv6 TE policy is available for the packet, the PE forwards the packet in SRv6 BE mode.
State	SRv6 tunnel status: · Up—The SRv6 tunnel is up. · Down—The SRv6 tunnel is down. · Blocked—The SRv6 tunnel is a bakup tunnel. Its tunnel interface is up, but the tunnel is blocked because the primary tunnel is operating correctly.
In SID	Input SID, which is a local SID.
Out SID	Output SID, which is a remote SID.

‌

# Display detailed L2VPN SRv6 forwarding information.

<Sysname> display l2vpn forwarding srv6 verbose

VSI Name: vpnb

Link ID : 0x9000000

SRv6 Tunnel Type : Ethernet

SRv6 Tunnel State : Up

In SID : 200::3

Out SID : 100::2

MTU : 1500

SRv6 Tunnel Attributes : Main

SRv6 Forwarding IDs : -

Remote Leaf Argument : -

Xconnect-group Name: vpna

Connection Name: pw1

Link ID : 0x1

SRv6 Tunnel Type : Ethernet

SRv6 Tunnel State : Up

In SID : 200::1

Out SID : 100::1

MTU : 1500

SRv6 Tunnel Attributes : Main

SRv6 Forwarding IDs : -

Table 2 Command output

Field	Description
Link ID	Link ID of the SRv6 tunnel on the VSI or cross-connect group.
SRv6 Tunnel Type	SRv6 PW data encryption type, Ethernet or VLAN.
SRv6 Tunnel State	SRv6 tunnel status: · Up—The SRv6 tunnel is up. · Down—The SRv6 tunnel is down. · Blocked—The SRv6 tunnel is a bakup tunnel. Its tunnel interface is up, but the tunnel is blocked because the primary tunnel is operating correctly.
In SID	Input SID, which is a local SID.
Out SID	Output SID, which is a remote SID.
MTU	Maximum transmission unit, in bytes.
SRv6 Tunnel Attributes	SRv6 tunnel attributes: · Main—The primary tunnel. · Backup—The backup tunnel. · ac-Bypass—The Bypass tunnel for AC bypass. · ECMP—ECMP tunnel.
SRv6 Forwarding IDs	Forwarding entry IDs of the candidate paths in an SRv6 TE policy. If service traffic is not forwarded through an SRv6 TE policy tunnel, this field displays a hyphen (-).
Remote Leaf Argument	Argument value used by the remote PE to identify leaf ACs. If no argument value exists, this field displays a hyphen (-).

‌

display l2vpn peer srv6

Use display l2vpn peer srv6 to display L2VPN SRv6 information.

Syntax

display l2vpn peer srv6 [ vsi vsi-name | xconnect-group group-name ] [ state-machine | verbose ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

vsi vsi-name: Specifies a VSI by its name, a case-sensitive string of 1 to 31 characters.

xconnect-group group-name: Specifies a cross-connect group by its name, a case-sensitive string of 1 to 31 characters.

state-machine: Displays L2VPN SRv6 state machine information.

verbose: Displays detailed L2VPN SRv6 information.

Usage guidelines

If you do not specify a VSI or a cross-connect group, this command displays L2VPN SRv6 information for all VSIs and cross-connect groups.

If you do not specify the state-machine or verbose keyword, this command displays brief information about L2VPN SRv6.

Examples

# Display brief information about L2VPN SRv6.

<Sysname> display l2vpn peer srv6

Total number of SRv6 Tunnels: 2

2 up, 0 blocked, 0 down

VSI Name: vpnb

Peer : 2::2

Flag : Main

State : Up

Xconnect-group Name: vpna

Peer : 2::2

Flag : Main

State : Up

Remote SrvID : 2

# Display detailed information about L2VPN SRv6.

<Sysname> display l2vpn peer srv6 verbose

VSI Name: vpnb

Peer: 2::2

Signaling Protocol : EVPN

Link ID : 0x9000000

SRv6 Tunnel State : Up

In SID : 100::2

Out SID : 200::3

MTU : 1500

SRv6 Tunnel Attributes : Main

Tunnel Group ID : 0x1000000030000000

Tunnel NHLFEIDs : 2150629380

Nexthop/interface : FE80::64BA:7AFF:FE48:317/ XGE3/1/1

Color : -

Remote Leaf Argument : -

Recursion Mode : SID based

Output Statistics :

Octets : 0

Packets : 0

Errors : 0

Discards : 0

Output Rate :

Bytes per second : 0

Packets per second : 0

Xconnect-group Name: vpna

Connection Name: pw1

Peer: 2::2

Remote Service ID : 2

Signaling Protocol : EVPN

Link ID : 0x1

SRv6 Tunnel State : Up

In SID : 100::1

Out SID : 200::1

MTU : 1500

SRv6 Tunnel Attributes : Main

Tunnel Group ID : 0x1000000030000000

SRv6 Forwarding IDs : 0

Color : -

Recursion Mode : SID based

All Peer Input Statistics :

Octets : 0

Packets : 0

Errors : 0

Discards : 0

Output Statistics :

Octets : 0

Packets : 0

Errors : 0

Discards : 0

All Peer Input Rate :

Bytes per second : 0

Packets per second : 0

Output Rate :

Bytes per second : 0

Packets per second : 0

Table 3 Command output

Field	Description
Peer	IPv6 address of the peer PE.
Flag	SRv6 tunnel flags: · Main—The primary tunnel. · Backup—The backup tunnel. · ac-Bypass—The Bypass tunnel for AC bypass. · ECMP—ECMP tunnel.
State/SRv6 Tunnel State	SRv6 tunnel status: · Up—The SRv6 tunnel is up. · Down—The SRv6 tunnel is down. · Blocked—The SRv6 tunnel is a backup tunnel. Its tunnel interface is up, but the tunnel is blocked because the primary tunnel is operating correctly.
Remote SrvID/Remote Service ID	Remote service ID.
Signaling Protocol	Signaling protocol used to establish the SRv6 tunnel. Supported values: · EVPN. · Static SRv6.
Link ID	Link ID of the SRv6 tunnel on the VSI or cross-connect group.
In SID	Input SID, which is a local SID.
Out SID	Output SID, which is a remote SID.
MTU	Maximum transmission unit, in bytes.
SRv6 Tunnel Attributes	SRv6 tunnel attributes: · Main—The primary tunnel. · Backup—The backup tunnel. · ac-Bypass—The Bypass tunnel for AC bypass. · ECMP—ECMP tunnel.
Tunnel Group ID	ID of the public network tunnel group that carries the SRv6 tunnel.
Tunnel NHLFEIDs	ID of the NHLFE entry for the public tunnel that carries the SRv6 tunnel when the SRv6 TE route recursion mode is used.
Nexthop/interface	Next hop and output interface of the public tunnel that carries the SRv6 tunnel when the SRv6 BE route recursion mode is used.
Color	Color attribute of the expected SRv6 TE policy for route recursion. If no color attribute is available, this field displays a hyphen (-).
Remote Leaf Argument	Argument value used by the remote PE to identify leaf ACs. If no argument value exists, this field displays a hyphen (-).
Recursion Mode	Route recursion mode of the SRv6 tunnel: · SID based—SRv6 BE mode. · Nexthop based—SRv6 TE mode. · Nexthop based/SID based—SRv6 TE and SRv6 BE hybrid mode.
Down Reason	SRv6 tunnel down reason: · MTU not match—The MTUs at the two ends of the SRv6 tunnel do not match. · Local AC Down—The local AC is down. · Local VSI admin Down—The local VSI is administratively down. · EVPN VPWS AD per EVI route received from peer—In the EVPN VPWS over SRv6 network, the local end does not receive A-D per EVI routes sent from the peer end. · EVPN VPWS AD per ES route not received from peer—In the EVPN VPWS over SRv6 network, the local end does not receive A-D per ES routes sent from the peer end. · SRv6 not configured with best effort or traffic engineering—No route recursion mode is configured for the SRv6 tunnel. · Tunnel Down—The route is not reachable in SRv6 BE recursion mode or no SRv6 TE policy is configured in SRv6 TE recursion mode. · BFD session for SRv6 PW down—BFD detects that the SRv6 tunnel is down. · Unknown.
All Peer Input Statistics	Total SRv6 PW incoming traffic statistics: · Octets—Number of incoming bytes. · Packets—Number of incoming packets. · Errors—Number of error packets. · Discards—Number of dropped packets. This field is not available in an EVPN VPLS over SRv6 network.
Output statistics	SRv6 PW outgoing traffic statistics: · Octets—Number of outgoing bytes. · Packets—Number of outgoing packets. · Errors—Number of error packets. · Discards—Number of dropped packets.
All Peer Input Rate	Total SRv6 PW incoming traffic rate: · Bytes per second—Number of incoming bytes per second. · Packets per second—Number of incoming packets per second. This field is not available in an EVPN VPLS over SRv6 network.
Output Rate	SRv6 PW outgoing traffic rate: · Bytes per second—Number of outgoing bytes per second. · Packets per second—Number of outgoing packets per second.

‌

# Display state machine information about L2VPN SRv6.

<Sysname> display l2vpn peer srv6 state-machine

SRv6 tunnel group state:

Idle: Idle N: Normal UA: Unavailable PF: Protecting failure

P: Protection tunnel failure W: Working tunnel failure L: Local

Total number of SRv6 tunnels: 2

VSI Name: vpnb

SRv6 Group Link ID : 0x9000000

Main SRv6 Tunnel:

Peer : 2::2

Backup SRv6 Tunnel : -

Signaling Protocol : EVPN

Main SRv6 Defect State : No defect

Backup SRv6 Defect State : -

Switch Result : Working

Switch Reason : None

Remote Event : -

Local Event : SFCW

SRv6 Group Old State : Idle

SRv6 Group State : UA:P:L

Xconnect-group Name: vpna

Connection Name: pw1

SRv6 Group Link ID : 0x1

Main SRv6 Tunnel:

Peer : 2::2

Service ID : 2

Backup SRv6 Tunnel : -

Signaling Protocol : EVPN

Main SRv6 Defect State : No defect

Backup SRv6 Defect State : -

Switch Result : Working

Switch Reason : None

Remote Event : -

Local Event : SFCW

SRv6 Group Old State : Idle

SRv6 Group State : UA:P:L

Table 4 Command output

Field	Description
Main SRv6 Tunnel	Primary SRv6 tunnel.
Peer	IPv6 address of the remote PE for the SRv6 tunnel.
Service ID	Service ID of the remote PE.
Backup SRv6 Tunnel	Backup SRv6 tunnel.
Signaling Protocol	Signaling protocol used to establish the SRv6 tunnels. The value is EVPN.
Main SRv6 Defect State	Defect state of the primary SRv6 tunnel: · No defect. · Signal defect—The signaling protocol detected defects.
Backup SRv6 Defect State	Defect state of the backup SRv6 tunnel: · No defect. · Signal defect—The signaling protocol detected defects. If no backup SRv6 tunnel exists, this field displays a hyphen (-).
Switch Result	SRv6 tunnel in use after a primary/backup tunnel switchover: · None—Neither the primary nor the backup SRv6 tunnel is in use. · Working—The primary SRv6 tunnel is in use. · Backup—The backup SRv6 tunnel is in use.
Switch Reason	Reason that causes the primary/backup tunnel switchover: · Config changed—An SRv6 tunnel is added to or removed from the tunnel redundancy group. · Fault detected—An SRv6 tunnel fault is detected. · SRv6 down—The state of an SRv6 tunnel changes from active to down. · SRv6 up—The state of an SRv6 tunnel changes from active to up. · None—No primary/backup tunnel switchover has occurred.
Remote Event	This field is not supported in the current software version. Remote state machine event.
Local Event	Local state machine event: · SFW—Local primary SRv6 tunnel defect event. · SFP—Local backup SRv6 tunnel defect event. · SFCW—Local primary SRv6 tunnel up event. · SFCP—Local backup SRv6 tunnel up event. · None—No local event.
SRv6 Group Old State	SRv6 tunnel redundancy group state before switchover: · Idle—Both the primary and backup SRv6 tunnels are not available. · Normal—Both the primary and backup SRv6 tunnels are available. The primary SRv6 tunnel is up and the backup SRv6 tunnel is blocked. The primary SRv6 tunnel is used to forward traffic. · UA:P:L—The backup SRv6 tunnel has defects and the primary SRv6 tunnel is up. · PF:W:L—The primary SRv6 tunnel has defects and the back SRv6 tunnel is up.
SRv6 Group State	SRv6 tunnel redundancy group state after switchover. The supported values are the same as those of the SRv6 Group Old State field.

‌

display l2vpn statistics srv6-pw inbound

Use display l2vpn statistics srv6-pw inbound to display incoming packet statistics for SRv6 PWs in an EVPN VPLS over SRv6 network.

Syntax

display l2vpn statistics srv6-pw inbound [ vsi vsi-name ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

vsi vsi-name: Specifies a VSI by its name, a case-sensitive string of 1 to 31 characters. If you do not specify a VSI, this command displays incoming packet statistics for all SRv6 PWs on all VSIs.

Usage guidelines

Use this command to display incoming packet statistics for all SRv6 PWs on the specified VSI or all VSIs.

To display outgoing packet statistics, use the display l2vpn peer srv6 verbose command.

Examples

# Display incoming packet statistics for all SRv6 PWs on VSI aaa.

<Sysname> display l2vpn statistics srv6-pw inbound vsi aaa

VSI name: aaa

Input statistics:

Octets : 0

Packets : 0

Errors : 0

Discards : 0

Input rate :

Bytes per second : 0

Packets per second : 0

Table 5 Command output

Field	Description
Input statistics	Incoming packet statistics for all SRv6 PWs: · Octets—Number of incoming bytes. · Packets—Number of incoming packets. · Errors—Number of error packets. · Discards—Number of discarded packets.
Input rate	Incoming traffic rate for all SRv6 PWs: · Bytes per second—Number of incoming bytes per second. · Packets per second—Number of incoming packets per second.

Field

Description

Input statistics

Incoming packet statistics for all SRv6 PWs:

· Octets—Number of incoming bytes.

· Packets—Number of incoming packets.

· Errors—Number of error packets.

· Discards—Number of discarded packets.

Input rate

Incoming traffic rate for all SRv6 PWs:

· Bytes per second—Number of incoming bytes per second.

· Packets per second—Number of incoming packets per second.

Related commands

reset l2vpn statistics srv6-pw

statistics enable

display l2vpn vsi

Use display l2vpn vsi to display L2VPN VSI information.

Syntax

display l2vpn vsi [ evpn-srv6 | name vsi-name ] [ count | verbose ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

evpn-srv6: Specifies VSIs in the EVPN VPLS over SRv6 network.

name vsi-name: Specifies a VSI by its name, a case-sensitive string of 1 to 31 characters.

count: Displays VSI statistics.

verbose: Displays detailed VSI information.

Usage guidelines

If you do not specify a VSI or the evpn-srv6 keyword, this command displays L2VPN VSI information for all VSIs.

If you do not specify the count or verbose keyword, this command displays brief VSI information.

Examples

# Display brief information about all VSIs in the EVPN VPLS over SRv6 network.

<Sysname> display l2vpn vsi evpn-srv6

Total number of VSIs: 1, 1 up, 0 down, 0 admin down

VSI Name VSI Index MTU State

vpnb 0 1500 Up

# Display statistics about all VSIs in the EVPN VPLS over SRv6 network.

<Sysname> display l2vpn vsi evpn-srv6 count

Total number of VSIs: 1, 1 up, 0 down, 0 admin down

Table 6 Command output

Field	Description
MTU	Maximum transmission unit of the VSI.
State	VSI state: · Up—The VSI is up. · Down—The VSI is down. · Admin down—The VSI is manually shut down by using the shutdown command.

Field

Description

MTU

Maximum transmission unit of the VSI.

State

VSI state:

· Up—The VSI is up.

· Down—The VSI is down.

· Admin down—The VSI is manually shut down by using the shutdown command.

‌

# Display detailed information about all VSIs in the EVPN VPLS over SRv6 network.

<Sysname> display l2vpn vsi evpn-srv6 verbose

VSI Name: vpnb

VSI Index : 0

VSI Description : vsi for vpnb

VSI State : Up

MTU : 1500

Diffserv Mode : -

Bandwidth : -

Broadcast Restrain : 5120 kbps

Multicast Restrain : 5120 kbps

Unknown Unicast Restrain: 5120 kbps

MAC Learning : Enabled

MAC Table Limit : -

MAC Learning rate : Unlimited

Local MAC aging time : 300 sec

Remote MAC aging time : 300 sec

Drop Unknown : Disabled

PW Redundancy Mode : Slave

Flooding : Enabled

ESI : 0000.0000.0000.0000.0000

Redundancy Mode : All-active

Straight-fwd PW-to-AC : Disabled

Statistics : Disabled

VXLAN ID : -

EVPN Encapsulation : SRv6

SRv6 SIDs:

Dt2U SID : 222::1(64/64/0)

Dt2UL SID : 222::2(64/64/0)

Dt2M SID : 222::3(64/64/0)

SRv6 tunnels:

Peer : 2::2

Link ID : 0x9000000

State : Up

ACs:

AC Link ID State

XGE3/1/1 0x0 Up

Statistics: Disabled

Table 7 Command output

Field	Description
VSI Description	VSI description. If no description is configured, this field is not available.
VSI State	VSI state: · Up—The VSI is up. · Down—The VSI is down. · Admin down—The VSI is manually shut down by using the shutdown command.
MTU	Maximum transmission unit of the VSI.
Diffserv Mode	DiffServ mode. Options include the following: · ingress—DiffServ mode for the inbound direction. · egress—DiffServ mode for the outbound direction. · pipe—Pipe mode. · short-pipe—Short-pipe mode. · uniform—Uniform mode · trust—Priority trust mode ¡ inner-dot1p—Trusts the inner 802.1p priority in packets. ¡ dscp—Trusts the DSCP in packets. af1, af2, af3, af4, be, cs6, cs7, or ef represents the MPLS EXP value. If no DiffServ mode is configured, this field displays a hyphen (-).
Bandwidth	Maximum bandwidth (in kbps) for known unicast traffic on the VSI.
Broadcast Restrain	Broadcast restraint bandwidth (in kbps).
Multicast Restrain	Multicast restraint bandwidth (in kbps).
Unknown Unicast Restrain	Unknown unicast restraint bandwidth (in kbps).
MAC Learning	State of the MAC learning feature.
MAC Tabel Limit	Maximum number of MAC address entries on the VSI. If the VSI does not limit the maximum number of MAC address entries, this field displays Unlimited.
MAC Learning rate	MAC address entry learning rate of the VSI.
Local MAC aging time	MAC aging time for dynamic local-MAC entries, in seconds. If dynamic local-MAC entries do not age out, this field displays NotAging.
Remote MAC aging time	MAC aging time for dynamic remote-MAC entries, in seconds. If dynamic remote-MAC entries do not age out, this field displays NotAging.
Drop Unknown	Action on source MAC-unknown frames received after the maximum number of MAC entries is reached.
PW Redundancy Mode	PW redundancy operation mode: · Slave—Master/slave mode and the local PE operates as the slave node. · Master—Master/slave mode and the local PE operates as the master node. · Independent—Independent mode.
Flooding	State of the VSI's flooding feature. This field is not supported by VPLS.
ESI	Ethernet segment identifier.
Redundancy Mode	Redundancy mode, all-active or single-active.
Straight-fwd PW-to-AC	Enabling status of the PW-to-AC straight forwarding feature in the VSI.
Statistics	Packet statistics state.
Input Statistics	Incoming traffic statistics: · Octets—Number of incoming bytes. · Packets—Number of incoming packets. · Errors—Number of error packets. · Discards—Number of dropped packets.
Output statistics	Outgoing traffic statistics: · Octets—Number of outgoing bytes. · Packets—Number of outgoing packets. · Errors—Number of error packets. · Discards—Number of dropped packets.
Input Rate	Incoming traffic rate: · Bytes per second—Number of incoming bytes per second. · Packets per second—Number of incoming packets per second. This field is not available in an EVPN VPLS over SRv6 network.
Output Rate	Outgoing traffic rate: · Bytes per second—Number of outgoing bytes per second. · Packets per second—Number of outgoing packets per second.
VXLAN ID	VXLAN ID. This field is not supported by VPLS.
EVPN Encapsulation	EVPN encapsulation type: · VXLAN. · MPLS. · SRv6.
SRv6 SIDs	SRv6 SIDs of the VSI.
Dt2U SID	SRv6 SID used for unicast forwarding in the EVPN VPLS over SRv6 network. The values in parentheses are the length of each segment in the SID, which are the locator length, opcode length, and argument length in sequence. The total length of those segments is 128.
Dt2Ul SID	SRv6 SID used for unicast forwarding over the bypass tunnel at the multihomed EVPN VPLS over SRv6 site. The values in parentheses are the length of each segment in the SID, which are the locator length, opcode length, and argument length in sequence. The total length of those segments is 128.
Dt2M SID	SRv6 SID used for flood forwarding in the EVPN VPLS over SRv6 network. The values in parentheses are the length of each segment in the SID, which are the locator length, opcode length, and argument length in sequence. The total length of those segments is 128.
SRv6 Tunnels	SRv6 tunnels on the VSI.
Peer	IPv6 address of the PW remote PE.
Link ID	Link ID of the SRv6 tunnel on the VSI.
State	SRv6 tunnel state, which can be Up, Down, Blocked, or Defect.
ACs	ACs of the VSI.
AC	For a Layer 3 interface, this field displays the interface name. For an Ethernet service instance, this field displays the name of the Ethernet service instance and the name of the Layer 2 interface where the Ethernet service instance name resides.
Link ID	Link ID of the AC on the VSI.
State	AC state, which can be Up or Down.
Statistics	AC packet statistics state.

‌

display l2vpn xconnect-group

Use display l2vpn xconnect-group to display L2VPN cross-connect group information.

Syntax

display l2vpn xconnect-group [ evpn-srv6 | name group-name [ connection connection-name ] | static-srv6 ] [ count | verbose ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

evpn-srv6: Specifies cross-connect groups in the EVPN VPWS over SRv6 network using dynamically established SRv6 PWs.

name group-name: Specifies a cross-connect group by its name, a case-sensitive string of 1 to 31 characters.

connection connection-name: Specifies a cross-connect by its name, a case-sensitive string of 1 to 20 characters. The cross-connect name cannot contain hyphens (-). If you do not specify a cross-connect, this command displays information about all cross-connects in the specified cross-connect group.

static-srv6: Specifies cross-connect groups in the EVPN VPWS over SRv6 network using statically established SRv6 PWs.

count: Displays cross-connect group statistics.

verbose: Displays detailed cross-connect group information.

Usage guidelines

If you do not specify a cross-connect group, the evpn-srv6 keyword, or the static-srv6 keyword, this command displays information for all cross-connect groups.

If you do not specify the count or verbose keyword, this command displays brief cross-connect group information.

Examples

# Display brief information about all cross-connect groups in the EVPN VPWS over SRv6 network.

<Sysname> display l2vpn xconnect-group evpn-srv6

Status Codes: UP - Up, DN - Down, DF - Defect, BD - Blocked, AD - Admin Down,

DL - Idle, DP - Duplicate

Total number of cross-connections: 1, 1 up, 0 down, 0 admin down

Xconnect-group Connection ST

Segment1 ST Segment2 ST

--------------------------------------------------------------------------------

vpna pw1 UP

XGE3/1/2 UP EVPN 2::2 UP

--------------------------------------------------------------------------------

# Display statistics about all cross-connect groups in the EVPN VPWS over SRv6 network.

<Sysname> display l2vpn xconnect-group evpn-srv6 count

Status Codes: UP - Up, DN - Down, DF - Defect, BD - Blocked, AD - Admin Down,

DL - Idle, DP - Duplicate

Total number of cross-connections: 1, 1 up, 0 down, 0 admin down

Table 8 Command output

Field	Description
ST	State of the cross-connect: · UP—The cross-connect is up. · DN—The cross-connect is down. · AD—The cross-connect is manullay shut down by using the shutdown command.
Segment1 / Segment2	For an AC segment: · If the AC is a Layer 3 interface, this field displays the interface name. · If the AC is an Ethernet service instance, this field displays the Ethernet service instance name. For an SRv6 tunnel segment, this field displays the establishment method of the SRv6 tunnel and the IPv6 address of the remote PE. Only the EVPN establishment method is supported.
ST	If this field displays AC state, the following options are available: · UP—The AC is up. · DN—The AC is down. If this field displays SRv6 tunnel state, the following options are available: · UP—The tunnel is up. · DN—The tunnel is down. · DF—BFD detects that the tunnel has defects. · BD—The tunnel is a backup tunnel. Its tunnel interface is up, but the tunnel is blocked because the primary tunnel is operating correctly. · DL—The input SID of the tunnel is not available. · DP—This option is not supported in the current software version.

‌

# Display detailed information about all cross-connect groups in the EVPN VPWS over SRv6 network.

<Sysname> display l2vpn xconnect-group verbose

Xconnect-group Name: vpna

Connection Name : pw1

Connection ID : 1

State : Up

MTU : 1500

PW Redundancy Mode : Slave

Diffserv Mode : -

SRv6 tunnels:

Peer : 2::2

Link ID : 0x1

Sub Link ID : 0x1

State : Up

ACs:

AC Link ID State

XGE3/1/1 0x0 Up

Statistics: Disabled

Xconnect-group Name: vpnb

Connection Name : pw2

Connection ID : 1

State : Up

MTU : 1500

PW Redundancy Mode : Slave

Diffserv Mode : -

Static SRv6 tunnels:

Peer : 11::9

Link ID : 0x0

Sub Link ID : 0x1

State : Up

ACs:

AC Link ID State

XGE3/1/2 0x0 Up

Statistics: Disabled

Table 9 Command output

Field	Description
Description	Description of the cross-connect group. If no description is configured, this field is not available.
State	Cross-connect group state: · Up—The cross-connect group is up. · Down—The cross-connect group is down. · Administratively down—The cross-connect group is manually shut down by using the shutdown command.
MTU	Maximum transmission unit of cross-connects.
PW Redundancy Mode	PW redundancy operation mode: · Slave—Master/slave mode and the local PE operates as the slave node. · Master—Master/slave mode and the local PE operates as the master node. · Independent—Independent mode.
Diffserv Mode	DiffServ mode. Options include the following: · ingress—DiffServ mode for the inbound direction. · egress—DiffServ mode for the outbound direction. · pipe—Pipe mode. · short-pipe—Short-pipe mode. · uniform—Uniform mode · trust—Priority trust mode ¡ inner-dot1p—Trusts the inner 802.1p priority in packets. ¡ dscp—Trusts the DSCP in packets. af1, af2, af3, af4, be, cs6, cs7, or ef represents the MPLS EXP value. If no DiffServ mode is configured, this field displays a hyphen (-).
SRv6 tunnels	Information about dynamic SRv6 PWs.
Static SRv6 tunnels	Information about static SRv6 PWs.
Peer	IPv6 address of the SRv6 PW remote PE.
Link ID	Link ID of the SRv6 PW on the cross-connect.
Sub Link ID	Sublink ID of the SRv6 PW on the cross-connect. The sublink ID of an SRv6 PW identifies the SRv6 PW among all SRv6 PWs with the same link ID.
State	SRv6 PW state, which can be Up, Down, Blocked, or Defect.
ACs	AC information.
AC	For a Layer 3 interface, this field displays the interface name. For an Ethernet service instance, this field displays the name of the Ethernet service instance and the name of the Layer 2 interface where the Ethernet service instance name resides.
Link ID	Link ID of the AC on the cross-connect.
State	AC state, which can be Up or Down.
Statistics	AC packet statistics state.

‌

encapsulation source-address

Use encapsulation source-address to specify a source address for the outer IPv6 header of SRv6 VPN packets.

Use undo encapsulation source-address to restore the default.

Syntax

encapsulation source-address ipv6-address [ ip-ttl ttl-value ]

undo encapsulation source-address

Default

No source address is specified for the outer IPv6 header of SRv6 VPN packets.

Views

SRv6 view

Predefined user roles

network-admin

Parameters

ipv6-address: Specifies a source IPv6 address. The IPv6 address cannot be a loopback address, link-local address, multicast address, or unspecified address.

ip-ttl ttl-value: Specifies the TTL of the outer IPv6 header, in the range of 1 to 255. The default value is 255.

Usage guidelines

To ensure correct VPN traffic forwarding in an SRv6 VPN network, you must specify a source address for the outer IPv6 header of SRv6 VPN packets.

You must specify an IPv6 address of the local device as the source IPv6 address, and make sure the IPv6 address has been advertised by a routing protocol. As a best practice, specify a loopback interface address of the local device as the source IPv6 address.

Examples

# Specify 1::1 as the source address of SRv6 VPN packets in the outer IPv6 header and set the TTL of the outer IPv6 header to 200.

<Sysname> system-view

[Sysname] segment-routing ipv6

[Sysname-segment-routing-ipv6] encapsulation source-address 1::1 ip-ttl 200

evpn encapsulation srv6

Use evpn encapsulation srv6 to create an EVPN instance, specify it to use SRv6 encapsulation, and enter its view, or enter the view of an existing EVPN instance that uses SRv6 encapsulation.

Use undo evpn encapsulation to restore the default.

Syntax

evpn encapsulation srv6

undo evpn encapsulation

Default

No EVPN instance is created.

Views

VSI view

Cross-connect group view

Predefined user roles

network-admin

Usage guidelines

Before you can configure EVPN settings for a VSI or cross-connect group, you must create an EVPN instance on it.

This command is mutually exclusive with the evpn encapsulation binding instance command. You cannot use them together on the same VSI.

Examples

# Create an EVPN instance and specify it to use SRv6 encapsulation on VSI aaa and enter its view.

<Sysname> system-view

[Sysname] vsi aaa

[Sysname-vsi-aaa] evpn encapsulation srv6

[Sysname-vsi-aaa-evpn-srv6]

evpn encapsulation srv6 binding instance

Use evpn encapsulation srv6 binding instance to bind a VSI to an EVPN instance.

Use undo evpn encapsulation to restore the default.

Syntax

evpn encapsulation srv6 binding instance instance-name vsi-tag tag-id

undo evpn encapsulation

Default

A VSI is not bound to any EVPN instance.

Views

VSI view

Predefined user roles

network-admin

Parameters

instance-name: Specifies an EVPN instance by its name, a case-sensitive string of 1 to 31 characters.

vsi-tag tag-id: Specifies a VSI tag ID in the range of 1 to 4094. An EVPN instance uses tag IDs to identify VSIs when it is bound to multiple VSIs.

Usage guidelines

You can bind a VSI only to one EVPN instance.

This command is mutually exclusive with the evpn encapsulation srv6 command. You cannot use them together on the same VSI.

Examples

# Bind VSI vpna to EVPN instance evpna.

<Sysname> system-view

[Sysname] vsi vpna

[Sysname -vsi-vpna] evpn encapsulation srv6 binding instance evpna vsi-tag 1000

Related commands

evpn encapsulation srv6

evpn vpws local-service-id remote-service-id

Use evpn vpws local-service-id remote-service-id to create an SRv6 PW on a VSI EVPN instance for intercommunication with an EVPN VPWS over SRv6 network.

Use undo evpn vpws local-service-id remote-service-id to delete an SRv6 PW from a VSI EVPN instance.

Syntax

evpn vpws local-service-id local-service-id remote-service-id remote-service-id forwarding-preferred

Undo evpn vpws local-service-id local-service-id remote-service-id remote-service-id forwarding-preferred

Default

No SRv6 PW exists on a VSI EVPN instance for intercommunication with an EVPN VPWS over SRv6 network.

Views

VSI EVPN instance view

Predefined user roles

network-admin

Parameters

local-service-id local-service-id: Specifies a local service ID in the range of 4096 to 16777215.

remote-service-id remote-service-id: Specifies a remote service ID in the range of 4096 to 16777215.

forwarding-preferred: Forwards BUM traffic received from ACs only through the PW created by using this command.

Usage guidelines

Use this command in VSI EVPN instance view to create an SRv6 PW for intercommunication between EVPN VPLS over SRv6 and EVPN VPWS over SRv6 networks.

Examples

# On the EVPN instance for VSI vpna, create an SRv6 PW for intercommunication with an EVPN VPWS over SRv6 network. The local service ID for the SRv6 PW is 5001 and the remote service ID is 5000.

<Sysname> system-view

[Sysname] vsi aaa

[Sysname-vsi-aaa] evpn encapsulation srv6

[Sysname-vsi-aaa-evpn-srv6] evpn vpws local-service-id 5001 remote-service-id 5000 forwarding-preferred

export route-policy

Use export route-policy to apply an export routing policy to an EVPN instance.

Use undo export route-policy to restore the default.

Syntax

export route-policy route-policy

undo export route-policy

Default

No export routing policy is applied to an EVPN instance.

Views

EVPN instance view

Predefined user roles

network-admin

Parameters

route-policy: Specifies a routing policy by its name, a case-sensitive string of 1 to 63 characters.

Usage guidelines

You can specify an export routing policy to filter advertised routes or modify their route attributes for EVPN.

If you execute this command multiple times, the most recent configuration takes effect.

Examples

# Apply export routing policy poly-1 to the EVPN instance on VSI vpna.

<Sysname> system-view

[Sysname] vsi vpna

[Sysname-vsi-vpna] evpn encapsulation srv6

[Sysname-vsi-vpna-evpn-srv6] route-distinguisher 1:1

[Sysname-vsi-vpna-evpn-srv6] export route-policy poly-1

Related commands

route-policy (Layer 3—IP Routing Command Reference)

import route-policy

Use import route-policy to apply an import routing policy to an EVPN instance.

Use undo import route-policy to restore the default.

Syntax

import route-policy route-policy

undo import route-policy

Default

No import routing policy is applied to an EVPN instance. The EVPN instance accepts a route when the route targets of the route match local import route targets.

Views

EVPN instance view

Predefined user roles

network-admin

Parameters

route-policy: Specifies a routing policy by its name, a case-sensitive string of 1 to 63 characters.

Usage guidelines

You can specify an import routing policy to filter received routes or modify their route attributes for EVPN.

If you execute this command multiple times, the most recent configuration takes effect.

Examples

# Apply import routing policy poly-1 to the EVPN instance on VSI vpna.

<Sysname> system-view

[Sysname] vsi vpna

[Sysname-vsi-vpna] evpn encapsulation srv6

[Sysname-vsi-vpna-evpn-srv6] route-distinguisher 1:1

[Sysname-vsi-vpna-evpn-srv6] import route-policy poly-1

Related commands

route-policy (Layer 3—IP Routing Command Reference)

nexthop interface (BGP IPv4 SR next hop view/BGP-VPN IPv4 SR next hop view/BGP-VPN IPv4 EVPN SR next hop view)

Use nexthop interface to specify a next hop to which an End.DX4 SID can be dynamically allocated and specify the output interface of the next hop.

Use undo nexthop to restore the default.

Syntax

nexthop nexthop-address interface interface-type interface-number

undo nexthop nexthop-address

Default

No End.DX4 SID is allocated to a next hop.

Views

BGP-VPN IPv4 SR next hop view

BGP-VPN IPv4 EVPN SR next hop view

BGP IPv4 SR next hop view

Predefined user roles

network-admin

Parameters

nexthop-address: Specifies a next hop by its IPv4 address.

interface-type interface-number: Specifies an output interface by its type and number.

Usage guidelines

This command is applicable to the IPv4 MPLS L3VPN over SRv6, IPv4 EVPN L3VPN over SRv6, or public network IPv4 over SRv6 scenario to accelerate traffic forwarding. This command allocates an End.DX4 SID to the specified next hop for BGP IPv4 routes and associates the next hop with an output interface.

Use one of the following methods to allocate End.DX4 SIDs to next hops:

· Use this command to dynamically allocate an End.DX4 SID to a next hop from the locator applied to the VPN instance or public instance.

Make sure the output interface specified for the next hop in this command is consistent with the output interface of that next hop in the routing table. If they are inconsistent, the device cannot dynamically allocate an End.DX4 SID to the next hop.

· Use the opcode end-dx4 vpn-instance command to manually configure an End.DX4 SID in the locator applied to the VPN instance or public instance.

Make sure the output interface specified for the next hop in the opcode end-dx4 vpn-instance command is consistent with the output interface of that next hop in the routing table. If they are inconsistent, the device cannot use the manually configured End.DX4 SID to forward traffic.

If both methods are used for the same next hop, the manually configured End.DX4 SID takes precedence over the dynamically allocated one.

You can specify only one output interface for one next hop. To change the output interface of a next hop, first use the undo nexthop command to remove the original next hop and output interface association.

The device might be unable to dynamically allocate SIDs to BGP IPv4 routes based on the route next hops when dynamic SID resources are insufficient. If the device does not have manually configured End.DX4 SIDs, it allocates the End.DT4 SID or End.DT46 SID of the VPN instance or public instance to the routes.

Examples

# In BGP IPv4 SR next hop view, allow the system to allocate an End.DX4 SID to next hop 10.1.1.2 and specify Ten-GigabitEthernet 3/1/1 as the output interface of the next hop.

<Sysname> system-view

[Sysname] bgp 100

[Sysname-bgp-default] address-family ipv4 unicast

[Sysname-bgp-default-ipv4] segment-routing ipv6 locator aaa

[Sysname-bgp-default-ipv4] segment-routing ipv6 apply-sid specify-nexthop

[Sysname-bgp-default-sid-np-ipv4] nexthop 10.1.1.2 interface ten-gigabitethernet 3/1/1

Related commands

opcode

nexthop interface (BGP SRv6 next hop view/BGP-VPN SRv6 next hop view/BGP-VPN IPv6 EVPN SR next hop view)

Use nexthop interface to specify a next hop to which an End.DX6 SID can be dynamically allocated and specify the output interface of the next hop.

Use undo nexthop to restore the default.

Syntax

nexthop nexthop-ipv6-address interface interface-type interface-number

undo nexthop nexthop-ipv6-address

Default

No End.DX6 SID is allocated to a next hop.

Views

BGP-VPN SRv6 next hop view

BGP-VPN IPv6 EVPN SR next hop view

BGP SRv6 next hop view

Predefined user roles

network-admin

Parameters

nexthop-ipv6-address: Specifies a next hop by its IPv6 address.

interface-type interface-number: Specifies an output interface by its type and number.

Usage guidelines

This command is applicable to the IPv6 MPLS L3VPN over SRv6, IPv6 EVPN L3VPN over SRv6, or public network IPv6 over SRv6 scenario to accelerate traffic forwarding. This command allocates an End.DX6 SID to the specified next hop for BGP IPv6 routes and associates the next hop with an output interface.

Use one of the following methods to allocate End.DX6 SIDs to next hops:

· Use this command to dynamically allocate an End.DX6 SID to a next hop from the locator applied to the VPN instance or public instance.

· Use the opcode end-dx6 vpn-instance command to manually configure an End.DX6 SID in the locator applied to the VPN instance or public instance.

Make sure the output interface specified for the next hop in the opcode end-dx6 vpn-instance command is consistent with the output interface of that next hop in the routing table. If they are inconsistent, the device cannot use the manually configured End.DX6 SID to forward traffic.

If both methods are used for the same next hop, the manually configured End.DX6 SID takes precedence over the dynamically allocated one.

The device might be unable to dynamically allocate SIDs to BGP IPv6 routes based on the route next hops when dynamic SID resources are insufficient. If the device does not have manually configured End.DX6 SIDs, it allocates the End.DT6 SID or End.DT46 SID of the VPN instance or public instance to the routes.

Examples

# In BGP SRv6 next hop view, allow the system to allocate an End.DX6 SID to next hop 10::1:2 and specify Ten-GigabitEthernet 3/1/1 as the output interface of the next hop.

<Sysname> system-view

[Sysname] bgp 100

[Sysname-bgp-default] address-family ipv6 unicast

[Sysname-bgp-default-ipv6] segment-routing ipv6 locator aaa

[Sysname-bgp-default-ipv6] segment-routing ipv6 apply-sid specify-nexthop

[Sysname-bgp-default-sid-np-ipv6] nexthop 10::1:2 interface ten-gigabitethernet 3/1/1

Related commands

opcode

peer

Use peer to configure a static SRv6 PW for a cross-connect and enter cross-connect static SRv6 PW view, or enter the view of an existing cross-connect static SRv6 PW.

Use undo peer to delete a static SRv6 PW.

Syntax

peer ipv6-address end-dx2-sid remote-locator locator-name opcode opcode [ color color-value | tunnel-policy tunnel-policy-name ]

undo peer ipv6-address end-dx2-sid remote-locator locator-name opcode opcode

Default

No static SRv6 PWs exist.

Views

Cross-connect static SRv6 view

Predefined user roles

network-admin

Parameters

ipv6-address: Specifies the IPv6 address of the remote PE on the static SRv6 PW.

remote-locator locator-name: Specifies the remote locator name, a case-sensitive string of 1 to 31 characters.

opcode opcode: Specifies the opcode for SRv6 SIDs, in the range of 1 to 2static-length-1, where the static-length is determined by the remote-locator command.

color color-value: Specifies the color value for the static SRv6 PW, in the range of 0 to 4294967295. If you do not specify this option, the color of the static SRv6 PW is not specified.

Usage guidelines

Execute this command on the local PE. The local PE obtains the SRv6 SID assigned by the remote PE to the cross-connect through the locally configured locator and opcode.

Examples

# Configure a static SRv6 PW for a cross-connect and enter its view. Specify the IPv6 address of the remote PE of the PW as 1::1, the remote locator as aaa, and the opcode as 1.

<Sysname> system-view

[Sysname] xconnect-group vpna

[Sysname-xcg-vpna] connection pw1

[Sysname-xcg-vpna-pw1] static-srv6 local-service-id 1 remote-service-id 2 tunnel-policy 1

[Sysname-xcg-vpna-pw1-1-2] peer 1::1 end-dx2-sid remote-locator aaa opcode 1

[Sysname-xcg-vpna-pw1-1-2-1::1-aaa-1]

Related commands

backup-peer

bypass-peer

peer advertise encap-type srv6

Use peer advertise encap-type srv6 to enable SRv6 encapsulation for the EVPN IP prefix advertisement routes advertised to a peer or peer group.

Use undo peer advertise encap-type srv6 to disable SRv6 encapsulation for the EVPN IP prefix advertisement routes advertised to a peer or peer group.

Syntax

peer { group-name | ipv6-address [ prefix-length ] } advertise encap-type srv6

undo peer { group-name | ipv6-address [ prefix-length ] } advertise encap-type srv6

Default

IP prefix advertisement routes use VXLAN encapsulation.

Views

BGP EVPN address family view

Predefined user roles

network-admin

Parameters

group-name: Specifies a peer group by its name, a case-sensitive string of 1 to 47 characters. The peer group must exist.

ipv6-address: Specifies a peer by its IPv6 address. The peer must exist.

prefix-length: Specifies a prefix length in the range of 0 to 128. To specify a subnet, you must specify both the ipv6-address and prefix-length arguments.

Usage guidelines

Use this command to enable the device to advertise EVPN IP prefix advertisement routes with SRv6 encapsulation in an EVPN L3VPN over SRv6 network.

Execute this command on the edge nodes of the EVPN L3VPN network and RRs.

Examples

# Enable SRv6 encapsulation for the IP prefix advertisement routes advertised to peer 1::1.

<Sysname> system-view

[Sysname] bgp 100

[Sysname-bgp-default] address-family l2vpn evpn

[Sysname-bgp-default-evpn] peer 1::1 advertise encap-type srv6

peer advertise original-route

Use peer advertise original-route to enable the device to advertise original BGP VPNv4, VPNv6, or EVPN routes to a peer or peer group.

Use undo peer advertise original-route to restore the default.

Syntax

peer { group-name | ipv4-address [ mask-length ] | ipv6-address [ prefix-length ] } advertise original-route

undo peer { group-name | ipv4-address [ mask-length ] | ipv6-address [ prefix-length ] } advertise original-route

Default

The device advertises reoriginated BGP VPNv4, VPNv6, or EVPN routes to peers and peer groups after the peer re-originated command is executed.

Views

BGP VPNv4 address family view

BGP VPNv6 address family view

BGP EVPN address family view

Predefined user roles

network-admin

Parameters

group-name: Specifies a peer group by its name, a case-sensitive string of 1 to 47 characters. The peer group must exist.

ipv4-address: Specifies a peer by its IPv4 address. The peer must exist.

mask-length: Specifies a mask length in the range of 0 to 32. To specify a subnet, you must specify both the ipv4-address and mask-length arguments.

ipv6-address: Specifies a peer by its IPv6 address. The peer must exist.

prefix-length: Specifies a prefix length in the range of 0 to 128. To specify a subnet, you must specify both the ipv6-address and prefix-length arguments.

Usage guidelines

For this command to take effect, you must execute the peer re-originated command.

The device configured with the peer re-originated command advertises only reoriginated BGP VPNv4, VPNv6, or EVPN routes. For the device to advertise both original and reoriginated BGP VPNv4, VPNv6, or EVPN routes to a peer or peer group, execute the peer advertise original-route command on the device.

Examples

# In BGP VPNv4 address family view, enable the device to advertise original BGP VPNv4 routes to peer 1.1.1.1.

<Sysname> system-view

[Sysname] bgp 100

[Sysname-bgp-default] address-family vpnv4

[Sysname-bgp-default-vpnv4] peer 1.1.1.1 advertise original-route

Related commands

peer re-originated

peer suppress re-originated

peer prefix-sid

Use peer prefix-sid to enable BGP to exchange SRv6 SID information with an IPv6 peer or peer group.

Use undo peer prefix-sid to restore the default.

Syntax

peer { group-name | ipv6-address [ prefix-length ] } prefix-sid

undo peer { group-name | ipv6-address [ prefix-length ] } prefix-sid

Default

BGP does not exchange SRv6 SID information with an IPv6 peer or peer group.

Views

BGP VPNv4 address family view

BGP VPNv6 address family view

BGP IPv4 unicast address family view

BGP IPv6 unicast address family view

Predefined user roles

network-admin

Parameters

group-name: Specifies a peer group by its name, a case-sensitive string of 1 to 47 characters. The peer group must exist.

ipv6-address: Specifies a peer by its IPv6 address. The peer must exist.

prefix-length: Specifies a prefix length in the range of 0 to 128. To specify a subnet, you must specify both the ipv6-address and prefix-length arguments.

Usage guidelines

Use this command to enable IPv6 peers in an SRv6 VPN network to exchange SRv6 SID information through BGP VPNv4, VPNv6, IPv4 unicast, or IPv6 unicast routes.

Examples

# In BGP VPNv4 address family view, enable BGP to exchange SRv6 SID information with peer 2001:1::1.

<Sysname> system-view

[Sysname] bgp 100

[Sysname-bgp-default] address-family vpnv4

[Sysname-bgp-default-vpnv4] peer 2001:1::1 prefix-sid

peer re-originated (BGP EVPN address family view)

Use peer re-originated to enable the device to reoriginate BGP EVPN routes based on the BGP EVPN routes received from a peer or peer group.

Use undo peer re-originated to disable the device from reoriginating BGP EVPN routes based on the BGP EVPN routes received from a peer or peer group.

Syntax

peer { group-name | ipv4-address [ mask-length ] | ipv6-address [ prefix-length ] } re-originated [ ip-prefix ] [ replace-rt | stitch-l3vpn ]

undo peer { group-name | ipv4-address [ mask-length ] | ipv6-address [ prefix-length ] } re-originated [ ip-prefix ]

Default

The device does not reoriginate BGP EVPN routes based on received EVPN routes.

Views

BGP EVPN address family view

Predefined user roles

network-admin

Parameters

group-name: Specifies a peer group by its name, a case-sensitive string of 1 to 47 characters. The peer group must exist.

ipv4-address: Specifies a peer by its IPv4 address. The peer must exist.

mask-length: Specifies a mask length in the range of 0 to 32. To specify a subnet, you must specify both the ipv4-address and mask-length arguments.

ipv6-address: Specifies a peer by its IPv6 address. The peer must exist.

prefix-length: Specifies a prefix length in the range of 0 to 128. To specify a subnet, you must specify both the ipv6-address and prefix-length arguments.

ip-prefix: Modifies IP prefix advertisement routes.

replace-rt: Replaces the L3 VXLAN ID, RD, and route targets of EVPN IP prefix advertisement routes with those of the matching local VPN instance, and adds MPLS labels or SRv6 SIDs to the routes. If you do not specify this keyword, the device performs the same operations except that it does not replace the route targets.

stitch-l3vpn: Reoriginates IP prefix advertisement routes as VPNv4/VPNv6 routes without modifying the RD and route targets of the routes.

Usage guidelines

Use this command without the stitch-l3vpn keyword on an ASBR that connects the EVPN L3VPN and EVPN L3VPN over SRv6 networks. This command enables the ASBR to modify EVPN route information to realize intercommunication between the MPLS and SRv6 networks.

Use this command with the stitch-l3vpn keyword on an ASBR that connects the MPLS L3VPN and EVPN L3VPN over SRv6 networks or connects the EVPN L3VPN and IP L3VPN over SRv6 networks. This command enables conversion between EVPN routes and VPNv4/VPNv6 routes to realize intercommunication between the MPLS and SRv6 networks.

After you execute this command without the stitch-l3vpn keyword on an ASBR, the ASBR performs the following operations:

· After receiving BGP EVPN routes from the EVPN L3VPN network, the ASBR performs the following operations:

a. Matches the route targets of the routes with the import route targets of local VPN instances.

b. Replaces the RD and route targets of the routes with those of the matching local VPN instance. In addition, the ASBR adds an SRv6 SID to the routes and maps the SRv6 SID of the routes to the private label of the routes.

c. Advertises the reoriginated routes to the SRv6 network.

· After receiving BGP EVPN routes from the SRv6 network, the ASBR performs the following operations:

a. Matches the route targets of the routes with the import route targets of local VPN instances.

b. Replaces the RD and route targets of the routes with those of the matching local VPN instance. In addition, the ASBR adds MPLS labels to the routes and maps the private label of the routes to the SRv6 SID of the routes.

c. Advertises the reoriginated routes to the EVPN L3VPN network.

After you execute this command with the stitch-l3vpn keyword on an ASBR, the ASBR performs the following operations after receiving BGP EVPN routes from the SRv6 network or MPLS network:

1. Matches the route targets of the routes with the import route targets of local VPN instances.

2. Reoriginates the matching IP prefix advertisement routes as VPNv4 or VPNv6 routes without modifying the RD or route targets of the routes. In addition, the ASBR adds MPLS labels to the routes and maps the private label of the routes to the SRv6 SID of the routes.

3. Advertises the reoriginated routes to the MPLS L3VPN network.

This command enables the device to advertise only reoriginated routes to the specified peer or peer group. The original routes are not advertised.

If the RD of a received BGP EVPN route is identical to the RD of the matching local VPN instance, a device does not modify the route or reoriginate the route. As a result, the device does not advertise the route. As a best practice, assign unique RDs to VPN instances on different devices if you use this command.

Examples

# In BGP EVPN address family view, replace the RD and route targets of the EVPN routes received from peer 1.1.1.1 and add an MPLS label or SRv6 SID to the routes.

<Sysname> system-view

[Sysname] bgp 100

[Sysname-bgp-default] address-family l2vpn evpn

[Sysname-bgp-default-evpn] peer 1.1.1.1 re-originated replace-rt

Related commands

peer advertise original-route

peer suppress re-originated

peer re-originated (BGP VPNv4/VPNv6 address family view)

Use peer re-originated to enable the device to reoriginate BGP VPNv4 or VPNv6 routes based on the BGP VPNv4 or VPNv6 routes received from a peer or peer group.

Use undo peer re-originated to disable the device from reoriginating BGP VPNv4 or VPNv6 routes based on the BGP VPNv4 or VPNv6 routes received from a peer or peer group.

Syntax

peer { group-name | ipv4-address [ mask-length ] | ipv6-address [ prefix-length ] } re-originated [ replace-rt | stitch-evpn ]

undo peer { group-name | ipv4-address [ mask-length ] | ipv6-address [ prefix-length ] } re-originated

Default

The device does not reoriginate BGP VPNv4 or VPNv6 routes based on received BGP VPNv4 or VPNv6 routes.

Views

BGP VPNv4 address family view

BGP VPNv6 address family view

Predefined user roles

network-admin

Parameters

group-name: Specifies a peer group by its name, a case-sensitive string of 1 to 47 characters. The peer group must exist.

ipv4-address: Specifies a peer by its IPv4 address. The peer must exist.

mask-length: Specifies a mask length in the range of 0 to 32. To specify a subnet, you must specify both the ipv4-address and mask-length arguments.

ipv6-address: Specifies a peer by its IPv6 address. The peer must exist.

prefix-length: Specifies a prefix length in the range of 0 to 128. To specify a subnet, you must specify both the ipv6-address and prefix-length arguments.

replace-rt: Replaces the RD and route targets of VPNv4 or VPNv6 routes with those of the matching local VPN instance, and adds MPLS labels or SRv6 SIDs to the routes. If you do not specify this keyword, the device performs the same operations except that it does not replace the route targets.

stitch-evpn: Reoriginates VPNv4 or VPNv6 routes as EVPN IP prefix advertisement routes without modifying the RD and route targets of the routes.

Usage guidelines

Use this command without the stitch-evpn keyword on an ASBR that connects the MPLS L3VPN and IP L3VPN over SRv6 networks. This command enables the ASBR to modify VPNv4 or VPNv6 route information to realize intercommunication between the MPLS and SRv6 networks.

Use this command with the stitch-evpn keyword on an ASBR that connects the EVPN L3VPN and IP L3VPN over SRv6 networks or connects the MPLS L3VPN and EVPN L3VPN over SRv6 networks. This command enables conversion between VPNv4/VPNv6 routes and EVPN routes to realize intercommunication between the MPLS and SRv6 networks.

After you execute this command without the stitch-evpn keyword on an ASBR, the ASBR performs the following operations:

· After receiving BGP VPNv4 or VPNv6 routes from the MPLS L3VPN network, the ASBR performs the following operations:

a. Matches the route targets of the routes with the import route targets of local VPN instances.

c. Advertises the reoriginated routes to the SRv6 network.

· After receiving BGP VPNv4 or VPNv6 routes from the SRv6 network, the ASBR performs the following operations:

a. Matches the route targets of the routes with the import route targets of local VPN instances.

c. Advertises the reoriginated routes to the MPLS L3VPN network.

After you execute this command with the stitch-evpn keyword on an ASBR, the ASBR performs the following operations after receiving BGP VPNv4 or VPNv6 routes from the SRv6 network or MPLS network:

1. Matches the route targets of the routes with the import route targets of local VPN instances.

2. Reoriginates the matching BGP VPNv4 or VPNv6 routes as EVPN IP prefix advertisement routes without modifying the RD or route targets of the routes. In addition, the ASBR adds MPLS labels to the routes and maps the private label of the routes to the SRv6 SID of the routes.

3. Advertises the reoriginated routes to the EVPN L3VPN network.

This command enables the device to advertise only reoriginated routes to the specified peer or peer group. The original routes are not advertised.

If the RD of a received BGP VPNv4 or VPNv6 route is identical to the RD of the matching local VPN instance, a device does not modify the route or reoriginate the route. As a result, the device does not advertise the route. As a best practice, assign unique RDs to VPN instances on different devices if you use this command.

Examples

# In BGP VPNv4 address family view, replace the RD and route targets of the BGP VPNv4 routes received from peer 1.1.1.1 and add an MPLS label or SRv6 SID to the routes.

<Sysname> system-view

[Sysname] bgp 100

[Sysname-bgp-default] address-family vpnv4

[Sysname-bgp-default-vpnv4] peer 1.1.1.1 re-originated replace-rt

Related commands

peer advertise original-route

peer suppress re-originated

peer srv6-vpn compatible

Use peer srv6-vpn compatible to enable SRv6 VPN compatibility for a peer or peer group.

Use undo peer srv6-vpn compatible to disable SRv6 VPN compatibility for a peer or peer group.

Syntax

peer { group-name | ipv6-address [ prefix-length ] } srv6-vpn compatible [ srv6-sid-transposition ]

undo peer { group-name | ipv6-address [ prefix-length ] } srv6-vpn compatible

Default

SRv6 VPN compatibility is disabled. The device uses the non-transposition scheme defined in draft-ietf-bess-srv6-services-07 to encapsulate the SRv6 SIDs carried in advertised BGP routes.

Views

BGP VPNv4 address family view

BGP VPNv6 address family view

Predefined user roles

network-admin

Parameters

group-name: Specifies an existing peer group by its name, a case-sensitive string of 1 to 47 characters.

ipv6-address: Specifies an existing peer by its IPv6 address.

prefix-length: Specifies the prefix length, in the range of 0 to 128. If you specify this argument, you specify the dynamic peers in the specified network.

srv6-sid-transposition: Uses the transposition scheme defined in draft-ietf-bess-srv6-services-07 to encapsulate the SRv6 SIDs carried in advertised BGP routes. If you do not specify this keyword, the device encapsulates the SRv6 SIDs carried in advertised BGP routes in the format defined in draft-dawra-idr-srv6-vpn-04.

Usage guidelines

In an IP L3VPN over SRv6 network, the BGP VPNv4 or VPNv6 routes exchanged between PEs carry SRv6 SIDs. When the SRv6 SIDs are encapsulated in different formats, the BGP route advertisement fails. To resolve this issue, you can execute this command to configure the SRv6 SID encapsulation format to be the same as that supported by the peer device.

Examples

# Configure the device to use the format defined in draft-dawra-idr-srv6-vpn-04 to encapsulate the SRv6 SIDs in the BGP routes sent to peer 2::2.

<Sysname> system-view

[Sysname] bgp 1

[Sysname-bgp-default] address-family vpnv4

[Sysname-bgp-default-vpnv4] peer 2::2 srv6-vpn compatible

peer suppress re-originated

Use peer suppress re-originated to suppress advertisement of reoriginated BGP EVPN, BGP VPNv6, or BGP VPNv4 routes to a peer or peer group.

Use undo peer suppress re-originated to restore the default.

Syntax

In BGP VPNv4 address family view or BGP VPNv6 address family view:

peer { group-name | ipv4-address [ mask-length ] | ipv6-address [ prefix-length ] } suppress re-originated

undo peer { group-name | ipv4-address [ mask-length ] | ipv6-address [ prefix-length ] } suppress re-originated

In BGP EVPN address family view:

peer { group-name | ipv4-address [ mask-length ] | ipv6-address [ prefix-length ] } suppress re-originated ip-prefix

undo peer { group-name | ipv4-address [ mask-length ] | ipv6-address [ prefix-length ] } suppress re-originated ip-prefix

Default

The device advertises reoriginated BGP EVPN, BGP VPNv6, or BGP VPNv4 routes to peers and peer groups after the peer re-originated command is executed.

Views

BGP VPNv4 address family view

BGP VPNv6 address family view

BGP EVPN address family view

Predefined user roles

network-admin

Parameters

group-name: Specifies a peer group by its name, a case-sensitive string of 1 to 47 characters. The peer group must exist.

ipv4-address: Specifies a peer by its IPv4 address. The peer must exist.

mask-length: Specifies a mask length in the range of 0 to 32. To specify a subnet, you must specify both the ipv4-address and mask-length arguments.

ipv6-address: Specifies a peer by its IPv6 address. The peer must exist.

prefix-length: Specifies a prefix length in the range of 0 to 128. To specify a subnet, you must specify both the ipv6-address and prefix-length arguments.

ip-prefix: Suppresses advertisement of reoriginated EVPN IP prefix advertisement routes to the specified peer or peer group.

Usage guidelines

The device configured with the peer re-originated and peer advertise original-route commands advertises both original and reoriginated BGP EVPN, BGP VPNv6, or BGP VPNv4 routes. For the device to advertise only original BGP EVPN, BGP VPNv6, or BGP VPNv4 routes to a peer or peer group, execute the peer suppress re-originated command on the device.

Examples

# In BGP VPNv4 address family view, suppress advertisement of reoriginated BGP VPNv4 routes to peer 1.1.1.1.

<Sysname> system-view

[Sysname] bgp 100

[Sysname-bgp-default] address-family vpnv4

[Sysname-bgp-default-vpnv4] peer 1.1.1.1 suppress re-originated

Related commands

peer advertise original-route

peer re-originated

ping evpn vpls srv6

Use ping evpn vpls srv6 to test the connectivity of an SRv6 PW in an EVPN VPLS over SRv6 network by pinging a remote PE from the local PE.

Syntax

Views

Any view

Predefined user roles

network-admin

Parameters

vsi vsi-name: Specifies a VSI by its name, a case-sensitive string of 1 to 31 characters.

mac mac-address: Specifies a host attached to a remote PE by its MAC address in H-H-H format. Do not specify a broadcast MAC address, multicast MAC address, or all-zeros MAC address.

end-op endop: Specifies an End.OP SID to be added to MPLS echo requests. The End.OP SID is used to locate the destination node. If you do not specify an End.OP SID, the device does not add an End.OP SID to MPLS echo requests.

-a source-ipv6: Specifies the source IPv6 address of MPLS echo requests. The specified IPv6 address must be advertised to remote PEs through a routing protocol. If you do not specify a source IPv6 address, the source IPv6 address of MPLS echo requests is the IPv6 address specified by using the encapsulation source-address command.

-c count: Specifies the number of MPLS echo requests to be sent. The value range for the count argument is 1 to 4294967295, and the default value is 5.

-h hop-limit: Specifies the maximum number of hops allowed for an MPLS echo request. The value range for the hop-limit argument is 1 to 255, and the default value is 255.

-m interval: Specifies the interval at which an MPLS echo request is sent, in milliseconds. The value range for the interval argument is 1 to 10000, and the default value is 2000.

-r reply-mode: Specifies the reply mode used by the receiver (the remote PE) to reply to MPLS echo requests. The value for the reply-mode argument can be 2 or 4, and the default value is 2. If the mode is 2, the receiver searches the IP forwarding table for the destination IP address to forward MPLS echo replies. If the mode is 4, the receiver searches the IPv6 routing table for the source IPv6 address of the echo requests, encapsulates an SRH to the replies, and forwards them.

-s packet-size: Specifies the length of MPLS echo requests, in bytes. The value range for the packet-size argument is 80 to 1200, and the default value is 100. The specified packet length does not include the IPv6 header and UDP header length.

-t time-out: Specifies the timeout time of MPLS echo replies, in milliseconds. The value range for the time-out argument is 0 to 65535, and the default value is 2000. If the local PE does not receive an MPLS echo reply within the timeout time after sending an MPLS echo request, it determines that the MPLS echo reply times out.

-tc tc: Specifies the traffic class value in MPLS echo requests. The value range for the tc argument is 0 to 255 and the default value is 0.

Usage guidelines

In an EVPN VPLS over SRv6 network, a PE transmits data packets to a remote PE over an SRv6 PW. Use this command to test the connectivity of the SRv6 PW from the local PE to the remote PE when packet loss or traffic interruption occurs between the PEs.

Examples

# Test the connectivity of the SRv6 PW from the local PE to the remote PE attached to the host with MAC address 2-2-2 in VSI vpna.

<System> ping evpn vpls srv6 vsi vpna mac 2-2-2

Ping a remote PE in VSI vpna over SRv6 by reaching remote-MAC 0002-0002-0002: 100 data bytes.

Press CTRL+C to break.

100 bytes from 11::2: sequence=1 time=1 ms

100 bytes from 11::2: sequence=2 time=2 ms

100 bytes from 11::2: sequence=3 time=1 ms

100 bytes from 11::2: sequence=4 time=2 ms

100 bytes from 11::2: sequence=5 time=1 ms

--- Ping statistics for MAC 0002-0002-0002 ---

5 packets transmitted, 5 packets received, 0.0% packets lost

Round-trip min/avg/max = 1/1/2 ms

Table 10 Command output

Field	Description
Ping a remote PE in VSI vpna over SRv6 by reaching remote-MAC 0002-0002-0002: 100 data bytes	Ping a remote PE through an SRv6 PW in VSI vpna by reaching remote-MAC 0002-0002-0002. Each MPLS echo request contains 100 bytes.
Press CTRL+C to break	Press escape key Ctrl+C to abort the ping operation.
100 bytes from 11::2: sequence=1 time=1 ms	Received MPLS echo replies from the device whose IPv6 address is 11::2. · bytes—Number of bytes in the MPLS echo reply. · Sequence—Packet sequence, used to determine whether a segment is lost, disordered or repeated. · time—Response time. If no MPLS echo reply is received when the echo reply timeout time expires, the device displays Request time out.
Ping statistics for MAC 0002-0002-0002	Statistics on data received and sent in the ping operation.
5 packets transmitted	Number of MPLS echo requests sent.
5 packets received	Number of MPLS echo replies received.
0.0% packets lost	Percentage of unacknowledged packets to the total packets sent.
Round-trip min/avg/max = 1/1/2 ms	Minimum, average, or maximum response time, in milliseconds.

Related commands

tracert evpn vpls srv6

ping { evpn | static } vpws srv6

Use ping { evpn | static } vpws srv6 to test the connectivity of an SRv6 PW in an EVPN VPWS over SRv6 network by pinging a remote PE from the local PE.

Syntax

ping { evpn | static } vpws srv6 xconnect-group group-name local-service-id remote-service-id [ end-op endop ] [ -a source-ipv6 | -c count | -h hop-limit | -m interval | -r reply-mode | -s packet-size | -t time-out | -tc tc ] *

Views

Any view

Predefined user roles

network-admin

Parameters

evpn: Specifies a dynamic SRv6 PW.

static: Specifies a static SRv6 PW.

xconnect-group group-name: Specifies a cross-connect group by its name, a case-sensitive string of 1 to 31 characters. The string cannot contain a hyphen (-).

local-service-id: Specifies a local service ID in the range of 1 to 16777215.

remote-service-id: Specifies a remote service ID in the range of 1 to 16777215.

end-op endop: Specifies an End.OP SID to be added to MPLS echo requests. The End.OP SID is used to locate the destination node. If you do not specify an End.OP SID, the local PE does not add an End.OP SID to MPLS echo requests.

-c count: Specifies the number of MPLS echo requests to be sent. The value range for the count argument is 1 to 4294967295, and the default value is 5.

-h hop-limit: Specifies the maximum number of hops allowed for an MPLS echo request. The value range for the hop-limit argument is 1 to 255 and the default value is 255.

-m interval: Specifies the interval at which an MPLS echo request is sent. The value range for the interval argument is 1 to 10000 milliseconds and the default value is 2000 milliseconds.

-tc tc: Specifies the traffic class value in MPLS echo requests. The value range for the tc argument is 0 to 255 and the default value is 0.

Usage guidelines

In an EVPN VPWS over SRv6 network, a PE transmits data packets to a remote PE over an SRv6 PW. Use this command to test the connectivity of the SRv6 PW from the local PE to the remote PE when packet loss or traffic interruption occurs between the PEs.

Examples

# Ping a remote PE through an SRv6 PW with local service ID 2 and remote service ID 1 in cross-connect group xcga.

<Sysname> ping evpn vpws srv6 xconnect-group xcga 2 1

Ping a remote PE over SRv6 through a PW with local service ID 2 and remote service ID 1 in cross-connect group xcga: 100 data bytes.

Press CTRL+C to break.

100 bytes from 111::100: sequence=1 time=2 ms

100 bytes from 111::100: sequence=2 time=2 ms

100 bytes from 111::100: sequence=3 time=1 ms

100 bytes from 111::100: sequence=4 time=1 ms

100 bytes from 111::100: sequence=5 time=2 ms

--- Ping statistics for the PW with local ID 2 and remote ID 1 ---

5 packets transmitted,5 packets received,0.00% packets lost

Round-trip min/avg/max = 1/1/2 ms

Table 11 Command output

Field	Description
Ping a remote PE over SRv6 through a PW with local service ID 2 and remote service ID 1 in cross-connect group xcga: 100 data bytes	Ping a remote PE through an SRv6 PW with local service ID 2 and remote service ID 1 in cross-connect group xcga. Each MPLS echo request contains 100 bytes.
Press CTRL+C to break	Press escape key Ctrl+C to abort the ping operation.
100 bytes from 111::100: sequence=5 time=1 ms	Received MPLS echo replies from the device whose IPv6 address is 111::100. · bytes—Number of bytes in the MPLS echo reply. · sequence—Packet sequence, used to determine whether a segment is lost, disordered or repeated. · time—Response time. If no MPLS echo reply is received when the echo reply timeout time expires, the device displays Request time out.
Ping statistics for the PW with local ID 2 and remote ID 1	Statistics on data received and sent in the ping operation.
5 packets transmitted	Number of MPLS echo requests sent.
5 packets received	Number of MPLS echo replies received.
0.0% packets lost	Percentage of unacknowledged packets to the total packets sent.
Round-trip min/avg/max = 1/1/2 ms	Minimum, average, or maximum response time, in milliseconds.

Related commands

tracert { evpn | static } vpws srv6

reset l2vpn statistics srv6-pw

Use reset l2vpn statistics srv6-pw to clear SRv6 PW packet statistics.

Syntax

reset l2vpn statistics srv6-pw [ vsi vsi-name [ peer ipv6-address ] | xconnect-group group-name [ connection connection-name ] ]

Views

User view

Predefined user roles

network-admin

Parameters

vsi vsi-name: Specifies a VSI by its name, a case-sensitive string of 1 to 31 characters.

peer ipv6-address: Specifies a remote PE by its IPv6 address to clear outgoing packet statistics for the SRv6 PWs between the local PE and the specified remote PE. If you do not specify a remote PE, this command clears all SRv6 PW packet statistics for the specified VSI.

xconnect-group group-name: Specifies a cross-connect group by its name, a case-sensitive string of 1 to 31 characters.

connection connection-name: Specifies a cross-connect by its name, a case-sensitive string of 1 to 20 characters. If you do not specify a cross-connect, this command clears all SRv6 PW packet statistics for the specified cross-connect group.

Usage guidelines

This command clears packet statistics for both primary and backup SRv6 PWs.

If you do not specify any parameters, this command clears all SRv6 PW packet statistics.

Examples

# Clear all SRv6 PW packet statistics.

<Sysname> reset l2vpn statistics srv6-pw

Related commands

statistics enable

segment-routing ipv6

Use segment-routing ipv6 to specify a route recursion mode.

Use undo segment-routing ipv6 to restore the default.

Syntax

In EVPN instance view:

segment-routing ipv6 { best-effort | traffic-engineering | traffic-engineering best-effort }

undo segment-routing ipv6

In cross-connect group EVPN instance view, VSI EVPN instance view, or cross-connect static SRv6 view:

segment-routing ipv6 { best-effort | traffic-engineering [ track-bfd ] | traffic-engineering [ track-bfd ] best-effort }

undo segment-routing ipv6

Default

The device searches the IPv6 routing table based on the next hop of a matching route to forward traffic.

Views

EVPN instance view

Cross-connect group EVPN instance view

VSI EVPN instance view

Cross-connect static SRv6 view

Predefined user roles

network-admin

Parameters

best-effort: Specifies the SRv6 BE mode.

traffic-engineering: Specifies the SRv6 TE mode.

traffic-engineering best-effort: Specifies the SRv6 TE and SRv6 BE hybrid mode.

track-bfd: Associates the SRv6 TE policy that contains paths between two PEs with the static BFD session specified for testing the IP connectivity between the PEs in SRv6 TE mode. For this purpose, you must specify this keyword and create a static BFD session to test the IP connectivity between the two PEs. If the static BFD session goes down, the state of the SRv6 TE policy also changes to down. This mechanism avoids traffic forwarding failure caused by path disconnectivity.

Usage guidelines

Use this command in an EVPN VPWS over SRv6 or EVPN VPLS over SRv6 network.

After the PE receives a customer packet destined for an End.DX2, End.DT2M, or End.DT2U SID, it forwards the packet according to the route recursion mode.

· SRv6 BE mode—This mode is also called SID-based forwarding mode. In this mode, the PE first encapsulates the End.DX2, End.DT2M, or End.DT2U SID into the packet. Then, the PE searches the IPv6 routing table based on the SID encapsulated in the packet to forward the packet.

· SRv6 TE mode—This mode is also called next hop-based forwarding mode. In this mode, when the PE forwards the packet, it first searches the tunnel policies for a matching SRv6 TE policy based on the next hop of a matching route. Then, the PE adds an SRH to the packet. The SRH includes the End.DX2, End.DT2M, or End.DT2U SID and the SID list of the SRv6 TE policy. Finally, the PE forwards the encapsulated packet through the SRv6 TE policy.

· SRv6 TE and SRv6 BE hybrid mode—In this mode, the PE preferentially uses the SRv6 TE mode to forward the packet. If no SRv6 TE policy is available for the packet, the PE forwards the packet in SRv6 BE mode.

Examples

# In VSI EVPN instance view, specify the SRv6 BE route recursion mode.

<Sysname> system-view

[Sysname] vsi aaa

[Sysname-vsi-aaa] evpn encapsulation srv6

[Sysname-vsi-aaa-mpls-srv6] segment-routing ipv6 best-effort

# In cross-connect group EVPN instance view, specify the SRv6 BE route recursion mode.

<Sysname> system-view

[Sysname] xconnect-group vpna

[Sysname-xcg-vpna] evpn encapsulation srv6

[Sysname-xcg-vpna-evpn-mpls] segment-routing ipv6 best-effort

Related commands

bfd static (High Availability Command Reference)

segment-routing ipv6 apply-sid all-nexthop (BGP IPv4/IPv6 address family view)

Use segment-routing ipv6 apply-sid all-nexthop to dynamically allocate an End.DX4 or End.DX6 SID to each next hop of BGP IPv4 or IPv6 routes in the public network.

Use undo segment-routing ipv6 apply-sid all-nexthop to restore the default.

Syntax

segment-routing ipv6 apply-sid all-nexthop

undo segment-routing ipv6 apply-sid all-nexthop

Default

A PE allocates the End.DT4, End.DT6, or End.DT46 SID of the public instance to BGP IPv4 or IPv6 routes in the public network.

Views

BGP IPv4 unicast address family view

BGP IPv6 unicast address family view

Predefined user roles

network-admin

Usage guidelines

Use this command to forward an SRv6 decapsulated public network packet to the next hop without looking up the routing table of the public network.

This command is applicable to the public network IPv4 or IPv6 over SRv6 scenario. By default, a PE allocates the same SID to all BGP public network routes. When the PE removes the SRv6 encapsulation from a received packet, it looks up the routing table of the public network based on the SID for an optimal route. To forward the packet to the next hop without looking up the routing table, use this command.

This command dynamically allocates an End.DX4 or End.DX6 SID to each next hop for the BGP public network IPv4 or IPv6 routes. When forwarding a packet, the PE searches for the output interface and next hop based on the End.DX4 or End.DX6 SID of the packet. Then, the PE directly forwards the packet out of the output interface to the next hop.

Before you use this command in BGP IPv4 or IPv6 unicast address family view, execute the segment-routing ipv6 locator command in the same view to apply a locator to the view. This ensures successful dynamic End.DX4 or End.DX6 SID allocation.

In the same view, the segment-routing ipv6 apply-sid all-nexthop command is mutually exclusive with the segment-routing ipv6 apply-sid specify-nexthop command. Do not use both commands in the same view.

The device might be unable to dynamically allocate SIDs to BGP public network routes based on the route next hops when dynamic SID resources are insufficient. If the device does not have manually configured End.DX4 or End.DX6 SIDs, it allocates the End.DT4 SID, End.DT6 SID, or End.DT46 SID of the public instance to the routes.

The segment-routing ipv6 apply-sid all-nexthop command does not assign End.DX4 or End.DX6 SIDs to direct routes.

Examples

# In BGP IPv4 unicast address family view, enable the system to automatically allocate an End.DX4 SID to each next hop of BGP public network routes.

<Sysname> system-view

[Sysname] bgp 100

[Sysname-bgp-default] address-family ipv4 unicast

[Sysname-bgp-default-ipv4] segment-routing ipv6 locator aaa

[Sysname-bgp-default-ipv4] segment-routing ipv6 apply-sid all-nexthop

Related commands

segment-routing ipv6 apply-sid specify-nexthop

segment-routing ipv6 locator

segment-routing ipv6 apply-sid all-nexthop (BGP-VPN IPv4/IPv6 address family view)

Use segment-routing ipv6 apply-sid all-nexthop to dynamically allocate an End.DX4 or End.DX6 SID to each next hop of BGP private network routes.

Use undo segment-routing ipv6 apply-sid all-nexthop to restore the default.

Syntax

segment-routing ipv6 apply-sid all-nexthop [ evpn ]

undo segment-routing ipv6 apply-sid all-nexthop [ evpn ]

Default

VPN instance-based SID allocation is used for BGP private network routes.

Views

BGP-VPN IPv4 unicast address family view

BGP-VPN IPv6 unicast address family view

Predefined user roles

network-admin

Parameters

evpn: Allocates SIDs to private network routes based on the route next hops when the routes are converted to EVPN routes. If you do not specify this keyword, the command allocates SIDs to private network routes based on the route next hops when the routes are converted to BGP VPNv4 or VPNv6 routes.

Usage guidelines

Use this command to forward an SRv6 decapsulated VPN packet to the next hop without looking up the routing table of the matching VPN instance.

This command is applicable to MPLS L3VPN over SRv6 and EVPN L3VPN over SRv6 networks. By default, a PE allocates the same SID to all BGP private network routes of a VPN instance. When the PE removes the SRv6 encapsulation from a received packet, it looks up the routing table of the VPN instance based on the SID for an optimal route. Then, the PE forwards the packet to a CE. To forward the packet to the next hop without looking up the routing table, use this command.

This command dynamically allocates an End.DX4 or End.DX6 SID to each next hop of the BGP private network routes in a VPN instance based on the next hop addresses. When forwarding a packet, the PE searches for the output interface and next hop based on the End.DX4 or End.DX6 SID of the packet. Then, the PE directly forwards the packet out of the output interface to the next hop.

Before you use this command in BGP-VPN IPv4 or IPv6 unicast address family view, execute the segment-routing ipv6 locator command in the same view to apply a locator to the view. This ensures successful dynamic End.DX4 or End.DX6 SID allocation.

The device might be unable to dynamically allocate SIDs to BGP private network routes in a VPN instance based on the route next hops when dynamic SID resources are insufficient. If the device does not have manually configured End.DX4 or End.DX6 SIDs, it allocates the End.DT4 SID, End.DT6 SID, or End.DT46 SID of the VPN instance to the routes.

The segment-routing ipv6 apply-sid all-nexthop command does not assign End.DX4 or End.DX6 SIDs to direct routes.

Examples

# In BGP-VPN IPv4 unicast address family view, enable the device to dynamically allocate an End.DX4 or End.DX6 SID to each next hop of BGP private network routes.

<Sysname> system-view

[Sysname] bgp 100

[Sysname-bgp-default] ip vpn-instance vpn1

[Sysname-bgp-default-vpn1] address-family ipv4

[Sysname-bgp-default-ipv4-vpn1] segment-routing ipv6 locator aaa

[Sysname-bgp-default-ipv4-vpn1] segment-routing ipv6 apply-sid all-nexthop

Related commands

segment-routing ipv6 apply-sid specify-nexthop

segment-routing ipv6 locator

segment-routing ipv6 apply-sid specify-nexthop (BGP IPv4/IPv6 address family view)

Use segment-routing ipv6 apply-sid specify-nexthop to configure next hop-specific dynamic End.DX4 or End.DX6 SID allocation for BGP public network IPv4 or IPv6 routes, and create and enter BGP IPv4 SR or SRv6 next hop view. If the view already exists, the command directly places you in the view.

Use undo segment-routing ipv6 apply-sid specify-nexthop to restore the default.

Syntax

segment-routing ipv6 apply-sid specify-nexthop

undo segment-routing ipv6 apply-sid specify-nexthop

Default

A PE allocates the End.DT4, End.DT6, or End.DT46 SID of the public instance to BGP public network IPv4 or IPv6 routes.

Views

BGP IPv4 unicast address family view

BGP IPv6 unicast address family view

Predefined user roles

network-admin

Usage guidelines

This command is applicable to the public network IPv4 or IPv6 over SRv6 scenario.

By default, a PE allocates the same SID to all BGP public network routes. When a PE removes the SRv6 encapsulation from a received packet, it looks up the routing table of the public network based on the SID for an optimal route. To forward the packet to the next hop without looking up the routing table, use this command and the nexthop interface command.

This command and the nexthop interface command dynamically allocate an End.DX4 or End.DX6 SID to the specified next hop. When forwarding a packet, the PE searches for the output interface and next hop based on the End.DX4 or End.DX6 SID of the packet. Then, the PE directly forwards the packet out of the output interface to the next hop.

Before you use the segment-routing ipv6 apply-sid specify-nexthop command in BGP IPv4 or IPv6 unicast address family view, execute the segment-routing ipv6 locator command in the same view to apply a locator to the view. This ensures successful dynamic End.DX4 or End.DX6 SID allocation.

In the same view, the segment-routing ipv6 apply-sid specify-nexthop command is mutually exclusive with the segment-routing ipv6 apply-sid all-nexthop command. Do not use both commands in the same view.

The segment-routing ipv6 apply-sid specify-nexthop command does not assign End.DX4 or End.DX6 SIDs to direct routes.

Examples

# In BGP IPv4 unicast address family view, configure next hop-specific dynamic End.DX4 SID allocation for BGP public network IPv4 routes, and create and enter BGP IPv4 SR next hop view.

<Sysname> system-view

[Sysname] bgp 100

[Sysname-bgp-default] address-family ipv4 unicast

[Sysname-bgp-default-ipv4] segment-routing ipv6 locator aaa

[Sysname-bgp-default-ipv4] segment-routing ipv6 apply-sid specify-nexthop

[Sysname-bgp-default-sid-np-ipv4]

Related commands

nexthop interface

segment-routing ipv6 apply-sid all-nexthop

segment-routing ipv6 locator

segment-routing ipv6 apply-sid specify-nexthop (BGP-VPN IPv4/IPv6 address family view)

Use segment-routing ipv6 apply-sid specify-nexthop to configure next hop-specific dynamic End.DX4 or End.DX6 SID allocation for BGP private network IPv4 or IPv6 routes, and create and enter BGP-VPN IPv4 SR or SRv6 next hop view. If the view already exists, the command directly places you in the view.

Use undo segment-routing ipv6 apply-sid specify-nexthop to restore the default.

Syntax

segment-routing ipv6 apply-sid specify-nexthop [ evpn ]

undo segment-routing ipv6 apply-sid specify-nexthop [ evpn ]

Default

A PE allocates the End.DT4, End.DT6, or End.DT46 SID of a VPN instance to the BGP private network IPv4 or IPv6 routes of that VPN instance.

Views

BGP-VPN IPv4 unicast address family view

BGP-VPN IPv6 unicast address family view

Predefined user roles

network-admin

Parameters

evpn: Enables next hop-specific dynamic End.DX4 or End.DX6 SID allocation for private network routes when the routes are converted to BGP EVPN routes in an EVPN L3VPN over SRv6 network. If you do not specify this keyword, this command enables nexthop-specific dynamic End.DX4 or End.DX6 SID allocation for private network routes when the routes are converted to BGP VPNv4 or VPNv6 routes.

Usage guidelines

This command is applicable to the MPLS L3VPN over SRv6 and EVPN L3VPN over SRv6 scenarios.

By default, a PE allocates the same SID to all BGP routes of a VPN instance. When the PE removes the SRv6 encapsulation from a received packet, it looks up the routing table of the VPN instance based on the SID for an optimal route. Then, the PE forwards the packet to a CE. To forward the packet to the next hop without looking up the routing table, use this command and the nexthop interface command.

Before you use the segment-routing ipv6 apply-sid specify-nexthop command in BGP-VPN IPv4 or IPv6 unicast address family view, execute the segment-routing ipv6 locator command in the same view to apply a locator to the view. This ensures successful dynamic End.DX4 or End.DX6 SID allocation.

The segment-routing ipv6 apply-sid specify-nexthop command does not assign End.DX4 or End.DX6 SIDs to direct routes.

Examples

# In BGP-VPN IPv4 unicast address family view, configure next hop-specific dynamic End.DX4 SID allocation for BGP private network IPv4 routes, and create and enter BGP-VPN IPv4 SR next hop view.

<Sysname> system-view

[Sysname] bgp 100

[Sysname-bgp-default] ip vpn-instance vpn1

[Sysname-bgp-default-vpn1] address-family ipv4 unicast

[Sysname-bgp-default-ipv4-vpn1] segment-routing ipv6 locator aaa

[Sysname-bgp-default-ipv4-vpn1] segment-routing ipv6 apply-sid specify-nexthop

[Sysname-bgp-default-sid-np-ipv4]

Related commands

nexthop interface

segment-routing ipv6 apply-sid all-nexthop

segment-routing ipv6 locator

segment-routing ipv6 best-effort

Use segment-routing ipv6 best-effort to recurse routes to SRv6 BE tunnels.

Use undo segment-routing ipv6 best-effort to restore the default.

Syntax

In BGP-VPN IPv4 unicast address family view or BGP-VPN IPv6 unicast address family view:

segment-routing ipv6 best-effort [ evpn ]

undo segment-routing ipv6 best-effort [ evpn ]

In BGP VPNv4 address family view or BGP VPNv6 address family view:

segment-routing ipv6 best-effort

undo segment-routing ipv6 best-effort

In BGP IPv4 unicast address family view or BGP IPv6 unicast address family view:

segment-routing ipv6 best-effort

undo segment-routing ipv6 best-effort

BGP EVPN address family view:

segment-routing ipv6 best-effort evpn

undo segment-routing ipv6 best-effort evpn

Default

A PE searches the IPv6 routing table based on the next hop of a matching route to forward traffic.

Views

BGP-VPN IPv4 unicast address family view

BGP-VPN IPv6 unicast address family view

BGP IPv4 unicast address family view

BGP IPv6 unicast address family view

BGP VPNv4 address family view

BGP VPNv6 address family view

BGP EVPN address family view

Predefined user roles

network-admin

Parameters

evpn: Recurses EVPN routes to SRv6 BE tunnels. If you do not specify this keyword, the device recurses BGP VPNv4 or VPNv6 routes to SRv6 BE tunnels.

Usage guidelines

This command is applicable to the MPLS L3VPN over SRv6 and EVPN L3VPN over SRv6 networks. This command enables a PE to forward packets by looking up the IPv6 routing table based on the SRv6 SIDs in the packets.

Use this command in different address family views according to your network scenario.

· In the private network IPv4 or IPv6 over SRv6 scenario, use this command in BGP-VPN IPv4 unicast address family view or BGP-VPN IPv6 unicast address family view.

· In the public network IPv4 or IPv6 over SRv6 scenario, use this command in BGP IPv4 unicast address family view or BGP IPv6 unicast address family view.

· In the inter-AS option B VPN scenario, use this command in BGP VPNv4 address family view, BGP VPNv6 address family view, or BGP EVPN address family view.

This command is mutually exclusive with the segment-routing ipv6 traffic-engineering command.

Examples

# In BGP-VPN IPv4 unicast address family view, recurse private network routes to SRv6 BE tunnels.

<Sysname> system-view

[Sysname] bgp 100

[Sysname-bgp-default] ip vpn-instance vpn1

[Sysname-bgp-default-vpn1] address-family ipv4

[Sysname-bgp-default-ipv4-vpn1] segment-routing ipv6 best-effort

# In BGP-VPN IPv6 unicast address family view, recurse private network routes to SRv6 BE tunnels.

<Sysname> system-view

[Sysname] bgp 100

[Sysname-bgp-default] ip vpn-instance vpn1

[Sysname-bgp-default-vpn1] address-family ipv6

[Sysname-bgp-default-ipv6-vpn1] segment-routing ipv6 best-effort

Related commands

segment-routing ipv6 locator

Use segment-routing ipv6 locator to apply a locator to a BGP family.

Use undo segment-routing ipv6 locator to restore the default.

Syntax

In BGP-VPN IPv4 unicast address family view or BGP-VPN IPv6 unicast address family view:

segment-routing ipv6 locator locator-name [ evpn ] [ auto-sid-disable ]

undo segment-routing ipv6 locator [ evpn ]

In BGP VPNv4 address family view, BGP VPNv6 address family view, BGP IPv4 unicast address family view, or BGP IPv6 unicast address family view:

segment-routing ipv6 locator locator-name [ auto-sid-disable ]

undo segment-routing ipv6 locator

In BGP EVPN address family view:

segment-routing ipv6 locator locator-name evpn [ auto-sid-disable ]

undo segment-routing ipv6 locator evpn

Default

No locator is applied to a BGP family.

Views

BGP-VPN IPv4 unicast address family view

BGP-VPN IPv6 unicast address family view

BGP VPNv4 address family view

BGP VPNv6 address family view

BGP EVPN address family view

BGP IPv4 unicast address family view

BGP IPv6 unicast address family view

Predefined user roles

network-admin

Parameters

locator-name: Specifies a locator by its name, a case-sensitive string of 1 to 31 characters. The specified locator must exist.

evpn: Adds the SID attribute to private network routes when the routes are converted to EVPN routes. If you do not specify this keyword, the command adds the SID attribute to private network routes when the routes are converted to BGP VPNv4 or VPNv6 routes.

auto-sid-disable: Disables automatic SRv6 SID allocation. If you do not specify this keyword, the device allows dynamically allocated SRv6 SIDs. If static SRv6 SIDs are configured when automatic SRv6 SID allocation is enabled, the static SRv6 SIDs take precedence. If no static SRv6 SIDs are configured when automatic SRv6 SID allocation is enabled, the system dynamically allocates SRv6 SIDs.

Usage guidelines

Use this command to enable a BGP family to use BGP routes to advertise SRv6 SIDs in the specified locator.

If you execute this command multiple times for the same address family, the most recent configuration takes effect.

Examples

# Apply locator abc to BGP-VPN IPv4 unicast address family view.

<Sysname> system-view

[Sysname] bgp 100

[Sysname-bgp-default] ip vpn-instance vpn1

[Sysname-bgp-default-vpn1] address-family ipv4

[Sysname-bgp-default-ipv4-vpn1] segment-routing ipv6 locator abc

# Apply locator abc to BGP-VPN IPv6 unicast address family view.

<Sysname> system-view

[Sysname] bgp 100

[Sysname-bgp-default] ip vpn-instance vpn1

[Sysname-bgp-default-vpn1] address-family ipv6

[Sysname-bgp-default-ipv6-vpn1] segment-routing ipv6 locator abc

# Apply locator abc to BGP-VPN IPv6 unicast address family view.

<Sysname> system-view

[Sysname] bgp 100

[Sysname-bgp-default] ip vpn-instance vpn1

[Sysname-bgp-default-vpn1] address-family ipv6

[Sysname-bgp-default-ipv6-vpn1] segment-routing ipv6 locator abc evpn

segment-routing ipv6 locator (cross-connect view, EVPN instance view, and VSI EVPN instance view)

Use segment-routing ipv6 locator to apply an SRv6 locator to a cross-connect or a VSI.

Use undo segment-routing ipv6 locator to remove the specified SRv6 locator from a cross-connect or a VSI.

Syntax

In cross-connect view:

segment-routing ipv6 locator locator-name [ dx2l-locator dx2l-locator-name ] [ auto-sid-disable ]

undo segment-routing ipv6 locator

In VSI EVPN instance view:

segment-routing ipv6 locator locator-name [ dt2u-locator dt2u-locator-name ] [ dt2ul-locator dt2ul-locator-name ] [ dx2-locator dx2-locator-name ] [ dx2l-locator dx2l-locator-name ] [ auto-sid-disable ]

undo segment-routing ipv6 locator

In EVPN instance view:

segment-routing ipv6 locator locator-name [ dt2u-locator dt2u-locator-name ] [ dt2ul-locator dt2ul-locator-name ] [ auto-sid-disable ]

undo segment-routing ipv6 locator

Default

No SRv6 locators are applied to a cross-connect or a VSI.

Views

Cross-connect view

VSI EVPN instance view

EVPN instance view

Predefined user roles

network-admin

Parameters

locator-name: Specifies a locator by its name, a case-sensitive string of 1 to 31 characters.

dx2l-locator dx2l-locator-name: Specifies the locator used to apply for End.DX2L SIDs. The dx2l-locator-name argument represents the locate name, a case-sensitive string of 1 to 31 characters.

dt2u-locator dt2u-locator-name: Specifies the locator used to apply for End.DT2U SIDs. The dt2u-locator-name argument represents the locate name, a case-sensitive string of 1 to 31 characters.

dt2ul-locator dt2ul-locator-name: Specifies the locator used to apply for End.DT2UL SIDs. The dt2ul-locator-name argument represents the locate name, a case-sensitive string of 1 to 31 characters.

dx2-locator dx2-locator-name: Specifies the locator used to apply for End.DX2 SIDs. The dx2-locator-name argument represents the locate name, a case-sensitive string of 1 to 31 characters.

auto-sid-disable: Disables automatic SID allocation. If no opcode is configured for the locator specified in this command when automatic SID allocation is disabled, SID application fails. If you do not specify this keyword, automatic SID allocation is enabled and static SRv6 SIDs and dynamic SRv6 SIDs can coexist. The static SRv6 SIDs take precedence over the dynamically allocated SRv6 SIDs.

Usage guidelines

Use this command to enable a cross-connect or VSI to apply for SRv6 SIDs from the specified locator.

In cross-connect view:

· If you specify the dx2l-locator dx2l-locator-name option, the locator-name argument applies for End.DX2 SIDs and the dx2l-locator-name argument applies for End.DX2L SIDs.

· If you do not specify the dx2l-locator dx2l-locator-name option, the locator-name argument applies for both End.DX2 SIDs and End.DX2L SIDs.

In VSI EVPN instance view:

· If you do not specify the dt2u-locator dt2u-locator-name, dt2ul-locator dt2ul-locator-name, dx2-locator dx2-locator-name, or dx2l-locator dx2l-locator-name option, the locator-name argument applies for End.DT2M, End.DT2U, End.DT2UL, End.DX2, and End.DX2L SIDs.

· If you specify the dt2u-locator dt2u-locator-name, dt2ul-locator dt2ul-locator-name, dx2-locator dx2-locator-name, or dx2l-locator dx2l-locator-name option, the option applies for End.DT2U, End.DT2UL, End.DX2, or End.DX2L SIDs and the locator-name argument applies for other SRv6 SIDs.

In EVPN instance view:

· If you do not specify the dt2u-locator dt2u-locator-name or dt2ul-locator dt2ul-locator-name option, the locator-name argument applies for End.DT2M, End.DT2U, and End.DT2UL SIDs.

· If you specify the dt2u-locator dt2u-locator-name or dt2ul-locator dt2ul-locator-name option, the option applies for End.DT2U or End.DT2UL SIDs and the locator-name argument applies for other SRv6 SIDs.

Examples

# Configure VSI aaa to use locator test1 to apply for End.DT2M, End.DT2UL, End.DX2, and End.DX2L SIDs and use locator test2 to apply for End.DT2U SIDs.

<Sysname> system-view

[Sysname] vsi aaa

[Sysname-vsi-aaa] evpn encapsulation srv6

[Sysname-vsi-aaa-evpn-srv6] segment-routing ipv6 locator test1 dt2u-locator test2

# Configure cross-connect aaa in cross-connect group bbb to use locator test3 to apply for End.DX2 and End.DX2L SIDs and disable automatic SID allocation.

<Sysname> system-view

[Sysname] xconnect-group bbb

[Sysname-xcg-bbb] evpn encapsulation srv6

[Sysname-xcg-bbb-evpn-srv6] quit

[Sysname-xcg-bbb] connection aaa

[Sysname-xcg-bbb-connection-aaa] segment-routing ipv6 locator test3 auto-sid-disable

segment-routing ipv6 primary-path-detect sid-bfd

Use segment-routing ipv6 primary-path-detect sid-bfd to enable using the static BFD session for the SRv6 SID to detect the reachability of the primary path for SRv6 VPN FRR.

Use undo segment-routing ipv6 primary-path-detect sid-bfd to restore the default.

Syntax

In BGP-VPN IPv4 unicast address family view or BGP-VPN IPv6 unicast address family view:

segment-routing ipv6 primary-path-detect sid-bfd [ evpn ]

undo segment-routing ipv6 primary-path-detect sid-bfd [ evpn ]

In BGP IPv4 unicast address family view or BGP IPv6 unicast address family view:

segment-routing ipv6 primary-path-detect sid-bfd

undo segment-routing ipv6 primary-path-detect sid-bfd

Default

The device uses the static BFD session for the locator to detect the reachability of the primary path for SRv6 VPN FRR.

Views

BGP IPv4 unicast address family view

BGP IPv6 unicast address family view

BGP-VPN IPv4 unicast address family view

BGP-VPN IPv6 unicast address family view

Predefined user roles

network-admin

Parameters

evpn: Applies the configuration only to BGP EVPN FRR. If you do not specify this keyword, the command applies to BGP VPNv4 or BGP VPNv6 FRR.

Usage guidelines

Application scenarios

In IP L3VPN over SRv6, public network IP over SRv6, or EVPN L3VPN over SRv6 networks that use the SRv6 BE route recursion mode, the public instance or VPN instance IP routing table does not have SRv6 SID route information by default. As a result, to use BFD to detect the primary path between PEs, FRR can only use the static BFD session for the locator network address.

If the address families of multiple VPN instances or those of the public instance have used the same locator, FRR in these address families might use the same static BFD session to detect the primary path. Once the BFD session detects that the path is not available, the BGP routes in all these address families will perform path switching simultaneously.

For refined FRR management, this command is provided to enable BFD for the primary path of SRv6 VPN FRR by using the static BFD session for the SRv6 SID.

Operating mechanism

After this command is executed, when the device adds a BGP IPv4/IPv6 unicast route, BGP VPNv4/VPNv6 route, or IP advertisement prefix route that contains an SRv6 SID to a VPN instance/public instance IP routing table, it adds the SRv6 SID as the next hop of the route. This allows FRR to automatically and preferentially associate the static BFD session for the SRv6 SID to detect the primary path. Once BFD detects that an SRv6 SID is not reachable, it triggers the BGP routes in only one address family or one VPN instance to perform path switching. This mechanism provides a smaller control granularity for FRR.

For example, the device has created two static BFD sessions, one for a locator and the other for an SRv6 SID.

· Before this command is executed, only BFD session frr1 can be used to detect the primary path's reachability for FRR.

<Sysname> display bfd session verbose

Total sessions: 2 Up sessions: 2 Init mode: Active

IPv6 session working in control packet mode:

Session name: frr

Local discr: 33793 Remote discr: 33793

Source IP: 1:2::106

Destination IP: 6:5::106

Destination port: 4784 Session state: Up

Interface: N/A

Min Tx interval: 500ms Actual Tx interval: 500ms

Min Rx interval: 500ms Detection time: 2500ms

Rx count: 30533 Tx count: 25954

Connection type: Indirect Up duration: 03:09:06

Hold time: 2257ms Auth mode: None

Detection mode: Async Slot: 0

Protocol: STATIC_IPv6

Version: 1

Diag info: No Diagnostic

Hardware mode: Disable

Session name: frr1

Local discr: 33794 Remote discr: 33794

Source IP: 1:2::

Destination IP: 6:5::

Destination port: 4784 Session state: Up

Interface: N/A

Min Tx interval: 500ms Actual Tx interval: 500ms

Min Rx interval: 500ms Detection time: 2500ms

Rx count: 30412 Tx count: 25948

Connection type: Indirect Up duration: 03:09:06

Hold time: 2332ms Auth mode: None

Detection mode: Async Slot: 0

Protocol: IPFRR/STATIC_IPv6

Version: 1

Diag info: No Diagnostic

Hardware mode: Disable

· After this command is executed, BFD session frr is used to detect the reachability of the primary path with SRv6 SID 6:5::106.

<Sysname> display bfd session verbose

Total sessions: 2 Up sessions: 2 Init mode: Active

IPv6 session working in control packet mode:

Session name: frr

Local discr: 33793 Remote discr: 33793

Source IP: 1:2::106

Destination IP: 6:5::106

Destination port: 4784 Session state: Up

Interface: N/A

Min Tx interval: 500ms Actual Tx interval: 500ms

Min Rx interval: 500ms Detection time: 2500ms

Rx count: 30533 Tx count: 25954

Connection type: Indirect Up duration: 03:09:06

Hold time: 2257ms Auth mode: None

Detection mode: Async Slot: 0

Protocol: IPFRR/STATIC_IPv6

Version: 1

Diag info: No Diagnostic

Hardware mode: Disable

Session name: frr1

Local discr: 33794 Remote discr: 33794

Source IP: 1:2::

Destination IP: 6:5::

Destination port: 4784 Session state: Up

Interface: N/A

Min Tx interval: 500ms Actual Tx interval: 500ms

Min Rx interval: 500ms Detection time: 2500ms

Rx count: 30412 Tx count: 25948

Connection type: Indirect Up duration: 03:09:06

Hold time: 2332ms Auth mode: None

Detection mode: Async Slot: 0

Protocol: STATIC_IPv6

Version: 1

Diag info: No Diagnostic

Hardware mode: Disable

Restrictions and guidelines

This command applies only to routes that use the SRv6 BE route recursion mode. If the route recursion mode is SRv6 TE and SRv6 BE hybrid, SRv6 TE and SRv6 BE FRR, or SRv6 TE and SRv6 BE multilevel FRR, this command takes effect only when the SRv6 TE path is not available.

Examples

# In BGP IPv4 unicast address family, enable using the BFD session for the SRv6 SID to detect the reachability of the primary path for SRv6 VPN FRR.

<Sysname> system-view

[Sysname] bgp 100

[Sysname-bgp-default] address-family ipv4 unicast

[Sysname-bgp-default-ipv4] segment-routing ipv6 primary-path-detect sid-bfd

Related commands

bfd static (High Availability Command Reference)

segment-routing ipv6 traffic-engineering

Use segment-routing ipv6 traffic-engineering to recurse routes to SRv6 TE policy tunnels.

Use undo segment-routing ipv6 traffic-engineering to restore the default.

Syntax

In BGP IPv4 unicast address family view or BGP IPv6 unicast address family view:

segment-routing ipv6 traffic-engineering [ best-effort | best-effort-backup ]

undo segment-routing ipv6 traffic-engineering [ best-effort | best-effort-backup ]

In BGP-VPN IPv4 unicast address family view or BGP-VPN IPv6 unicast address family view:

segment-routing ipv6 traffic-engineering [ best-effort | best-effort-backup ] [ evpn ]

undo segment-routing ipv6 traffic-engineering [ best-effort | best-effort-backup ] [ evpn ]

In BGP VPNv4 address family view or BGP VPNv6 address family view:

segment-routing ipv6 traffic-engineering [ best-effort ]

undo segment-routing ipv6 traffic-engineering [ best-effort ]

In BGP EVPN address family view:

segment-routing ipv6 traffic-engineering [ best-effort ] evpn

undo segment-routing ipv6 traffic-engineering [ best-effort ] evpn

Default

A PE searches the IPv6 routing table based on the next hop of a matching route to forward traffic.

Views

BGP-VPN IPv4 unicast address family view

BGP-VPN IPv6 unicast address family view

BGP IPv4 unicast address family view

BGP IPv6 unicast address family view

BGP VPNv4 address family view

BGP VPNv6 address family view

BGP EVPN address family view

Predefined user roles

network-admin

Parameters

best-effort: Switches to the SRv6 BE route recursion mode when the matching SRv6 TE policy tunnel fails for L3VPN traffic.

best-effort-backup: Implements FRR by using the SRv6 TE path (primary path) and SRv6 BE path (backup path). If the SRv6 TE path fails or does not exist, traffic is immediately switched to the SRv6 BE path to ensure service continuity. If multiple SRv6 BE paths exist between the source and destination nodes, the SRv6 BE path with the lowest next hop address is selected as the backup path.

evpn: Recurses the private network routes based on the SID attribute in EVPN routes. If you do not specify this keyword, the device recurses the private network routes based on the SID attribute in BGP VPNv4 or VPNv6 routes.

Usage guidelines

This command is applicable to the IP L3VPN over SRv6, EVPN L3VPN over SRv6, and public network IP over SRv6 scenarios. This command enables PEs to recurse routes to SRv6 TE policy tunnels and use the tunnels to forward L3VPN traffic between the PEs.

To improve high availability for L3VPN packet forwarding, specify the best-effort or best-effort-backup keyword. A PE forwards an L3VPN packet as follows:

1. The PE forwards the packet through the matching SRv6 TE policy tunnel.

2. If the matching SRv6 TE policy tunnel fails, the PE forwards the packet in SRv6 BE mode.

¡ If the best-effort keyword is specified, the device performs IPv6 routing table lookup based on the encapsulated SRv6 SID, and forwards the packet in SRv6 BE mode.

¡ If the best-effort-backup keyword is specified, the device quickly switches the packet to the SRv6 BE backup path.

3. If the SRv6 BE path fails, the PE forwards the packet by looking up the routing table based on the destination IP address of the packet.

4. If the packet forwarding fails, the PE drops the packet.

Use this command in different address family views according to your network scenario.

· In the private network IPv4 or IPv6 over SRv6 scenario, use this command in BGP-VPN IPv4 unicast address family view or BGP-VPN IPv6 unicast address family view.

· In the public network IPv4 or IPv6 over SRv6 scenario, use this command in BGP IPv4 unicast address family view or BGP IPv6 unicast address family view.

· In the inter-AS option B VPN scenario, use this command in BGP VPNv4 address family view, BGP VPNv6 address family view, or BGP EVPN address family view.

If the best-effort or best-effort-backup keyword is not specified, the device forwards a packet by looking up the routing table based on the destination IP address of the packet upon failure of the SRv6 TE policy tunnel.

This command is mutually exclusive with the segment-routing ipv6 best-effort command.

Examples

# In BGP IPv4 unicast address family view, recurse routes to SRv6 TE policy tunnels.

<Sysname> system-view

[Sysname] bgp 100

[Sysname-bgp-default] address-family ipv4

[Sysname-bgp-default-ipv4] segment-routing ipv6 traffic-engineering

Related commands

segment-routing ipv6 best-effort

srv6-mpls-interworking enable

Use srv6-mpls-interworking enable to enable SRv6 and MPLS interworking.

Use undo srv6-mpls-interworking enable to disable SRv6 and MPLS interworking.

Syntax

srv6-mpls-interworking enable

undo srv6-mpls-interworking enable

Default

SRv6 and MPLS interworking is disabled.

Views

BGP VPNv4 address family view

BGP VPNv6 address family view

BGP EVPN address family view

Predefined user roles

network-admin

Usage guidelines

For intercommunication between an MPLS network in one AS and an SRv6 network in another AS, enable SRv6 and MPLS interworking on the ASBR in the SRv6 network. This feature enables End.T SID allocation and establishes mappings between End.T SIDs and MPLS labels.

With this feature, the ASBR in the SRv6 network allocates End.T SIDs based on FECs and advertises the SIDs to other SRv6 nodes through an IGP. An FEC is a destination IPv4 address/mask or destination IPv6 address/prefix length. The function of an End.T SID is removing the outer IPv6 header and looking up the IPv6 FIB table based on the End.T SID to forward packets.

For SRv6-to MPLS packets, the ingress node in the SRv6 network encapsulates an End.T SID to the packets when forwarding the packets to the ASBR in the SRv6 network. When the ASBR in the SRv6 network receives the packets, it looks up the IPv6 FIB table based on the End.T SID for a matching route. Then, the ASBR recurses the route to an LSP to forward the packets to the MPLS network.

For MPLS-to-SRv6 packets, the ASBR in the SRv6 network looks up the label forwarding table to forward the packets. The out label is an End.DT4, End.DT6, End.DT46, End.DX4, or End.DX6 SID in the SRv6 network. After the ASBR in the SRv6 network encapsulates the End.DT4, End.DT6, End.DT46, End.DX4, or End.DX6 SID to the packets, it forwards the packets in SRv6 BE or SRv6 TE mode.

Examples

# Enable SRv6 and MPLS interworking.

<Sysname> system-view

[Sysname] bgp 100

[Sysname-bgp-default] address-family vpnv4

[Sysname-bgp-default-vpnv4] srv6-mpls-interworking enable

srv6-pw-type

Use srv6-pw-type to specify the SRv6 PW data encryption type.

Use undo srv6-pw-type to restore the default.

Syntax

srv6-pw-type { ethernet | vlan }

undo srv6-pw-type

Default

The SRv6 PW data encryption type is Ethernet.

Views

PW class view

Predefined user roles

network-admin

Parameters

ethernet: Specifies the SRv6 PW data encryption type as Ethernet.

vlan: Specifies the SRv6 PW data encryption type as VLAN.

Usage guidelines

With Ethernet specified as the SRv6 PW data encryption type, the frames transmitted on the SRv6 PW cannot carry P-Tags (service delimiters added to distinguish users as required by ISPs).

· If the PE receives a packet carrying a P-Tag from the CE, it removes the P-Tag, adds an SRv6 SID, and then forwards the packet.

· If the PE receives a packet without a P-Tag from the CE, it directly adds an SRv6 SID, and then forwards the packet.

· For a packet to be sent to the CE, if the access mode is specified as VLAN with the ac interface command, the PE adds the P-Tag and then forwards the packet to the CE. If the access mode is specified as Ethernet, the PE forwards the packet to the CE without adding a P-Tag. In addition, it does not rewrite or remove any tags.

With VLAN specified as the SRv6 PW data encryption type, the frames transmitted on the SRv6 PW must carry P-Tags.

· If the PE receives a packet carrying a P-Tag from the CE, it retains the P-Tag, adds an SRv6 SID, and then forwards the packet.

· If the PE receives a packet without a P-Tag from the CE, it adds an empty P-Tag with value 1, adds an SRv6 SID, and then forwards the packet.

· For a packet to be sent to the CE, if the access mode is specified as VLAN with the ac interface command, the PE rewrites or retains the P-Tag and then forwards the packet to the CE. If the access mode is specified as Ethernet, the PE removes the P-Tag and then forwards the packet to the CE.

Examples

# Specify the SRv6 PW data encryption type as Ethernet.

<Sysname> system-view

[Sysname] pw-class pw100

[Sysname-pw-pw100] srv6-pw-type ethernet

static-srv6 local-service-id remote-service-id

Use static-srv6 local-service-id remote-service-id to configure the SRv6 PW setup mode on a cross-connect as static and enter cross-connect static SRv6 view.

Use undo static-srv6 local-service-id remote-service-id to restore the default.

Syntax

static-srv6 local-service-id local-service-id remote-service-id remote-service-id [ tunnel-policy tunnel-policy-name ]

undo static-srv6 local-service-id local-service-id remote-service-id remote-service-id

Default

The SRv6 PW setup mode is not specified.

Views

Cross-connect view

Predefined user roles

network-admin

Parameters

local-service-id local-service-id: Specifies a local service ID in the range of 1 to 16777215.

remote-service-id remote-service-id: Specifies a remote service ID in the range of 1 to 16777215.

tunnel-policy tunnel-policy-name: Specifies a tunnel policy by its name, a case-sensitive string of 1 to 126 characters. If you do not specify a tunnel policy, the default tunnel policy is used.

Usage guidelines

After you enter cross-connect static SRv6 view by using this command, you can execute the peer command to configure a static SRv6 PW for the cross-connect.

In cross-connect view, this command and the peer command is mutually exclusive with each other.

Examples

# Enter cross-connect static SRv6 view, and specify local service ID 1 and remote service ID 2.

<Sysname> system-view

[Sysname] xconnect-group svpws0

[Sysname-xcg-svpws0] connection 1

[Sysname-xcg-svpws0-1] static-srv6 local-service-id 1 remote-service-id 2

[Sysname-xcg-svpws0-1-1-2]

statistics enable

Use statistics enable to enable SRv6 PW packet statistics.

Use undo statistics enable to disable SRv6 PW packet statistics.

Syntax

statistics enable

undo statistics enable

Default

The SRv6 PW packet statistics feature is disabled.

Views

Cross-connect EVPN PW view

VSI EVPN instance view

Predefined user roles

network-admin

Usage guidelines

EVPN VPWS over SRv6 network:

Use this command to enable SRv6 PW packet statistics in cross-connect EVPN PW view. To display SRv6 PW packet statistics, use the display l2vpn peer srv6 verbose command. To clear SRv6 PW packet statistics, use the reset l2vpn statistics srv6-pw command.

The statistics enable command is not supported by PWs in a cross-connect group EVPN instance that uses MPLS encapsulation.

EVPN VPLS over SRv6 network:

Use the statistics enable command to enable packet statistics for all SRv6 PWs in a VSI EVPN instance. To display inbound packet statistics for all SRv6 PWs, use the display l2vpn statistics srv6-pw inbound command. To display outbound packet statistics for each SRv6 PW, use the display l2vpn peer srv6 verbose command. To clear SRv6 PW packet statistics, use the reset l2vpn statistics srv6-pw command.

The statistics enable command is supported only by VSI EVPN instances that use SRv6 encapsulation.

Examples

# In an EVPN VPWS over SRv6 network, enable packet statistics for an SRv6 PW.

<Sysname> system-view

[Sysname] xconnect-group vpws

[Sysname-xcg-vpws] connection aa

[Sysname-xcg-vpws-aa] evpn local-service-id 2 remote-service-id 4

[Sysname-xcg-vpws-aa-2-4] statistics enable

# In an EVPN VPLS over SRv6 network, enable packet statistics for all SRv6 PWs in an EVPN instance.

<Sysname> system-view

[Sysname] vsi vpna

[Sysname-vsi-vpna] evpn encapsulation srv6

[Sysname-vsi-vpna-evpn-srv6] stastics enable

Related commands

display l2vpn peer srv6 verbose

display l2vpn statistics srv6-pw inbound

reset l2vpn statistics srv6-pw

tracert evpn vpls srv6

Use tracert evpn vpls srv6 to trace the path of an SRv6 PW from the local PE to the remote PE in an EVPN VPLS over SRv6 network.

Syntax

tracert evpn vpls srv6 vsi vsi-name mac mac-address [ end-op endop ] [ -a source-ipv6 | -h hop-limit | -r reply-mode | -t time-out | -tc tc ] *

Views

Any view

Predefined user roles

network-admin

Parameters

vsi vsi-name: Specifies a VSI by its name, a case-sensitive string of 1 to 31 characters.

mac mac-address: Specifies a host attached to a remote PE by its MAC address in H-H-H format. Do not specify a broadcast MAC address, multicast MAC address, or all-zeros MAC address.

-a source-ipv6: Specifies the source IPv6 address of MPLS echo requests. If you do not specify a source IPv6 address, the IPv6 address of the traffic output interface is used as the source IPv6 address of MPLS echo requests.

-h hop-limit: Specifies the maximum number of hops allowed for an MPLS echo request. The value range for the hop-limit argument is 1 to 255, and the default value is 255.

-tc tc: Specifies the traffic class value in MPLS echo replies. The value range for the tc argument is 0 to 255 and the default value is 0.

Usage guidelines

In an EVPN VPLS over SRv6 network, a PE transmits data packets to a remote PE over an SRv6 PW. Use this command to trace the path of the SRv6 PW from the local PE to the remote PE when packet loss or traffic interruption occurs between the PEs. This command helps you locate the failed nodes on the path.

Examples

# Trace route to a remote PE through an SRv6 PW in VSI vpna by reaching remote-MAC 0002-0002-0002.

<Sysname> tracert evpn vpls srv6 vsi vpna mac 2-2-2

Trace route to a remote PE in VSI vpna over SRv6 by reaching remote-MAC 0002-0002-0002.

Press CTRL+C to break.

Hop Wait time Type Replier

0 0 ms Ingress

1 4 ms Transit 1111::2

2 5 ms Transit 2222::2

3 6 ms Transit 3333::2

4 6 ms Egress 4444::2

Table 12 Command output

Field	Description
Trace route to a remote PE in VSI vpna over SRv6 by reaching remote-MAC 0002-0002-0002	Trace route to a remote PE through an SRv6 PW in VSI vpna by reaching remote-MAC 0002-0002-0002.
Press CTRL+C to break	Press escape key Ctrl+C to abort the tracert operation.
Hop	Hop number.
Wait time	Interval between the time when an echo request was sent and the time when the reply of the echo request was received. The unit is millisecond.
Type	Node type: · Ingress. · Transit. · Egress.
Replier	IPv6 address of the node.
Request time out	This field is available if the local PE does not receive any MPLS echo reply to an MPLS echo request when the echo reply timeout time expires.

Related commands

ping evpn vpls srv6

tracert { evpn | static } vpws srv6

Use tracert { evpn | static } vpws srv6 to trace the path of an SRv6 PW from the local PE to the remote PE in an EVPN VPWS over SRv6 network.

Syntax

tracert { evpn | static } vpws srv6 xconnect-group group-name local-service-id remote-service-id [ end-op endop ] [ -a source-ip | -h hop-limit | -r reply-mode | -t time-out | -tc tc ] *

Views

Any view

Predefined user roles

network-admin

Parameters

evpn: Specifies a dynamic SRv6 PW.

static: Specifies a static SRv6 PW.

xconnect-group group-name: Specifies a cross-connect group by its name, a case-sensitive string of 1 to 31 characters. The string cannot contain a hyphen (-).

local-service-id: Specifies a local service ID in the range of 1 to 16777215.

remote-service-id: Specifies a remote service ID in the range of 1 to 16777215.

-a source-ip: Specifies the source IPv6 address of MPLS echo requests. If you do not specify a source IPv6 address, the IPv6 address of the traffic output interface is used as the source IPv6 address of MPLS echo requests.

-h hop-limit: Specifies the maximum number of hops allowed for an MPLS echo request. The value range for the hop-limit argument is 1 to 255, and the default value is 255.

-r reply-mode: Specifies the reply mode used by the receiver (the remote PE) to reply to an MPLS echo request. The value for the reply-mode argument can be 2 or 4, and the default value is 2. If the mode is 2, the receiver searches the IP forwarding table for the destination IP address to forward MPLS echo replies. If the mode is 4, the receiver searches the IPv6 routing table for the source IPv6 address of the echo requests, encapsulates an SRH to the replies, and forwards them.

-tc tc: Specifies the traffic class value in MPLS echo replies. The value range for the tc argument is 0 to 255 and the default value is 0.

Usage guidelines

In an EVPN VPWS over SRv6 network, a PE transmits data packets to a remote PE over an SRv6 PW. Use this command to trace the path of the SRv6 PW from the local PE to the remote PE when packet loss or traffic interruption occurs between the PEs. This command helps you locate the failed nodes on the path.

Examples

# Trace the route that an SRv6 PW traverses from the local PE to the remote PE in an EVPN VPWS over SRv6 network. The SRv6 PW belongs to cross-connect group xcga, its local service ID is 2, and its remote service ID is 1.

<Sysname> tracert evpn vpws srv6 xconnect-group xcga 1 2

Trace route to a remote PE over SRv6 through a PW with local service ID 2 and remote service ID 1 in cross-connect group xcga.

Press CTRL+C to break.

Hop Wait time Type Replier

0 0 ms Ingress

1 4 ms Transit 1111::2

2 5 ms Transit 2222::2

3 6 ms Transit 3333::2

4 6 ms Egress 3333::2

Table 13 Command output

Field	Description
Trace route to a remote PE over SRv6 through a PW with local service ID 2 and remote service ID 1 in cross-connect group xcga	Trace route to a remote PE through an SRv6 PW with local service ID 2 and remote service ID 1 in cross-connect group xcga.
Hop	Hop number.
Wait time	Interval between the time when an echo request was sent and the time when the reply of the echo request was received. The unit is millisecond.
Press CTRL+C to break	Press escape key Ctrl+C to abort the tracert operation.
Type	Node type: · Ingress. · Transit. · Egress.
Replier	IPv6 address of the node.
Request time out	This field is available if the local PE does not receive any MPLS echo reply to an MPLS echo request when the echo reply timeout time expires.

Related commands

ping { evpn | static } vpws srv6

unicast-forwarding dx2-based

Use unicast-forwarding dx2-based to configure unicast traffic forwarding based on End.DX2 and End.DX2L SIDs in an EVPN VPLS over SRv6 network.

Use undo unicast-forwarding dx2-based to restore the default.

Syntax

unicast-forwarding dx2-based

undo unicast-forwarding dx2-based

Default

Unicast traffic is forwarded based on End.DT2U and End.DT2UL SIDs in an EVPN VPLS over SRv6 network.

Views

VSI EVPN instance view

Predefined user roles

network-admin

Usage guidelines

By default, when a PE receives a packet that includes an End.DT2U or End.DT2UL SID, it looks up the MAC address table of the SID's VSI to forward the packet.

To improve forwarding efficiency, use this command. This command enables the PE to allocate an End.DX2 or End.DX2L SID to each AC associated with a VSI and advertise the SIDs to remote PEs through MAC/IP advertisement routes. When the PE receives an SRv6 packet that includes a locally allocated End.DX2 or End.DX2L SID, it does not look up the MAC address table. The PE directly forwards the packet to the AC that is associated with the SID after removing the SRv6 encapsulation.

This command is mutually exclusive with the unknown-mac-route command. If you use both commands, the device cannot correctly advertise UMRs.

Examples

# Configure EVPN VPLS over SRv6 to forward unicast traffic based on End.DX2 and End.DX2L SIDs.

<Sysname> system-view

[Sysname] vsi aaa

[Sysname-vsi-aaa] evpn encapsulation srv6

[Sysname-vsi-aaa-evpn-srv6] unicast-forwarding dx2-based

Related commands

segment-routing ipv6 locator (cross-connect view and VSI EVPN instance view)

11-Segment Routing Command Reference

evpn encapsulation srv6

peer advertise encap-type srv6

peer re-originated (BGP VPNv4/VPNv6 address family view)

reset l2vpn statistics srv6-pw

segment-routing ipv6 apply-sid all-nexthop (BGP-VPN IPv4/IPv6 address family view)

Application scenarios

Operating mechanism

Restrictions and guidelines

Intelligent Terminal Products

Product Support Services

Technical Service Solutions

Resource Center

Policy

Online Help

Become a Partner

Partner Policy & Program

Global Learning

Partner Sales Resources

Service Business

Company Information

News & Events

Contact Us