- Table of Contents
- Related Documents
-
Title | Size | Download |
---|---|---|
01-EVPN commands | 1.02 MB |
Contents
address-family evpn (public instance view)
address-family evpn (VPN instance view)
address-family ipv4 (public instance view)
address-family ipv6 (public instance view)
display bgp l2vpn evpn dampened
display bgp l2vpn evpn flap-info
display bgp l2vpn evpn inlabel
display evpn ipv6 auto-discovery
display evpn route arp suppression
display evpn route arp-mobility
display evpn route mac-mobility
display evpn route nd suppression
display evpn route nd-mobility
display evpn route xconnect-group
display l2vpn forwarding evpn split-horizon
evpn df-election algorithm (interface view)
evpn df-election algorithm (system view)
evpn df-election preference non-revertive
evpn encapsulation binding instance
evpn frr local (cross-connect group EVPN instance view)
evpn frr local (EVPN instance view/VSI EVPN instance view)
evpn local-service-id remote-service-id
evpn mac-move local-suppression
evpn multihoming advertise disable
evpn multihoming advertise ignore-ethernet-tag
evpn multihoming re-originated mac
evpn multihoming timer df-delay
evpn multihoming vpls-frr local
evpn multihoming vpws-frr local
evpn route arp-mobility suppression
evpn route mac-mobility suppression
evpn route nd-mobility suppression
peer advertise encap-type mpls
peer advertise evpn mac-route detail-only
reset evpn route arp-mobility suppression
reset evpn route mac-mobility suppression
reset evpn route nd-mobility suppression
EVPN commands
ac interface
Use ac interface to map an interface or Ethernet service instance to a cross-connect.
Use undo ac interface to delete the mapping between a cross-connect and an interface or Ethernet service instance.
Syntax
ac interface interface-type interface-number [ service-instance instance-id ] [ access-mode { ethernet | vlan } ] [ track track-entry-number&<1-3> ] [ access-evpn ]
undo ac interface interface-type interface-number [ service-instance instance-id ]
Default
No interface or Ethernet service instance is mapped to a cross-connect.
Views
Cross-connect view
Predefined user roles
network-admin
Parameters
interface-type interface-number: Specifies an interface by its type and number.
service-instance instance-id: Specifies an Ethernet service instance by its ID in the range of 1 to 4096.
access-mode: Specifies an access mode. The default access mode varies by AC type.
· If the AC is a Layer 3 interface, the default access mode is as follows:
¡ For a VLAN interface, the default access mode is VLAN.
¡ For a Layer 3 subinterface, the default access mode is VLAN.
¡ For a Layer 3 interface of another type, the default access mode is Ethernet.
· If the AC is an Ethernet service instance, the default access mode is Ethernet.
ethernet: Specifies the Ethernet access mode.
vlan: Specifies the VLAN access mode.
track track-entry-number&<1-3>: Specifies a space-separated list of up to three track entry numbers in the range of 1 to 1024. The AC is up only if a minimum of one associated track entry is in positive state.
access-evpn: Uses the specified L2VE interface to access an EVPN VPWS or EVPN VPLS network. This keyword takes effect only when the specified interface is an L2VE interface. If the specified L2VE interface is used for communication between an L2VPN network and an L3VPN network, do not specify this keyword.
Usage guidelines
After you execute this command, packets received from the mapped Layer 3 interface or Ethernet service instance are forwarded to the PW or another AC bound to the cross-connect.
To configure this command for an Ethernet service instance, you must first use the encapsulation command to configure a frame match criterion for the Ethernet service instance.
The access mode determines how the PE treats the VLAN tag in Ethernet frames received from the AC. It also determines how the PE forwards Ethernet frames out of the AC.
· VLAN access mode—Ethernet frames received from the AC must carry a VLAN tag in the Ethernet header. The VLAN tag is called a P-tag, which is assigned by the service provider. Ethernet frames sent out of the AC must also carry the P-tag.
· Ethernet access mode—If Ethernet frames from the AC have a VLAN tag in the header, the VLAN tag is called a U-tag, and the PE ignores it. Ethernet frames sent out of the AC do not carry the P-tag.
Examples
# Map Ten-GigabitEthernet 3/1/1 to cross-connect aaa in cross-connect group vpna.
<Sysname> system-view
[Sysname] xconnect-group vpna
[Sysname-xcg-vpna] connection aaa
[Sysname-xcg-vpna-aaa] ac interface ten-gigabitethernet 3/1/1
# Map Ethernet service instance 200 that matches traffic of VLAN 200 on Ten-GigabitEthernet 3/1/1 to cross-connect actopw in cross-connect group vpn1.
<Sysname> system-view
[Sysname] interface ten-gigabitethernet 3/1/1
[Sysname-Ten-GigabitEthernet3/1/1] service-instance 200
[Sysname-Ten-GigabitEthernet3/1/1-srv200] encapsulation s-vid 200
[Sysname-Ten-GigabitEthernet3/1/1-srv200] quit
[Sysname-Ten-GigabitEthernet3/1/1] quit
[Sysname] xconnect-group vpn1
[Sysname-xcg-vpn1] connection actopw
[Sysname-xcg-vpn1-actopw] ac interface ten-gigabitethernet 3/1/1 service-instance 200
Related commands
connection (MPLS Command Reference)
display l2vpn interface (MPLS Command Reference)
display l2vpn service-instance (MPLS Command Reference)
encapsulation (MPLS Command Reference)
pw-type (MPLS Command Reference)
address-family evpn (public instance view)
Use address-family evpn to enter public instance EVPN view.
Use undo address-family evpn to delete all settings in public instance EVPN view.
Syntax
address-family evpn
undo address-family evpn
Views
Public instance view
Predefined user roles
network-admin
Usage guidelines
You can configure EVPN settings such as route targets and routing policies in public instance EVPN view.
Examples
# Enter public instance EVPN view.
<Sysname> system-view
[Sysname] ip public-instance
[Sysname-public-instance] address-family evpn
[Sysname-public-instance-evpn]
address-family evpn (VPN instance view)
Use address-family evpn to enter VPN instance EVPN view.
Use undo address-family evpn to delete all settings in VPN instance EVPN view.
Syntax
address-family evpn
undo address-family evpn
Views
VPN instance view
Predefined user roles
network-admin
Usage guidelines
You can configure EVPN settings such as route targets and export routing policies in VPN instance EVPN view.
Examples
# Enter EVPN view of VPN instance tenant.
<Sysname> system-view
[Sysname] ip vpn-instance tenant
[Sysname-vpn-instance-tenant] address-family evpn
[Sysname-vpn-evpn-tenant]
address-family ipv4 (public instance view)
Use address-family ipv4 to enter public instance IPv4 address family view.
Use undo address-family ipv4 to delete all settings in public instance IPv4 address family view.
Syntax
address-family ipv4
undo address-family ipv4
Views
Public instance view
Predefined user roles
network-admin
Examples
# Enter public instance IPv4 address family view.
<Sysname> system-view
[Sysname] ip public-instance
[Sysname-public-instance] address-family ipv4
[Sysname-public-instance-ipv4]
address-family ipv6 (public instance view)
Use address-family ipv6 to enter public instance IPv6 address family view.
Use undo address-family ipv6 to delete all settings in public instance IPv6 address family view.
Syntax
address-family ipv6
undo address-family ipv6
Views
Public instance view
Predefined user roles
network-admin
Examples
# Enter public instance IPv6 address family view.
<Sysname> system-view
[Sysname] ip public-instance
[Sysname-public-instance] address-family ipv6
[Sysname-public-instance-ipv6]
address-family l2vpn evpn
Use address-family l2vpn evpn to create the BGP EVPN address family and enter its view, or enter the view of the existing BGP EVPN address family.
Use undo address-family l2vpn evpn to delete the BGP EVPN address family and all settings in BGP EVPN address family view.
Syntax
address-family l2vpn evpn
undo address-family l2vpn evpn
Default
The BGP EVPN address family does not exist.
Views
BGP instance view
Predefined user roles
network-admin
Usage guidelines
Configuration made in BGP EVPN address family view takes effect only on routes and peers of the BGP EVPN address family that are on the public network.
Examples
# Create the BGP EVPN address family and enter its view.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp-default] address-family l2vpn evpn
[Sysname-bgp-default-evpn]
advertise evpn route
Use advertise evpn route to enable BGP EVPN route advertisement for the BGP VPNv4 or VPNv6 address family.
Use undo advertise evpn route to disable BGP EVPN route advertisement for the BGP VPNv4 or VPNv6 address family.
Syntax
advertise evpn route [ replace-rt ][ advertise-policy policy-name ]
undo advertise evpn route
Default
BGP EVPN routes are not advertised through the BGP VPNv4 or VPNv6 address family.
Views
BGP VPNv4 address family
BGP VPNv6 address family
Predefined user roles
network-admin
Parameters
replace-rt: Replaces the route targets of BGP EVPN routes with the route targets of BGP VPNv4 or VPNv6 routes. If you do not specify this keyword, route targets of BGP EVPN routes are not modified.
advertise-policy policy-name: Specifies a routing policy to filter the BGP EVPN routes to be advertised to BGP VPNv4 or VPNv6 peers. The policy-name argument specifies the routing policy name, a case-sensitive string of 1 to 63 characters. If you do not specify this option, all BGP EVPN routes are advertised to BGP VPNv4 or VPNv6 peers.
Usage guidelines
To enable communication between data centers interconnected through an MPLS L3VPN network, you must configure the BGP EVPN address family and the BGP VPNv4 or VPNv6 address family to exchange routes on EDs.
After you execute this command, the device advertises IP prefix advertisement routes and MAC/IP advertisement routes that contain host route information through the BGP VPNv4 or VPNv6 address family.
Examples
# Enable BGP EVPN route advertisement for the BGP VPNv4 address family.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp-default] address-family vpnv4
[Sysname-bgp-default-vpnv4] advertise evpn route
advertise l2vpn evpn
Use advertise l2vpn evpn to enable BGP EVPN route advertisement to the local site.
Use undo advertise l2vpn evpn to disable BGP EVPN route advertisement to the local site.
Syntax
advertise l2vpn evpn
undo advertise l2vpn evpn
Default
BGP EVPN route advertisement to the local site is enabled.
Views
BGP-VPN IPv4 unicast address family view
BGP-VPN IPv6 unicast address family view
Predefined user roles
network-admin
Usage guidelines
This command enables the device to advertise private BGP EVPN routes to the local site after the device adds the routes to the routing table of a VPN instance.
Examples
# Enable BGP EVPN route advertisement to the local site for VPN instance vpn1.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp-default] ip vpn-instance vpn1
[Sysname-bgp-default-vpn1] address-family ipv4
[Sysname-bgp-default-ipv4-vpn1] advertise l2vpn evpn
advertise l3vpn route
Use advertise l3vpn route to enable BGP VPNv4 or VPNv6 route advertisement for the BGP EVPN address family.
Use undo advertise l3vpn route to disable BGP VPNv4 or VPNv6 route advertisement for the BGP EVPN address family.
Syntax
advertise l3vpn route [ replace-rt ][ advertise-policy policy-name ]
undo advertise l3vpn route
Default
BGP VPNv4 or VPNv6 routes are not advertised through the BGP EVPN address family.
Views
BGP EVPN address family view
Predefined user roles
network-admin
Parameters
replace-rt: Replaces the route targets of BGP VPNv4 or VPNv6 routes with the route targets of BGP EVPN routes. If you do not specify this keyword, route targets of BGP VPNv4 or VPNv6 routes are not modified.
advertise-policy policy-name: Specifies a routing policy to filter the BGP VPNv4 or VPNv6 routes to be advertised to BGP EVPN peers. The policy-name argument specifies the routing policy name, a case-sensitive string of 1 to 63 characters. If you do not specify this option, all BGP VPNv4 or VPNv6 routes are advertised to BGP EVPN peers.
Usage guidelines
To enable communication between data centers interconnected through an MPLS L3VPN network, you must configure the BGP EVPN address family and the BGP VPNv4 or VPNv6 address family to exchange routes on EDs.
After you execute this command, the device advertises BGP VPNv4 or VPNv6 routes as IP prefix advertisement routes through the BGP EVPN address family.
Examples
# Enable BGP VPNv4 or VPNv6 route advertisement for the BGP EVPN address family.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp-default] address-family l2vpn evpn
[Sysname-bgp-default-evpn] advertise l3vpn route
arp mac-learning disable
Use arp mac-learning disable to disable an EVPN instance from learning MAC addresses from ARP information.
Use undo arp mac-learning disable to restore the default.
Syntax
arp mac-learning disable
undo arp mac-learning disable
Default
An EVPN instance learns MAC addresses from ARP information.
Views
EVPN instance view
VSI EVPN instance view
Predefined user roles
network-admin
Usage guidelines
The MAC information and ARP information advertised by a remote device overlap. To avoid duplication, use this command to disable the learning of MAC addresses from ARP information. EVPN will learn remote MAC addresses only from the MAC information advertised from remote sites.
Examples
# Disable an EVPN instance from learning MAC addresses from ARP information.
<Sysname> system-view
[Sysname] vsi aaa
[Sysname-vsi-aaa] evpn encapsulation vxlan
[Sysname-vsi-aaa-evpn-vxlan] arp mac-learning disable
arp-advertising disable
Use arp-advertising disable to disable ARP information advertisement for an EVPN instance.
Use undo arp-advertising disable to restore the default.
Syntax
arp-advertising disable
undo arp-advertising disable
Default
ARP information advertisement is enabled for an EVPN instance.
Views
EVPN instance view
VSI EVPN instance view
Predefined user roles
network-admin
Usage guidelines
In an EVPN network with distributed gateways, you can disable ARP information advertisement for a VXLAN to save resources if all its user terminals use the same EVPN gateway device. The EVPN instance of the VXLAN will stop advertising ARP information through MAC/IP advertisement routes and withdraw advertised ARP information. When ARP information advertisement is disabled, user terminals in other VXLANs still can communicate with that VXLAN through IP prefix advertisement routes.
In an EVPN VPLS network, you can disable ARP information advertisement to save resources if all its user terminals are attached to the same PE. The PE will stop advertising ARP information and withdraw advertised ARP information.
Examples
# Disable ARP information advertisement for an EVPN instance.
<Sysname> system-view
[Sysname] vsi aaa
[Sysname-vsi-aaa] evpn encapsulation vxlan
[Sysname-vsi-aaa-evpn-vxlan] arp-advertising disable
# Disable ARP information advertisement for an EVPN instance.
<Sysname> system-view
[Sysname] vsi aaa
[Sysname-vsi-aaa] evpn encapsulation mpls
[Sysname-vsi-aaa-evpn-mpls] arp-advertising disable
dci enable
Use dci enable to enable DCI on an interface.
Use undo dci enable to disable DCI on an interface.
Syntax
dci enable
undo dci enable
Default
DCI is disabled on an interface.
Views
Interface view
Predefined user roles
network-admin
Usage guidelines
For EDs to automatically establish VXLAN-DCI tunnels, you must enable DCI on the Layer 3 interfaces that interconnect the EDs.
Examples
# Enable DCI on Ten-GigabitEthernet 3/1/1.
<Sysname> system-view
[Sysname] interface ten-gigabitethernet 3/1/1
[Sysname-Ten-GigabitEthernet3/1/1] dci enable
display bgp l2vpn evpn
Use display bgp l2vpn evpn to display BGP EVPN routes.
Syntax
display bgp [ instance instance-name ] l2vpn evpn [ peer { ipv4-address | ipv6-address } { advertised-routes | received-routes } [ { evpn-route route-length | evpn-prefix } [ verbose ] | statistics ] | [ route-distinguisher route-distinguisher | route-type { auto-discovery | es | igmp-js | igmp-ls | imet | ip-prefix | mac-ip | smet } ] * [ { evpn-route route-length | evpn-prefix } [ advertise-info ] | ipv4-address | ipv6-address | mac-address ] | statistics ]
display bgp [ instance instance-name ] l2vpn evpn [ peer { ipv4-address | ipv6-address } { accepted-routes | not-accepted-routes } ]
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
instance instance-name: Specifies a BGP instance by its name, a case-sensitive string of 1 to 31 characters. If you do not specify this option, the command displays BGP EVPN routes for the default BGP instance.
peer { ipv4-address | ipv6-address }: Specifies a peer by its IPv4 address or IPv6 address.
advertised-routes: Specifies the routes advertised to the specified peer.
received-routes: Specifies the routes received from the specified peer.
statistics: Displays BGP EVPN route statistics.
route-distinguisher route-distinguisher: Specifies a route distinguisher (RD), a string of 3 to 21 characters. The RD can use one of the following formats:
· 16-bit AS number:32-bit user-defined number. For example, 101:3.
· 32-bit IP address:16-bit user-defined number. For example, 192.168.122.15:1.
· 32-bit AS number:16-bit user-defined number. For example, 65536:1. The AS number must be equal to or greater than 65536.
route-type: Specifies a route type.
auto-discovery: Specifies Ethernet auto-discovery routes.
es: Specifies Ethernet segment (ES) routes.
igmp-ls: Specifies IGMP leave synch routes.
igmp-js: Specifies IGMP join synch routes.
imet: Specifies inclusive multicast Ethernet tag (IMET) routes.
ip-prefix: Specifies IP prefix advertisement routes.
mac-ip: Specifies MAC/IP advertisement routes.
smet: Specifies selective multicast Ethernet tag (SMET) routes.
evpn-route: Specifies a BGP EVPN route, a case-insensitive string of 1 to 512 characters.
route-length: Specifies the route length in bits, in the range of 0 to 65535.
evpn-prefix: Specifies a BGP EVPN route in the format of evpn-route/route-length, a case-insensitive string of 1 to 512 characters.
verbose: Displays detailed route information. If you do not specify this keyword, the command displays brief route information.
advertise-info: Displays advertisement information about BGP EVPN routes.
ipv4-address: Specifies an IPv4 address.
ipv6-address: Specifies an IPv6 address.
mac-address: Specifies a MAC address in MAC/IP advertisement routes. If you specify the route-type keyword, to use this argument, you must also specify the mac-ip keyword.
accepted-routes: Displays the routes that are received from the specified peer and pass policy-based route filtering.
not-accepted-routes: Displays the routes that are received from the specified peer and do not pass policy-based route filtering.
Usage guidelines
If you do not specify any parameter, this command displays brief information about all BGP EVPN routes.
Examples
# Display brief information about all BGP EVPN routes.
<Sysname> display bgp l2vpn evpn
BGP local router ID is 1.1.1.1
Status codes: * - valid, > - best, d - dampened, h - history,
s - suppressed, S - stale, i - internal, e - external
a - additional-path
Origin: i - IGP, e - EGP, ? - incomplete
Total number of routes from all PEs: 0
Route distinguisher: 1:1(vpna)
Total number of routes: 1
* > Network : [2][0][48][1485-247c-0506][32][10.1.2.20]/136
NextHop : 2.2.2.2 LocPrf : 100
PrefVal : 0 OutLabel : NULL
MED : 0
Path/Ogn: i
Table 1 Command output
Field |
Description |
Status codes |
Route status codes: · * - valid—Valid route. · > - best—Optimal route. · d - dampened—Dampened route. · h - history—History route. · s - suppressed—Suppressed summary route or MAC/IP advertisement route. · S - stale—Stale route. · i - internal—Internal route. · e - external—External route. · a - additional-path—Add-Path optimal route. |
Origin |
Origin of the route: · i – IGP—Originated in the AS. The origin of routes advertised by using the network command is IGP. · e – EGP—Learned through EGP. · ? – incomplete—Unknown origin. The origin of routes redistributed from IGP protocols is incomplete. |
Network |
BGP EVPN route/route length. For example, in the entry [2][0][48][1485-247c-0506][32][10.1.2.20]/136, [2][0][48][1485-247c-0506][32][10.1.2.20] is the route, and 136 is the route length in bytes. BGP EVPN routes are as follows: · [1][ESI][EthernetTagID] ¡ 1—Ethernet auto-discovery route. ¡ ESI—Ethernet segment identifier (ESI). ¡ EthernetTagID—Ethernet tag ID. · [2][EthernetTagID][MACLength][MAC][IPAddressLength][IPAddress] ¡ 2—MAC/IP advertisement route. ¡ EthernetTagID—Ethernet tag ID. ¡ MACLength—MAC address length. ¡ MAC—MAC address. ¡ IPAddressLength—IP address length. ¡ IPAddress—IP address. · [3][EthernetTagID][IPAddressLength][IPAddress] ¡ 3—IMET route. ¡ IPAddressLength—IP address length. ¡ IPAddress—IP address of the originating router. · [4][ESI][IPAddressLength][IPAddress] ¡ 4—ES route. ¡ ESI—ESI. ¡ IPAddressLength—IP address length. ¡ IPAddress—IP address of the originating router. · [5][EthernetTagID][IPAddressLength][IPAddress] ¡ 5—IP prefix advertisement route. ¡ EthernetTagID—Ethernet tag ID. ¡ IPAddressLength—IP address length. ¡ IPAddress—IP address of the originating router. · [6][EthernetTagID][Source Len][Source IP][Group Len][Group IP][Originator Len][Originator IP] ¡ 6—Selective multicast Ethernet tag route. ¡ EthernetTagID—Ethernet tag ID. ¡ Source Len—Length of the multicast source address. This field displays 0 if the multicast source is any (*, G). ¡ Source IP—Source IP address of IGMP membership reports. This field is not displayed if the multicast source is any (*, G). ¡ Group Len—Length of the multicast group address. ¡ Group IP—Multicast group address of IGMP membership reports. ¡ Originator Len—Length of the originating router's IP address. ¡ Originator IP—IP address of the originating router. · [7][ESI][EthernetTagID][Source Len][Source IP][Group Len][Group IP][Originator Len][Originator IP] ¡ 7—IGMP join synch route. ¡ ESI—ESI. ¡ EthernetTagID—Ethernet tag ID. ¡ Source Len—Length of the multicast source address. This field displays 0 if the multicast source is any (*, G). ¡ Source IP—Source IP address of IGMP membership reports. This field is not displayed if the multicast source is any (*, G). ¡ Group Len—Length of the multicast group address. ¡ Group IP—Multicast group address of IGMP membership reports. ¡ Originator Len—Length of the originating router's IP address. ¡ Originator IP—IP address of the originating router. · [8][ESI][EthernetTagID] [Source Len][Source IP][Group Len][Group IP][Originator Len][Originator IP][ [LeaveGroup Synchronization] ¡ 8—IGMP leave synch route. ¡ ESI—ESI. ¡ EthernetTagID—Ethernet tag ID. ¡ Source Len—Length of the multicast source address. This field displays 0 if the multicast source is any (*, G). ¡ Source IP—Source IP address of IGMP membership reports. This field is not displayed if the multicast source is any (*, G). ¡ Group Len—Length of the multicast group address. ¡ Group IP—Multicast group address of IGMP membership reports. ¡ Originator Len—Length of the originating router's IP address. ¡ Originator IP—IP address of the originating router. ¡ LeaveGroup Synchronization—Leave group synchronization sequence number. |
NextHop |
Next hop IP address. |
LocPrf |
Local precedence. |
PrefVal |
Preferred value. |
OutLabel |
Outgoing label. |
MED |
Multi-Exit Discriminator (MED) attribute. |
Path/Ogn |
AS_PATH and ORIGIN attributes of the route. |
# Display detailed information about BGP EVPN route [1][0001.0203.0405.0607.0809][5]/120 with RD 1.1.1.1:100 for EVPN VXLAN.
<Sysname> display bgp l2vpn evpn route-distinguisher 1.1.1.1:100 [1][0001.0203.0405.0607.0809][5] 120
BGP local router ID: 172.16.250.133
Local AS number: 100
Route distinguisher: 1.1.1.1:100
Total number of routes: 1
Paths: 1 available, 1 best
BGP routing table information of [1][0001.0203.0405.0607.0809][5]/120:
From : 10.1.1.2 (192.168.56.17)
Rely nexthop : 10.1.1.2
Original nexthop: 10.1.1.2
OutLabel : 0
Ext-Community : <RT: 1:2>, <Encapsulation Type: VXLAN >, <ESI Label: Flag 0,
Label 1>
RxPathID : 0x0
TxPathID : 0x0
AS-path : 200
Origin : igp
Attribute value : MED 0, pref-val 0
State : valid, external, best
IP precedence : N/A
QoS local ID : N/A
Traffic index : N/A
EVPN route type : Ethernet auto-discovery route
ESI : 0001.0203.0405.0607.0809
Ethernet tag ID : 5
MPLS label : 10
# Display detailed information about BGP EVPN route [1][0001.0001.0001.0001.0001][3111]/120 with RD 2:33 for EVPN VPLS over SRv6.
<Sysname> display bgp l2vpn evpn route-distinguisher 2:33 [1][0001.0001.0001.0001.0001][3111]/120
BGP local router ID: 2.2.2.2
Local AS number: 1
Route distinguisher: 2:33
Total number of routes: 1
Paths: 1 available, 1 best
BGP routing table information of [1][0001.0001.0001.0001.0001][3111]/120:
From : 3::3333 (3.3.3.3)
Rely nexthop : FE80::7CBF:38FF:FE28:133
Original nexthop: 3::3333
Out interface : Ten-GigabitEthernet3/1/1
Route age : 03h07m27s
OutLabel : 3
Ext-Community : <RT: 11:11>
RxPathID : 0x0
TxPathID : 0x0
PrefixSID : End.DT2U SID <33::1:7:0>, End.DT2UL SID <33::1:8:0>
AS-path : (null)
Origin : igp
Attribute value : MED 0, localpref 100, pref-val 0
State : valid, internal, best
Source type : local
IP precedence : N/A
QoS local ID : N/A
Traffic index : N/A
EVPN route type : Ethernet auto-discovery route
ESI : 0001.0001.0001.0001.0001
Ethernet tag ID : 3111
MPLS label : 3
Tunnel policy : NULL
Rely tunnel IDs : N/A
Table 2 Command output
Field |
Description |
Paths |
Number of routes: · available—Number of valid routes. · best—Number of optimal routes. |
From |
IP address of the BGP peer that advertised the route. |
Rely nexthop |
Next hop after route recursion. If no next hop is found, this field displays not resolved. |
Original nexthop |
Original next hop of the route. If the route was obtained from a BGP update message, the original next hop is the next hop IP address in the message. |
Out interface |
Outgoing interface to the next hop of the route. |
Route age |
Time that has elapsed since the most recent refresh for the route. |
OutLabel |
Outgoing label of the route. |
Ext-Community |
Extended community attributes: · RT. · Encapsulation Type. · ESI Label. · EVPN Layer 2 Attributes. |
RxPathID |
Add-Path ID value of the received route. This field is not supported by the BGP EVPN address family. |
TxPathID |
Add-Path ID value of the sent route. This field is not supported by the BGP EVPN address family. |
PrefixSID |
SRv6 SID. |
AS-path |
AS_PATH attribute of the route. This attribute records the ASs the route has passed and avoids routing loops. |
Origin |
Origin of the route: · igp—Originated in the AS. The origin of routes advertised by using the network command is IGP. · egp—Learned through EGP. · incomplete—Unknown origin. The origin of routes redistributed from IGP protocols is incomplete. |
Attribute value |
Attributes of the route: · MED—MED value for the destination network. · localpref—Local preference value. · pref-val—Preferred value. · pre—Route preference value. |
Inlabel |
Incoming labels. |
Originator |
Peer that created the route. |
Cluster list |
Cluster list attribute. If the route does not carry the attribute, this field is not displayed. |
State |
Current state of the route: · valid. · internal. · external. · local. · synchronize. · best. · localredist—The route is redistributed from another local VPN instance or the public instance. · delay—The route will be delayed for optimal route selection. This field is displayed only in the detailed command output. · bgp-rib-only—The route will not be flushed to the routing table. This field is displayed only in the detailed command output. |
Source type |
Source of the route. |
IP precedence |
IP precedence in the range of 0 to 7. N/A indicates that the IP precedence is invalid. |
QoS local ID |
QoS local ID in the range of 1 to 4095. N/A indicates that the QoS local ID is invalid. |
Traffic index |
Traffic index in the range of 1 to 64. N/A indicates that the traffic index is invalid. |
MPLS label |
For VXLAN encapsulation, this field displays a VXLAN ID. For MPLS encapsulation, this field displays an MPLS label. For SRv6 encapsulation, this field displays an MPLS label included in an SID. An SID is formed by an MPLS label and an SRv6 TLV. |
Tunnel policy |
Effective tunnel policy. This field displays NULL if no tunnel policy is effective. |
Rely tunnel IDs |
Tunnel indexes after route recursion. If ECMP tunnels exist, this field displays multiple tunnel indexes. If no tunnel information is obtained after route recursion, this field displays N/A. |
# Display detailed information about BGP EVPN route [2][5][48][0001-0203-0405][32][4.5.5.5]/136 with RD 1.1.1.1:100.
<Sysname> display bgp l2vpn evpn route-distinguisher 1.1.1.1:100 [2][5][48][0001-0203-0405][32][5.5.5.5] 136
BGP local router ID: 172.16.250.133
Local AS number: 100
Route distinguisher: 1.1.1.1:100
Total number of routes: 1
Paths: 1 available, 1 best
BGP routing table information of [2][5][48][0001-0203-0405][32][5.5.5.5]/136:
From : 10.1.1.2 (192.168.56.17)
Rely nexthop : 10.1.1.2
Original nexthop: 10.1.1.2
OutLabel : 0
Ext-Community : <RT: 1:2>, <RT: 1:3>, <RT: 1:4>, <RT: 1:5>, <RT: 1:6>, <RT: 1:7
>, <Encapsulation Type: VXLAN>, <Router's Mac: 0006-0708-0910
>, <MAC Mobility: Flag 0, SeqNum 2>, <Default GateWay>
RxPathID : 0x0
TxPathID : 0x0
AS-path : 200
Origin : igp
Attribute value : MED 0, pref-val 0
State : valid, external, best
IP precedence : N/A
QoS local ID : N/A
Traffic index : N/A
EVPN route type : MAC/IP advertisement route
ESI : 0001.0203.0405.0607.0809
Ethernet tag ID : 5
MAC address : 0001-0203-0405
IP address : 5.5.5.5/32
MPLS label1 : 10
MPLS label2 : 100
Re-origination : Enable
Route distinguisher: 2.2.2.2:100
Total number of routes: 1
Paths: 1 available, 1 best
BGP routing table information of [2][5][48][0001-0203-0405][32][5.5.5.5]/136:
From : 10.1.1.2 (192.168.56.17)
Rely nexthop : 10.1.1.2
Original nexthop: 10.1.1.2
OutLabel : 0
Ext-Community : <RT: 1:2>, <RT: 1:3>, <RT: 1:4>, <RT: 1:5>, <RT: 1:6>, <RT: 1:7
>, <Encapsulation Type: VXLAN>, <Router's Mac: 0006-0708-0910
>, <MAC Mobility: Flag 0, SeqNum 2>, <Default GateWay>
RxPathID : 0x0
TxPathID : 0x0
AS-path : 200
Origin : igp
Attribute value : MED 0, pref-val 0
State : valid, external, best, reoriginated, remoteredist
IP precedence : N/A
QoS local ID : N/A
Traffic index : N/A
EVPN route type : MAC/IP advertisement route
ESI : 0001.0203.0405.0607.0809
Ethernet tag ID : 5
MAC address : 0001-0203-0405
IP address : 5.5.5.5/32
MPLS label1 : 200
MPLS label2 : 300
Table 3 Command output
Field |
Description |
Ext-Community |
Extended community attributes: · RT. · Encapsulation Type. · Router's Mac. · MAC Mobility—MAC mobility. ¡ Flag—Indicates whether the MAC address can move. A value of 1 indicates that the MAC address cannot move, and a value of 0 indicates that the MAC address can move. ¡ SeqNum—Identifies the most recent move of the MAC address. · Default GateWay—Route for the default gateway. |
State |
Route state: · valid—Valid route. · internal—Internal route. · external—External route. · local—Locally originated route. · synchronize—Synchronized route. · best—Optimal route. · reoriginated—Reoriginated route. · remoteredist—MAC/IP advertisement route originated based on a remote route. |
MPLS label1 |
VXLAN ID used for Layer 2 forwarding. |
MPLS label2 |
L3 VXLAN ID used for Layer 3 forwarding. |
Re-origination |
Status of route reorigination: · Enable. · Disable. |
# Display detailed information about BGP EVPN route [3][0][32][5.5.5.5]/80 with RD 1.1.1.1:100.
<Sysname> display bgp l2vpn evpn route-distinguisher 1.1.1.1:100 [3][0][32][4.5.5.5] 80
BGP local router ID: 172.16.250.133
Local AS number: 100
Route distinguisher: 1.1.1.1:100
Total number of routes: 1
Paths: 1 available, 1 best
BGP routing table information of [3][0][32][4.5.5.5]/80:
From : 10.1.1.2 (192.168.56.17)
Rely nexthop : 10.1.1.2
Original nexthop: 10.1.1.2
OutLabel : 0
Ext-Community : <RT: 1:2>, <Encapsulation Type: VXLAN>
RxPathID : 0x0
TxPathID : 0x0
PMSI tunnel : Flag 0, TunnelType 6, Label 10, EndPointAddress 10.1.1.2
AS-path : 200
Origin : igp
Attribute value : MED 0,pref-val 0
State : valid, external, best
IP precedence : N/A
QoS local ID : N/A
Traffic index : N/A
EVPN route type : Inclusive multicast Ethernet tag route
Ethernet tag ID : 0
Origin address : 5.5.5.5/32
Table 4 Command output
Field |
Description |
Ext-Community |
Extended community attributes: · RT. · Encapsulation Type. |
PMSI tunnel |
P-Multicast Service Interface (PMSI) tunnel information: · Flag—Flags. This field is fixed at 0 in the current software version. · TunnelType—Tunnel type. This field is fixed at 6 in the current software version, which represents a head-end replication tunnel. · Label—VXLAN ID. · EndPointAddress—Tunnel destination address. |
Origin address |
IP address of the originating router. |
# Display detailed information about BGP EVPN route [4][0000.0000.0000.0000.000a][32][4.5.5.5]/128 with RD 1.1.1.1:100.
<Sysname> display bgp l2vpn evpn route-distinguisher 1.1.1.1:100 [4][0000.0000.0000.0000.000a][32][4.5.5.5] 128
BGP local router ID: 172.16.250.133
Local AS number: 100
Route distinguisher: 1.1.1.1:100
Total number of routes: 1
Paths: 1 available, 1 best
BGP routing table information of [4][0000.0000.0000.0000.000a][32][4.5.5
.5]/128:
From : 10.1.1.2 (192.168.56.17)
Rely nexthop : 10.1.1.2
Original nexthop: 10.1.1.2
OutLabel : 0
Ext-Community : <ES-Import RT: 0000-0000-0000>, <Encapsulation Type: VXLAN>
: <Encapsulation Type: MPLS>, <EVPN DF Election: Alg Modulus,Cap -,
: Preference ->
RxPathID : 0x0
TxPathID : 0x0
AS-path : 200
Origin : igp
Attribute value : MED 0,pref-val 0
State : valid, external, best
IP precedence : N/A
QoS local ID : N/A
Traffic index : N/A
EVPN route type : Ethernet segment route
ESI : 0000.0000.0000.0000.000a
Origin address : 4.5.5.5/32
Table 5 Command output
Field |
Description |
Ext-Community |
Extended community attributes: · RT. · Encapsulation Type. · ES-Import RT. · EVPN DF Election. ¡ Alg—DF election algorithm. Modulus indicates the VLAN tag-based algorithm. Preference indicates the preference-based algorithm. ¡ Cap—DF election capability. DP represents non-revertive mode. If no capability is supported, this field displays a hyphen (-). ¡ Preference—DF election preference. If the DF election preference is not configured, this field displays a hyphen (-). |
Origin address |
IP address of the originating router. |
# Display detailed information about BGP EVPN route [5][10][32][4.5.5.5]/80 with RD 1.1.1.1:100.
<Sysname> display bgp l2vpn evpn route-distinguisher 1.1.1.1:100 [5][10][32][4.5.5.5] 80
BGP local router ID: 172.16.250.133
Local AS number: 100
Route distinguisher: 1.1.1.1:100
Total number of routes: 1
Paths: 1 available, 1 best
BGP routing table information of [5][10][32][4.5.5.5]/80:
From : 10.1.1.2 (192.168.56.17)
Rely nexthop : 10.1.1.2
Original nexthop: 10.1.1.2
OutLabel : 0
Ext-Community : <RT: 1:2>, <Encapsulation Type: VXLAN>, <Router's Mac:
0006-0708-0910>
RxPathID : 0x0
TxPathID : 0x0
AS-path : 200
Origin : igp
Attribute value : MED 0,pref-val 0
State : valid, external, best
IP precedence : N/A
QoS local ID : N/A
Traffic index : N/A
EVPN route type : IP prefix advertisement route
ESI : 0000.0000.0000.0000.000a
Ethernet tag ID : 10
IP address : 4.5.5.5/32
Gateway address : 0.0.0.0
MPLS Label : 1
Re-origination : Enabled
Route distinguisher: 2.2.2.2:100
Total number of routes: 1
Paths: 1 available, 1 best
BGP routing table information of [5][10][32][4.5.5.5]/80:
From : 10.1.1.2 (192.168.56.17)
Rely nexthop : 10.1.1.2
Original nexthop: 10.1.1.2
OutLabel : 0
Ext-Community : <RT: 1:2>, <Encapsulation Type: VXLAN>, <Router's Mac:
0006-0708-0910>
RxPathID : 0x0
TxPathID : 0x0
AS-path : 200
Origin : igp
Attribute value : MED 0,pref-val 0
State : valid, external, best, reoriginated, remoteredist
IP precedence : N/A
QoS local ID : N/A
Traffic index : N/A
EVPN route type : IP prefix advertisement route
ESI : 0000.0000.0000.0000.000a
Ethernet tag ID : 10
IP address : 4.5.5.5/32
Gateway address : 0.0.0.0
MPLS Label : 20
Table 6 Command output
Field |
Description |
Ext-Community |
Extended community attributes: · RT. · Encapsulation Type. · Router's Mac. |
State |
Route state: · valid—Valid route. · internal—Internal route. · external—External route. · local—Locally originated route. · synchronize—Synchronized route. · best—Optimal route. · reoriginated—Reoriginated route. · remoteredist—MAC/IP advertisement route originated based on a remote route. |
IP address |
IP address and prefix length. |
MPLS Label |
L3 VXLAN ID used for Layer 3 forwarding. |
Re-origination |
Status of route reorigination: · Enable. · Disable. |
# Display detailed information about BGP EVPN route [6][0][32][10.1.1.1][32][224.224.224.224][32][192.168.3.1]/160 with RD 1.1.1.1:100.
<Sysname> display bgp l2vpn evpn route-distinguisher 1.1.1.1:100 [6][0][32][10.1.1.1][32][224.224.224.224][32][192.168.3.1] 160
BGP local router ID: 172.16.250.133
Local AS number: 100
Route distinguisher: 1.1.1.1:100
Total number of routes: 1
Paths: 1 available, 1 best
BGP routing table information of [6][0][32][10.1.1.1][32][224.224.224.224][32][192.168.3.1]/160:
From : 10.1.1.2
Rely nexthop : 10.1.1.2
Original nexthop: 10.1.1.2
OutLabel : NULL
Ext-Community : <RT: 1:2>, <Encapsulation Type: VXLAN>,
RxPathID : 0x0
TxPathID : 0x0
AS-path : 200
Origin : igp
Attribute value : MED 0,pref-val 0
State : valid, external, best
IP precedence : N/A
QoS local ID : N/A
Traffic index : N/A
EVPN route type : Selective multicast Ethernet tag route
Ethernet tag ID : 0
Source length : 32
Source address : 10.1.1.1
Group length : 32
Group address : 224.224.224.224
Origin address : 192.168.3.1
IGMP flags : v3, include
Table 7 Command output
Field |
Description |
Ext-Community |
Extended community attributes: · RT. · Encapsulation Type. |
Source length |
Length of the multicast source address. |
Source address |
Multicast source address. |
Group length |
Length of the multicast group address. |
Group address |
Multicast group address. |
Origin address |
IP address of the originating router. |
# Display detailed information about BGP EVPN route [7][00:00:00:00:00:00:00:00:00][0][32][10.1.1.1][32][224.224.224.224][32][192.168.3.1]/240 with RD 1.1.1.1:100.
<Sysname> display bgp l2vpn evpn route-distinguisher 1.1.1.1:100 [7][0000.0000.0000.0000.0000][0][32][10.1.1.1][16][224.224.224.224][32][192.168.3.1] 240
BGP local router ID: 172.16.250.133
Local AS number: 100
Route distinguisher: 1.1.1.1:100
Total number of routes: 1
Paths: 1 available, 1 best
BGP routing table information of [7][0000.0000.0000.0000.0000][0][32][10.1.1.1][32][224.224.224.224][32][192.168.3.1]/240:
From : 10.1.1.2
Rely nexthop : 10.1.1.2
Original nexthop: 10.1.1.2
OutLabel : NULL
Ext-Community : <RT: 1:2>, <Encapsulation Type: VXLAN>, < ESI-RT: 0:0>
RxPathID : 0x0
TxPathID : 0x0
AS-path : 200
Origin : igp
Attribute value : MED 0,pref-val 0
State : valid, external, best
IP precedence : N/A
QoS local ID : N/A
Traffic index : N/A
EVPN route type : IGMP join synch route
ESI : 0000.0000.0000.0000.0000
Ethernet tag ID : 0
Source length : 32
Source address : 10.1.1.1
Group length : 32
Group address : 224.224.224.224
Origin address : 192.168.3.1
IGMP flags : v3, include
Table 8 Command output
Field |
Description |
Ext-Community |
Extended community attributes: · RT. · Encapsulation Type. · EVI-RT—Route target associated with EVI. |
Source length |
Length of the multicast source address. |
Source address |
Multicast source address. |
Group length |
Length of the multicast group address. |
Group address |
Multicast group address. |
Origin address |
IP address of the originating router. |
# Display detailed information about BGP EVPN route [8][ 00:00:00:00:00:00:00:00:00][0][32][10.1.1.1][32][224.224.224.224][32][192.168.3.1][0]/272 with RD 1.1.1.1:100.
BGP local router ID: 172.16.250.133
Local AS number: 100
Route distinguisher: 1.1.1.1:100
Total number of routes: 1
Paths: 1 available, 1 best
BGP routing table information of [8][0000.0000.0000.0000.0000] [0][32][10.1.1.1][32][224.224.224.224][32][192.168.3.1][0]/272:
From : 10.1.1.2
Rely nexthop : 10.1.1.2
Original nexthop: 10.1.1.2
OutLabel : NULL
Ext-Community : <RT: 1:2>, <Encapsulation Type: VXLAN>, < ESI-RT: 1:200>
RxPathID : 0x0
TxPathID : 0x0
AS-path : 200
Origin : igp
Attribute value : MED 0,pref-val 0
State : valid, external, best
IP precedence : N/A
QoS local ID : N/A
Traffic index : N/A
EVPN route type : IGMP leave synch route
ESI : 0000.0000.0000.0000.0000
Ethernet tag ID : 0
Source length : 32
Source address : 10.1.1.1
Group length : 32
Group address : 224.224.224.224
Origin address : 192.168.3.1
Leave group sync: 0
Max ResponseTime: 2500ms
Max ResponseCode: 25
IGMP flags : v3, include
Table 9 Command output
Field |
Description |
Ext-Community |
Extended community attributes: · RT. · Encapsulation Type. · ESI-RT—Route target associated with the ESI. |
Source length |
Length of the multicast source address. |
Source address |
Multicast source address. |
Group length |
Length of the multicast group address. |
Group address |
Multicast group address. |
Origin address |
IP address of the originating router. |
Leave group sync |
Leave group synchronization sequence number. |
Max ResponseTime |
Maximum response time in milliseconds. |
Max ResponseCode |
Maximum response time in the received packet, in deciseconds. |
# Display detailed information about BGP EVPN route [4][0000.0000.0000.0000.000a][32][4.5.5.5]/128 with RD 1.1.1.1:100.
<Sysname> display bgp l2vpn evpn route-distinguisher 1.1.1.1:100 [4][0000.0000.0000.0000.000a][32][4.5.5.5] 128 advertise-info
BGP local router ID: 172.16.250.133
Local AS number: 100
Route distinguisher: 1.1.1.1:100
Total number of routes: 1
Paths: 1 best
BGP routing table information of [4][0000.0000.0000.0000.000a][32][4.5.5.5]/128:
Advertised to peers (1 in total):
10.2.1.2
Table 10 Command output
Field |
Description |
Paths |
Number of optimal routes. |
Advertised to peers (1 in total) |
Peers to whom the route has been advertised and the number of the peers. |
display bgp l2vpn evpn dampened
Use display bgp l2vpn evpn dampened to display dampened BGP EVPN routes.
Syntax
display bgp [ instance instance-name ] l2vpn evpn dampened
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
instance instance-name: Specifies a BGP instance by its name, a case-sensitive string of 1 to 31 characters. If you do not specify this option, the command displays route information for the default BGP instance.
Examples
# Display dampened BGP EVPN routes.
<Sysname> display bgp l2vpn evpn dampened
BGP local router ID is 4.4.4.4
Status codes: * - valid, > - best, d - dampened, h - history,
s - suppressed, S - stale, i - internal, e - external
a - additional-path
Origin: i - IGP, e - EGP, ? - incomplete
Total number of routes from all PEs: 2
Route distinguisher: 5:1
Total number of routes: 2
di Network : [5][0][32][55.1.1.1]/80
From : 45.1.1.5 Reuse : 00:02:18
Path/Ogn: ?
Route distinguisher: 5:1
Total number of routes: 1
di Network : [5][0][128][55::1]/176
From : 45.1.1.5 Reuse : 00:02:27
Path/Ogn: ?
Table 11 Command output
Field |
Description |
Status codes |
Route status codes: · * - valid—Valid route. · > - best—Optimal route. · d - dampened—Dampened route. · h - history—History route. · s - suppressed—Suppressed route. · S - stale—Stale route. · i - internal—Internal route. · e - external—External route. · a - additional-path—Add-Path optimal route. |
Origin |
Origin of the route: · i – IGP—Originated in the AS. · e – EGP—Learned through EGP. · ? – incomplete—Unknown origin. |
Total number of routes |
Total number of dampened BGP EVPN routes. |
Network |
BGP EVPN route/route length. |
From |
IP address of the BGP peer that advertised the route. |
Reuse |
Time to wait before the route becomes available. |
Path/Ogn |
AS_PATH and ORIGIN attributes of the route: · AS_PATH—Records the ASs the route has passed, which avoids routing loops. · ORIGIN—Identifies the origin of the route. |
Related commands
dampening (Layer 3—IP Routing Command Reference)
dampening ibgp (MPLS Command Reference)
reset bgp dampening (Layer 3—IP Routing Command Reference)
display bgp l2vpn evpn flap-info
Use display bgp l2vpn evpn flap-info to display flapping statistics about BGP EVPN routes.
Syntax
display bgp [ instance instance-name ] l2vpn evpn flap-info
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
instance instance-name: Specifies a BGP instance by its name, a case-sensitive string of 1 to 31 characters. If you do not specify this option, the command displays route information for the default BGP instance.
Examples
# Display flapping statistics about BGP EVPN routes.
<Sysname> display bgp l2vpn evpn flap-info
BGP local router ID is 4.4.4.4
Status codes: * - valid, > - best, d - dampened, h - history,
s - suppressed, S - stale, i - internal, e - external
a - additional-path
Origin: i - IGP, e - EGP, ? - incomplete
Total number of routes from all PEs: 2
Route distinguisher: 5:1
Total number of routes: 2
di Network : [5][0][32][55.1.1.1]/80
From : 45.1.1.5 Flaps : 7
Duration: 00:00:54 Reuse : 00:02:12
Path/Ogn: ?
Route distinguisher: 5:1
Total number of routes: 1
di Network : [5][0][128][55::1]/176
From : 45.1.1.5 Flaps : 7
Duration: 00:00:44 Reuse : 00:02:22
Path/Ogn: ?
Table 12 Command output
Field |
Description |
Status codes |
Route status codes: · * - valid—Valid route. · > - best—Optimal route. · d - dampened—Dampened route. · h - history—History route. · s - suppressed—Suppressed route. · S - stale—Stale route. · i - internal—Internal route. · e - external—External route. · a - additional-path—Add-Path optimal route. |
Origin |
Origin of the route: · i – IGP—Originated in the AS. · e – EGP—Learned through EGP. · ? – incomplete—Unknown origin. |
Total number of routes |
Total number of flapping BGP EVPN routes. |
Network |
BGP EVPN route/route length. |
From |
IP address of the BGP peer that advertised the route. |
Flaps |
Number of route flapping events. This value is the number of route state changes from available to unavailable or the number of attribute changes for an available route. |
Duration |
Duration of route flapping. |
Reuse |
Time to wait before the route becomes available. |
Path/Ogn |
AS_PATH and ORIGIN attributes of the route: · AS_PATH—Records the ASs the route has passed, which avoids routing loops. · ORIGIN—Identifies the origin of the route. |
Related commands
dampening (Layer 3—IP Routing Command Reference)
dampening ibgp (MPLS Command Reference)
reset bgp flap-info (Layer 3—IP Routing Command Reference)
display bgp l2vpn evpn inlabel
Use display bgp l2vpn evpn inlabel to display incoming labels for IP prefix advertisement routes.
Syntax
display bgp [ instance instance-name ] l2vpn evpn inlabel
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
instance instance-name: Specifies a BGP instance by its name, a case-sensitive string of 1 to 31 characters. If you do not specify this option, the command displays route information for the default BGP instance.
Usage guidelines
Use this command to display the private network labels that the local PE assigns to IP prefix advertisement routes.
Examples
# Display incoming labels for IP prefix advertisement routes.
<Sysname> display bgp l2vpn evpn inlabel
BGP local router ID is 1.1.1.1
Status codes: * - valid, > - best, d - dampened, h - history
s - suppressed, S - stale, i - internal, e - external
a - additional-path
Origin: i - IGP, e - EGP, ? – incomplete
Total number of routes from all PEs: 1
Route distinguisher: 100:2
Total number of routes: 1
Network NextHop OutLabel InLabel
* >e [5][0][24][192.168.1.0]/80
192.168.1.10 NULL 1151
Table 13 Command output
Field |
Description |
Status codes |
Route status codes: · * - valid—Valid route. · > - best—Optimal route. · d - dampened—Dampened route. · h - history—History route. · i - internal—Internal route. · e - external—External route. · s - suppressed—Suppressed route. · S - Stale—Stale route. · a - additional-path—Add-Path optimal route. |
Origin |
Origin of the route: · i – IGP—Originated in the AS. The origin of routes advertised by using the network command is IGP. · e – EGP—Learned through EGP. · ? – incomplete—Unknown origin. The origin of routes redistributed from IGP protocols is incomplete. |
Network |
BGP EVPN route in the format of [5][EthernetTagID][IPAddressLength][IPAddress]: · 5—IP prefix advertisement route. · EthernetTagID—Ethernet tag ID. · IPAddressLength—IP address length. · IPAddress—IP address of the originating router. |
OutLabel |
Outgoing label, which is the private network label assigned by the peer PE. If the peer PE assigns a null label, this field displays NULL. |
InLabel |
Incoming label, which is the private network label assigned by the local PE. |
Related commands
evpn mpls routing-enable
peer advertise encap-type mpls
display bgp route-target evpn
Use display bgp route-target evpn to display the route targets sourced from the EVPN process and ES-import route targets for BGP.
Syntax
display bgp [ instance instance-name ] route-target evpn
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
instance instance-name: Specifies a BGP instance by its name, a case-sensitive string of 1 to 31 characters. If you do not specify this option, the command displays route targets for the default BGP instance.
Usage guidelines
Use this command to display the following information:
· ES-import route targets carried in the ES-Import Route Target extended community attribute.
· Route targets configured for all EVPN instances created in system view and VSI view.
The ES-Import Route Target extended community attribute is advertised with ES routes. An ES-import route target carried in this attribute is a 48-bit string that is automatically generated in the H-H-H format based on an ESI. The device accepts an ES route only if the ES-import route target carried in that route matches an ES-import route target created based on a local ESI.
In the command output, the route targets enumerated for each route target type cannot exceed 8191 bytes. Each character is one byte long. For example, 1:1 are three bytes. If this limit is reached, excess characters are replaced with three dots (…).
Examples
# Display the route targets sourced from the EVPN process and ES-import route targets for BGP.
<Sysname> display bgp route-target evpn
Total EVPN route target count: 6
EVPN import route-target count: 5
1:1 2:2 3:3 4:4 5:5
EVPN es-import route target count: 1
1111-2222-3333
Table 14 Command output
Field |
Description |
Total EVPN route target count |
Total number of EVPN route targets. |
EVPN import route-target count |
Number of import route targets configured for all EVPN instances created in system view and VSI view. |
EVPN es-import route target count |
Number of ES-import route targets. |
display evpn auto-discovery
Use display evpn auto-discovery to display information about peers that are automatically discovered through BGP.
Syntax
display evpn auto-discovery { ethernet-ad mpls [ peer ip-address ] [ vsi vsi-name ] | { imet [ mpls | vxlan ] | mac-ip [ mpls | srv6 | vxlan ] } [ peer peer-address] [ vsi vsi-name ] | macip-prefix [ nexthop next-hop ] [ count ] }
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
ethernet-ad: Specifies peers discovered through Ethernet auto-discovery routes.
imet: Specifies peers discovered through IMET routes.
mac-ip: Specifies MAC/IP advertisement routes.
mpls: Specifies the EVPN VPLS network.
srv6: Specifies the EVPN VPLS over SRv6 network. For more information about EVPN VPLS over SRv6, see Segment Routing Configuration Guide.
vxlan: Specifies the EVPN VXLAN network.
peer peer-address: Specifies a peer by its IP address. If you do not specify this option, the command displays information about all automatically discovered peers.
vsi vsi-name: Specifies a VSI by its name, a case-sensitive string of 1 to 31 characters. If you do not specify this option, the command displays peer information about all VSIs.
macip-prefix: Specifies peers discovered through MAC/IP advertisement and IP prefix advertisement routes that carry L3 VXLAN IDs.
nexthop next-hop: Specifies a next hop. If you do not specify this option, the command displays peer information about all next hops.
count: Displays the number of peers. If you do not specify this keyword, the command displays detailed peer information.
Usage guidelines
If you do not specify a network type, this command displays peer information for all network types.
Examples
# Display information about peers discovered through Ethernet auto-discovery routes for EVPN VPLS.
<Sysname> display evpn auto-discovery ethernet-ad mpls
Total number of automatically discovered peers: 1
VSI name: vpnb
Destination IP In/Out label Tunnel mode
7.7.7.7 1420/- PW
Table 15 Command output
Field |
Description |
Destination IP |
Tunnel destination IP address. |
In/Out label |
Incoming and outgoing labels for the PW. If the labels are invalid, this field displays a hyphen (-). |
Tunnel mode |
Tunnel mode, which can only be PW. |
# Display information about peers discovered through IMET routes for EVPN VXLAN.
<Sysname> display evpn auto-discovery imet vxlan
Total number of automatically discovered peers: 2
VSI name: vpna
EVPN instance: -
RD PE_address Tunnel_address Tunnel mode VXLAN ID
1:10 2.2.2.2 2.2.2.2 VXLAN 10
2:100 3.3.3.3 3.3.3.3 VXLAN 10
# Display information about peers discovered through IMET routes for EVPN VPLS.
<Sysname> display evpn auto-discovery imet mpls
Total number of automatically discovered peers: 1
VSI name: vpna
RD PE_address In/Out label Tunnel mode
1:1 1.1.1.1 1151/1151 PW
# Display information about peers discovered through IMET routes for EVPN VPLS over SRv6.
<Sysname> display evpn auto-discovery imet srv6
Total number of automatically discovered peers: 1
VSI name: vpnc
EVPN instance: -
RD : 1:1 Tunnel mode : SRv6
PE_address : 1::1
In SID : 100::10::0
Out SID : 200::20::0
Table 16 Command output
Field |
Description |
EVPN instance |
EVPN instance name. This field displays a hyphen (-) for a VSI EVPN instance. |
PE_address |
Identifier of the remote device on the VSI. |
Tunnel_address |
VXLAN tunnel destination IP address. |
Tunnel mode |
Tunnel mode: · VXLAN. · VXLAN-DCI. · PW. · SRv6. |
In/Out label |
Incoming and outgoing labels for the PW. If the labels are invalid, this field displays a hyphen (-). |
In SID |
Incoming SID. |
Out SID |
Outgoing SID. |
# Display information about IPv4 peers discovered through MAC/IP advertisement routes for EVPN VXLAN.
<Sysname> display evpn auto-discovery mac-ip vxlan
Total number of automatically discovered peers: 1
VSI name: vpna
EVPN instance: -
Destination IP Source IP VXLAN ID Tunnel mode Tunnel name
6.6.6.6 1.1.1.9 100 VXLAN Tunnel1
# Display information about IPv4 peers discovered through MAC/IP advertisement routes for EVPN VPLS.
<Sysname> display evpn auto-discovery mac-ip mpls
Total number of automatically discovered peers: 1
VSI name: vpnb
EVPN instance: -
Destination IP In/Out label Tunnel Mode
7.7.7.7 1420/1419 PW
# Display information about IPv4 peers discovered through MAC/IP advertisement routes for EVPN VPLS over SRv6.
<Sysname> display evpn auto-discovery mac-ip srv6
VSI name: vpnb
EVPN instance: -
RD : 1:1 Tunnel mode : SRv6
Destination IP : 1::1
In SID : 100::10::0
Out SID : 200::20::0
Table 17 Command output
Field |
Description |
EVPN instance |
EVPN instance name. This field displays a hyphen (-) for a VSI EVPN instance. |
Tunnel mode |
Tunnel mode: · VXLAN. · PW. · SRv6. |
In/Out label |
Incoming and outgoing labels for the PW. If the labels are invalid, this field displays a hyphen (-). |
In SID |
Incoming SID. |
Out SID |
Outgoing SID. |
# Display information about peers discovered through MAC/IP advertisement routes and IP prefix advertisement routes.
<Sysname> display evpn auto-discovery macip-prefix
Destination IP Source IP L3VNI Tunnel mode Outgoing interface
1.1.1.1 3.3.3.3 200 VXLAN Vsi-interface3
2.2.2.2 3.3.3.3 200 VXLAN Vsi-interface3
# Display the total number of peers discovered through MAC/IP advertisement routes and IP prefix advertisement routes.
<Sysname> display evpn auto-discovery macip-prefix count
Total number of entries: 2
Table 18 Command output
Field |
Description |
Destination IP |
Tunnel destination IP address. |
Source IP |
Tunnel source IP address. |
L3VNI |
L3 VXLAN ID used for Layer 3 forwarding. |
Tunnel mode |
VXLAN tunnel mode: · VXLAN. · VXLAN-DCI. |
Outgoing interface |
VSI interface associated with the L3 VXLAN ID. |
display evpn df-election
Use display evpn df-election to display DF election information.
Syntax
display evpn df-election [ vsi vsi-name | xconnect-group group-name ] [ esi esi-id ]
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
vsi vsi-name: Specifies a VSI by its name, a case-sensitive string of 1 to 31 characters.
xconnect-group group-name: Specifies a cross-connect group by its name, a case-sensitive string of 1 to 31 characters.
esi esi-id: Specifies an ES by its ESI in XXXX.XXXX.XXXX.XXXX.XXXX format. Each X represents a hexadecimal digit. The ESI must begin with 00 and cannot be all zeros. If you do not specify this option, the command displays information about all ESs.
Usage guidelines
If you do not specify a VSI or cross-connect group, this command displays DF election information about all VSIs and cross-connect groups.
Examples
# Display DF election information about all VSIs and cross-connect groups.
<Sysname> display evpn df-election
VSI name: 1
ESI : 0021.1001.1001.1001.1002
Interface : Ten-GigabitEthernet3/1/1
Service instance ID : 1000
Link ID : 1
Ethernet tag ID : 12
DF state : Primary
FSM : DF_DONE
Number of member devices : 2
Originating IP DF state Algorithm Preference Capability
100.100.100.100 DF Preference 65535 DP
100.100.100.200 BDF Preference 200 DP
ESI : 0002.0002.0002.0002.0002
Interface : Ten-GigabitEthernet3/1/2
Link ID : 0
Ethernet tag ID : -
DF state : 0
FSM : DF_CALC
Number of member devices : 2
Originating IP DF state Algorithm Preference Capability
1.1.1.1 - Preference 32767 -
2.2.2.2 - Preference 32767 -
Xconnect-group name : 1
Connection name : 1
ESI : 0001.0001.0001.0001.0001
Interface : Ten-GigabitEthernet3/1/3
Link ID : 1
Ethernet tag ID : 0
DF state : -
FSM : DF_CALC
Number of member devices : 1
Originating IP DF state Algorithm Preference Capability
2.2.2.2 - Preference 32767 -
Table 19 Command output
Field |
Description |
Link ID |
The AC's link ID on the VSI. |
DF state |
DF election result: · BDF—The device is a BDF. · DF—The device is the DF. If DF election has not finished, this field displays a hyphen (-). |
FSM |
State of the finite state machine for DF election: · INIT—Initializing. · DF_WAIT—The DF election delay has not timed out. · DF_CALC—DF election is in progress. · DF_DONE—DF election has finished. |
Originating IP |
IP address of the member device that participates in DF election. |
DF state |
DF election result: · Backup—The member device is a BDF. · Primary—The member device is the DF. If DF election has not finished, this field displays a hyphen (-). |
Algorithm |
Algorithm used in DF election: · modulus—VLAN tag-based algorithm. · Preference—Preference-based algorithm. |
Preference |
DF election preference. |
Capability |
Supported DF election capabilities. DP represents non-revertive mode. If no capability is supported, this field displays a hyphen (-). |
display evpn es
Use display evpn es to display EVPN ES information.
Syntax
display evpn es { local [ count | [ vsi vsi-name | xconnect-group group-name ] [ esi esi-id ] [ verbose ] ] | remote [ vsi vsi-name | xconnect-group group-name ] [ esi esi-id ] [ nexthop next-hop ] [ verbose ] }
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
local: Specifies local ES information.
count: Displays the number of local ESs.
vsi vsi-name: Specifies a VSI by its name, a case-sensitive string of 1 to 31 characters. If you do not specify this option, the command displays ES information about all VSIs.
xconnect-group group-name: Specifies a cross-connect group by its name, a case-sensitive string of 1 to 31 characters. If you do not specify a cross-connect group, this command displays EVPN local or remote ES information about all cross-connect groups.
esi esi-id: Specifies an ES by its ESI in XXXX.XXXX.XXXX.XXXX.XXXX format. Each X represents a hexadecimal digit. The ESI must begin with 00 and cannot be all zeros. If you do not specify this option, the command displays information about all ESs.
verbose: Displays detailed ES information. If you do not specify this keyword, the command displays brief ES information.
remote: Specifies remote ES information.
nexthop next-hop: Specifies a next hop. If you do not specify this option, the command displays ES information received from all next hops.
Examples
# Display the number of local ESs.
<Sysname> display evpn es local count
Total number of ES entries: 1
# Display brief information about local ESs of VSI vpna for EVPN VPLS.
<Sysname> display evpn es local vsi vpna
Redundancy mode: A – All-active, S – Single-active
VSI name : vpna
EVPN instance: -
VSI ESI Tag ID DF address Mode State ESI label
0001.0002.0002.0002.0002 0 1.1.1.1 A Up 1000
ESI Tag ID DF address Mode State ESI label
0001.0002.0002.0002.0002 0 1.1.1.1 A Up 1000
0001.0002.0003.0004.0005 0 1.1.1.1 A Up 1001
0003.0003.0003.0003.0003 2 2.2.2.2 A Up 1002
# Display brief information about local ESs of VSI vpna for EVPN VPLS over SRv6.
<Sysname> display evpn es local vsi vpna
Redundancy mode: A – All-active, S – Single-active
VSI name : vpna
ESI : 0001.0001.0001.0001.0001
Tag ID : 0
DF address : 1.1.1.1
Mode : A
State : Down
Argument : ::1
# Display brief information about local ESs of cross-connect group vpna for EVPN VPWS.
<Sysname> display evpn es local xconnect-group vpna
Redundancy mode: A – All-active, S – Single-active
Xconnect group name: vpna
ESI Tag ID DF address Mode State ESI label
0001.0002.0002.0002.0002 0 1.1.1.1 A Up -
0001.0002.0003.0004.0005 0 1.1.1.1 A Up -
0003.0003.0003.0003.0003 2 2.2.2.2 A Up -
# Display brief information about local ESs of cross-connect group vpna for EVPN VPLS over SRv6.
<Sysname> display evpn es local xconnect-group vpna
Redundancy mode: A – All-active, S – Single-active
Xconnect-group name : vpna
ESI : 0001.0001.0001.0001.0001
Tag ID : 0
DF address : 1.1.1.1
Mode : A
State : Up
Argument : -
Table 20 Command output
Field |
Description |
EVPN instance |
EVPN instance name. This field displays a hyphen (-) for a VSI EVPN instance. |
Xconnect group name |
Cross-connect group name. |
VSI ESI |
ESI assigned to the VSI. |
ESI |
ESI assigned to the interface or UPW. |
Tag ID |
Ethernet tag ID. |
DF address |
Router ID of the VTEP or PE elected as the DF. |
Mode |
Redundancy mode of the ES: · A—All-active mode. · S—Single-active mode. |
State |
State of the ES: · Up. · Down. |
ESI label |
ESI label. For EVPN VPWS and EVPN VXLAN, this field is invalid and displays a hyphen (-). |
Argument |
Argument that identifies a leaf AC. E-tree isolates traffic among leaf ACs based on arguments in an EVPN VPLS over SRv6 network. This field displays a hyphen (-) if no argument exists. |
# Display detailed information about local ESs of all VSIs.
<Sysname> display evpn es local verbose
VSI name : v1
EVPN instance: -
VSI ESI : 0001.0001.0001.0001.0003
Redundancy mode : All-active
ES state : Up
AD-delay remaining time : 10
ESI : 0003.0003.0003.0003.0003
Interface : Ten-GigabitEthernet3/1/1
Redundancy mode : All-active
State : Up
AD-delay remaining time : 10
ACs :
Link ID Service instance ID Tag ID DF address ESI label
0 1 1 1.1.1.1 1001
1 3 3 3.3.3.3 1002
2 10 10 2.2.2.2 1003
VSI name : v2
EVPN instance: -
ESI : 0004.0004.0004.0004.0004
Interface : -
Redundancy mode : All-active
State : Up
AD-delay remaining time : 10
UPWs :
Link ID Tag ID DF address ESI label
0 1 1.1.1.1 1004
VSI name : vpna
EVPN instance: -
ESI : 0001.0002.0002.0002.0002
Interface : Ten-GigabitEthernet3/1/2
Redundancy mode : All-active
State : Up
AD-delay remaining time : 10
ACs :
Link ID Service instance ID Tag ID DF address ESI label
1 - 0 1.1.1.1 -
VSI name : vpnb
EVPN instance: -
ESI : 0001.0001.0001.0001.0001
Interface : XGE3/1/3
Redundancy mode : All-active
State : Down
ACs :
Link ID : 0
Service instance ID : -
Tag ID : 0
DF address : 1.1.1.1
Argument : ::1
Xconnect group name : vpna
Connection name : aa
ESI : 0003.0003.0003.0003.0003
AC : XGE3/1/5 srv1
Redundancy mode : All-active
State : Up
Link ID : 0
Tag ID : 10
DF address : 1.1.1.1
Xconnect group name : vpnd
Connection name : dd
ESI : 0006.0006.0006.0006.0006
Redundancy mode : All-active
State : Up
UPW Link ID : 0
Tag ID : 10
DF address : 1.1.1.1
Table 21 Command output
Field |
Description |
EVPN instance |
EVPN instance name. This field displays a hyphen (-) for a VSI EVPN instance. |
VSI ESI |
ESI assigned to the VSI. |
Xconnect group name |
Cross-connect group name. |
Connection name |
Cross-connect name. |
ESI |
ESI assigned to the interface or UPW. |
AC |
AC name. This field displays a Layer 3 interface name or a Layer 2 interface name and an Ethernet service instance name. |
Redundancy mode |
Redundancy mode of the ES: · A—All-active mode. · S—Single-active mode. |
ES state |
ES state for the VSI: · Up. · Down. If no ESI is manually assigned to the VSI, this field displays a hyphen (-). |
State |
ES state for the interface or UPW: · Up. · Down. If no ESI is manually assigned to the interface or UPW, this field displays a hyphen (-). |
AD-delay remaining time |
Remaining time of the advertisement delay timer for Ethernet auto-discovery routes, in seconds. |
ACs |
The VSI's ACs on the ES. |
UPWs |
The VSI's UPWs on the ES. |
Link ID |
The AC's link ID on the VSI. |
Service instance ID |
Ethernet service instance ID. |
Tag ID |
Ethernet tag ID. |
DF address |
Router ID of the VTEP or PE elected as the DF. If the device is not the DF of an AC, a hyphen (-) is displayed. |
ESI label |
ESI label. For EVPN VPWS and EVPN VXLAN, this field is invalid and displays a hyphen (-). |
Argument |
Argument that identifies a leaf AC. E-tree isolates traffic among leaf ACs based on arguments in an EVPN VPLS over SRv6 network. This field displays a hyphen (-) if no argument exists. |
UPW link ID |
The UPW's link ID on the VSI. |
# Display information about remote ESs of all VSIs.
<Sysname> display evpn es remote
Control Flags: P - Primary, B - Backup, C - Control word
VSI name : vpna
EVPN instance: -
ESI : 0001.0000.0000.0000.0001
Ethernet segment routes :
1.1.1.1
3.3.3.3
A-D per ES routes :
Peer IP Remote Redundancy mode
1.1.1.1 All-active
3.3.3.3 All-active
A-D per EVI routes :
Tag ID Peer IP
0 1.1.1.1
0 3.3.3.3
ESI : 0001.0002.0003.0004.0005
Ethernet segment routes :
1.1.1.1
A-D per ES routes :
Peer IP Remote Redundancy mode
1.1.1.1 All-active
A-D per EVI routes :
Tag ID Peer IP
0 1.1.1.1
Xconnect group name : a
ESI : 0001.0000.0000.0000.0001
Ethernet segment routes :
123.123.123.123
3.3.3.3
A-D per ES routes :
Peer IP Remote Redundancy mode
123.123.123.123 All-active
3.3.3.3 All-active
A-D per EVI routes :
Tag ID Peer IP Control Flags
2 3.3.3.3 P
4 123.123.123.123 PC
# Display detailed information about remote ESs.
<Sysname> display evpn es remote verbose
Control Flags: P - Primary, B - Backup, C - Control word
VSI name : vpna
EVPN instance: -
ESI : 0001.0001.0001.0001.0001
A-D per ES routes :
Peer IP : 2::2
Remote Redundancy mode: All-active
Argument : ::1
A-D per EVI routes :
Tag ID : 1
Peer IP : 2::2
Xconnect group name : vpna
ESI : 0001.0001.0001.0001.0001
Ethernet segment routes :
2::2
A-D per ES routes :
Peer IP : 2::2
Remote Redundancy mode: All-active
A-D per EVI routes :
Tag ID : 1
Control Flags : P
Peer IP : 2::2
# Display remote ES information received from next hop 3.3.3.3 for VSI vpna.
<Sysname> display evpn es remote vsi vpna nexthop 3.3.3.3
VSI name : vpna
EVPN instance: -
ESI : 0001.0000.0000.0000.0001
Redundancy mode : All-active
Ethernet segment routes :
3.3.3.3
A-D per ES routes :
3.3.3.3
A-D per EVI routes :
Tag ID Peer IP
0 3.3.3.3
Table 22 Command output
Field |
Description |
EVPN instance |
EVPN instance name. This field displays a hyphen (-) for a VSI EVPN instance. |
Xconnect group name |
Cross-connect group name. |
Argument |
Argument that identifies a leaf AC. E-tree isolates traffic among leaf ACs based on arguments in an EVPN VPLS over SRv6 network. This field displays a hyphen (-) if no argument exists. |
Ethernet segment routes |
Ethernet segment routes for the ES. |
A-D per Ethernet segment routes |
A-D per Ethernet segment routes for the ES. |
A-D per EVI routes |
A-D per EVI routes for the ES. |
Tag ID |
Ethernet tag ID. |
Peer IP |
IP address of the remote peer. |
Remote Redundancy mode |
Redundancy mode of the remote ES: · All-active. · Single-active. |
Control Flags |
Layer 2 attributes control flags of the remote route: · P—Primary flag. · B—Backup flag. · C—Control word flag. |
display evpn ipv6 auto-discovery
Use display evpn ipv6 auto-discovery to display information about IPv6 peers that are automatically discovered through BGP.
Syntax
display evpn ipv6 auto-discovery { ethernet-ad srv6 [ peer ipv6-address ] [ vsi vsi-name ] | { imet | mac-ip } [ srv6 | vxlan ] [ peer ipv6-address ] [ vsi vsi-name ] | macip-prefix [ nexthop next-hop ] [ count ] }
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
ethernet-ad: Specifies IPv6 peers discovered through Ethernet auto-discovery routes.
imet: Specifies IPv6 peers discovered through IMET routes.
mac-ip: Specifies IPv6 peers discovered through MAC/IP advertisement routes.
srv6: Specifies the EVPN VPLS over SRv6 network. For more information about EVPN VPLS over SRv6, see Segment Routing Configuration Guide.
vxlan: Specifies the EVPN VXLAN network.
peer ipv6-address: Specifies a peer by its IPv6 address. If you do not specify this option, the command displays information about all automatically discovered IPv6 peers.
vsi vsi-name: Specifies a VSI by its name, a case-sensitive string of 1 to 31 characters. If you do not specify this option, the command displays IPv6 peer information for all VSIs.
macip-prefix: Specifies IPv6 peers discovered through MAC/IP advertisement routes that carry L3 VXLAN IDs or IP prefix advertisement routes that carry L3 VXLAN IDs.
nexthop next-hop: Specifies a next hop. If you do not specify this option, the command displays IPv6 peer information for all next hops.
count: Displays the number of IPv6 peers. If you do not specify this keyword, the command displays detailed IPv6 peer information.
Usage guidelines
If you do not specify a network type, this command displays IPv6 peer information for all network types.
Examples
# Display information about IPv6 peers discovered through Ethernet auto-discovery routes for EVPN VPLS over SRv6.
<Sysname> display evpn ipv6 auto-discovery ethernet-ad srv6
Total number of automatically discovered peers: 1
VSI name: vpnc
Destination IP : 1::1
Tunnel mode : SRv6
In SID : 100::10::0
Out SID : 200::20::0
Table 23 Command output
Field |
Description |
Destination IP |
Tunnel destination IP address. |
Tunnel mode |
Tunnel mode, which can only be SRv6. |
In SID |
Incoming SID of the SRv6 tunnel. |
Out SID |
Outgoing SID of the SRv6 tunnel. |
# Display information about IPv6 peers discovered through IMET routes for EVPN VXLAN.
<Sysname> display evpn ipv6 auto-discovery imet
Total number of automatically discovered peers: 2
VSI name: vpna
RD : 1:10
PE address : 11::8
Tunnel address : 11::8
Tunnel mode : VXLAN
VXLAN ID : 10
RD : 2:100
PE address : 12::8
Tunnel address : 12::8
Tunnel mode : VXLAN
VXLAN ID : 10
# Display information about IPv6 peers discovered through IMET routes for EVPN VPLS over SRv6.
<Sysname> display evpn ipv6 auto-discovery imet srv6
Total number of automatically discovered peers: 1
VSI name: vpnc
RD : 1:1 Tunnel mode : SRv6
PE_address : 3::3
In SID : 111::1
Out SID : 333::1
Table 24 Command output
Field |
Description |
PE address |
Identifier of the remote device on the VSI. |
Tunnel address |
Tunnel destination IP address. |
Tunnel mode |
Tunnel mode: · VXLAN. · VXLAN-DCI. · SRv6. |
In SID |
Incoming SID of the SRv6 tunnel. |
Out SID |
Outgoing SID of the SRv6 tunnel. |
# Display information about IPv6 peers discovered through MAC/IP advertisement routes that do not carry L3 VXLAN IDs for EVPN VXLAN.
<Sysname> display evpn ipv6 auto-discovery mac-ip
Total number of automatically discovered peers: 1
VSI name: vpna
Destination IP : 6:6::6:8
Source IP : 1:1::1:7
VXLAN ID : 100
Tunnel mode : VXLAN
Tunnel name : Tunnel1
# Display information about IPv6 peers discovered through MAC/IP advertisement routes that do not carry L3 VXLAN IDs for EVPN VPLS over SRv6.
<Sysname> display evpn ipv6 auto-discovery mac-ip srv6
Total number of automatically discovered peers: 1
VSI name: vpnc
Destination IP : 1::1
Tunnel mode : SRv6
In SID : 100::10::0
Out SID : 200::20::0
Table 25 Command output
Field |
Description |
Destination IP |
Tunnel destination IP address. |
Source IP |
Tunnel source IP address. |
Tunnel mode |
Tunnel mode: · VXLAN. · SRv6. |
In SID |
Incoming SID of the SRv6 tunnel. |
Out SID |
Outgoing SID of the SRv6 tunnel. |
# Display information about IPv6 peers discovered through MAC/IP advertisement routes that carry L3 VXLAN IDs or IP prefix advertisement routes that carry L3 VXLAN IDs.
<Sysname> display evpn ipv6 auto-discovery macip-prefix
Destination IP : 6:6::6:8
Source IP : 1:1::1:7
L3VNI : 100
Tunnel mode : VXLAN
Outgoing interface : Vsi-interface3
# Display the total number of IPv6 peers discovered through MAC/IP advertisement routes that carry L3 VXLAN IDs or IP prefix advertisement routes that carry L3 VXLAN IDs.
<Sysname> display evpn ipv6 auto-discovery macip-prefix count
Total number of entries: 2
Table 26 Command output
Field |
Description |
Destination IP |
Tunnel destination IP address. |
Source IP |
Tunnel source IP address. |
L3VNI |
L3 VXLAN ID used for Layer 3 forwarding. |
Tunnel mode |
Tunnel mode: · VXLAN. · VXLAN-DCI. |
Outgoing interface |
VSI interface associated with the L3 VXLAN ID. |
display evpn route arp
Use display evpn route arp to display EVPN ARP entries.
Syntax
display evpn route arp [ local | remote ] [ public-instance | vpn-instance vpn-instance-name ] [ ip ip-address ] [ count ]
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
local: Specifies local ARP entries.
remote: Specifies remote ARP entries.
public-instance: Specifies the public instance.
vpn-instance vpn-instance-name: Specifies an MPLS L3VPN instance by its name, a case-sensitive string of 1 to 31 characters.
ip ip-address: Specifies an IPv4 address in dotted decimal notation. If you do not specify this option, the command displays ARP entries according to other specified criteria.
count: Displays the number of ARP entries. If you do not specify this keyword, the command displays detailed information about ARP entries.
Usage guidelines
If you do not specify the local or remote keyword, this command displays both local and remote EVPN ARP entries.
If you do not specify the public-instance keyword or the vpn-instance vpn-instance-name option, this command displays EVPN ARP entries for the public instance and all VPN instances.
Examples
# Display all EVPN ARP entries.
<Sysname> display evpn route arp
Flags: D - Dynamic B - BGP L - Local active
G - Gateway S - Static M - Mapping I - Invalid
VPN instance:abc Interface:Vsi-interface1
IP address MAC address Router MAC VSI index Flags
10.1.1.1 0003-0003-0003 a0ce-7e40-0400 0 GL
10.1.1.11 0001-0001-0001 a0ce-7e40-0400 0 DL
10.1.1.12 0001-0001-0011 a0ce-7e41-0401 0 B
10.1.1.13 0001-0001-0021 a0ce-7e42-0402 0 B
10.1.1.101 0001-0011-0101 a0ce-7e40-0400 0 SL
10.1.1.102 0001-0011-0102 0011-9999-0000 0 BS
Public instance Interface:Vsi-interface2
IP address MAC address Router MAC VSI index Flags
11.1.1.1 0033-0033-0033 a0ce-7e40-0400 0 GL
11.1.1.11 0011-0011-0011 a0ce-7e40-0400 0 DL
# Display the total number of EVPN ARP entries.
<Sysname> display evpn route arp count
Total number of entries: 6
Table 27 Command output
Field |
Description |
Interface |
VSI interface. |
Flags |
ARP entry type: · D—The entry is dynamically learned. · B—The entry is learned from BGP EVPN routes. · L—The local entry is active. If this flag is not set and the B flag is set, the entry learned from BGP EVPN routes is active. · G—The entry for the gateway is active. · S—The static entry is active. · M—The entry from a remote VXLAN mapped to a local VXLAN is active. · I—The entry is invalid. Reasons: ¡ The VSI has been administratively shut down by using the shutdown command. ¡ The outgoing tunnel interface does not exist. |
display evpn route arp suppression
Use display evpn route arp suppression to display EVPN ARP flood suppression entries.
Syntax
display evpn route arp suppression [ mpls | srv6 | vxlan ] [ local | remote ] [ vsi vsi-name ] [ ip ip-address ] [ count ]
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
mpls: Specifies the EVPN VPLS network.
srv6: Specifies the EVPN VPLS over SRv6 network.
vxlan: Specifies the EVPN VXLAN network.
local: Specifies local ARP flood suppression entries.
remote: Specifies remote ARP flood suppression entries.
vsi vsi-name: Specifies a VSI by its name, a case-sensitive string of 1 to 31 characters. If you do not specify this option, the command displays ARP flood suppression entries for all VSIs.
ip ip-address: Specifies an IPv4 address in dotted decimal notation. If you do not specify this option, the command displays ARP flood suppression entries according to other specified criteria.
count: Displays the number of ARP flood suppression entries. If you do not specify this keyword, the command displays detailed information about ARP flood suppression entries.
Usage guidelines
If you do not specify a network type, this command displays peer information for all network types.
If you do not specify the local or remote keyword, this command displays both local and remote EVPN ARP flood suppression entries.
Examples
# Display all EVPN ARP flood suppression entries.
<Sysname> display evpn route arp suppression
Flags: D - Dynamic B - BGP L - Local active
G - Gateway S - Static M - Mapping I - Invalid
VSI name: vpna
EVPN instance: -
IP address MAC address Flags Encap
10.1.1.12 0002-0002-0002 B VXLAN
10.1.1.13 0002-0002-0002 BI VXLAN
10.1.1.101 0001-0011-0101 BS VXLAN
10.1.1.102 0001-0011-0102 DL VXLAN
# Display the total number of ARP flood suppression entries.
<Sysname> display evpn route arp suppression count
Total number of entries: 1
Table 28 Command output
Field |
Description |
EVPN instance |
EVPN instance name. This field displays a hyphen (-) for a VSI EVPN instance. |
Flags |
ARP flood suppression entry type: · D—The entry is dynamically learned. · B—The entry is learned from BGP EVPN routes. · L—The local entry is active. If this flag is not set and the B flag is set, the entry learned from BGP EVPN routes is active. · G—The entry for the gateway is active. · S—The static entry is active. · M—The entry from a remote VXLAN mapped to a local VXLAN is active. · I—The entry is invalid. Reasons: ¡ The VSI has been administratively shut down by using the shutdown command. ¡ The outgoing tunnel interface does not exist. |
Encap |
Packet encapsulation type: · MPLS. · VXLAN. |
display evpn route arp-mobility
Use display evpn route arp-mobility to display EVPN ARP mobility information.
Syntax
display evpn route arp-mobility [ public-instance | vpn-instance vpn-instance-name ] [ ip ip-address ] [ verbose ]
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
public-instance: Specifies the public instance.
vpn-instance vpn-instance-name: Specifies an MPLS L3VPN instance by its name, a case-sensitive string of 1 to 31 characters.
ip ip-address: Specifies an IPv4 address in dotted decimal notation. If you do not specify an IP address, this command displays ARP mobility information about all IP addresses of the public instance or MPLS L3VPN instance.
verbose: Displays detailed ARP mobility information. If you do not specify this keyword, the command displays brief ARP mobility information.
Usage guidelines
If you do not specify any parameters, this command displays ARP mobility information about the public instance and all VPN instances.
Examples
# Display brief EVPN ARP mobility information about the public instance and all VPN instances.
<Sysname> display evpn route arp-mobility
Flags: S - Suppressed, N - Not suppressed
VPN instance : vpn1
Interface : Vsi-interface1
IP address Move count Moved from Flags Suppressed at
192.168.156.120 5 XGE3/1/1 S 17:24:33 2018/04/01
192.168.56.20 - - N -
Public instance
Interface : Vsi-interface2
IP address Move count Moved from Flags Suppressed at
192.168.156.120 5 XGE3/1/2 S 17:24:33 2018/04/01
192.168.56.20 5 2.2.2.2 S 17:24:33 2018/04/01
Table 29 Command output
Field |
Description |
Moved from |
Source interface or source VTEP/PE IP address for the ARP move. |
Flags |
Whether the ARP move was suppressed: · S—Suppressed. · N—Not suppressed. |
Suppressed at |
Time when the ARP move was suppressed. |
# Display detailed EVPN ARP mobility information about the public instance and all VPN instances.
<Sysname> display evpn route arp-mobility verbose
VPN instance : vpn1
Interface : Vsi-interface1
IP address : 192.168.156.120
Move count : 5
Moved from : XGE3/1/1
Flags : Suppressed
Suppressed at : 17:24:33 2018/04/01
Suppression threshold: 5
Detection cycle : 180s
Suppression-time : Permanent
Table 30 Command output
Field |
Description |
Moved from |
Source interface or source VTEP/PE IP address for the ARP move. |
Flags |
Whether the ARP move was suppressed: · Suppressed. · Not suppressed. |
Suppressed at |
Time when the ARP move was suppressed. |
Suppression threshold |
ARP mobility suppression threshold, which is the number of ARP moves from the local site to a remote site. If ARP mobility suppression is disabled or ARP moves are not suppressed, this field displays a hyphen (-). |
Detection cycle |
ARP mobility detection cycle in seconds. If ARP mobility suppression is disabled or ARP moves are not suppressed, this field displays a hyphen (-). |
Suppression time |
ARP mobility suppression time in seconds. Permanent indicates that ARP moves are suppressed permanently. If ARP mobility suppression is disabled or ARP moves are not suppressed, this field displays a hyphen (-). |
Related commands
evpn route arp-mobility suppression
display evpn route mac
Use display evpn route mac to display EVPN MAC address entries.
Syntax
display evpn route mac [ mac-address mac-address | umr [ verbose ] ] [ mpls | srv6| vxlan ] [ local | remote ] [ vsi vsi-name ] [ count ]
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
mac-address mac-address: Specifies a MAC address in the format of H-H-H. You can omit the consecutive zeros at the beginning of each segment. For example, you can enter f-e2-1 for 000f-00e2-0001.
umr: Specifies the default MAC address entries generated based on unknown MAC routes (UMRs).
verbose: Displays detailed information about default MAC address entries. If you do not specify this keyword, the command displays brief information about default MAC address entries.
mpls: Specifies the EVPN VPLS network.
srv6: Specifies the EVPN VPLS over SRv6 network. For more information about EVPN VPLS over SRv6, see Segment Routing Configuration Guide.
vxlan: Specifies the EVPN VXLAN network.
local: Specifies local MAC address entries.
remote: Specifies remote MAC address entries.
vsi vsi-name: Specifies a VSI by its name, a case-sensitive string of 1 to 31 characters. If you do not specify this option, the command displays MAC address entries for all VSIs.
count: Displays the number of MAC address entries. If you do not specify this keyword, the command displays detailed information about MAC address entries.
Usage guidelines
If you do not specify a network type, this command displays EVPN MAC address entries for all network types. If you do not specify the local or remote keyword, this command displays both local and remote EVPN MAC address entries. If you do not specify any parameters, this command displays all EVPN MAC address entries.
Examples
# Display all EVPN MAC address entries for EVPN VXLAN.
<Sysname> display evpn route mac vxlan
Flags: D - Dynamic B - BGP L - Local active
G - Gateway S - Static M - Mapping I - Invalid
E - Multihoming ES sync F - Leaf
VSI name: vpna
MAC address : 622a-c56d-0402
Link ID/Name : 0x0
Flags : DL
Encap : VXLAN
Next hop : -
Color : -
# Display all EVPN MAC address entries for EVPN VPLS over SRv6.
<Sysname> display evpn route mac srv6
Flags: D - Dynamic B - BGP L - Local active
G - Gateway S - Static M - Mapping I - Invalid
E - Multihoming ES sync F - Leaf
VSI name: vpnb
EVPN instance: -
MAC address : 68ba-0573-0606
Link ID/Name : 0x0
Flags : DL
Encap : SRv6
Next hop : -
Color : -
Color-Only : -
MAC address : 68ba-0b4f-0706
Link ID/Name : 0x9000000
Flags : B
Encap : SRv6
Next hop : 2::2
Color : -
Color-Only : -
SID : 1::2
# Display the total number of EVPN MAC address entries.
<Sysname> display evpn route mac count
Total number of entries: 5
Table 31 Command output
Field |
Description |
EVPN instance |
EVPN instance name. This field displays a hyphen (-) for a VSI EVPN instance. |
Link ID/Name |
The link ID is the AC's or SRv6 tunnel's link ID on the VSI. The name is the VXLAN tunnel interface name. |
Flags |
MAC address entry type: · D—The entry is dynamically learned. · B—The entry is learned from BGP EVPN routes. · L—The local entry is active. If this flag is not set and the B flag is set, the entry learned from BGP EVPN routes is active. · G—The entry for the gateway is active. · S—The static entry is active. · M—The entry from a remote VXLAN mapped to a local VXLAN is active. · I—The entry is invalid. Reasons: ¡ The VSI has been administratively shut down by using the shutdown command. ¡ The outgoing tunnel interface does not exist. · E—The entry is synchronized between devices at a multihomed site. · F—The entry is from a leaf AC of EVPN E-tree. |
Encap |
Packet encapsulation type: · MPLS. · VXLAN. · SRv6. |
Next hop |
IP address of the remote VTEP or PE. If the MAC address entry is a local entry, a hyphen (-) is displayed. |
Color |
Color attribute of the MAC address entry. If the MAC address entry does not have this attribute, a hyphen (-) is displayed. This field is available only when the encapsulation type is SRv6. |
Color-Only |
Color-Only flag. |
SID |
SRv6 SID assigned to the MAC address. |
# Display detailed information about the default MAC address entries generated based on UMRs.
<Sysname> display evpn route mac umr verbose
Flags: B - BGP L - Local active S - Static
VSI name: bbb
EVPN instance: -
MAC address Flags Encap Next hop ESI
0000-0000-0000 LS SRv6 -
BS SRv6 2.2.2.2 0003.0003.0003.0003.0003
BS SRv6 3.3.3.3 0000.0000.0000.0000.0000
Table 32 Command output
Field |
Description |
EVPN instance |
EVPN instance name. This field displays a hyphen (-) for a VSI EVPN instance. |
Flags |
MAC address entry type: · B—The entry is learned from BGP EVPN routes. · L—The local entry is active. If this flag is not set and the B flag is set, the entry learned from BGP EVPN routes is active. · S—The static entry is active. |
Encap |
Packet encapsulation type: · MPLS. · VXLAN. · SRv6. |
Next hop |
IP address of the remote VTEP or PE. If the MAC address entry is a local entry, a hyphen (-) is displayed. |
ESI |
ESI configured in VSI view. |
display evpn route mac-mobility
Use display evpn route mac-mobility to display EVPN MAC mobility information.
Syntax
display evpn route mac-mobility [ evpn-instance instance-name | interface interface-type interface-number | vsi vsi-name ] [ mac-address mac-address ] [ verbose ]
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
evpn-instance instance-name: Specifies an EVPN instance by its name, a case-sensitive string of 1 to 31 characters.
interface interface-type interface-number: Specifies an interface by its type and number.
vsi vsi-name: Specifies a VSI by its name, a case-sensitive string of 1 to 31 characters. If you do not specify a VSI, this command displays MAC mobility information about all VSIs.
mac-address mac-address: Specifies a MAC address in the format of H-H-H. You can omit the consecutive zeros at the beginning of each segment. For example, you can enter f-e2-1 for 000f-00e2-0001. If you do not specify a MAC address, this command displays MAC mobility information about all MAC addresses in the specified VSI or all VSIs.
verbose: Displays detailed MAC mobility information. If you do not specify this keyword, the command displays brief MAC mobility information.
Usage guidelines
If you do not specify any parameters, this command displays IPv4 EVPN MAC mobility information about all VSIs.
Examples
# Display brief IPv4 EVPN MAC mobility information about all VSIs.
<Sysname> display evpn route mac-mobility
Flags: S - Suppressed, N - Not suppressed
VSI name : vsia
MAC address Move count Moved from Flags Suppressed at
1000-0000-0000 10 XGE3/1/1 S 15:30:30 2018/03/30
1000-0000-0001 - - N -
VSI name : vsib
MAC address Move count Moved from Flags Suppressed at
1000-0000-0003 2 XGE3/1/2 N -
1000-0000-0005 10 5.5.5.5 S 17:24:33 2018/04/01
Table 33 Command output
Field |
Description |
Suppression threshold |
MAC mobility suppression threshold, which is the number of MAC moves from the local site to a remote site. |
Detection cycle |
MAC mobility detection cycle in seconds. |
Suppression-time |
MAC mobility suppression time in seconds. Permanent indicates that MAC moves are suppressed permanently. |
Moved from |
Source interface or source VTEP/PE IP address for the MAC move. |
Flags |
Whether the MAC move was suppressed: · S—Suppressed. · N—Not suppressed. |
Suppressed at |
Time when the MAC move was suppressed. |
# Display detailed IPv4 EVPN MAC mobility information about all VSIs.
<Sysname> display evpn route mac-mobility verbose
VSI name : vsia
MAC Address : 1000-0000-0000
Move count : 10
Moved from : XGE3/1/1
Flags : Suppressed
Suppressed at : 15:30:30 2018/03/30
Suppression threshold: 10
Detection cycle : 180s
Suppression-time : Permanent
Table 34 Command output
Field |
Description |
Moved from |
Source interface or source VTEP/PE IP address for the MAC move. |
Flags |
Whether the MAC move was suppressed: · Suppressed. · Not suppressed. |
Suppressed at |
Time when the MAC move was suppressed. |
Suppression threshold |
MAC mobility suppression threshold, which is the number of MAC moves from the local site to a remote site. If MAC mobility suppression is disabled or MAC moves are not suppressed, this field displays a hyphen (-). |
Detection cycle |
MAC mobility detection cycle in seconds. If MAC mobility suppression is disabled or MAC moves are not suppressed, this field displays a hyphen (-). |
Suppression time |
MAC mobility suppression time in seconds. Permanent indicates that MAC moves are suppressed permanently. If MAC mobility suppression is disabled or MAC moves are not suppressed, this field displays a hyphen (-). |
Related commands
evpn route mac-mobility suppression
display evpn route nd
Use display evpn route nd to display EVPN ND entries.
Syntax
display evpn route nd [ local | remote ] [ public-instance | vpn-instance vpn-instance-name ] [ ipv6 ipv6-address ] [ count ]
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
local: Specifies local ND entries.
remote: Specifies remote ND entries.
public-instance: Specifies the public instance.
vpn-instance vpn-instance-name: Specifies an MPLS L3VPN instance by its name, a case-sensitive string of 1 to 31 characters.
ipv6 ipv6-address: Specifies an IPv6 address. If you do not specify this option, the command displays ND entries according to other specified criteria.
count: Displays the number of ND entries. If you do not specify this keyword, the command displays detailed information about ND entries.
Usage guidelines
If you do not specify the local or remote keyword, this command displays both local and remote EVPN ND entries.
If you do not specify the public-instance keyword or the vpn-instance vpn-instance-name option, this command displays EVPN ND entries for the public instance and all VPN instances.
Examples
# Display all EVPN ND entries.
<Sysname> display evpn route nd
Flags: D - Dynamic B - BGP L - Local active
G - Gateway S - Static M - Mapping I - Invalid
VPN instance: vpn1 Interface: Vsi-interface1
IPv6 address : AD80:0300:1000:0050:0200:0300:0100:0012
MAC address : 0001-0001-0001 Router MAC : a0ce-7e40-0400
VSI index : 0 Flags : GL
IPv6 address : AD10:0300:1000:0020:0200:0300:0100:0022
MAC address : 0001-0001-0002 Router MAC : a0ce-7e40-0411
VSI index : 0 Flags : GL
Public instance Interface: Vsi-interface1
IPv6 address : BC80:0300:1000:0050:0200:0300:0100:0033
MAC address : 0002-0002-0001 Router MAC : a0ce-7e40-0422
VSI index : 0 Flags : GL
IPv6 address : BC10:0300:1000:0020:0200:0300:0100:0034
MAC address : 0002-0002-0002 Router MAC : a0ce-7e40-0433
VSI index : 0 Flags : GL
# Display the total number of EVPN ND entries.
<Sysname>display evpn route nd count
Total number of entries: 2
Table 35 Command output
Field |
Description |
Interface |
VSI interface. |
Flags |
ND entry type: · D—The entry is dynamically learned. · B—The entry is learned from BGP EVPN routes. · L—The local entry is active. If this flag is not set and the B flag is set, the entry learned from BGP EVPN routes is active. · G—The entry for the gateway is active. · S—The static entry is active. · M—The entry from a remote VXLAN mapped to a local VXLAN is active. · I—The entry is invalid. Reasons: ¡ The VSI has been administratively shut down by using the shutdown command. ¡ The outgoing tunnel interface does not exist. |
display evpn route nd suppression
Use display evpn route nd suppression to display EVPN ND flood suppression entries.
Syntax
display evpn route nd suppression [ local | remote ] [ vsi vsi-name ] [ ipv6 ipv6-address ] [ count ]
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
local: Specifies local ND flood suppression entries.
remote: Specifies remote ND flood suppression entries.
vsi vsi-name: Specifies a VSI by its name, a case-sensitive string of 1 to 31 characters. If you do not specify this option, the command displays ND flood suppression entries for all VSIs.
ipv6 ipv6-address: Specifies an IPv6 address. If you do not specify this option, the command displays ND flood suppression entries according to other specified criteria.
count: Displays the number of ND flood suppression entries. If you do not specify this keyword, the command displays detailed information about ND flood suppression entries.
Usage guidelines
If you do not specify the local or remote keyword, this command displays both local and remote EVPN ND flood suppression entries.
Examples
# Display all EVPN ND flood suppression entries.
<Sysname> display evpn route nd suppression
Flags: D - Dynamic B - BGP L - Local active
G - Gateway S - Static M - Mapping I - Invalid
VSI name: vpna
IPv6 address MAC address Flags Encap
11::8 72cb-ce9b-0a06 DL VXLAN
11::9 0001-0001-0001 B VXLAN
# Display the total number of ND flood suppression entries.
<Sysname> display evpn route nd suppression count
Total number of entries: 4
Table 36 Command output
Field |
Description |
Flags |
ND flood suppression entry type: · D—The entry is dynamically learned. · B—The entry is learned from BGP EVPN routes. · L—The local entry is active. If this flag is not set and the B flag is set, the entry learned from BGP EVPN routes is active. · G—The entry for the gateway is active. · S—The static entry is active. · M—The entry from a remote VXLAN mapped to a local VXLAN is active. · I—The entry is invalid. Possible reasons: ¡ The VSI has been administratively shut down by using the shutdown command. ¡ The outgoing tunnel interface does not exist. |
Encap |
Packet encapsulation type: · MPLS. · VXLAN. |
display evpn route nd-mobility
Use display evpn route nd-mobility to display EVPN ND mobility information.
Syntax
display evpn route nd-mobility [ public-instance | vpn-instance vpn-instance-name ] [ ipv6 ipv6-address ]
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
public-instance: Specifies the public instance.
vpn-instance vpn-instance-name: Specifies an MPLS L3VPN instance by its name, a case-sensitive string of 1 to 31 characters.
ipv6 ipv6-address: Specifies an IPv6 address. If you do not specify an IPv6 address, this command displays ND mobility information about all IPv6 addresses of the public instance or MPLS L3VPN instance.
verbose: Displays detailed ND mobility information. If you do not specify this keyword, the command displays brief ND mobility information.
Usage guidelines
If you do not specify any parameters, this command displays ND mobility information about the public instance and all VPN instances.
Examples
# Display brief EVPN ND mobility information about the public instance and all VPN instances.
<Sysname> display evpn route nd-mobility
VPN instance : vpn1
Interface : Vsi-interface1
IPv6 address : 1::1
Move count : 5
Moved from : XGE3/1/1
Flags : S
Suppressed at : 15:30:30 2020/03/30
Public instance
Interface : Vsi-interface2
IPv6 address : 2::2
Move count : 5
Moved from : 20::20
Flags : S
Suppressed at : 17:24:33 2020/04/01
Table 37 Command output
Field |
Description |
Move count |
Number of ND moves from the interface to other interfaces. |
Moved from |
Source interface or source VTEP/PE IP address for the ND move. |
Flags |
Whether the ND move was suppressed: · Suppressed. · Not suppressed. |
Suppressed at |
Time when the ND move was suppressed. |
# Display detailed EVPN ND mobility information about the public instance and all VPN instances.
<Sysname> display evpn route nd-mobility verbose
VPN instance : vpn1
Interface : Vsi-interface1
IPv6 address : 1::1
Move count : 5
Moved from : XGE3/1/1
Flags : Suppressed
Suppressed at : 15:30:30 2020/03/30
Suppression threshold: 5
Detection cycle : 180s
Suppression-time : Permanent
IPv6 address : 1::1
Move count : 5
Moved from : XGE3/1/1
Flags : Suppressed
Suppressed at : 15:30:30 2020/03/30
Suppression threshold: 5
Detection cycle : 180s
Suppression-time : Permanent
Table 38 Command output
Field |
Description |
Moved from |
Source interface or source VTEP/PE IP address for the ND move. |
Flags |
Whether the ND move was suppressed: · Suppressed. · Not suppressed. |
Suppressed at |
Time when the ND move was suppressed. |
Suppression threshold |
ND mobility suppression threshold, which is the number of ND moves from the local site to a remote site. If ND mobility suppression is disabled or ND moves are not suppressed, this field displays a hyphen (-). |
Detection cycle |
ND mobility detection cycle in seconds. If ND mobility suppression is disabled or ND moves are not suppressed, this field displays a hyphen (-). |
Suppression time |
Suppression time in seconds. If this field displays Permanent, ND moves are suppressed permanently. If ND mobility suppression is disabled or ND moves are not suppressed, this field displays a hyphen (-). |
Related commands
evpn route nd-mobility suppression
display evpn route vpws
Use display evpn route vpws to display information about EVPN VPWS and EVPN VPWS over SRv6.
Syntax
display evpn route vpws [ vsi vsi-name | xconnect-group group-name [ connection connection-name ] ] [ count ]
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
vsi vsi-name: Specifies a VSI name, a case-sensitive string of 1 to 31 characters. If you do not specify a VSI, this command displays all information about EVPN VPWS over SRv6.
xconnect-group group-name: Specifies a cross-connect group by its name, a case-sensitive string of 1 to 31 characters excluding hyphens (-). If you do not specify a cross-connect group, this command displays all information about EVPN VPWS and EVPN VPWS over SRv6.
connection connection-name: Specifies a cross-connect by its name, a case-sensitive string of 1 to 20 characters excluding hyphens (-). If you do not specify a cross-connect, this command displays information about all cross-connects in the specified cross-connect group.
count: Displays the number of PWs, including SRv6 PWs and EVPN PWs.
Examples
# Display information about VSI aa of EVPN VPWS over SRv6.
<Sysname> display evpn route vpws vsi aa
Ctrl Flags: P - Primary, B - Backup, C - Control word
VSI name: aa
EVPN index : 0x00000001
VSI index : 0x00000001
Encapsulation : SRv6
ESI : 0001.0001.0001.0001.0001
Local service ID : 5001
Remote service ID : 5000
Control word : Enabled
In SID[DX2] : 502
In SID[DX2L] : -
Local MTU : 1500
Tunnel policy : -
PW class : -
PW type : Ethernet
SRv6 tunnels :
Peer address : 2::2
ESI : 0000.0000.0000.0000
Out SID : 200::1
Flags : P
MTU : 1500
State : UP
# Display all information about EVPN VPWS and EVPN VPWS over SRv6.
<Sysname> display evpn route vpws
Ctrl Flags: P - Primary, B - Backup, C - Control word
VSI name: aa
EVPN index : 0x00000001
VSI index : 0x00000001
Encapsulation : SRv6
ESI : 0001.0001.0001.0001.0001
Local service ID : 5001
Remote service ID : 5000
Control word : Enabled
In SID[DX2] : 502
In SID[DX2L] : -
Local MTU : 1500
AC state : Up
Tunnel policy : -
PW class : -
PW type : Ethernet
SRv6 Tunnel :
Peer address : 2::2
ESI : 0000.0000.0000.0000
Out SID : 200::1
Flags : P
MTU : 1500
State : UP
Xconnect group name: aa
Connection name: aaa
Encapsulation : MPLS
ESI : 0001.0002.0002.0002.0002
Local service ID : 16777215
Remote service ID : 16777214
Control word : Enabled
In label : 502
Local MTU : 1500
AC state : Up
Tunnel policy : -
PW class : -
PW type : VLAN
Nexthop ESI Out label Flags MTU State
192.123.123.123 0001.0002.0002.0002.0001 1299 PC 1500 Up
192.1.1.1 0001.0002.0002.0002.0001 1026 B 1500 Down
Connection name: aab
Encapsulation : MPLS
ESI : 0000.0000.0000.0000.0000
Local service ID : 1
Remote service ID : 2
Control word : Disabled
In label : 323
Local MTU : 1500
AC state : Up
Tunnel policy : -
PW class : -
PW type : VLAN
Nexthop ESI Out label Flags MTU State
192.1.1.1 0002.0002.0002.0002.0001 1234 P 1500 Up
192.2.1.2 0002.0002.0002.0002.0001 603 P 1500 Up
Connection name: aac
Encapsulation : MPLS
ESI : 0000.0000.0000.0000.0000
Local service ID : 3
Remote service ID : 4
Control word : Enabled
In label : -
Local MTU : 1500
AC state : Up
Tunnel policy : -
PW class : -
PW type : Ethernet
Nexthop ESI Out label Flags MTU State
192.1.1.3 0000.0000.0000.0000.0000 555 P 1500 Idle
Xconnect group name: vpna
Connection name: pw1
Encapsulation : SRv6
ESI : 0000.0000.0000.0000.0000
Local service ID : 1
Remote service ID : 2
In SID : 100::1
Local MTU : 1500
AC State : Up
Tunnel policy : -
PW class : -
PW type : Ethernet
SRv6 Tunnel:
Next Hop : 2::2
ESI : 0000.0000.0000.0000.0000
Out SID : 200::1
Flags : P
MTU : 1500
State : Up
# Display the total number of PWs.
<Sysname> display evpn route vpws count
Total number of entries: 2
Table 39 Command output
Field |
Description |
EVPN index |
EVPN instance index. |
Xconnect group name |
Cross-connect group name. |
Connection name |
Cross-connect name. |
Encapsulation |
EVPN encapsulation type: · VXLAN. · MPLS. · SRv6. |
Control word |
State of the control word feature: · Enabled. · Disabled. |
In label |
PW incoming label. |
Local MTU |
Local MTU in bytes. |
AC state |
AC state: · Up. · Down. This field displays a hyphen (-) if no AC is configured. |
Tunnel policy |
Used tunnel policy. |
PW class |
Used PW class. |
PW type |
PW type: · Ethernet. · VLAN. |
Nexthop |
Remote PE address. |
Out label |
PW outgoing label. |
Flags |
PW attribute flags: · P—The received route has the primary flag. A primary PW needs to be set up. · B—The received route has the backup flag. A backup PW needs to be set up. · C—The received route has the control word flag, which indicates that control word is enabled on the peer. For the EVPN PWs to come up, you must enable control word on the local device. |
MTU |
MTU in the received route, in bytes. |
State |
EVPN PW state or SRv6 PW state: · Up. · Down. · Idle—The incoming or outgoing label is not available. |
In SID[DX2] |
Incoming End.DX2 SID. |
In SID[DX2L] |
Incoming End.DX2L SID. |
SRv6 Tunnel |
SRv6 PW information. |
Peer address |
Peer PE address. |
Out SID |
Outgoing SID. |
Total number of entries |
Total number of EVPN PWs and SRv6 PWs. |
display evpn routing-table
Use display evpn routing-table to display the EVPN routing table for a VPN instance.
Syntax
display evpn routing-table [ ipv6 ] { public-instance | vpn-instance vpn-instance-name } [ count ]
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
ipv6: Specifies IPv6 information. If you do not specify this keyword, the command displays IPv4 information.
public-instance: Specifies the public instance.
vpn-instance vpn-instance-name: Specifies an MPLS L3VPN instance by its name, a case-sensitive string of 1 to 31 characters.
count: Displays the number of entries in the routing table. If you do not specify this keyword, the command displays detailed information about the routing table.
Examples
# Display the EVPN IPv4 routing table for VPN instance vpn1.
<Sysname> display evpn routing-table vpn-instance vpn1
Flags: E - with valid ESI A – A-D ready L - Local ES exists
VPN instance:vpna Local L3VNI:111
IP address Nexthop Outgoing interface NibID Flags
10.0.0.2 2.2.2.2 Vsi-interface111 0x18000000 EAL
10.0.0.3 3.3.3.3 Vsi-interface111 0x18000001 EA
2.2.2.2 Vsi-interface111 0x18000000 EA
20.0.0.2 3.3.3.3 Vsi-interface111 0x18000001 -
# Display the EVPN IPv4 routing table for the public instance.
<Sysname> display evpn routing-table public-instance
Flags: E - with valid ESI A – A-D ready L - Local ES exists
Public instance Local L3VNI:111
IP address Nexthop Outgoing interface NibID Flags
10.0.0.123 2.2.2.2 Vsi-interface111 0x18000000 EA
1.1.1.1 Vsi-interface111 0x18000001 EA
# Display the number of EVPN route entries in the IPv4 routing table for VPN instance vpn1.
<Sysname> display evpn routing-table vpn-instance vpn1 count
Total number of entries: 2
# Display the EVPN IPv6 routing table for VPN instance vpna.
<Sysname> display evpn routing-table ipv6 vpn-instance vpna
VPN instance: vpna Local L3VNI: 7
IPv6 address : BC10:0300:1000:0020:0200:0300:0100:0034
Nexthop : 1.1.1.1
Outgoing interface : Vsi-interface3
NibID : 0x18000000
IPv6 address : BC10:0300:1000:0020:0200:0300:0100:0035
Nexthop : 2.2.2.2
Outgoing interface : Vsi-interface3
NibID : 0x18000001
Table 40 Command output
Field |
Description |
Local L3VNI |
L3 VXLAN ID associated with the VPN instance or the public instance. |
NibID |
Next hop ID. |
Flags |
Flags of the route: · E—The route carries a valid ESI. · A—All Ethernet auto-discovery routes are received. The ECMP routes for the next hop can be issued. · L—An active local ESI exists. Remote routes are not issued. · -—The MAC/IP advertisement route does not have a valid ESI. ECMP routes are not supported. |
display evpn instance
Use display evpn instance to display EVPN instance information.
Syntax
display evpn instance [ name instance-name | vsi vsi-name | xconnect-group group-name ]
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
name instance-name: Specifies an EVPN instance by its name, a case-sensitive string of 1 to 31 characters.
vsi vsi-name: Specifies a VSI by its name, a case-sensitive string of 1 to 31 characters.
xconnect-group group-name: Specifies a cross-connect group by its name, a case-sensitive string of 1 to 31 characters.
Usage guidelines
If you do not specify any parameters, this command displays information about all EVPN instances.
Examples
# Display information about all EVPN instances.
<Sysname> display evpn instance
Total number of EVPN instances: 6
EVPN instance : aaa
Route distinguisher : -
Export VPN targets : -
Import VPN targets : -
MAC advertisement : Enabled
ARP advertisement : Enabled
ARP-based MAC learning : Enabled
ND-based MAC learning : Enabled
Local fast-reroute : Inherit
Tunnel policy : -
PW class : -
Dt2uLocatorName : -
Dt2ulLocatorName : -
Dt2mLocatorName : -
E-Tree : Disabled
Best-Effort : Disabled
Traffic-Engineering : Disabled
Import routing policy : -
Export routing policy : -
VSI binding list:
VSI name VSI tag ID
4 100
EVPN instance : - (created on vsi 1)
Encapsulation : VXLAN
Route distinguisher : -
Export VPN targets : -
Import VPN targets : -
MAC advertisement : Enabled
ARP advertisement : Enabled
ARP-based MAC learning : Enabled
ND-based MAC learning : Enabled
VXLAN ID : -
EVPN instance : - (created on vsi 2)
Encapsulation : MPLS
Route distinguisher : -
Export VPN targets : -
Import VPN targets : -
MAC advertisement : Enabled
ARP advertisement : Enabled
ARP-based MAC learning : Enabled
ND-based MAC learning : Enabled
MPLS label : 775127
IMET MPLS label : 775126
Tunnel policy : -
PW class : -
Control Word : Disabled
E-Tree : Disabled
PW type : VLAN
Sequencing : -
Flow label : -
Import routing policy : -
Export routing policy : -
Default color : -
EVPN instance : - (created on vsi 3)
Encapsulation : SRV6
Route distinguisher : -
Export VPN targets : -
Import VPN targets : -
MAC advertisement : Enabled
ARP advertisement : Enabled
ARP-based MAC learning : Enabled
ND-based MAC learning : Enabled
Dt2u SID : -(no locator configration)
Dt2ul SID : -(no locator configration)
Dt2m SID : -(no locator configration)
Dt2uLocatorName : -
Dt2ulLocatorName : -
Dt2mLocatorName : -
E-Tree : Disabled
Best-Effort : Disabled
Traffic-Engineering : Disabled
Import routing policy : -
Export routing policy : -
Default color : -
EVPN instance : - (created on Xconnect-group 1)
Encapsulation : MPLS
Route distinguisher : -
Export VPN targets : -
Import VPN targets : -
Import Route Policy : -
Export Route Policy : -
Default color : -
EVPN instance : - (created on Xconnect-group 2)
Encapsulation : SRv6
Route distinguisher : -
Export VPN targets : -
Import VPN targets : -
Best-Effort : Disabled
Traffic-Engineering : Disabled
Import Route Policy : -
Export Route Policy : -
Default color : -
Table 41 Command output
Field |
Description |
EVPN instance |
EVPN instance name · instance-name—Name of an EVPN instance created in system view. · - (created on VSI vsi-name)—Name of an EVPN instance created in VSI view. · - (created on Xconnect-group xconnect-group-name)—Name of an EVPN instance created in cross-connect group view. |
Encapsulation |
EVPN encapsulation type: · VXLAN. · MPLS. · SRv6. |
MAC advertisement |
Status of MAC address advertisement: · Enabled. · Disabled. |
ARP advertisement |
Status of ARP advertisement: · Enabled. · Disabled. |
ARP-based MAC learning |
Whether EVPN learns MAC addresses from ARP information: · Enabled. · Disabled. |
ND-based MAC learning |
Whether EVPN learns MAC addresses from ND information: · Enabled. · Disabled. |
MPLS label |
MPLS label in MAC/IP advertisement routes. |
IMET MPLS label |
MPLS label in IMET routes. |
Tunnel policy |
Tunnel policy used by the EVPN instance. |
PW class |
PW class used by the EVPN instance. |
Control word |
Status of the control word feature: · Enabled. · Disabled. |
E-Tree |
Status of EVPN E-tree: · Enabled. · Disabled. |
PW type |
PW type: · Ethernet. · VLAN. |
Sequencing |
Sequencing on the PW. The value is Both. A hyphen (-) in this field indicates that sequencing is disabled on the PW. |
Flow label |
Flow label capability: · Both—Flow label sending and receiving capabilities. · Send—Flow label sending capability. · Recv—Flow label receiving capability. This field displays a hyphen (-) if the flow label feature is disabled. |
Dt2u SID |
SRv6 SID used for unicast forwarding in the EVPN VPLS over SRv6 network. The values in parentheses are the length of each segment in the SID, which are the locator length, dynamic opcode length, static opcode length, and argument length in sequence. The total length of those segments is 128. If the EVPN instance is not assigned an End.DT2U SID, this field displays a hyphen (-) and the cause: · conflict with dx2 sid—The assigned End.DT2U SID conflicts with the assigned End.DX2 SID. · no locator configuration—No locator is configured. |
Dt2ul SID |
SRv6 SID used for unicast forwarding over the bypass tunnel at the multihomed EVPN VPLS over SRv6 site. The values in parentheses are the length of each segment in the SID, which are the locator length, dynamic opcode length, static opcode length, and argument length in sequence. The total length of those segments is 128. If the EVPN instance is not assigned an End.DT2UL SID, this field displays a hyphen (-) and the cause: · conflict with dx2 sid—The assigned End.DT2UL SID conflicts with the assigned End.DX2 SID. · no bypass configuration—FRR is disabled. · no locator configuration—No locator is configured. |
Dt2m SID |
SRv6 SID used for multicast forwarding in the EVPN VPLS over SRv6 network. The values in parentheses are the length of each segment in the SID, which are the locator length, dynamic opcode length, static opcode length, and argument length in sequence. The total length of those segments is 128. If the EVPN instance is not assigned an End.DT2M SID, this field displays a hyphen (-) and the cause: · conflict with dx2 sid—The assigned End.DT2M SID conflicts with the assigned End.DX2 SID. · no locator configuration—No locator is configured. |
Dt2uLocatorName |
Locator name used for requesting the DT2U SID. If dynamic SID assignment is disabled, this field displays auto-sid-disable. |
Dt2ulLocatorName |
Locator name used for requesting the DT2UL SID. If dynamic SID assignment is disabled, this field displays auto-sid-disable. |
Dt2mLocatorName |
Locator name used for requesting the DT2M SID. If dynamic SID assignment is disabled, this field displays auto-sid-disable. |
Best-Effort |
Whether SID-route-recursion is enabled: · Enabled. · Disabled. |
Import routing policy |
Importing routing policy used by the EVPN instance. If the EVPN instance does not have an import routing policy, this field displays a hyphen (-). This field is available only when the encapsulation type is SRv6. |
Export routing policy |
Exporting routing policy used by the EVPN instance. If the EVPN instance does not have an export routing policy, this field displays a hyphen (-). This field is available only when the encapsulation type is SRv6. |
Default color |
Default color of the EVPN routes. If the default color is not configured for EVPN routes, this field displays a hyphen (-). |
Related commands
evpn encapsulation
vsi
display evpn route xconnect-group
Use display evpn route xconnect-group to display EVPN information about cross-connects.
Syntax
display evpn route xconnect-group [ name group-name [ connection connection-name ] ] [ count ]
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
name group-name: Specifies a cross-connect group by its name, a case-sensitive string of 1 to 31 characters. If you do not specify a cross-connect group, this command displays EVPN information about all cross-connect groups.
connection connection-name: Specifies a cross-connect by its name, a case-sensitive string of 1 to 20 characters excluding hyphens (-). If you do not specify a cross-connect, this command displays EVPN information about all cross-connects in the specified cross-connect group.
count: Displays the number of EVPN cross-connects. If you do not specify this keyword, the command displays detailed EVPN information.
Usage guidelines
If you do not specify any parameters, this command displays detailed EVPN information about all cross-connects.
Examples
# Display detailed EVPN information about all cross-connects.
<Sysname> display evpn route xconnect-group
Ctrl Flags: P - Primary, B - Backup, C - Control word
Xconnect group name: aa
Connection name: aaa
Encapsulation : MPLS
ESI : 0001.0002.0002.0002.0002
Local service ID : 16777215
Remote service ID : 16777214
Control word : Enabled
In label : 502
Local MTU : 1500
AC state : Up
Tunnel policy : -
PW class : -
PW type : VLAN
Nexthop ESI Out label Flags MTU State
192.123.123.123 0001.0002.0002.0002.0001 1299 PC 1500 Up
192.1.1.1 0001.0002.0002.0002.0001 1026 B 1500 Down
Connection name: aab
Encapsulation : MPLS
ESI : 0000.0000.0000.0000.0000
Local service ID : 1
Remote service ID : 2
Control word : Disabled
In label : 323
Local MTU : 1500
AC state : Up
Tunnel policy : -
PW class : -
PW type : VLAN
Nexthop ESI Out label Flags MTU State
192.1.1.1 0002.0002.0002.0002.0001 1234 P 1500 Up
192.2.1.2 0002.0002.0002.0002.0001 603 P 1500 Up
Connection name: aac
Encapsulation : MPLS
ESI : 0000.0000.0000.0000.0000
Local service ID : 3
Remote service ID : 4
Control word : Enabled
In label : -
Local MTU : 1500
AC state : Up
Tunnel policy : -
PW class : -
PW type : Ethernet
Nexthop ESI Out label Flags MTU State
192.1.1.3 0000.0000.0000.0000.0000 555 P 1500 Idle
Xconnect group name: vpna
Connection name: pw1
Encapsulation : SRv6
ESI : 0000.0000.0000.0000.0000
Local service ID : 1
Remote service ID : 2
In SID[DX2] : 100::1
In SID[DX2L] : -
Local MTU : 1500
AC State : Up
Tunnel policy : -
PW class : -
PW type : Ethernet
SRv6 Tunnel:
Next Hop : 2::2
ESI : 0000.0000.0000.0000.0000
Out SID : 200::1
Flags : P
MTU : 1500
State : Up
# Display the total number of EVPN cross-connects.
<Sysname> display evpn route xconnect-group count
Total number of entries: 2
Table 42 Command output
Field |
Description |
Xconnect group name |
Cross-connect group name. |
Connection name |
Cross-connect name. |
Encapsulation |
EVPN encapsulation type: · VXLAN. · MPLS. · SRv6. |
In label |
PW incoming label. |
Local MTU |
Local MTU in bytes. |
AC state |
AC state: · Up. · Down. This field displays a hyphen (-) if no AC is configured. |
PW type |
PW data encapsulation type: · Ethernet. · VLAN. |
Nexthop |
Remote PE address. |
Out label |
PW outgoing label. |
Flags |
PW attribute flags: · P—The received route has the primary flag. A primary PW needs to be set up. · B—The received route has the backup flag. A backup PW needs to be set up. · C—The received route has the control word flag, which indicates that control word is enabled on the peer. For the EVPN PWs to come up, you must enable control word on the local device. |
MTU |
MTU in the received route, in bytes. |
State |
EVPN PW state: · Up. · Down. · Idle—The incoming or outgoing label is not available. |
In SID[DX2] |
Incoming End.DX2 SID. |
In SID[DX2L] |
Incoming End.DX2L SID. |
Out SID |
Outgoing SID. |
display l2vpn forwarding evpn
Use display l2vpn forwarding evpn to display forwarding information of EVPN VPLS/VPWS and EVPN VPLS/VPWS over SRv6.
Syntax
In standalone mode:
display l2vpn forwarding evpn [ vsi [ name vsi-name ] [ verbose ] ] slot slot-number [ cpu cpu-number ]
In IRF mode:
display l2vpn forwarding evpn [ vsi [ name vsi-name ] [ verbose ] ] chassis chassis-number slot slot-number [ cpu cpu-number ]
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
vsi: Specifies VSI forwarding information. If you do not specify this keyword, the command displays both VSI and cross-connect forwarding information about EVPN.
name vsi-name: Specifies a VSI by its name, a case-sensitive string of 1 to 31 characters. If you do not specify this option, the command displays forwarding information about all VSIs.
verbose: Displays detailed forwarding information. If you do not specify this keyword, the command displays brief forwarding information.
slot slot-number: Specifies a card by its slot number. (In standalone mode.)
chassis chassis-number slot slot-number: Specifies a card on an IRF member device. The chassis-number argument represents the IRF member ID. The slot-number argument represents the slot number of the card. (In IRF mode.)
cpu cpu-number: Specifies a CPU by its number. This option is available only if multiple CPUs are available on the specified slot.
Examples
# (In IRF mode.) Display brief forwarding information about all VSIs of EVPN VPLS on slot 1.
<Sysname> display l2vpn forwarding evpn vsi slot 1
Total number of VSIs: 2
VSI name VSI index
vpls1 0
# (In IRF mode.) Display detailed forwarding information about all VSIs of EVPN VPLS on slot 1.
<Sysname> display l2vpn forwarding evpn vsi verbose slot 1
VSI name: vpls1
VSI index : 0
Encapsulation : MPLS
MPLS label : 1150
IMET MPLS label : 1149
Control word : enabled
PW type : Ethernet
Sequencing : Both
Flow label : Both
Table 43 Command output
Field |
Description |
Encapsulation |
EVPN encapsulation type: · MPLS. · SRv6. |
MPLS label |
MPLS label in MAC/IP advertisement routes. |
IMET MPLS label |
MPLS label in IMET routes. |
Control word |
Status of the control word feature: · enabled. · disabled. |
PW type |
PW type: · Ethernet. · VLAN. |
Sequencing |
Sequencing on the PW. The value is Both. A hyphen (-) in this field indicates that sequencing is disabled on the PW. |
Flow label |
Flow label capability: · Both—Flow label sending and receiving capabilities. · Send—Flow label sending capability. · Recv—Flow label receiving capability. This field displays a hyphen (-) if the flow label feature is disabled. |
Dt2u SID |
SRv6 SID used for unicast forwarding. |
Dt2ul SID |
SRv6 SID used for unicast forwarding over the bypass tunnel at the multihomed site. |
Dt2m SID |
SRv6 SID used for multicast forwarding. |
Related commands
evpn encapsulation
vsi
display l2vpn forwarding evpn split-horizon
Use display l2vpn forwarding evpn split-horizon to display site-facing interfaces excluded from traffic forwarding by split horizon.
Syntax
In standalone mode:
display l2vpn forwarding evpn split-horizon { ac interface interface-type interface-number | ac interface interface-type interface-number service-instance instance-id | tunnel tunnel-number | upw vsi vsi-name } slot slot-number [ cpu cpu-number ]
In IRF mode:
display l2vpn forwarding evpn split-horizon { ac interface interface-type interface-number | ac interface interface-type interface-number service-instance instance-id | tunnel tunnel-number | upw vsi vsi-name } chassis chassis-number slot slot-number [ cpu cpu-number ]
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
ac interface interface-type interface-number: Specifies a Layer 3 interface by its type and number. These parameters apply to EVPN VPLS.
ac interface interface-type interface-number service-instance instance-id: Specifies an Ethernet service instance on a Layer 2 interface. The interface-type interface-number argument specifies the interface by its type and number. The instance-id argument specifies the Ethernet service instance by its ID in the range of 1 to 4096. These parameters apply to EVPN VPLS.
tunnel tunnel-number: Specifies a VXLAN tunnel interface number. The value range for the tunnel-number argument is 0 to 32767. If you do not specify this option, the command displays all site-facing interfaces excluded from traffic forwarding by split horizon. This option applies to EVPN VXLAN.
upw vsi vsi-name: Specifies a VSI name, a case-sensitive string of 1 to 31 characters. If you specify a VSI, this command displays the SRv6 PWs or EVPN PWs excluded by split horizon from forwarding flood traffic received from LDP PWs or static PWs. This option applies to EVPN VPLS or EVPN VPLS over SRv6.
slot slot-number: Specifies a card by its slot number. (In standalone mode.)
chassis chassis-number slot slot-number: Specifies a card on an IRF member device. The chassis-number argument represents the IRF member ID. The slot-number argument represents the slot number of the card. (In IRF mode.)
cpu cpu-number: Specifies a CPU by its number. This option is available only if multiple CPUs are available on the specified slot.
Examples
# Display site-facing interfaces excluded from traffic forwarding for Tunnel 0.
<Sysname> display l2vpn forwarding evpn split-horizon tunnel 0
Tunnel name: 0
Total number of filtered interfaces: 2
Filtered interfaces:
XGE3/1/1
XGE3/1/2
# For EVPN VPLS, display site-facing interfaces excluded from traffic forwarding for AC Ten-GigabitEthernet 3/1/1.
<Sysname> display l2vpn forwarding evpn split-horizon ac interface ten-gigabitethernet 3/1/1
Interface name : Ten-GigabitEthernet3/1/1
AC link ID : 0
Service instance ID : 100
PW count : 2
VSI name PW link ID ESI label
vpna 8 775128
vpna 9 775128
# For EVPN VPLS over SRv6, display site-facing interfaces excluded from traffic forwarding for AC Ten-GigabitEthernet 3/1/1.
<Sysname> display l2vpn forwarding evpn split-horizon ac interface ten-gigabitethernet 3/1/1
Interface name : Ten-GigabitEthernet3/1/1
AC link ID : 0
Service instance ID : 100
SRv6 tunnel count : 2
VSI name SRv6 link ID Argument
vpna 0x8 ::1
vpna 0x9 ::1
# For EVPN VPLS, display SRv6 PWs or EVPN PWs excluded by split horizon from forwarding flood traffic received from LDP PWs or static PWs for VSI vpna.
<Sysname> display l2vpn forwarding evpn split-horizon upw vsi vpna
UPW link ID : 0
PW count : 2
VSI name PW link ID Argument
vpna 0x8 ::1
vpna 0x9 ::1
# For EVPN VPLS over SRv6, display SRv6 PWs or EVPN PWs excluded by split horizon from forwarding flood traffic received from LDP PWs or static PWs for VSI vpna.
<Sysname> display l2vpn forwarding evpn split-horizon upw vsi vpna
UPW link ID : 0
SRv6 tunnel count : 2
VSI name SRv6 link ID Argument
vpna 0x8 ::1
vpna 0x9 ::1
Table 44 Command output
Field |
Description |
Tunnel name |
VXLAN tunnel interface name. |
Argument |
Argument that identifies a leaf AC. E-Tree isolates traffic among leaf ACs based on arguments in an EVPN VPLS over SRv6 network. This field displays a hyphen (-) if no argument exists. |
Filtered interfaces |
Site-facing interfaces that do not forward the flood traffic received from the VXLAN tunnel. |
e-tree enable
Use e-tree enable to enable inter-site EVPN E-tree.
Use undo e-tree enable to disable inter-site EVPN E-tree.
Syntax
e-tree enable
undo e-tree enable
Default
Inter-site EVPN E-tree is disabled.
Views
EVPN instance view
VSI EVPN instance view
Predefined user roles
network-admin
Usage guidelines
In an EVPN VPLS or VPLS over SRv6 network, EVPN E-tree isolates unicast and flood traffic (broadcast, multicast, and unknown unicast) of ACs in the same EVPN instance based on the AC roles. With EVPN E-tree, the device isolates unicast and flood traffic of ACs in the same EVPN instance as follows:
· Leaf ACs can access root ACs.
· Leaf ACs cannot access each other.
· Root ACs can access each other and access leaf ACs.
Inter-site EVPN E-tree controls communication between local ACs and remote ACs. You do not need to enable this feature if you want to control communication between local ACs.
You cannot configure inter-site EVPN E-tree for both EVPN VPLS and EVPN VPLS over SRv6.
Examples
# Enable inter-site EVPN E-tree.
<Sysname> system-view
[Sysname] vsi aaa
[Sysname-vsi-aaa] evpn encapsulation mpls
[Sysname-vsi-aaa-evpn-mpls] e-tree enable
esi
Use esi to assign an ESI to an interface, UPW, or VSI.
Use undo esi to restore the default.
Syntax
esi esi-id
undo esi
Default
No ESI is assigned to an interface, UPW, or VSI.
Views
Interface view
Cross-connect PW view
VSI LDP PW view
VSI static PW view
VSI view
Predefined user roles
network-admin
Parameters
esi-id: Specifies an ES by its ESI in XXXX.XXXX.XXXX.XXXX.XXXX format. Each X represents a hexadecimal digit. The ESI must begin with 00 and cannot be all zeros.
Usage guidelines
An ESI uniquely identifies an ES. The links on interfaces, UPWs, or VSIs with the same ESI belong to the same ES. Traffic of the ES can be distributed among the links for load sharing.
You can assign ESIs to a main interface and its subinterfaces.
· If you assign an ESI to a subinterface, the subinterface-specific ESI and ES configuration take precedence over those configured on the main interface. The ES configuration includes the following:
¡ evpn redundancy-mode.
¡ evpn df-election algorithm.
¡ evpn df-election preference.
¡ evpn df-election preference non-revertive.
¡ evpn timer es-delay.
· If you do not assign an ESI to a subinterface, it inherits the ESI and ES configuration (if configured) of the main interface. In this scenario, the ES configuration on the subinterface does not take effect.
You can assign an ESI to a VSI LDP PW or VSI static PW only if you specify the dci or no-split-horizon keyword in executing the peer command for the PW.
PEs at a multihomed site send UMRs that carry the ESIs configured in VSI view.
To modify the ESI of an interface, UPW, or VSI, first use the undo esi command to delete the original ESI.
Examples
# Assign ESI 0000.0001.0002.0003.0004 to Ten-GigabitEthernet 3/1/1.
<Sysname> system-view
[Sysname] interface ten-gigabitethernet 3/1/1
[Sysname-Ten-GigabitEthernet3/1/1] esi 0000.0001.0002.0003.0004
# Assign ESI 0000.0001.0002.0003.0004 to cross-connect PW 34.
<Sysname> system-view
[Sysname] xconnect-group 1
[Sysname-xcg-1] connection 1
[Sysname-xcg-1-1] peer 1.1.1.1 pw-id 34
[Sysname-xcg-1-1-1.1.1.1-34] esi 0000.0001.0002.0003.0004
# Assign ESI 0000.0001.0002.0003.0004 to VSI LDP PW 23.
<Sysname> system-view
[Sysname] vsi vpn1
[Sysname-vsi-vpn1] pwsignaling ldp
[Sysname-vsi-vpn1-ldp] peer 1.1.1.1 pw-id 23 no-split-horizon
[Sysname-vsi-vpn1-ldp-1.1.1.1-23] esi 0000.0001.0002.0003.0004
# Assign ESI 0000.0001.0002.0003.0004 to VSI static PW 23.
<Sysname> system-view
[Sysname] vsi vpn1
[Sysname-vsi-vpn1] pwsignaling static
[Sysname-vsi-vpn1-static] peer 1.1.1.1 pw-id 23 in-label 100 out-label 200 no-split-horizon
[Sysname-vsi-vpn1-static-1.1.1.1-23] esi 0000.0001.0002.0003.0004
Related commands
peer (MPLS Command Reference)
evpn df-election algorithm (interface view)
Use evpn df-election algorithm to configure the DF election algorithm on an interface.
Use undo evpn df-election algorithm to restore the default.
Syntax
evpn df-election algorithm algorithm
undo evpn df-election algorithm
Default
The DF election algorithm specified in system view takes effect.
Views
Interface view
Predefined user roles
network-admin
Parameters
Algorithm: Specifies a DF election algorithm. The value of this argument can only be preference, which represents the preference-based algorithm.
Usage guidelines
At a multihomed EVPN network site, you can modify the DF election algorithm with this command to control the DF election result.
You can configure the DF election algorithm in system view and in interface view. The global DF election algorithm takes effect on all ESs, and the interface-specific DF election algorithm takes effect only on the ESs on an interface. The interface-specific DF election algorithm takes precedence over the global DF election algorithm.
Examples
# Configure Ten-GigabitEthernet 3/1/1 to use the preference-based algorithm for DF election.
<Sysname> system-view
[Sysname] interface ten-gigabitethernet 3/1/1
[Sysname-Ten-GigabitEthernet3/1/1] evpn df-election algorithm preference
Related commands
evpn df-election algorithm (system view)
evpn df-election preference
evpn df-election algorithm (system view)
Use evpn df-election algorithm to configure the DF election algorithm globally.
Use undo evpn df-election algorithm to restore the default.
Syntax
evpn df-election algorithm algorithm
undo evpn df-election algorithm
Default
The VLAN tag-based algorithm is used for DF election.
Views
System view
Predefined user roles
network-admin
Parameters
Algorithm: Specifies a DF election algorithm. The value of this argument can only be preference, which represents the preference-based algorithm.
Usage guidelines
At a multihomed EVPN network site, you can modify the DF election algorithm with this command to control the DF election result.
You can configure the DF election algorithm in system view and in interface view. The global DF election algorithm takes effect on all ESs, and the interface-specific DF election algorithm takes effect only on the ESs on an interface. The interface-specific DF election algorithm takes precedence over the global DF election algorithm.
Examples
# Configure the global DF election algorithm as the preference-based algorithm.
<Sysname> system-view
[Sysname] evpn df-election algorithm preference
Related commands
evpn df-election algorithm (interface view)
evpn df-election preference
evpn df-election preference
Use evpn df-election preference to set the DF election preference.
Use undo evpn df-election preference to restore the default.
Syntax
evpn df-election preference preference
undo evpn df-election preference
Default
The DF election preference is 32767.
Views
Interface view
Predefined user roles
network-admin
Parameters
Preference: Sets the DF election preference in the range of 0 to 65535. The larger the value, the higher the preference.
Usage guidelines
Use this command to set the preference used in preference-based DF election. The device with higher preference will be elected as the DF.
This command takes effect after the evpn df-election algorithm preference command is executed in interface view or system view.
Examples
# Set the DF election preference to 100.
<Sysname> system-view
[Sysname] interface ten-gigabitethernet 3/1/1
[Sysname-Ten-GigabitEthernet3/1/1] evpn df-election preference 100
Related commands
evpn df-election algorithm (interface view)
evpn df-election algorithm (system view)
evpn df-election preference non-revertive
Use evpn df-election preference non-revertive to enable non-revertive mode for preference-based DF election.
Use undo evpn df-election preference non-revertive to disable non-revertive mode for preference-based DF election.
Syntax
evpn df-election preference non-revertive
undo evpn df-election preference non-revertive
Default
Non-revertive mode is disabled for preference-based DF election.
Views
Interface view
Predefined user roles
network-admin
Usage guidelines
Preference-based DF election selects the device with the highest preference as the DF. The BDF takes over the DF role if one of the following events occurs:
· The DF fails.
· The site-facing link on the DF fails.
· The DF election preference of the BDF is set to be higher than that of the DF.
When the original DF or its site-facing link recovers, or its preference is set to be higher than that of the new DF, the original DF will take over the DF role. To avoid undesired traffic loss, you can disable reversion to the original DF by enabling non-revertive mode for preference-based DF election.
This command takes effect after the evpn df-election algorithm preference command is executed in interface view or system view.
Examples
# Enable non-revertive mode for preference-based DF election.
<Sysname> system-view
[Sysname] interface ten-gigabitethernet 3/1/1
[Sysname-Ten-GigabitEthernet3/1/1] evpn df-election preference non-revertive
Related commands
evpn df-election algorithm (interface view)
evpn df-election algorithm (system view)
evpn edge group
Use evpn edge group to configure a virtual ED address.
Use undo evpn edge group to restore the default.
Syntax
evpn edge group { group-ipv4 | group-ipv6 }
undo evpn edge group
Default
No virtual ED address is configured.
Views
System view
Predefined user roles
network-admin
Parameters
group-ipv4: Specifies the virtual IPv4 ED address.
group-ipv6: Specifies the virtual IPv6 ED address.
Usage guidelines
For high availability and load sharing, you can deploy two EDs at a data center. To virtualize the redundant EDs into one device, you must configure the same virtual ED address on them. The redundant EDs use the virtual ED address to establish tunnels with VTEPs and remote EDs.
Redundant EDs cannot provide access service for local VMs. They can act only as EDs. For correct communication, do not redistribute external routes on only one of the redundant EDs. However, you can redistribute the same external routes on both EDs.
On a redundant ED, the virtual ED address must be the IP address of a loopback interface, and it cannot be the BGP peer IP address of the ED.
This command is applicable only to an EVPN-DCI network, and it cannot take effect on an EVPN L3VPN network.
If you execute the undo bgp command to disable the BGP instance of the EVPN address family, the evpn edge group setting will also be deleted. Make sure you are fully aware of the impact of the undo bgp command when you use it on a live network.
Examples
# Configure 1.2.3.4 as the virtual ED address.
<Sysname> system-view
[Sysname] evpn edge group 1.2.3.4
evpn encapsulation
Use evpn encapsulation to create an EVPN instance and enter its view, or enter the view of an existing EVPN instance.
Use undo evpn encapsulation to restore the default.
Syntax
In VSI view:
evpn encapsulation [ mpls | vxlan ]
undo evpn encapsulation
In cross-connect group view:
evpn encapsulation mpls
undo evpn encapsulation
Default
No EVPN instance is created.
Views
VSI view
Cross-connect group view
Predefined user roles
network-admin
Parameters
mpls: Specifies MPLS encapsulation.
vxlan: Specifies VXLAN encapsulation.
Usage guidelines
Before you can configure EVPN settings for a VSI or cross-connect group, you must create an EVPN instance on it.
This command is mutually exclusive with the evpn encapsulation binding instance command on a VSI.
Examples
# Create an EVPN instance on VSI aaa and enter its view.
<Sysname> system-view
[Sysname] vsi aaa
[Sysname-vsi-aaa] evpn encapsulation vxlan
[Sysname-vsi-aaa-evpn-vxlan]
evpn encapsulation binding instance
Use evpn encapsulation binding instance to bind a VSI to an EVPN instance.
Use undo evpn encapsulation binding instance to restore the default.
Syntax
evpn encapsulation mpls binding instance instance-name [ vsi-tag tag-id ]
undo evpn encapsulation mpls binding instance instance-name
evpn encapsulation vxlan binding instance instance-name [ vsi-tag { tag-id | auto-vxlan } ]
undo evpn encapsulation vxlan binding instance instance-name
Views
VSI view
Default
A VSI is not bound to any EVPN instance.
Predefined user roles
network-admin
Parameters
mpls: Specifies MPLS encapsulation.
vxlan: Specifies VXLAN encapsulation.
instance-name: Specifies an EVPN instance by its name, a case-sensitive string of 1 to 31 characters.
vsi-tag: Specifies a VSI tag ID. An EVPN instance uses tag IDs to identify VSIs when it is bound to multiple VSIs. If you do not specify a tag ID, the tag ID 0 is assigned to the VSI.
tag-id: Specifies a tag ID. For VXLAN encapsulation, the value range for this argument is 1 to 16777215. For MPLS encapsulation, the value range for this argument is 1 to 4094.
auto-vxlan: Automatically generates a tag ID based on the VXLAN ID of the VSI.
Usage guidelines
This command is applicable only to EVPN VXLAN and EVPN VPLS.
You can bind a VSI to one or two EVPN instances. If you bind two EVP instances to a VSI, make sure one EVPN instance uses MPLS encapsulation and the other uses VXLAN encapsulation.
This command is mutually exclusive with the evpn encapsulation command. You cannot use them together on the same VSI.
Examples
# Bind VSI vpna to EVPN instance evpna.
<Sysname> system-view
[Sysname] vsi vpna
[Sysname-vsi-vpna] evpn encapsulation vxlan binding instance evpna vsi-tag auto-vxlan
Related commands
evpn encapsulation
evpn instance
evpn instance
Use evpn instance to create an EVPN instance and enter its view, or enter the view of an existing EVPN instance.
Use undo evpn instance to delete an EVPN instance.
Syntax
evpn instance instance-name
undo evpn instance instance-name
Views
System view
Default
No EVPN instance exists.
Predefined user roles
network-admin
Parameters
instance-name: Specifies an EVPN instance name, a case-sensitive string of 1 to 31 characters.
Usage guidelines
You must create an EVPN instance before you can configure EVPN on it.
You can bind an EVPN instance created in system view to multiple VSIs to simplify configuration.
Examples
# Create EVPN instance evpn1 and enter its view.
<Sysname> system-view
[Sysname] evpn instance evpn1
[Sysname-evpn-instance-evpn1]
evpn frr local (cross-connect group EVPN instance view)
Use evpn frr local enable to enable local fast reroute (FRR) on an EVPN instance.
Use evpn frr local disable to disable local FRR on an EVPN instance and delete the existing bypass PW.
undo evpn frr local to restore the default.
Syntax
evpn frr local { disable | enable }
undo evpn frr local
Default
An EVPN instance uses the global local FRR configuration of EVPN VPWS.
Views
Cross-connect group EVPN instance view
Predefined user roles
network-admin
Usage guidelines
Local FRR enables two PEs at a multihomed EVPN VPWS network site to set up a bypass PW between them. This feature helps reduce the traffic loss caused by AC failure.
At a multihomed EVPN VPWS network site, CE 1 is dualhomed to PE 1 and PE 2, and PE 1 is the DF. When the AC on PE 1 fails, PE 1 advertises the local unreachable event to PE 2 and remote PEs for the remote PEs to switch traffic to the PWs to PE 2. In this situation, PE 1 drops the packets that the remote PEs send before they are notified of the local unreachable event. To resolve this issue, enable local FRR on PE 1 and PE 2. When receiving packets from the remote PEs after its AC fails, PE 1 forwards the packets to PE 2 over the bypass PW to prevent traffic loss.
On an EVPN instance, EVPN instance-specific local FRR configuration takes precedence over global local FRR configuration.
Examples
# Enable local FRR on the EVPN instance of cross-connect group aa.
<Sysname> system-view
[Sysname] xconnect-group aa
[Sysname-xcg-1] evpn encapsulation mpls
[Sysname-xcg-1-evpn-mpls] evpn frr local enable
Related commands
evpn multihoming vpws-frr local
evpn frr local (EVPN instance view/VSI EVPN instance view)
Use evpn frr local enable to enable local FRR on an EVPN instance.
Use evpn frr local disable to disable local FRR on an EVPN instance.
Use undo evpn frr local to restore the default.
Syntax
evpn frr local { disable | enable }
undo evpn frr local
Default
An EVPN instance uses the global local FRR configuration of EVPN.
Views
EVPN instance view
VSI EVPN instance view
Predefined user roles
network-admin
Usage guidelines
Local FRR enables two PEs at a multihomed EVPN VPLS network site to set up a PW between them. This feature helps reduce the traffic loss caused by AC failure.
At a multihomed EVPN VPLS network site, CE 1 is dualhomed to PE 1 and PE 2, and PE 1 is the DF. When the AC on PE 1 fails, PE 1 deletes the related MAC address entries and advertises the local unreachable event to PE 2 and remote PEs. Then, the remote PEs will switch traffic to the tunnels to PE 2. In this situation, PE 1 drops the packets that the remote PEs send before they are notified of the local unreachable event as the AC's MAC address entries have been deleted. To resolve this issue, enable local FRR on PE 1. If an AC fails, PE 1 changes the outgoing interface of the AC's MAC address entries to the index of the PW between PE 1 and PE 2. When receiving packets from remote PEs after its AC fails, PE 1 forwards the packets to PE 2 over the PW to prevent traffic loss.
Local FRR enables two VTEPs at a multihomed EVPN VXLAN network site to set up a VXLAN tunnel between them. This feature helps reduce the traffic loss caused by AC failure.
At a multihomed EVPN VXLAN network site, VM 1 is dualhomed to VTEP 1 and VTEP 2, and VTEP 1 is the DF. When the AC on VTEP 1 fails, VTEP 1 deletes the related MAC address entries and advertises the local unreachable event to VTEP 2 and remote VTEPs. Then, the remote VTEPs will switch traffic to the tunnels to VTEP 2. In this situation, VTEP 1 drops the packets that the remote VTEPs send before they are notified of the local unreachable event as the AC's MAC address entries have been deleted. To resolve this issue, enable local FRR on VTEP 1. If an AC fails, VTEP 1 changes the outgoing interface of the AC's MAC address entries to the index of the tunnel between VTEP 1 and VTEP 2. When receiving packets from remote VTEPs after its AC fails, VTEP 1 forwards the packets to VTEP 2 over the VXLAN tunnel to prevent traffic loss.
On an EVPN instance using MPLS encapsulation, EVPN instance-specific local FRR setting takes precedence over the global local FRR setting configured by using the evpn multihoming vpls-frr local command.
Examples
# Enable local FRR on the EVPN instance of VSI vpna.
<Sysname> system-view
[Sysname] vsi vpna
[Sysname-vsi-vpna] evpn encapsulation mpls
[Sysname-vsi-vpna-evpn-mpls] evpn frr local enable
Related commands
evpn multihoming vpls-frr local
evpn frr remote
Use evpn frr remote enable to enable remote FRR on an EVPN instance.
Use evpn frr remote disable to disable remote FRR on an EVPN instance and delete existing backup PWs.
Use undo evpn frr remote to restore the default.
Syntax
evpn frr remote [ disable | enable ]
undo evpn frr remote
Default
An EVPN instance uses the global remote FRR configuration of EVPN VPWS.
Views
Cross-connect group EVPN instance view
Predefined user roles
network-admin
Usage guidelines
Remote FRR enables two PEs on an EVPN VPWS or EVPN VPWS over SRv6 network to set up a primary PW and a backup PW between them to ensure high availability. The PEs use the primary PW to forward traffic as long as it is available. When the primary PW fails, the PEs switch traffic to the backup PW.
Remote FRR is supported by a cross-connect group EVPN instance that uses MPLS or SRv6 encapsulation.
On an EVPN instance, EVPN instance-specific remote FRR configuration takes precedence over global remote FRR configuration.
Examples
# Enable remote FRR on the EVPN instance of cross-connect group xcga.
<Sysname> system-view
[Sysname] xconnect-group xcga
[Sysname-xcg-xcga] evpn encapsulation mpls
[Sysname-xcg-xcga-evpn-mpls] evpn frr remote enable
Related commands
evpn vpws-frr remote
evpn irb asymmetric
Use evpn irb asymmetric to enable asymmetric IRB for EVPN VXLAN.
Use undo evpn irb asymmetric to restore the default.
Syntax
evpn irb asymmetric
undo evpn irb asymmetric
Default
Symmetric IRB is enabled for EVPN VXLAN.
Views
System view
Predefined user roles
network-admin
Usage guidelines
Use this command to set the IRB mode for EVPN VXLAN.
Examples
# Enable asymmetric IRB for EVPN VXLAN.
<Sysname> system-view
[Sysname] evpn irb asymmetric
evpn local-service-id remote-service-id
Use evpn local-service-id remote-service-id to create an EVPN PW and enter its view, or enter the view of an existing EVPN PW.
Use undo evpn local-service-id remote-service-id to delete an EVPN PW.
Syntax
evpn local-service-id local-service-id remote-service-id remote-service-id [ tunnel-policy tunnel-policy-name ] [ pw-class class-name ]
undo evpn local-service-id local-service-id remote-service-id remote-service-id
Default
No EVPN PWs exist.
Views
Cross-connect view
Predefined user roles
network-admin
Parameters
local-service-id: Specifies a local service ID in the range of 1 to 16777215.
remote-service-id: Specifies a remote service ID in the range of 1 to 16777215.
tunnel-policy tunnel-policy-name: Specifies a tunnel policy by its name, a case-sensitive string of 1 to 126 characters. If you do not specify a tunnel policy, the PW uses the default tunnel policy.
pw-class class-name: Specifies a PW class by its name, a case-sensitive string of 1 to 19 characters. You can specify a PW class to configure the PW data encapsulation type and control word for the PW. If you do not specify a PW class, the PW data encapsulation type is determined by the link type of the interface. The control word feature is not supported for PW data encapsulation types that do not require using control word.
Usage guidelines
You can use the evpn local-service-id remote-service-id command to concatenate two EVPN PWs on the same cross-connect.
To modify an EVPN PW, first use the undo evpn local-service-id remote-service-id command to delete the original EVPN PW.
If you set up an EVPN PW with a redundant PE at the local site, the device uses the BFD configuration in the PW class specified in the evpn local-service-id remote-service-id command.
· If the EVPN PW is a primary EVPN PW, the device establishes a dynamic BFD session for the EVPN PW.
· If the EVPN PW is a backup or ECMP EVPN PW, the device does not establish a dynamic BFD session for the EVPN PW.
Examples
# Create an EVPN PW and enter its view, and specify tunnel policy aaa and PW class bbb for it.
<Sysname> system-view
[Sysname] xconnect-group aaa
[Sysname-xcg-aaa] connection ac2pw
[Sysname-xcg-aaa-ac2pw] evpn local-service-id 2 remote-service-id 4 tunnel-policy aaa pw-class bbb
[Sysname-xcg-aaa-ac2pw-2-4]
evpn mac re-originated enable
Use evpn mac re-originated enable to enable reorigination of MAC/IP advertisement routes.
Use undo evpn mac re-originated to disable reorigination of MAC/IP advertisement routes.
Syntax
evpn mac re-originated enable
undo evpn mac re-originated
Default
Reorigination of MAC/IP advertisement routes is disabled.
Views
BGP instance view
Predefined user roles
network-admin
Usage guidelines
For the device to reoriginate MAC/IP advertisement routes, you must use this command together with the peer re-originated mac command.
Examples
# Enable reorigination of MAC/IP advertisement routes in BGP instance view.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp-default] evpn mac re-originated enable
Related commands
peer re-originated mac
evpn mac-move local-suppression
Use evpn mac-move local-suppression to configure suppression of local EVPN MAC move reports.
Use undo evpn mac-move local-suppression to restore the default.
Syntax
evpn mac-move local-suppression check-interval interval [ threshold threshold ]
undo evpn mac-move local-suppression
Default
The detection interval for EVPN MAC moves is 6 minutes, and the report suppression threshold is 12.
Views
System view
Predefined user roles
network-admin
network-operator
Parameters
check-interval interval: Sets the detection interval for EVPN MAC moves in seconds. The value range is 0 or 10 to 3600. A value of 0 indicates that the device does not detect EVPN MAC moves.
threshold threshold: Sets the maximum number of MAC moves for each MAC address within a detection interval. The value range is 1 to 255. If you do not configure this parameter, the default value 12 applies.
Usage guidelines
Application scenarios
In an EVPN network, if multiple user devices attached to the PE are assigned the same MAC address, the PE will repeatedly report learning of the same local EVPN MAC address. The MAC address is considered to be constantly migrating between interfaces.
Within a detection interval, if the PE detects that the migration frequency of a certain MAC address exceeds the report suppression threshold, it will suppress the reporting of the locally learned EVPN MAC address information.
Restrictions and guidelines
If the detection interval is set to 0, reporting of local MAC moves for EVPN is not suppressed. The PE is allowed to report the locally learned EVPN MAC address information.
Examples
# Set the detection interval for EVPN MAC moves to 3 minutes, and set the report suppression threshold to 10. If a local MAC address moves more than 10 times within 3 minutes, MAC address learning reports will be suppressed for that MAC address.
<Sysname> system-view
[Sysname] evpn mac-move local-suppression check-interval 3 threshold 10
# Disable suppression of local EVPN MAC move reports.
<Sysname> system-view
[Sysname] evpn mac-move local-suppression check-interval 0
evpn mpls routing-enable
Use evpn mpls routing-enable to enable EVPN to advertise the routes of a VPN instance.
Use undo evpn mpls routing-enable to disable EVPN from advertising the routes of a VPN instance.
Syntax
evpn mpls routing-enable
undo evpn mpls routing-enable
Default
EVPN does not advertise the routes of VPN instances.
Views
VPN instance IPv4 address family view
VPN instance IPv6 address family view
Predefined user roles
network-admin
Usage guidelines
This command enables devices to exchange the routes of a VPN instance by using IP prefix advertisement routes with MPLS encapsulation. After you execute this command for a VPN instance, the device advertises the routes of the VPN instance through IP prefix advertisement routes. When receiving IP prefix advertisement routes with MPLS encapsulation, the device adds the routes that belong to the VPN instance to the routing table.
For EVPN to add MPLS encapsulation to IP prefix advertisement routes, you must execute the peer advertise encap-type mpls command in BGP EVPN address family view.
Examples
# Enable EVPN to advertise the IPv4 routes of VPN instance vpna.
<Sysname> system-view
[Sysname] ip vpn-instance vpna
[Sysname-vpn-instance-vpna] address-family ipv4
[Sysname-vpn-ipv4-vpna] evpn mpls routing-enable
Related commands
peer advertise encap-type mpls
evpn multihoming advertise disable
Use evpn multihoming advertise disable to disable advertisement of EVPN multihoming routes and withdraw the EVPN multihoming routes that have been advertised to remote sites.
Use undo evpn multihoming advertise disable to restore the default.
Syntax
evpn multihoming advertise disable
undo evpn multihoming advertise disable
Default
The device advertises EVPN multihoming routes.
Views
System view
Predefined user roles
network-admin
Usage guidelines
EVPN multihoming routes include Ethernet auto-discovery routes and Ethernet segment routes.
In a multihomed EVPN network, execute this command on a redundant VTEP or PE before you reboot it. This operation allows other VTEPs or PEs to refresh their EVPN routing table to prevent traffic interruption caused by the reboot.
Examples
# Disable advertisement of EVPN multihoming routes and withdraw the EVPN multihoming routes that have been advertised to remote sites.
<Sysname> system-view
[Sysname] evpn multihoming advertise disable
evpn multihoming advertise ignore-ethernet-tag
Use evpn multihoming advertise ignore-ethernet-tag to enable the device to ignore the Ethernet tag when advertising Ethernet auto-discovery routes and MAC/IP advertisement routes.
Use undo evpn multihoming advertise ignore-ethernet-tag to restore the default.
Syntax
evpn multihoming advertise ignore-ethernet-tag
undo evpn multihoming advertise ignore-ethernet-tag
Default
By default, the device advertises Ethernet auto-discovery routes and MAC/IP advertisement routes that carry Ethernet tags.
Views
System view
Predefined user roles
network-admin
Usage guidelines
Use this command on the redundant PEs or VTEPs at a dualhomed site.
This command enables the device to do the following:
· Withdraw the Ethernet auto-discovery routes and MAC/IP advertisement routes that have been advertised.
· Set the Ethernet tag to 0 for the Ethernet auto-discovery routes and MAC/IP advertisement routes and re-advertise them.
After you configure ESIs for ACs on the redundant edge devices at a dualhomed site, the edge devices advertise Ethernet auto-discovery routes and MAC/IP advertisement routes that carry Ethernet tags. If the remote peers are unable to identify Ethernet tags, you must execute this command on the redundant edge devices to enable communication with the peers.
When you use this command, follow these restrictions and guidelines:
· After you assign an ESI to a Layer 2 Ethernet or aggregate interface, you must map the Ethernet service instances created on the interface to different VSIs. If two interfaces use the same ESI, you must map the Ethernet service instances created on them to different VSIs.
· After you assign an ESI to a Layer 3 main interface, its subinterfaces inherit the ESI if they do not have one. In addition, you must map two subinterfaces to different VSIs if the subinterfaces have the same ESI.
Examples
# Enable the device to ignore the Ethernet tag when advertising Ethernet auto-discovery routes and MAC/IP advertisement routes.
<Sysname> system-view
[Sysname] evpn multihoming advertise ignore-ethernet-tag
Related commands
esi
evpn multihoming re-originated mac
Use evpn multihoming re-originated mac to enable the device to generate MAC address entries for received MAC/IP advertisement routes.
Use undo evpn multihoming re-originated mac to restore the default.
Syntax
evpn multihoming re-originated mac
undo evpn multihoming re-originated mac
Default
The device does not generate MAC address entries for received MAC/IP advertisement routes.
Views
System view
Predefined user roles
network-admin
Usage guidelines
This command helps reduce the traffic loss caused by AC failure at a dualhomed EVPN VPLS network site.
At a multihomed EVPN VPLS network site, CE 1 is dualhomed to PE 1 and PE 2 through an aggregate link or smart trunk, and PE 3 is at a remote site. PE 1 forwards all traffic sent from CE 1 to the remote site, and PE 3 forwards the traffic that the remote site sends to CE 1 to both PE 1 and PE 2. When the AC on PE 1 fails, PE 1 withdraws the MAC/IP advertisement routes advertised to PE 2 and PE 3. In this situation, PE 3 does not have MAC address entries for CE 1 until PE 2 learns MAC address entries for CE 1 and advertises them to PE 3. As a result, traffic interruption occurs.
To resolve this issue, execute the evpn multihoming re-originated mac command on both PE 1 and PE 2. When receiving the MAC/IP advertisement routes advertised by PE 1, PE 2 generates MAC address entries for the routes and advertises the entries to PE 3. PE 3 can use those MAC address entries to forward traffic to CE 1 when the AC on PE 1 fails.
You must enable local FRR for EVPN VPLS before you execute this command.
Examples
# Enable the device to generate MAC address entries for received MAC/IP advertisement routes.
<Sysname> system-view
[Sysname] evpn multihoming re-originated mac
Related commands
evpn frr local (VSI EVPN instance view)
evpn multihoming vpls-frr local
evpn multihoming timer df-delay
Use evpn multihoming timer df-delay to set the DF election delay.
Use undo evpn multihoming timer df-delay to restore the default.
Syntax
evpn multihoming timer df-delay delay-value
undo evpn multihoming timer df-delay
Default
The DF election delay is 3 seconds.
Views
System view
Predefined user roles
network-admin
Parameters
delay-value: Specifies the DF election delay, in the range of 1 to 1200 seconds.
Usage guidelines
DF election delay defines the minimum interval allowed between two DF elections.
The DF election can be triggered by site-facing interface status changes, redundant VTEP or PE membership changes, and interface ESI changes. To prevent frequent DF elections from degrading network performance, set the DF election delay.
To fast elect a DF and avoid traffic interruption upon DF failure, set the DF election delay to 0 seconds.
Examples
# Set the DF election delay to 5 seconds.
<Sysname> system-view
[Sysname] evpn multihoming timer df-delay 5
evpn multihoming vpls-frr local
Use evpn multihoming vpls-frr local to enable local FRR globally for EVPN VPLS.
Use undo evpn multihoming vpls-frr local to disable local FRR globally for EVPN VPLS.
Syntax
evpn multihoming vpls-frr local
undo evpn multihoming vpls-frr local
Default
Local FRR is disabled globally for EVPN VPLS.
Views
System view
Predefined user roles
network-admin
Usage guidelines
Local FRR enables two PEs at a multihomed EVPN VPLS network site to set up a PW between them. This feature helps reduce the traffic loss caused by AC failure.
At a multihomed EVPN VPLS network site, CE 1 is dualhomed to PE 1 and PE 2, and PE 1 is the DF. When the AC on PE 1 fails, PE 1 deletes the related MAC address entries and advertises the local unreachable event to PE 2 and remote PEs. Then, the remote PEs will switch traffic to the tunnels to PE 2. In this situation, PE 1 drops the packets that the remote PEs send before they are notified of the local unreachable event as the AC's MAC address entries have been deleted. To resolve this issue, enable local FRR on PE 1. If an AC fails, PE 1 changes the outgoing interface of the AC's MAC address entries to the index of the PW between PE 1 and PE 2. When receiving packets from remote PEs after its AC fails, PE 1 forwards the packets to PE 2 over the PW to prevent traffic loss.
On an EVPN instance, EVPN instance-specific local FRR configuration takes precedence over global local FRR configuration.
If you have executed the evpn frr local command on an EVPN instance, the undo evpn multihoming vpls-frr local command does not disable local FRR on the EVPN instance.
Examples
# Enable local FRR globally for EVPN VPLS.
<Sysname> system-view
[Sysname] evpn multihoming vpls-frr local
Related commands
evpn frr local (VSI EVPN instance view)
evpn multihoming vpws-frr local
Use evpn multihoming vpws-frr local to enable local FRR globally for EVPN VPWS.
Use undo evpn multihoming vpws-frr local to disable local FRR globally for EVPN VPWS and delete existing bypass PWs.
Syntax
evpn multihoming vpws-frr local
undo evpn multihoming vpws-frr local
Default
Local FRR is disabled globally for EVPN VPWS.
Views
System view
Predefined user roles
network-admin
Usage guidelines
Local FRR enables two PEs at a multihomed EVPN VPWS network site to set up a bypass PW between them. This feature helps reduce the traffic loss caused by AC failure.
At a multihomed EVPN VPWS network site, CE 1 is dualhomed to PE 1 and PE 2, and PE 1 is the DF. When the AC on PE 1 fails, PE 1 advertises the local unreachable event to PE 2 and remote PEs for the remote PEs to switch traffic to the PWs to PE 2. In this situation, PE 1 drops the packets that the remote PEs send before they are notified of the local unreachable event. To resolve this issue, enable local FRR on PE 1 and PE 2. When receiving packets from the remote PEs after its AC fails, PE 1 forwards the packets to PE 2 over the bypass PW to prevent traffic loss.
On an EVPN instance, EVPN instance-specific local FRR configuration takes precedence over global local FRR configuration.
If you have executed the evpn frr local enable command on an EVPN instance, the undo evpn multihoming vpws-frr local command does not delete the bypass PW of the EVPN instance.
Examples
# Enable local FRR globally for EVPN VPWS.
<Sysname> system-view
[Sysname] evpn multihoming vpws-frr local
Related commands
evpn frr local (cross-connect group EVPN instance view)
evpn redundancy-mode
Use evpn redundancy-mode to set the redundancy mode on an interface, UPW, or VSI.
Use undo evpn redundancy-mode to restore the default.
Syntax
evpn redundancy-mode { all-active | single-active }
undo evpn redundancy-mode
Default
The all-active redundancy mode is used.
Views
Interface view
Cross-connect PW view
VSI LDP PW view
VSI static PW view
VSI view
Predefined user roles
network-admin
Parameters
single-active: Specifies the single-active mode.
all-active: Specifies the all-active mode.
Usage guidelines
This command is supported only by a multihomed EVPN VPWS, EVPN VPLS, EVPN VPWS over SRv6, or EVPN VPLS over SRv6 network. A multihomed EVPN VXLAN network supports only the all-active mode.
The redundant PEs at a dualhomed site each establish an EVPN PW or SRv6 PW to a remote PE. To use one PW as a backup of the other PW, use the single-active mode. To distribute traffic across the PWs for load sharing, use the all-active mode.
You can set the redundancy mode for a VSI LDP PW or VSI static PW only if you specify the dci or no-split-horizon keyword in executing the peer command for the PW.
PEs at a multihomed site send UMRs that carry the ESIs configured in VSI view. You can set the redundancy mode for an ES in VSI view.
As a best practice, set the same redundancy mode on the VSIs and their interfaces or UPWs that act as ACs or are configured with ACs on the redundant PEs at a multihomed site.
Make sure the interface, UPW, or VSI where you execute this command is assigned an ESI.
Examples
# Set the redundancy mode to single-active on Ten-GigabitEthernet 3/1/1.
<Sysname> system-view
[Sysname] interface ten-gigabitethernet 3/1/1
[Sysname-Ten-GigabitEthernet3/1/1] evpn redundancy-mode single-active
# Set the redundancy mode to single-active on cross-connect PW 34.
<Sysname> system-view
[Sysname] xconnect-group 1
[Sysname-xcg-1] connection 1
[Sysname-xcg-1-1] peer 1.1.1.1 pw-id 34
[Sysname-xcg-1-1-1.1.1.1-34] evpn redundancy-mode single-active
# Set the redundancy mode to single-active on VSI LDP PW 23.
<Sysname> system-view
[Sysname] vsi vpn1
[Sysname-vsi-vpn1] pwsignaling ldp
[Sysname-vsi-vpn1-ldp] peer 1.1.1.1 pw-id 23 no-split-horizon
[Sysname-vsi-vpn1-ldp-1.1.1.1-23] evpn redundancy-mode single-active
# Set the redundancy mode to single-active on VSI static PW 23.
<Sysname> system-view
[Sysname] vsi vpn1
[Sysname-vsi-vpn1] pwsignaling static
[Sysname-vsi-vpn1-static] peer 1.1.1.1 pw-id 23 no-split-horizon
[Sysname-vsi-vpn1-static-1.1.1.1-23] evpn redundancy-mode single-active
Related commands
esi
peer (MPLS Command Reference)
evpn route arp-mobility suppression
Use evpn route arp-mobility suppression to enable ARP mobility event suppression.
Use undo evpn route arp-mobility suppression to disable ARP mobility event suppression.
Syntax
evpn route arp-mobility suppression [ detect-cycle detect-time | detect-threshold move-times | suppression-time [ suppression-time | permanent ] ] *
undo evpn route arp-mobility suppression
Default
ARP mobility event suppression is disabled.
Views
System view
EVPN instance view
VSI EVPN instance view
Layer 3 interface view
Predefined user roles
network-admin
Parameters
detect-cycle detect-time: Sets the ARP mobility detection cycle in seconds, in the range of 60 to 900. The default value is 180 seconds.
detect-threshold move-times: Sets the ARP mobility suppression threshold, in the range of 3 to 10. The default is 5. This threshold is the number of ARP moves from the local site to remote sites.
suppression-time: Sets the ARP mobility suppression time. A suppressed ARP entry cannot move until the ARP mobility suppression time expires. If you do not set this parameter, the default setting permanent applies.
suppression-time: Specifies the ARP mobility suppression time in seconds, in the range of 120 to 3600 seconds.
permanent: Suppresses ARP moves permanently.
Usage guidelines
On an EVPN VXLAN or EVPN VPLS network, misconfiguration of IP addresses might cause two sites to contain the same IP address. In this condition, VTEPs or PEs at the two sites constantly synchronize and update EVPN ARP entries and determine that ARP mobility events occur. As a result, an inter-site loop might occur, and the bandwidth is occupied by ARP entry synchronization traffic. To eliminate loops and suppress those ARP mobility events, enable ARP mobility event suppression on the VTEPs or PEs.
The ARP mobility event suppression feature allows an IP address to move at most the specified number of times (ARP mobility suppression threshold) out of a site within an ARP mobility detection cycle. If the suppression threshold has been reached for an IP address within a detection cycle, the VTEP or PE at the site suppresses the subsequent move after the IP address moves back to the site. In addition, the VTEP or PE learns ARP information for the IP address but does not advertise the ARP information.
After you execute the undo evpn route arp-mobility suppression command or when the ARP mobility suppression time expires, a VTEP or PE acts as follows:
· Advertises ARP information immediately for the suppressed ARP entries that have not aged out.
· Relearns ARP information for the suppressed ARP entries that have aged out and advertises the ARP information.
ARP mobility event suppression takes effect only on an EVPN VXLAN network configured with distributed VXLAN IP gateways.
The ARP mobility event suppression setting configured in system view takes effect on all EVPN instances. The ARP mobility event suppression setting configured in EVPN instance view takes effect on all associated VSIs. The ARP mobility event suppression setting configured in VSI EVPN instance view takes effect only on the associated VSI. The ARP mobility event suppression setting configured in Layer 3 interface view takes effect only on that interface.
The ARP mobility event suppression settings configured in the following views are in descending order of priority:
1. Layer 3 interface view.
2. EVPN instance view or VSI EVPN instance view.
3. System view.
Examples
# Enable ARP mobility event suppression.
<Sysname> system-view
[Sysname] evpn route arp-mobility suppression
Related commands
display evpn route arp-mobility
evpn route mac-mobility suppression
Use evpn route mac-mobility suppression to enable MAC mobility event suppression.
Use undo evpn route mac-mobility suppression to disable MAC mobility event suppression.
Syntax
evpn route mac-mobility suppression [ detect-cycle detect-time | detect-threshold move-times | suppression-time [ suppression-time | permanent ] ] *
undo evpn route mac-mobility suppression
Default
MAC mobility event suppression is disabled.
Views
System view
EVPN instance view
VSI EVPN instance view
Layer 3 interface view
Predefined user roles
network-admin
Parameters
detect-cycle detect-time: Sets the MAC mobility detection cycle in seconds, in the range of 60 to 900. The default value is 180 seconds.
detect-threshold move-times: Sets the MAC mobility suppression threshold, in the range of 3 to 10. The default is 5. This threshold is the number of MAC moves from the local site to remote sites.
suppression-time: Sets the MAC mobility suppression time. A suppressed MAC entry cannot move until the MAC mobility suppression time expires. If you do not set this parameter, the default setting permanent applies.
suppression-time: Specifies the MAC mobility suppression time in seconds, in the range of 120 to 3600 seconds.
permanent: Suppresses MAC moves permanently.
Usage guidelines
On an EVPN VXLAN or EVPN VPLS network, misconfiguration of MAC addresses might cause two sites to contain the same MAC address. In this condition, VTEPs or PEs at the two sites constantly synchronize and update EVPN MAC entries and determine that MAC mobility events occur. As a result, an inter-site loop might occur, and the bandwidth is occupied by MAC entry synchronization traffic. To eliminate loops and suppress those MAC mobility events, enable MAC mobility event suppression on the VTEPs or PEs.
The MAC mobility event suppression feature allows a MAC address to move at most the specified number of times (MAC mobility suppression threshold) out of a site within an MAC mobility detection cycle. If the suppression threshold has been reached for a MAC address within a detection cycle, the VTEP or PE at the site suppresses the subsequent move after the MAC address moves back to the site. In addition, the VTEP or PE learns the MAC address but does not advertise it.
After you execute the undo evpn route mac-mobility suppression command or when the MAC mobility suppression time expires, a VTEP or PE acts as follows:
· Advertises MAC address entries immediately for the suppressed MAC address entries that have not aged out.
· Relearns the MAC addresses for the suppressed MAC address entries that have aged out and advertises the MAC address entries.
The MAC mobility event suppression setting configured in system view takes effect on all EVPN instances. The MAC mobility event suppression setting configured in EVPN instance view takes effect on all associated VSIs. The MAC mobility event suppression setting configured in VSI EVPN instance view takes effect only on the associated VSI. The MAC mobility event suppression setting configured in Layer 3 interface view takes effect only on that interface.
The MAC mobility event suppression settings configured in the following views are in descending order of priority:
1. Layer 3 interface view.
2. EVPN instance view or VSI EVPN instance view.
3. System view.
Examples
# Enable MAC mobility event suppression.
<Sysname> system-view
[Sysname] evpn route mac-mobility suppression
Related commands
display evpn route mac-mobility
evpn route nd-mobility suppression
Use evpn route nd-mobility suppression to enable ND mobility event suppression.
Use undo evpn route nd-mobility suppression to disable ND mobility event suppression.
Syntax
evpn route nd-mobility suppression [ detect-cycle detect-time | detect-threshold move-times | suppression-time [ suppression-time | permanent ] ] *
undo evpn route nd-mobility suppression
Default
ND mobility event suppression is disabled.
Views
System view
EVPN instance view
VSI EVPN instance view
Layer 3 interface view
Predefined user roles
network-admin
Parameters
detect-cycle detect-time: Specifies the ND mobility detection cycle in seconds. The value range for the detect-time argument is 60 to 900, and the default is 180.
detect-threshold move-times: Specifies the ND mobility suppression threshold, which is the number of ND moves from the local site to a remote site. The value range for the move-times argument is 3 to 10, and the default is 5.
suppression-time: Specifies the length of time that an ND entry is suppressed. After the suppression time expires, the ND entry can move again. The default suppression time is permanent.
suppression-time: Specifies the suppression time in seconds. The value range for this argument is 120 to 3600.
permanent: Suppresses ND moves permanently.
Usage guidelines
On an EVPN VXLAN network, misconfiguration of IP addresses might cause two sites to contain the same IP address. In this condition, VTEPs at the two sites constantly synchronize and update EVPN ND entries and determine that ND mobility events occur. As a result, an inter-site loop might occur, and the bandwidth is occupied by ND entry synchronization traffic. To eliminate loops and suppress those ND mobility events, enable ND mobility event suppression on the VTEPs. This feature allows an IP address to move a specified number of times (the ND mobility suppression threshold) from a site within an ND mobility detection cycle. If an IP address moves more than the ND mobility suppression threshold, the VTEP at the site will suppress the last ND move to the local site and will not advertise ND information for the IP address.
After you execute the undo evpn route nd-mobility suppression command or the suppression time expires, a VTEP acts as follows:
· Advertises ND information immediately for the suppressed ND entries that have not aged out.
· Relearns ND information for the suppressed ND entries that have aged out and advertises the ND information.
ND mobility event suppression takes effect only on the following networks:
· EVPN VXLAN network enabled with ND flood suppression.
· EVPN VXLAN network configured with distributed VXLAN IP gateways.
The ND mobility event suppression setting configured in system view takes effect on all EVPN instances. The ND mobility event suppression setting configured in EVPN instance view takes effect on all associated VSIs. The ND mobility event suppression setting configured in VSI EVPN instance view takes effect only on the associated VSI. The ND mobility event suppression setting configured in Layer 3 interface view takes effect only on that interface.
The ND mobility event suppression settings configured in the following views are in descending order of priority:
1. Layer 3 interface view.
2. EVPN instance view or VSI EVPN instance view.
3. System view.
Examples
# Enable ND mobility event suppression.
<Sysname> system-view
[Sysname] evpn route nd-mobility suppression
Related commands
display evpn route nd-mobility
evpn timer ad-delay
Use evpn timer ad-delay to set the advertisement delay timer for Ethernet auto-discovery routes.
Use undo evpn timer ad-delay to delete the advertisement delay setting for Ethernet auto-discovery routes.
Syntax
evpn timer ad-delay delay-time
undo evpn timer ad-delay
Default
Advertisement of Ethernet auto-discovery routes is not delayed.
Views
Interface view
Predefined user roles
network-admin
Parameters
delay-time: Specifies a delay value in the range of 3 to 1200 seconds.
Usage guidelines
The advertisement delay timer for Ethernet auto-discovery routes helps reduce the traffic loss caused by a PE reboot at a multihomed EVPN VPLS network site.
At a multihomed EVPN VPLS network site, CE 1 is dualhomed to PE 1 and PE 2 through an aggregate link or smart trunk, and PE 3 is at a remote site. PE 1 forwards all traffic sent from CE 1 to the remote site, and PE 3 forwards the traffic that the remote site sends to CE 1 to both PE 1 and PE 2. When PE 1 reboots, it advertises Ethernet auto-discovery routes that carry next hop information to PE 3. If PE 3 has not received the MAC/IP advertisement routes advertised by PE 2 when receiving the Ethernet auto-discovery routes, it will forward traffic to both PE 1 and PE 2. In this situation, PE 1 does not have MAC address entries for CE 1 and drops the traffic.
To resolve this issue, set the advertisement delay timer for Ethernet auto-discovery routes on the CE-facing interface of PE 1. This timer allows PE 3 to receive the MAC/IP advertisement routes advertised by PE 2 before the Ethernet auto-discovery routes advertised by PE 1 and update its MAC address table timely.
Examples
# On Ten-GigabitEthernet 3/1/1, set the advertisement delay timer for Ethernet auto-discovery routes to 300 seconds.
<Sysname> system-view
[Sysname] interface ten-gigabitethernet 3/1/1
[Sysname-Ten-GigabitEthernet3/1/1] evpn timer ad-delay 300
evpn timer es-delay
Use evpn timer es-delay to set the advertisement delay timer for Ethernet segment routes.
Use undo evpn timer es-delay to delete the advertisement delay setting for Ethernet segment routes.
Syntax
evpn timer es-delay delay-time
undo evpn timer es-delay
Default
Advertisement of Ethernet segment routes is not delayed.
Views
Interface view
Predefined user roles
network-admin
Parameters
delay-time: Specifies a delay value in the range of 3 to 1200 seconds.
Usage guidelines
Use this command in combination with the evpn track peer command.
The evpn track peer command excludes unavailable edge devices from DF election at a multihomed site. After an edge device recovers from failure and brings up its CE-facing interface, it starts the advertisement delay timer for Ethernet segment routes and checks the status of the BGP peer specified in this command. If the BGP peer comes up before the timer expires, the edge device advertises Ethernet segment routes to the peer. If the BGP peer is still down when the timer expires, the edge device does not advertise Ethernet segment routes to the peer. The edge devices then perform DF election based on the Ethernet segment routes they have received.
Examples
# On Ten-GigabitEthernet 3/1/1, set the advertisement delay timer for Ethernet segment routes to 300 seconds.
<Sysname> system-view
[Sysname] interface ten-gigabitethernet 3/1/1
[Sysname-Ten-GigabitEthernet3/1/1] evpn timer es-delay 300
Related commands
evpn track peer
evpn track bfd
Use evpn track bfd to enable the device to monitor the status of a static BFD session on an AC-side interface for fast DF/BDF switchover.
Use undo evpn track bfd to restore the default.
Syntax
evpn track bfd session-name
undo evpn track bfd
Default
The device does not monitor the status of static BFD sessions.
Views
Layer 3 Ethernet interface view
Layer 3 aggregate interface view
FlexE logical interface view
Predefined user roles
network-admin
Parameters
session-name: Specifies a static BFD session name, a case-sensitive string of 1 to 15 characters.
Usage guidelines
Use this command on a BDF for fast DF/BDF switchover.
At a multihomed site of an EVPN VPWS network, a BDF cannot take over the DF role immediately when an AC on a DF fails, and traffic loss will occur as a result. To resolve this issue, set up a static BFD session between the DF and BDF. You must configure the static BFD session to monitor the status of the local AC on the DF and enable the BDF to monitor the status of the session. When the AC on the DF fails, the static BFD session goes down, and the BDF can fast take over the DF role to reduce traffic loss.
To modify the static BFD session monitored on an interface, first use the undo evpn track bfd command to remove the existing static BFD session configuration.
Examples
# Enable the device to monitor the status of static BFD session abc on Ten-GigabitEthernet 3/1/1 for fast DF/BDF switchover.
<Sysname> system-view
[Sysname] interface ten-gigabitethernet 3/1/1
[Sysname-Ten-GigabitEthernet3/1/1] evpn track bfd abc
Related commands
bfd static (High Availability Command Reference)
evpn track peer
Use evpn track peer to enable the device to monitor the BGP peer status of another local edge device.
Use undo evpn track peer to restore the default.
Syntax
evpn track peer peer-address
undo evpn track peer
Default
At a multihomed site, the device does not monitor the BGP peer status of the other edge devices.
Views
Interface view
Predefined user roles
network-admin
Parameters
peer-address: Specifies a VTEP or PE by its IPv4 address.
Usage guidelines
Use this command on the CE-facing interfaces of the edge devices multihomed to a site to prevent device reboots from causing inter-site forwarding failure.
This command excludes unavailable edge devices from DF election at a multihomed site. After an edge device recovers from failure and brings up its CE-facing interface, it starts the advertisement delay timer for Ethernet segment routes and checks the status of the BGP peer specified in this command. If the BGP peer comes up before the timer expires, the edge device advertises Ethernet segment routes to the peer. If the BGP peer is still down when the timer expires, the edge device does not advertise Ethernet segment routes to the peer. The edge devices then perform DF election based on the Ethernet segment routes they have received.
Examples
# On Ten-GigabitEthernet 3/1/1, enable the device to monitor the BGP peer at 1.1.1.1.
<Sysname> system-view
[Sysname] interface ten-gigabitethernet 3/1/1
[Sysname-Ten-GigabitEthernet3/1/1] evpn track peer 1.1.1.1
Related commands
evpn timer es-delay
evpn vpws-frr remote
Use evpn vpws-frr remote to enable remote FRR globally for EVPN VPWS.
Use undo evpn vpws-frr remote to disable remote FRR globally for EVPN VPWS and delete the existing backup PWs.
Syntax
evpn vpws-frr remote
undo evpn vpws-frr remote
Default
Remote FRR is disabled globally for EVPN VPWS.
Views
System view
Predefined user roles
network-admin
Usage guidelines
Remote FRR enables two PEs on an EVPN VPWS network to set up a primary PW and a backup PW between them to ensure high availability. The PEs use the primary PW to forward traffic as long as it is available. When the primary PW fails, the PEs switch traffic to the backup PW.
On an EVPN instance, EVPN instance-specific remote FRR configuration takes precedence over global remote FRR configuration.
If you have executed the evpn frr remote enable command on an EVPN instance, the undo evpn vpws-frr remote command does not delete the backup PWs of the EVPN instance.
Examples
# Enable remote FRR globally for EVPN VPWS.
<Sysname> system-view
[Sysname] evpn vpws-frr remote
Related commands
evpn frr remote
export route-policy
Use export route-policy to apply an export routing policy to EVPN.
Use undo export route-policy to restore the default.
Syntax
export route-policy route-policy
undo export route-policy
Default
No export routing policy is applied to EVPN.
Views
EVPN instance view
VSI EVPN instance view (non-VXLAN encapsulation)
Cross-connect group EVPN instance view
VPN instance EVPN view
Predefined user roles
network-admin
Parameters
route-policy: Specifies a routing policy by its name, a case-sensitive string of 1 to 63 characters.
Usage guidelines
You can specify an export routing policy to filter advertised routes or modify their route attributes for EVPN.
If you execute this command multiple times in the same view, the most recent configuration takes effect.
EVPN can use an export routing policy specified in the following views:
· Layer 2 forwarding—EVPN instance view, VSI EVPN instance view (non-VXLAN encapsulation), or cross-connect group EVPN instance view.
· Layer 3 forwarding—VPN instance view or VPN instance EVPN view. The configuration made in VPN instance EVPN view takes precedence.
Examples
# Apply export routing policy poly-1 to EVPN on VPN instance vpn1.
<Sysname> system-view
[Sysname] ip vpn-instance vpn1
[Sysname-vpn-instance-vpn1] address-family evpn
[Sysname-vpn-evpn-vpn1] export route-policy poly-1
Related commands
route-policy (Layer 3—IP Routing Command Reference)
ignore-ac-state
Use ignore-ac-state enable to enable a VSI or cross-connect to ignore the state of ACs.
Use ignore-ac-state disable to disable a VSI or cross-connect from ignoring the state of ACs.
Use undo ignore-ac-state to restore the default.
Syntax
ignore-ac-state { enable | disable }
undo ignore-ac-state
Default
A VSI or cross-connect uses the global AC state ignore configuration.
Views
VSI view
Cross-connect View
Predefined user roles
network-admin
Usage guidelines
This command helps reduce the traffic loss caused by AC failure at a multihomed EVPN VPLS, EVPN VPWS, EVPN VPLS over SRv6, or EVPN VPWS over SRv6 network site that uses single-active redundancy mode.
At a multihomed EVPN network site that uses single-active redundancy mode, CE 1 is dualhomed to PE 1 and PE 2 through a smart trunk. PE 1 is the primary PE, and PE 2 is the secondary PE. When the AC on PE 1 fails, PE 1 and PE 2 act as follows:
· PE 1 withdraws advertised Ethernet auto-discovery routes.
· PE 2 brings up its AC and advertises Ethernet auto-discovery routes to remote PEs.
The remote PEs switch traffic to the paths to PE 2 only after receiving the Ethernet auto-discovery routes advertised by PE 2, and traffic loss occurs during path switchover. To resolve this issue, enable VSIs or cross-connects to ignore the state of ACs on PE 2. This feature allows PE 2 to advertise Ethernet auto-discovery routes to remote PEs regardless of the state of ACs and speeds up path switchover when the AC on PE 1 fails.
On a VSI or cross-connect, VSI-specific or cross-connect-specific AC state ignore configuration takes precedence over global AC state ignore configuration.
Use the ignore-ac-state enable command together with the evpn multihoming re-originated mac command.
Examples
# Enable VSI vpna to ignore the state of ACs.
<Sysname> system-view
[Sysname] vsi vpna
[Sysname-vsi-vpna] ignore-ac-state enable
# Enable cross-connect ac2pw in cross-connect group aaa to ignore the state of ACs.
<Sysname> system-view
[Sysname] xconnect-group aaa
[Sysname-xcg-aaa] connection ac2pw
[Sysname-xcg-aaa-ac2pw] ignore-ac-state enable
Related commands
l2vpn ignore-ac-state
igp-metric inherit
Use igp-metric inherit to set the metric of a BGP EVPN route added to a VPN instance's routing table to the metric of the IGP route pointing to the next hop in the original BGP EVPN route.
Use undo igp-metric inherit to restore the default.
Syntax
igp-metric inherit
undo igp-metric inherit
Default
The device sets the metric to 0 when adding BGP EVPN routes a VPN instance's routing table.
Views
BGP EVPN address family view
Predefined user roles
network-admin
Usage guidelines
After you execute this command, the device sets the metric of a BGP EVPN route added to a VPN instance's routing table to the metric of the IGP route pointing to the next hop in the original BGP EVPN route.
Examples
# Set the metric of a BGP EVPN route added to a VPN instance's routing table to the metric of the IGP route pointing to the next hop in the original BGP EVPN route.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp-default] address-family l2vpn evpn
[Sysname-bgp-default-evpn] igp-metric inherit
import evpn mac-ip
Use import evpn mac-ip to enable the device to redistribute received MAC/IP advertisement routes that contain ARP or ND information into a BGP unicast routing table.
Use undo import evpn mac-ip to disable the device from redistributing received MAC/IP advertisement routes that contain ARP or ND information into a BGP unicast routing table.
Syntax
import evpn mac-ip
undo import evpn mac-ip
Default
MAC/IP advertisement routes that contain ARP or ND information are not redistributed into any BGP unicast routing table.
Views
BGP IPv4 unicast address family view
BGP IPv6 unicast address family view
BGP-VPN IPv4 unicast address family view
BGP-VPN IPv6 unicast address family view
Predefined user roles
network-admin
Usage guidelines
This command enables the device to redistribute received MAC/IP advertisement routes that contain ARP or ND information into a BGP unicast routing table.
· If you use this command in BGP IPv4 or IPv6 unicast address family view, the device will redistribute the routes into the BGP IPv4 or IPv6 unicast routing table. In addition, the device will advertise the routes to the local site.
· If you use this command in BGP-VPN IPv4 or IPv6 unicast address family view, the device will redistribute the routes into the BGP-VPN IPv4 or IPv6 unicast routing table of the related VPN instance. To advertise the routes to the local site, you must configure the advertise l2vpn evpn command.
Examples
# Redistribute received MAC/IP advertisement routes into the BGP-VPN IPv4 unicast routing table of VPN instance vpna.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp-default] ip vpn-instance vpna
[Sysname-bgp-default-vpna] address-family ipv4
[Sysname-bgp-default-ipv4-vpna] import evpn mac-ip
Related commands
advertise l2vpn evpn
import route-policy
Use import route-policy to apply an import routing policy to EVPN.
Use undo import route-policy to restore the default.
Syntax
import route-policy route-policy
undo import route-policy
Default
No import routing policy is applied to EVPN. The device accepts a route when the route targets of the route match local import route targets.
Views
EVPN instance view
VSI EVPN instance view (non-VXLAN encapsulation)
Cross-connect group EVPN instance view
VPN instance EVPN view
Predefined user roles
network-admin
Parameters
route-policy: Specifies a routing policy by its name, a case-sensitive string of 1 to 63 characters.
Usage guidelines
You can specify an import routing policy to filter received routes or modify their route attributes for EVPN.
If you execute this command multiple times in the same view, the most recent configuration takes effect.
EVPN can use an import routing policy specified in the following views:
· Layer 2 forwarding—EVPN instance view, VSI EVPN instance view (non-VXLAN encapsulation), or cross-connect group EVPN instance view.
· Layer 3 forwarding—VPN instance view or VPN instance EVPN view. The configuration made in VPN instance EVPN view takes precedence.
Examples
# Apply import routing policy poly-1 to EVPN on VPN instance vpn1.
<Sysname> system-view
[Sysname] ip vpn-instance vpn1
[Sysname-vpn-instance-vpn1] address-family evpn
[Sysname-vpn-evpn-vpn1] import route-policy poly-1
Related commands
route-policy (Layer 3—IP Routing Command Reference)
ip public-instance
Use ip public-instance to create the public instance and enter its view, or enter the view of the existing public instance.
Use undo ip public-instance to delete the public instance.
Syntax
ip public-instance
undo ip public-instance
Default
The public instance does not exist.
Views
System view
Predefined user roles
network-admin
Usage guidelines
A distributed EVPN gateway uses the public instance to perform Layer 3 forwarding for the public network and to enable communication between private and public networks. The public instance is similar to a VPN instance. A distributed EVPN gateway processes traffic of the public instance in the same way it does for a VPN instance.
Examples
# Create the public instance and enter its view.
<Sysname> system-view
[Sysname] ip public-instance
[Sysname-public-instance]
l2vpn ignore-ac-state
Use l2vpn ignore-ac-state to enable ignoring the state of ACs globally.
Use undo l2vpn ignore-ac-state to disable ignoring the state of ACs globally.
Syntax
l2vpn ignore-ac-state [ evpn-vpls | evpn-vpws ]
undo l2vpn ignore-ac-state
Default
The device does not ignore the state of ACs.
Views
System view
Predefined user roles
network-admin
Parameters
evpn-vpls: Configures VSIs to ignore the state of ACs.
evpn-vpws: Configures cross-connects to ignore the state of ACs.
Usage guidelines
This command helps reduce the traffic loss caused by AC failure at a multihomed EVPN VPLS, EVPN VPWS, EVPN VPLS over SRv6, or EVPN VPWS over SRv6 network site that uses single-active redundancy mode.
At a multihomed EVPN network site that uses single-active redundancy mode, CE 1 is dualhomed to PE 1 and PE 2 through a smart trunk. PE 1 is the primary PE, and PE 2 is the secondary PE. When the AC on PE 1 fails, PE 1 and PE 2 act as follows:
· PE 1 withdraws advertised Ethernet auto-discovery routes.
· PE 2 brings up its AC and advertises Ethernet auto-discovery routes to remote PEs.
The remote PEs switch traffic to the paths to PE 2 only after receiving the Ethernet auto-discovery routes advertised by PE 2, and traffic loss occurs during path switchover. To resolve this issue, enable VSIs or cross-connects to ignore the state of ACs on PE 2. This feature allows PE 2 to advertise Ethernet auto-discovery routes to remote PEs regardless of the state of ACs and speeds up path switchover when the AC on PE 1 fails.
On a VSI or cross-connect, VSI-specific or cross-connect-specific AC state ignore configuration takes precedence over global AC state ignore configuration.
If you do not specify the evpn-vpls or evpn-vpws keyword, this command enables both VSIs and cross-connects to ignore the state of ACs.
If you specify the evpn-vpls or evpn-vpws keyword, you cannot repeat the l2vpn ignore-ac-state command to modify the existing global AC state ignore configuration. To modify the configuration, first execute the undo l2vpn ignore-ac-state command to remove the existing configuration.
Use the l2vpn ignore-ac-state command together with the evpn multihoming re-originated mac command.
Examples
# Enable ignoring the state of ACs globally.
<Sysname> system-view
[Sysname] l2vpn ignore-ac-state
Related commands
ignore-ac-state
l3-vni
Use l3-vni to configure an L3 VXLAN ID for a VSI interface.
Use undo l3-vni to remove the L3 VXLAN ID for a VSI interface.
Syntax
l3-vni vxlan-id
undo l3-vni
Default
No L3 VXLAN ID is configured for a VSI interface.
Views
VSI interface view
Public instance view
Predefined user roles
network-admin
Parameters
vxlan-id: Specifies a VXLAN ID in the range of 0 to 16777215.
Usage guidelines
On distributed EVPN gateways, you must configure L3 VXLAN IDs for the gateways to differentiate traffic of different VPN instances.
To forward Layer 3 traffic of a VPN instance, you must assign an L3 VXLAN ID to the VSI interface of the VPN instance. To forward Layer 3 traffic of the public network, you must assign the same L3 VXLAN ID to the public instance and the VSI interface of the public instance.
To modify the L3 VXLAN ID for the public instance, you must first delete the original L3 VXLAN ID.
If a VSI interface has been assigned an L3 VXLAN ID and a MAC address, you must also assign the same MAC address to the other VSI interfaces that are assigned L3 VXLAN IDs. That MAC address will be used as the router MAC address by the distributed EVPN gateway interfaces.
The L3 VXLAN ID specified by using this command cannot be the same as any VXLAN ID specified by using the mapping vni command.
Examples
# Configure the L3 VXLAN ID as 1000 for VSI-interface 100.
<Sysname> system-view
[Sysname] interface vsi-interface 100
[Sysname-Vsi-interface100] l3-vni 1000
mac-address source-mac-check
Use mac-address source-mac-check ac to enable AC source MAC check and add MAC address entries for this feature.
Use undo mac-address source-mac-check ac to delete MAC addresses for AC source MAC check.
Syntax
mac-address source-mac-check ac mac-address mask
undo mac-address source-mac-check ac mac-address mask
Default
AC source MAC check is disabled.
Views
VSI view
Predefined user roles
network-admin
Parameters
mac-address mask: Specifies a MAC address and a MAC address mask in H-H-H format. You cannot specify a multicast or all-zero MAC address. The value range for the mask argument varies by device model. You must enter consecutive 1s in the MAC address mask. For example, enter ffff-ffff-ff00 for a 40-digit MAC address mask.
Usage guidelines
In an EVPN VPLS or EVPN VXLAN network, devices advertise local MAC addresses to remote sites through BGP EVPN routes. If the device erroneously learns a local MAC address identical to an advertised remote MAC address, it will refresh the related MAC address entry and fail to forward the traffic destined for the remote MAC address.
To prevent the device from learning incorrect local MAC address entries, enable AC source MAC check. This feature disables the device from learning the source MAC address of a packet received from an AC if the source MAC address is in the MAC address list for AC source MAC check.
If you repeat the mac-address source-mac-check command to specify different MAC addresses, all the specified MAC addresses are added for AC source MAC check. If you repeat the mac-address source-mac-check command to specify the same MAC address and different MAC address masks, the most recent configuration takes effect.
If you delete all MAC addresses for AC source MAC check, this feature is disabled.
To delete a MAC address for AC source MAC check, you must specify the correct MAC address and MAC address mask. To view the MAC addresses for AC source MAC check, execute the display this command in VSI view.
Examples
# Enable AC source MAC check to prevent VSI aaa from learning local MAC addresses 0001-0001-00xx, where x is any hexadecimal digit.
<Sysname> system-view
[Sysname] vsi aaa
[Sysname-vsi-aaa] mac-address source-mac-check ac 1-1-1 ffff-ffff-ff00
mac-advertising disable
Use mac-advertising disable to disable MAC address advertisement and withdraw advertised MAC addresses.
Use undo mac-advertising disable to restore the default.
Syntax
mac-advertising disable
undo mac-advertising disable
Default
MAC address advertisement is enabled.
Views
EVPN instance view
VSI EVPN instance view
Predefined user roles
network-admin
Usage guidelines
The MAC information and ARP information advertised by the device overlap. To avoid duplication, use this command to disable MAC address advertisement and withdraw the MAC addresses advertised to remote devices.
Examples
# Disable MAC address advertisement and withdraw advertised MAC addresses for an EVPN instance.
<Sysname> system-view
[Sysname] vsi aaa
[Sysname-vsi-aaa] evpn encapsulation vxlan
[Sysname-vsi-aaa-evpn-vxlan] mac-advertising disable
mapping vni
Use mapping vni to map a local VXLAN to a remote VXLAN.
Use undo mapping vni to restore the default.
Syntax
mapping vni vxlan-id
undo mapping vni
Default
A local VXLAN is not mapped to any remote VXLAN.
Views
VSI EVPN instance view
Predefined user roles
network-admin
Parameters
vxlan-id: Specifies a remote VXLAN ID in the range of 0 to 16777215.
Usage guidelines
This command is supported only by EVPN instances that use VXLAN encapsulation.
The VXLAN mapping feature provides Layer 2 connectivity for a tenant subnet that uses different VXLAN IDs in multiple data centers.
VXLAN mapping includes the following types:
· Non-intermediate VXLAN mapping—When two data centers use different VXLAN IDs for a subnet, map the local VXLAN to the remote VXLAN on the ED of one data center. For example, for VXLAN 10 of data center 1 to communicate with VXLAN 20 of data center 2, map VXLAN 10 to VXLAN 20 on the ED of data center 1.
· Intermediate VXLAN mapping—When multiple data centers use different VXLAN IDs for a subnet, map the VXLANs to an intermediate VXLAN on all EDs. For example, data center 1 uses VXLAN 10, data center 2 uses VXLAN 20, and data center 3 uses VXLAN 30. To provide connectivity for the VXLANs, map them to intermediate VXLAN 500 on EDs of the data centers. You must use intermediate VXLAN mapping if more than two data centers use different VXLAN IDs. The intermediate VXLAN can be used only for VXLAN mapping, and it cannot be used for common VXLAN services.
You must create mapped remote VXLANs on the device, create an EVPN instance for each remote VXLAN, and configure RD and route target settings for the EVPN instances.
A mapped remote VXLAN ID cannot be an L3 VXLAN ID specified by using the l3-vni command.
Examples
# Map local VXLAN 100 to remote VXLAN 200.
<Sysname> system-view
[Sysname] vsi aaa
[Sysname-vsi-aaa] vxlan 100
[Sysname-vsi-aaa-vxlan-100] quit
[Sysname-vsi-aaa] evpn encapsulation vxlan
[Sysname-vsi-aaa-evpn-vxlan] mapping vni 200
nd mac-learning disable
Use nd mac-learning disable to disable an EVPN instance from learning MAC addresses from ND information.
Use undo nd mac-learning disable to restore the default.
Syntax
nd mac-learning disable
undo nd mac-learning disable
Default
An EVPN instance learns MAC addresses from ND information.
Views
EVPN instance view
VSI EVPN instance view
Predefined user roles
network-admin
Usage guidelines
The MAC information and ND information advertised by a remote device overlap. To avoid duplication, use this command to disable the learning of MAC addresses from ND information. EVPN will learn remote MAC addresses only from the MAC information advertised from remote sites.
Examples
# Disable an EVPN instance from learning MAC addresses from ND information.
<Sysname> system-view
[Sysname] vsi aaa
[Sysname-vsi-aaa] evpn encapsulation vxlan
[Sysname-vsi-aaa-evpn-vxlan] nd mac-learning disable
peer advertise encap-type mpls
Use peer advertise encap-type mpls to enable MPLS encapsulation for the BGP EVPN routes advertised to a peer or peer group.
Use undo peer advertise encap-type mpls to disable MPLS encapsulation for the BGP EVPN routes advertised to a peer or peer group.
Syntax
peer { group name | ipv4-address [ mask-length ] | ipv6-address [ prefix-length ] } advertise encap-type mpls
undo peer { group name | ipv4-address [ mask-length ] | ipv6-address [ prefix-length ] } advertise encap-type mpls
Default
BGP EVPN routes use VXLAN encapsulation.
Views
BGP EVPN address family view
Predefined user roles
network-admin
Parameters
group-name: Specifies a peer group by its name, a case-sensitive string of 1 to 47 characters. The peer group must exist.
ipv4-address: Specifies a peer by its IPv4 address. the peer must exist.
mask-length: Specifies a mask length in the range of 0 to 32. To specify a subnet, you must specify both the ipv4-address and mask-length arguments.
ipv6-address: Specifies a peer by its IPv6 address. The peer must exist.
prefix-length: Specifies a prefix length in the range of 0 to 128. To specify a subnet, you must specify both the ipv6-address and prefix-length arguments.
Usage guidelines
Use this command to enable the device to advertise BGP EVPN routes with MPLS encapsulation over an EVPN VPLS, EVPN VPWS, or EVPN L3VPN network.
Execute this command on the edge nodes of an EVPN L3VPN network and RRs. On the edge nodes, you must use this command together with the evpn mpls routing-enable command.
Examples
# Enable MPLS encapsulation for the BGP EVPN routes advertised to peer 1.1.1.1.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp-default] address-family l2vpn evpn
[Sysname-bgp-default-evpn] peer 1.1.1.1 advertise encap-type mpls
Related commands
evpn mpls routing-enable
peer advertise evpn mac-route detail-only
Use peer advertise evpn mac-route detail-only to configure the device to advertise only MAC/IP advertisement routes that contain non-all-zero MAC addresses to BGP EVPN peers.
Use undo peer advertise evpn mac-route detail-only to restore the default.
Syntax
peer { group-name | ipv4-address [ mask-length ] | ipv6-address [ prefix-length ] } advertise evpn mac-route detail-only
undo peer { group-name | ipv4-address [ mask-length ] | ipv6-address [ prefix-length ] } advertise evpn mac-route detail-only
Default
The MAC/IP advertisement routes advertised to BGP EVPN peers contain both all-zero and non-all-zero MAC addresses.
Views
BGP EVPN address family view
Predefined user roles
network-admin
Parameters
group-name: Specifies a peer group by its name, a case-sensitive string of 1 to 47 characters. The peer group must exist.
ipv4-address: Specifies a peer by its IPv4 address. the peer must exist.
mask-length: Specifies a mask length in the range of 0 to 32. To specify a subnet, you must specify both the ipv4-address and mask-length arguments.
ipv6-address: Specifies a peer by its IPv6 address. The peer must exist.
prefix-length: Specifies a prefix length in the range of 0 to 128. To specify a subnet, you must specify both the ipv6-address and prefix-length arguments.
Usage guidelines
The device supports advertising UMRs that are MAC/IP advertisement routes for MAC address 0-0-0. At a multihomed EVPN VPLS site that accommodates a large number of hosts, you can configure the PEs to advertise UMRs instead of specific MAC addresses by using the unknown-mac-route send detail-suppressed command in VSI EVPN instance view. UMRs help reduce the MAC address table size on remote PEs and the number of advertised MAC/IP advertisement routes.
To synchronize MAC address entries between the PEs with the same ES attached and UMR advertisement enabled, execute the peer advertise evpn mac-route detail-only command on the PEs.
Examples
# Configure the device to advertise only MAC/IP advertisement routes that contain non-all-zero MAC addresses to the BGP EVPN peer at 1.1.1.1.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp-default] address-family l2vpn evpn
[Sysname-bgp-default-evpn] peer 1.1.1.1 advertise evpn mac-route detail-only
Related commands
unknown-mac-route
peer advertise original-route
Use peer advertise original-route to enable the device to advertise original BGP EVPN routes to a peer or peer group.
Use undo peer advertise original-route to disable the device from advertising original BGP EVPN routes to a peer or peer group.
Syntax
peer { group-name | ipv4-address [ mask-length ] | ipv6-address [ prefix-length ] } advertise original-route
undo peer { group-name | ipv4-address [ mask-length ] | ipv6-address [ prefix-length ] } advertise original-route
Default
The device advertises reoriginated BGP EVPN routes to peers and peer groups after the peer re-originated command is executed.
Views
BGP EVPN address family view
Predefined user roles
network-admin
Parameters
group-name: Specifies a peer group by its name, a case-sensitive string of 1 to 47 characters. The peer group must exist.
ipv4-address: Specifies a peer by its IPv4 address. The peer must exist.
mask-length: Specifies a mask length in the range of 0 to 32. To specify a subnet, you must specify both the ipv4-address and mask-length arguments.
ipv6-address: Specifies a peer by its IPv6 address. The peer must exist.
prefix-length: Specifies a prefix length in the range of 0 to 128. To specify a subnet, you must specify both the ipv6-address and prefix-length arguments.
Usage guidelines
For this command to take effect on an ED, first execute the peer re-originated command.
In an EVPN-DCI network, an ED configured with the peer re-originated command advertises only reoriginated BGP EVPN routes. For the ED to advertise both original and reoriginated BGP EVPN routes to a peer or peer group, execute the peer advertise original-route command on the ED.
Examples
# Enable the device to advertise original BGP EVPN routes to peer 1.1.1.1.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp-default] address-family l2vpn evpn
[Sysname-bgp-default-evpn] peer 1.1.1.1 advertise original-route
Related commands
peer re-originated
peer suppress re-originated
peer next-hop-invariable
Use peer next-hop-invariable to configure the device to not change the next hop of routes advertised to an EBGP peer or peer group.
Use undo peer next-hop-invariable to configure the device to use its address as the next hop of routes advertised to an EBGP peer or peer group.
Syntax
peer { group-name | ipv4-address [ mask-length ] | ipv6-address [ prefix-length ] } next-hop-invariable
undo peer { group-name | ipv4-address [ mask-length ] | ipv6-address [ prefix-length ] } next-hop-invariable
Default
The device uses its address as the next hop of routes advertised to EBGP peers or peer groups.
Views
BGP EVPN address family view
Predefined user roles
network-admin
Parameters
group-name: Specifies a peer group by its name, a case-sensitive string of 1 to 47 characters.
ipv4-address: Specifies a peer by its IPv4 address.
mask-length: Specifies a mask length in the range of 0 to 32. To specify a subnet, you must specify both the ipv4-address and mask-length arguments.
ipv6-address: Specifies a peer by its IPv6 address. The peer must exist.
prefix-length: Specifies a prefix length in the range of 0 to 128. To specify a subnet, you must specify both the ipv6-address and prefix-length arguments.
Usage guidelines
This command is exclusive with the peer next-hop-local command.
The next hop in BGP EVPN routes is the IP address of the originating VTEP or PE. By default, the device replaces the next hop of IBGP routes with its address when advertising the routes to an EBGP peer. If the device is a transport network device, it will modify the next hop of BGP EVPN routes. For VTEPs or PEs to learn one another's IP address, you must configure the device to not change the next hop of routes advertised to EBGP peers.
Examples
# Configure the device to not change the next hop of routes advertised to EBGP peer 1.1.1.1.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp-default] address-family l2vpn evpn
[Sysname-bgp-default-evpn] peer 1.1.1.1 next-hop-invariable
Related commands
peer next-hop-local (Layer 3—IP Routing Command Reference)
peer macip-route-limit
Use peer macip-route-limit to set the maximum number of MAC/IP advertisement routes that can be received from a peer or peer group.
Use undo peer macip-route-limit to remove the limit on the number of MAC/IP advertisement routes received from a peer or peer group.
Syntax
peer { group-name | ipv4-address [ mask-length ] | ipv6-address [ prefix-length ] } macip-route-limit route-number [ { alert-only | discard | reconnect reconnect-time } | percentage-value ]
undo peer { group-name | ipv4-address [ mask-length ] | ipv6-address [ prefix-length ] } macip-route-limit
Default
The device does not limit the number of MAC/IP advertisement routes that can be received from a peer or peer group.
Views
BGP EVPN address family view
Predefined user roles
network-admin
Parameters
group-name: Specifies a peer group by its name, a case-sensitive string of 1 to 47 characters. The peer group must exist.
ipv4-address: Specifies a peer by its IPv4 address. The peer must exist.
mask-length: Specifies a mask length in the range of 0 to 32. You can use the ipv4-address and mask-length arguments together to specify a subnet. If you specify a subnet, this command specifies the maximum number of MAC/IP advertisement routes that can be received from all dynamic peers in the subnet.
ipv6-address: Specifies a peer by its IPv6 address. The peer must exist.
prefix-length: Specifies a prefix length in the range of 0 to 128. You can use the ipv6-address and prefix-length arguments together to specify a subnet. If you specify a subnet, this command specifies the maximum number of MAC/IP advertisement routes that can be received from all dynamic peers in the subnet.
route-number: Specifies the number of MAC/IP advertisement routes that can be received from the peer or peer group. The value range for this argument is 1 to 4294967295. The device will tear down the session to the peer or peer group if the following conditions exist:
· The alert-only, discard, and reconnect keywords are not specified.
· The number of MAC/IP advertisement routes received from the peer or peer group reaches the value of the route-number argument.
The device will not attempt to re-establish a session to a dynamic BGP peer until the device receives a connection request from the peer. For peers of other types, you can use the reset bgp command to re-establish sessions to them.
alert-only: Enables the device to generate a log message instead of tearing down the session to the peer or peer group when the set limit is reached. The device can continue receiving routes from the peer or peer group.
discard: Enables the device to retain the session to the peer or peer group, discard excess routes and generate a log message when the set limit is reached. After the number of MAC/IP advertisement routes received from the peer or peer group falls below the limit, the device can continue receiving routes from the peer or peer group. To restore the discarded routes, use the refresh bgp import command to request the peer or peer group to resend the routes.
reconnect reconnect-time: Specifies a delay for reconnecting to the peer or peer group after the set limit is reached. After this reconnection delay has elapsed, the device re-establishes a session to the peer or peer group. The value range for the reconnect-time argument is 1 to 65535 seconds. This reconnection delay does not take effect on dynamic BGP peers.
percentage-value: Specifies the threshold for the device to generate a log message, the ratio of the number of received MAC/IP advertisement routes to the set limit. The value range for this argument is 1 to 100, and the default is 75.
Usage guidelines
Use this command to protect the device from attacks of MAC/IP advertisement routes and enable the device to generate log messages for the MAC/IP advertisement routes received by the BGP EVPN address family.
In BGP EVPN address family view, you cannot execute both the peer macip-route-limit and peer route-limit commands for a peer or peer group.
Examples
# In BGP EVPN address family view, limit the number of MAC/IP advertisement routes received from the peer at 1.1.1.1 to 10000, and configure the device to disconnect from the peer if this limit is reached.
<Sysname> system-view
[Sysname] bgp 109
[Sysname-bgp-default] address-family l2vpn evpn
[Sysname-bgp-default-evpn] peer 1.1.1.1 macip-route-limit 10000
Related commands
peer route-limit (Layer 3—IP Routing Command Reference)
refresh bgp (Layer 3—IP Routing Command Reference)
reset bgp (Layer 3—IP Routing Command Reference)
peer re-originated
Use peer re-originated to enable the device to reoriginate BGP EVPN routes based on the BGP EVPN routes received from a peer or peer group.
Use undo peer re-originated to disable the device from reoriginating BGP EVPN routes based on the BGP EVPN routes received from a peer or peer group.
Syntax
peer { group-name | ipv4-address [ mask-length ] } re-originated [ ip-prefix | mac-ip ] [ replace-rt ]
undo peer { group-name | ipv4-address [ mask-length ] } re-originated [ ip-prefix | mac-ip ]
Default
The device does not reoriginate BGP EVPN routes based on received BGP EVPN routes.
Views
BGP EVPN address family view
Predefined user roles
network-admin
Parameters
group-name: Specifies a peer group by its name, a case-sensitive string of 1 to 47 characters. The peer group must exist.
ipv4-address: Specifies a peer by its IPv4 address. The peer must exist.
mask-length: Specifies a mask length in the range of 0 to 32. To specify a subnet, you must specify both the ipv4-address and mask-length arguments.
ip-prefix: Specifies IP prefix advertisement routes.
mac-ip: Specifies MAC/IP advertisement routes.
replace-rt: Replaces the L3 VXLAN ID, RD, and route targets of BGP EVPN routes with those of the matching local VPN instance. If you do not specify this keyword, only the L3 VXLAN ID and RD will be replaced.
Usage guidelines
In an EVPN-DCI network, use this command to hide the L3 VXLAN IDs of data centers or enable communication between data centers that use different L3 VXLAN IDs or route targets.
After you execute this command on an ED, the ED performs the following operations after receiving BGP EVPN routes from a VTEP or remote ED:
1. Matches the route targets of the routes with the import route targets of local VPN instances.
2. Replaces the L3 VXLAN ID, RD, and route targets of the routes with those of the matching local VPN instance.
3. Advertises the routes to a VTEP or remote ED.
After you execute this command, an ED advertises only reoriginated BGP EVPN routes. The original BGP EVPN routes are not advertised.
If the RD of a received BGP EVPN route is identical to the RD of the matching local VPN instance, an ED does not replace the L3 VXLAN ID and route targets of the route or reoriginate the route. As a result, the ED does not advertise the route. As a best practice, assign unique RDs to VPN instances on different EVPN gateways and EDs when you use this command.
If you do not specify the ip-prefix or mac-ip keyword, this command takes effect on IP prefix advertisement routes.
Examples
# Replace the L3 VXLAN ID, RD, and route targets of the IP prefix advertisement routes received from peer 1.1.1.1.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp-default] address-family l2vpn evpn
[Sysname-bgp-default-evpn] peer 1.1.1.1 re-originated ip-prefix replace-rt
Related commands
peer advertise original-route
peer suppress re-originated
peer re-originated mac
Use peer re-originated mac to enable the device to reoriginate MAC/IP advertisement routes based on those received from a peer or peer group.
Use undo peer re-originated to disable the device from reoriginating MAC/IP advertisement routes based on those received from a peer or peer group.
Syntax
peer { group-name | ipv4-address [ mask-length ] | ipv6-address [ prefix-length ] } re-originated mac [ replace-rt ]
undo peer { group-name | ipv4-address [ mask-length ] | ipv6-address [ prefix-length ] } re-originated mac
Default
The device does not reoriginate MAC/IP advertisement routes based on those received from peers or peer groups.
Views
BGP EVPN address family view
Predefined user roles
network-admin
Parameters
group-name: Specifies a peer group by its name, a case-sensitive string of 1 to 47 characters. The peer group must exist.
ipv4-address: Specifies a peer by its IPv4 address. The peer must exist.
mask-length: Specifies a mask length in the range of 0 to 32. To specify all dynamic peers in a subnet, you must specify both the ipv4-address and mask-length arguments.
ipv6-address: Specifies a peer by its IPv6 address. The peer must exist.
prefix-length: Specifies a prefix length in the range of 0 to 128. To specify all dynamic peers in a subnet, you must specify both the ipv6-address and prefix-length arguments.
replace-rt: Replaces the encapsulation type, VXLAN ID, MPLS label, RD, and route targets of a MAC/IP advertisement route with those of the other EVPN instance bound to the local VSI that receives the route. If you do not specify this keyword, only the encapsulation type, VXLAN ID, MPLS label, and RD will be replaced.
Usage guidelines
To enable communication between an EVPN VXLAN network and an EVPN VPLS network, execute this command on the intermediate border devices that interconnect the networks. This command enables these networks to exchange MAC/IP advertisement routes.
For this command to take effect, first execute the evpn mac re-originated enable command.
Examples
# In BGP EVPN address family view, enable the device to reoriginate MAC/IP advertisement routes based on those received from the peer at 1.1.1.1. Configure the device to replace the encapsulation type, VXLAN ID, MPLS label, and RD when reoriginating MAC/IP advertisement routes.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp-default] address-family l2vpn evpn
[Sysname-bgp-default-evpn] peer 1.1.1.1 re-originated mac
Related commands
evpn mac re-originated enable
peer router-mac-local
Use peer router-mac-local to enable route router MAC replacement for a peer or peer group.
Use undo peer router-mac-local to cancel route router MAC replacement configuration for a peer or peer group.
Syntax
peer { group-name | ipv4-address [ mask-length ] } router-mac-local
undo peer { group-name | ipv4-address [ mask-length ] } router-mac-local
Default
The device does not modify the router MAC address of routes before advertising the routes.
Views
BGP EVPN address family view
Predefined user roles
network-admin
Parameters
group-name: Specifies a peer group by its name, a case-sensitive string of 1 to 47 characters. The peer group must exist.
ipv4-address: Specifies a peer by its IPv4 address. The peer must exist.
mask-length: Specifies a mask length in the range of 0 to 32. To specify a subnet, you must specify both the ipv4-address and mask-length arguments
Usage guidelines
This command enables an ED to use its router MAC address to replace the router MAC address of routes received from and advertised to a peer or peer group in the local data center. The router MAC replacement process is as follows:
· For routes received from the peer or peer group, the ED performs router MAC replacement and advertises the routes to remote EDs.
· For routes received from a remote data center, the ED performs router MAC replacement and advertises the routes to the peer or peer group.
Examples
# In BGP EVPN address family view, enable route router MAC replacement for peer 1.1.1.1.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp-default] address-family l2vpn evpn
[Sysname-bgp-default-evpn] peer 1.1.1.1 router-mac-local
peer suppress re-originated
Use peer suppress re-originated to suppress advertisement of reoriginated BGP EVPN routes to a peer or peer group.
Use undo peer suppress re-originated to disable suppression of reoriginated BGP EVPN route advertisement to a peer or peer group.
Syntax
peer { group-name | ipv4-address [ mask-length ] } suppress re-originated { ip-prefix | mac-ip }
undo peer { group-name | ipv4-address [ mask-length ] } suppress re-originated { ip-prefix | mac-ip }
Default
The device advertises reoriginated BGP EVPN routes to peers and peer groups after the peer re-originated command is executed.
Views
BGP EVPN address family view
Predefined user roles
network-admin
Parameters
group-name: Specifies a peer group by its name, a case-sensitive string of 1 to 47 characters. The peer group must exist.
ipv4-address: Specifies a peer by its IPv4 address. The peer must exist.
mask-length: Specifies a mask length in the range of 0 to 32. To specify a subnet, you must specify both the ipv4-address and mask-length arguments.
ip-prefix: Specifies IP prefix advertisement routes.
mac-ip: Specifies MAC/IP advertisement routes.
Usage guidelines
An ED configured with the peer re-originated and peer advertise original-route commands advertises both original and reoriginated BGP EVPN routes. For the ED to advertise only original BGP EVPN routes to a peer or peer group, execute the peer suppress re-originated command on the ED.
Examples
# Suppress advertisement of reoriginated IP prefix advertisement routes to peer 1.1.1.1.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp-default] address-family l2vpn evpn
[Sysname-bgp-default-evpn] peer 1.1.1.1 suppress re-originated ip-prefix
Related commands
peer advertise original-route
peer re-originated
peer suppress original-route
Use peer suppress original-route to suppress advertisement of original BGP EVPN routes to a peer or peer group and withdraw advertised original BGP EVPN routes.
Use undo suppress original-route to disable suppression of original BGP EVPN route advertisement to a peer or peer group.
Syntax
peer { group-name | ipv4-address [ mask-length ] | ipv6-address [ prefix-length ] } suppress original-route { auto-discovery | es | imet }
undo peer { group-name | ipv4-address [ mask-length ] | ipv6-address [ prefix-length ] } suppress original-route { auto-discovery | es | imet }
Default
The device advertises original BGP EVPN routes to peers and peer groups.
Views
BGP EVPN address family view
Predefined user roles
network-admin
Parameters
group-name: Specifies a peer group by its name, a case-sensitive string of 1 to 47 characters. The peer group must exist.
ipv4-address: Specifies a peer by its IPv4 address. The peer must exist.
mask-length: Specifies a mask length in the range of 0 to 32. To specify all dynamic peers in a subnet, you must specify both the ipv4-address and mask-length arguments.
ipv6-address: Specifies a peer by its IPv6 address. The peer must exist.
prefix-length: Specifies a prefix length in the range of 0 to 128. To specify all dynamic peers in a subnet, you must specify both the ipv6-address and prefix-length arguments.
auto-discovery: Specifies original Ethernet auto-discovery routes.
es: Specifies original ES routes.
imet: Specifies original IMET routes.
Usage guidelines
When an EVPN VXLAN network and an EVPN VPLS network are interconnected, an intermediate gateway receives both original and reoriginated Ethernet auto-discovery, ES, and IMET routes from remote gateways. That gateway will forward all these routes to local VTEPs. To prevent the original routes from occupying bandwidth resources, use the peer suppress original-route command on that gateway to suppress advertisement of the original routes and withdraw advertised original routes.
Examples
# In BGP EVPN address family view, suppress advertisement of original Ethernet auto-discovery routes to the peer at 1.1.1.1.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp-default] address-family l2vpn evpn
[Sysname-bgp-default-evpn] peer 1.1.1.1 suppress original-route auto-discovery
peer vpn-orf ignore
Use peer vpn-orf ignore to disable EVPN outbound route filtering (ORF) for a BGP EVPN peer.
Use undo peer vpn-orf ignore to restore the default.
Syntax
peer { group-name | ipv4-address [ mask-length ] | ipv6-address [ prefix-length ] } vpn-orf ignore
undo peer { group-name | ipv4-address [ mask-length ] | ipv6-address [ prefix-length ] } vpn-orf ignore
Default
With EVPN ORF enabled, the device filters all BGP EVPN routes advertised to BGP EVPN peers.
Views
BGP EVPN address family view
Predefined user roles
network-admin
Parameters
group-name: Specifies a peer group by its name, a case-sensitive string of 1 to 47 characters. The peer group must have been created.
ipv4-address: Specifies a peer by its IPv4 address. The peer must have been created.
mask-length: Specifies a mask length in the range of 0 to 32. You can use the ip-address and mask-length arguments together to specify a subnet.
ipv6-address: Specifies a peer by its IPv6 address. The peer must have been created.
prefix-length: Specifies a prefix length in the range of 0 to 128. You can use the ipv6-address and prefix-length arguments together to specify a subnet.
Usage guidelines
With EVPN ORF enabled, the device filters BGP EVPN routes advertised to all BGP EVPN peers with which the device has established both BGP EVPN sessions and BGP IPv4 RT-Filter sessions. The device performs route filtering based on the route targets in BGP IPv4 RT-Filter routes. If EVPN ORF is not enabled on a BGP EVPN peer, the BGP EVPN peer might advertise only some local route targets or even does not advertise local route targets. As a result, the device advertises only some BGP EVPN routes or even does not advertise BGP EVPN routes to the BGP EVPN peer.
For the device to advertise BGP EVPN routes to the EVPN ORF-incapable BGP EVPN peers that have established BGP IPv4 RT-Filter sessions with the device, disable EVPN ORF for those BGP EVPN peers. The device will skip route filtering when advertising BGP EVPN routes to those BGP EVPN peers.
Examples
# In BGP EVPN address family view, disable EVPN ORF for the BGP EVPN peer at 1.1.1.1.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp-default] address-family l2vpn evpn
[Sysname-bgp-default-evpn] peer 1.1.1.1 vpn-orf ignore
Related commands
vpn-orf enable
ping evpn vpws
Use ping evpn vpws to test the connectivity of a PW in an EVPN VPWS network.
Syntax
ping evpn vpws xconnect-group group-name local-service-id remote-service-id [ -a source-ip | -c count | -exp exp-value | -m interval | -r reply-mode | -s packet-size | -t time-out ] *
Views
Any view
Predefined user roles
network-admin
Parameters
xconnect-group group-name: Specifies a cross-connect group by its name, a case-sensitive string of 1 to 31 characters. The name cannot contain hyphens (-).
local-service-id: Specifies a local service ID in the range of 1 to 16777215.
remote-service-id: Specifies a remote service ID in the range of 1 to 16777215.
-a source-ip: Specifies the source IP address of MPLS echo requests. If you do not specify a source IP address, the MPLS LSR ID of the device is used as the source IP address of MPLS echo requests.
-c count: Specifies the number of MPLS echo requests to be sent. The value range for the count argument is 1 to 4294967295, and the default value is 5. If network quality is poor, increase this parameter to evaluate network quality based on the packet loss ratio as a best practice.
-exp exp-value: Specifies the EXP value of MPLS echo requests. The value range for the exp-value argument is 0 to 7, and the default value is 0.
-m interval: Specifies the interval for sending MPLS echo requests, in milliseconds. The value range for the interval argument is 1 to 10000, and the default value is 2000. If network quality is poor, set this parameter to be larger than 2000 milliseconds.
-r reply-mode: Specifies the reply mode used by the receiver to reply to MPLS echo requests. The value of the reply-mode argument is in the range of 1 to 4, and the default value is 2.
· 1—Do no reply.
· 2—Reply with UDP packets.
· 3—Reply with UDP packets that carry the Router Alert option.
· 4—Reply with VCCV packets.
-s packet-size: Specifies the length of MPLS echo requests, in bytes. The value range for the packet-size argument is 65 to 8100, and the default value is 100. The specified packet length does not include the IP header and UDP header length.
-t time-out: Specifies the timeout time of MPLS echo replies, in milliseconds. The value range for the time-out argument is 0 to 65535, and the default value is 2000. If the device does not receive an MPLS echo reply within the timeout time after sending an MPLS echo request, it determines the MPLS echo reply times out.
Usage guidelines
You can use this command to test connectivity of the PWs to remote PEs when traffic loss or interruption occurs in an EVPN VPWS network.
To test the connectivity of a PW, make sure the PW uses a PW class whose VCCV control channel type has been configured by using the vccv cc command.
Examples
# Test the connectivity of the PW whose local service ID is 2 and remote service ID is 1 for cross-connect group xcga.
<Sysname> ping evpn vpws xconnect-group xcga 2 1
EVPN VPWS PING FEC: Local Evpn Vpws Id = 1, Remote Evpn Vpws Id = 2 : 100 data bytes.
Press CTRL+C to break
Reply from 100.1.1.1: bytes=100 Sequence=1 time=11 ms
Reply from 100.1.1.1: bytes=100 Sequence=2 time=15 ms
Reply from 100.1.1.1: bytes=100 Sequence=3 time=11 ms
Reply from 100.1.1.1: bytes=100 Sequence=4 time=15 ms
Reply from 100.1.1.1: bytes=100 Sequence=5 time=11 ms
-- FEC: Local CeId = 1, Remote CeId = 5 ping statistics ---
5 packet(s) transmitted
5 packet(s) received
0.00% packet loss
round-trip min/avg/max = 11/13/15 ms
Table 45 Command output
Field |
Description |
Reply from 100.1.1.1: bytes=100 Sequence=1 time=11 ms |
Received MPLS echo replies from a device. If no echo reply is received within the timeout period, Request time out is displayed. · bytes—Number of bytes in the MPLS echo reply. · sequence—Packet sequence number used to determine whether a packet is lost, disordered, or repeated. · time—Response time. |
packet(s) transmitted |
Number of sent MPLS echo requests. |
packet(s) received |
Number of received MPLS echo replies. |
% packet loss |
Percentage of unacknowledged requests to the total requests sent. |
round-trip min/avg/max |
Minimum/average/maximum deviation response time, in milliseconds. |
ping evpn vsi
Use ping evpn vsi to test the reachability of a remote PE in an EVPN VPLS network.
Syntax
ping evpn vsi vsi-name mac mac-address [ -a source-ip | -c count | -exp exp-value | -h ttl-value | -m wait-time | -r reply-mode | -rtos tos-value | -s packet-size | -t time-out | -v ]
Views
Any view
Predefined user roles
network-admin
Parameters
vsi vsi-name: Specifies a VSI name, a case-sensitive string of 1 to 31 characters.
mac mac-address: Specifies a VM attached to a remote PE by its MAC address in H-H-H format. Do not specify a broadcast MAC address, multicast MAC address, or all-zero MAC address.
-a source-ip: Specifies the source IP address of EVPN echo requests. If you do not specify a source IP address, the primary IP address of the traffic outgoing interface is used as the source IP address of EVPN echo requests.
-c count: Specifies the number of EVPN echo requests to be sent. The value range for the count argument is 1 to 4294967295, and the default value is 5.
-exp exp-value: Specifies the EXP value of EVPN echo requests. The value range for the exp-value argument is 0 to 7, and the default value is 0.
-h ttl-value: Specifies the TTL value of EVPN echo requests. The value range for the ttl-value argument is 1 to 255, and the default value is 255.
-m wait-time: Specifies the interval for sending EVPN echo requests, in milliseconds. The value range for the wait-time argument is 1 to 10000, and the default value is 200.
-r reply-mode: Specifies the reply mode used by the receiver to reply to EVPN echo requests. The value of the reply-mode argument can be 2 or 4, and the default value is 2. The value 2 represents forwarding the replies based on the IP forwarding table, and the value 4 represents forwarding the replies over the PWs of the VSI.
-rtos tos-value: Specifies the ToS value in the IP header of EVPN echo replies. The value range for the tos-value argument is 0 to 7, and the default value is 6.
-s packet-size: Specifies the length of EVPN echo requests, in bytes. The value range for the packet-size argument is 81 to 8100, and the default value is 100. The specified packet length does not include the IP header and UDP header length.
-t time-out: Specifies the timeout time of EVPN echo replies, in milliseconds. The value range for the time-out argument is 0 to 65535, and the default value is 2000. If the device does not receive an EVPN echo reply within the timeout time after sending an EVPN echo request, it determines the EVPN echo reply times out.
-v: Displays detailed reply information. If you do not specify this keyword, the command displays brief reply information.
Usage guidelines
You can use this command to detect connectivity of a PW to the remote PE when traffic loss or interruption occurs in an EVPN VPLS network. The process of a ping operation is as follows:
1. The PW source PE sends MPLS echo requests that contain the PW labels of the PW to the PW destination PE based on the destination MAC address and VSI you specify.
2. The PW destination PE looks up the routing table and responds to the PW source PE with MPLS echo replies.
3. The PW source PE outputs packet statistics and the test result based on whether and when it receives MPLS echo replies.
Examples
# Ping the remote VM with MAC address 2-2-2 in an EVPN VPLS network.
<System> ping evpn vsi vpna mac 2-2-2
Ping remote PE with MAC 0002-0002-0002: 100 data bytes.
Press CTRL_C to break.
100 bytes from 50.1.1.12: Sequence=1 time=1 ms
100 bytes from 50.1.1.12: Sequence=2 time=2 ms
100 bytes from 50.1.1.12: Sequence=3 time=1 ms
100 bytes from 50.1.1.12: Sequence=4 time=2 ms
100 bytes from 50.1.1.12: Sequence=5 time=1 ms
--- Ping statistics for mac 0002-0002-0002 ---
5 packets transmitted, 5 packets received, 0.0% packet loss
Round-trip min/avg/max = 1/1/2 ms
policy vpn-target
Use policy vpn-target to enable route target filtering for BGP EVPN routes.
Use undo policy vpn-target to disable route target filtering for BGP EVPN routes.
Syntax
policy vpn-target
undo policy vpn-target
Default
Route target filtering is enabled for BGP EVPN routes.
Views
BGP EVPN address family view
Predefined user roles
network-admin
Usage guidelines
When route target filtering is enabled for BGP EVPN routes, the EVPN routing table accepts only BGP EVPN routes whose export route targets match the local import route targets. If the device must save all BGP EVPN routes, use the undo policy vpn-target command to disable route target filtering for BGP EVPN routes.
Examples
# Disable route target filtering for BGP EVPN routes.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp-default] address-family l2vpn evpn
[Sysname-bgp-default-evpn] undo policy vpn-target
pw-class
Use pw-class to specify a PW class for a VSI EVPN instance.
Use undo pw-class to restore the default.
Syntax
pw-class class-name
undo pw-class
Default
No PW class is specified for a VSI EVPN instance.
Views
EVPN instance view
VSI EVPN instance view
Predefined user roles
network-admin
Parameters
class-name: Specifies a PW class by its name, a case-sensitive string of 1 to 19 characters.
Usage guidelines
This command is supported only by EVPN instances that use MPLS encapsulation.
The specified PW class will be used to establish all PWs on the VSI EVPN instance.
In EVPN instance view, the specified PW class takes effect on all VSIs associated with the EVPN instance.
If you execute this command multiple times, the most recent configuration takes effect.
Examples
# Specify PW class pw100 for the EVPN instance on VSI vpna.
<Sysname> system-view
[Sysname] vsi vpna
[Sysname-vsi-vpna] evpn encapsulation mpls
[Sysname-vsi-vpna-evpn-mpls] pw-class pw100
reset evpn route arp-mobility suppression
Use reset evpn route arp-mobility suppression to advertise ARP information for suppressed IP addresses for one time.
Syntax
reset evpn route arp-mobility suppression [ public-instance | vpn-instance vpn-instance-name [ ip ip-address ] ]
Views
User view
Predefined user roles
network-admin
Parameters
public-instance: Specifies the public instance.
vpn-instance vpn-instance-name: Specifies an MPLS L3VPN instance by its name, a case-sensitive string of 1 to 31 characters.
ip ip-address: Specifies an IP address in dotted decimal notation. If you do not specify an IP address, this command advertises ARP information for all suppressed IP addresses in the specified VPN instance.
Usage guidelines
This command is a one-time command.
This command allows the device to advertise ARP information for suppressed IP addresses in the public instance or VPN instances for one time. The device will continue suppressing ARP mobility events for the IP addresses after you execute this command.
If you do not specify the public instance or a VPN instance, this command advertises ARP information for suppressed IP addresses in the public instance and all VPN instances.
Examples
# Advertise ARP information for suppressed IP address 1.1.1.1 of VPN instance vpna for one time.
<Sysname> reset evpn route arp-mobility suppression vpn-instance vpna ip 1.1.1.1
Related commands
display evpn route arp-mobility
reset evpn route mac-mobility suppression
Use reset evpn route mac-mobility suppression to advertise suppressed MAC addresses for one time.
Syntax
reset evpn route mac-mobility suppression [ evpn-instance instance-name | interface interface-type interface-number | vsi vsi-name ] [ mac mac-address ]
Views
User view
Predefined user roles
network-admin
Parameters
evpn-instance instance-name: Specifies an EVPN instance by its name, a case-sensitive string of 1 to 31 characters.
interface interface-type interface-number: Specifies an interface by its type and number.
vsi vsi-name: Specifies a VSI by its name, a case-sensitive string of 1 to 31 characters.
mac-address mac-address: Specifies a MAC address in the format of H-H-H. You can omit the consecutive zeros at the beginning of each segment. For example, you can enter f-e2-1 for 000f-00e2-0001. If you do not specify a MAC address, this command advertises all suppressed MAC addresses of the specified VSI.
Usage guidelines
This command is a one-time command.
This command allows the device to advertise suppressed MAC addresses of VSIs for one time. The device will continue suppressing MAC mobility events for the MAC addresses after you execute this command.
If you do not specify any parameters, this command advertises all suppressed MAC addresses.
Examples
# Advertise suppressed MAC address 1-1-1 of VSI vpna for one time.
<Sysname> reset evpn route mac-mobility suppression vsi vpna mac 1-1-1
Related commands
display evpn route mac-mobility
reset evpn route nd-mobility suppression
Use reset evpn route nd-mobility suppression to cancel ND mobility event suppression.
Syntax
reset evpn route nd-mobility suppression [ public-instance | vpn-instance vpn-instance-name [ ipv6 ipv6-address ] ]
Views
User view
Predefined user roles
network-admin
Parameters
public-instance: Specifies the public instance.
vpn-instance vpn-instance-name: Specifies an MPLS L3VPN instance by its name, a case-sensitive string of 1 to 31 characters.
ipv6 ipv6-address: Specifies an IPv6 address. If you do not specify an IPv6 address, this command cancels suppression on all ND entries of the public instance or specified MPLS L3VPN instance.
Usage guidelines
Use this command to cancel the ND mobility event suppression done on IPv6 addresses. After you cancel suppression for an IPv6 address, the IPv6 address can move between sites, and the device advertises ND information for the IPv6 address. The device still suppresses the IPv6 address if the suppression criteria are met.
If you do not specify the public instance or an MPLS L3VPN instance, this command cancels ND mobility event suppression for the public instance and all MPLS L3VPN instances.
Examples
# Cancel the ND mobility event suppression done on 1::1 of VPN instance vpna.
<Sysname> reset evpn route nd-mobility suppression vpn-instance vpna ipv6 1::1
Related commands
display evpn route nd-mobility
route-distinguisher
Use route-distinguisher to configure an RD for an EVPN instance or the public instance.
Use undo route-distinguisher to restore the default.
Syntax
In public instance view, cross-connect group EVPN instance view, or EVPN instance view:
route-distinguisher route-distinguisher
undo route-distinguisher
In VSI EVPN instance view:
route-distinguisher { route-distinguisher | auto [ router-id ] }
undo route-distinguisher
Default
No RD is configured for an EVPN instance or the public instance.
Views
Public instance view
EVPN instance view
Cross-connect group EVPN instance view
VSI EVPN instance view
Predefined user roles
network-admin
Parameters
route-distinguisher: Specifies an RD, a string of 3 to 21 characters. The RD cannot be all zeros and can use one of the following formats:
· 16-bit AS number:32-bit user-defined number. For example, 101:3.
· 32-bit IP address:16-bit user-defined number. For example, 192.168.122.15:1.
· 32-bit AS number:16-bit user-defined number. For example, 65536:1. The AS number must be equal to or greater than 65536.
· 32-bit dotted AS number:16-bit user-defined number. For example, 10.1:1.
auto: Automatically generates an RD in the N:VXLAN ID format. The initial value of N is 1. If N:VXLAN ID is already in use, the system increases the value of N by 1 until the RD is available.
router-id: Automatically generates an RD based on the router ID in the Router ID:N format. The initial value of N is 1. If Router ID:N is already in use, the system increases the value of N by 1 until the RD is available. If you do not specify this keyword with the auto keyword, the system automatically generates an RD based on the VXLAN ID in the N:VXLAN ID format.
Usage guidelines
EVPN uses MP-BGP to advertise BGP EVPN routes for automatic VTEP or PE discovery, MAC reachability information advertisement, and host route advertisement. MP-BGP uses the RD to differentiate BGP EVPN routes of different EVPN instances.
To modify the RD, first execute the undo route-distinguisher command to remove the original RD.
Examples
# Configure 22:1 as the RD of the EVPN instance on VSI aaa.
<Sysname> system-view
[Sysname] vsi aaa
[Sysname-vsi-aaa] evpn encapsulation vxlan
[Sysname-vsi-aaa-evpn-vxlan] route-distinguisher 22:1
rr-filter
Use rr-filter to create a route reflector (RR) reflection policy.
Use undo rr-filter to restore the default.
Syntax
rr-filter { ext-comm-list-number | ext-comm-list-name }
undo rr-filter
Default
An RR does not filter reflected BGP EVPN routes.
Views
BGP EVPN address family view
Predefined user roles
network-admin
Parameters
ext-comm-list-number: Specifies an extended community attribute list by its number in the range of 1 to 65535.
ext-comm-list-name: Specifies an extended community attribute list by its name, a case-sensitive string of 1 to 63 characters.
Usage guidelines
This command enables an RR to reflect only received BGP EVPN routes that match the attributes in the specified extended community attribute list.
If a cluster contains multiple RRs, you can configure different reflection policies on the RRs for load sharing among the RRs.
For more information about the extended community attribute list, see Layer 3—IP Routing Configuration Guide.
Examples
# Configure a reflection policy for the device to reflect BGP EVPN routes that match extended community attribute list 10.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp-default] address-family l2vpn evpn
[Sysname-bgp-default-evpn] rr-filter 10
Related commands
ip extcommunity-list (Layer 3—IP Routing Command Reference)
snmp-agent trap enable evpn
Use snmp-agent trap enable evpn to enable SNMP notifications for EVPN.
Syntax
snmp-agent trap enable evpn [ mac-mobility-suppression ]
undo snmp-agent trap enable evpn [ mac-mobility-suppression ]
Views
System view
Default
SNMP notifications are disabled for EVPN.
Predefined user roles
network-admin
Parameters
mac-mobility-suppression: Specifies the MAC mobility suppression notification.
Usage guidelines
If SNMP notifications are enabled for EVPN, a MAC mobility suppression notification is sent to SNMP module after the MAC mobility suppression threshold is reached. For SNMP notifications to be sent correctly, you must also configure SNMP on the device. For more information about SNMP configuration, see Network Management and Monitoring Configuration Guide.
If you do not specify any parameter, all EVPN notifications are enabled or disabled.
Examples
# Enable SNMP notifications for EVPN.
<Sysname> system-view
[Sysname] snmp-agent trap enable evpn
tracert evpn vpws
Use tracert evpn vpws to trace the route from the source PE to the destination PE for a PW in an EVPN VPWS network.
Syntax
tracert evpn vpws xconnect-group group-name local-service-id remote-service-id [ -a source-ip | -exp exp-value | -h ttl-value | -r reply-mode | -t time-out ] * [ ddmap | full-lsp-path ] *
Views
Any view
Predefined user roles
network-admin
Parameters
xconnect-group group-name: Specifies a cross-connect group by its name, a case-sensitive string of 1 to 31 characters. The name cannot contain hyphens (-).
local-service-id: Specifies a local service ID in the range of 1 to 16777215.
remote-service-id: Specifies a remote service ID in the range of 1 to 16777215.
-a source-ip: Specifies the source IP address of MPLS echo requests. If you do not specify a source IP address, the MPLS LSR ID of the device is used as the source IP address of MPLS echo requests.
-exp exp-value: Specifies the EXP value of MPLS echo requests. The value range for the exp-value argument is 0 to 7, and the default value is 0.
-h ttl-value: Specifies the maximum TTL value in the MPLS echo requests. The value range for the ttl-value argument is 1 to 255, and the default is 255.
-r reply-mode: Specifies the reply mode used by the receiver to reply to MPLS echo requests. The value of the reply-mode argument is in the range of 1 to 4, and the default value is 2.
· 1—Do no reply.
· 2—Reply with UDP packets.
· 3—Reply with UDP packets that carry the Router Alert option.
· 4—Reply with VCCV packets.
-t time-out: Specifies the timeout time of MPLS echo replies, in milliseconds. The value range for the time-out argument is 0 to 65535, and the default value is 2000. If the device does not receive an MPLS echo reply within the timeout time after sending an MPLS echo request, it determines the MPLS echo reply times out.
ddmap: Encapsulates the Downstream Detailed Mapping (DDMAP) TLV in MPLS echo replies and MPLS echo requests. If you do not specify this keyword, Downstream Mapping TLV (DSMAP) will be encapsulated in these packets. The DDMAP TLV and DSMAP TLV carry the downstream information of the current node, including the next hop address and outgoing label. When you perform MPLS tracert operations, the device will verify the next hop address and outgoing label in the DDMAP TLV and DSMAP TLV. If both the address and label are correct, the device sends a normal MPLS echo reply to the ingress node. If the address or label is incorrect, the device sends an MPLS echo reply with an error code to the ingress node.
full-lsp-path: Displays the complete LSP path from the local PE to the destination PE. If you do not specify this keyword, the command displays only the rely sent by the egress node for the PW.
Usage guidelines
Use this command to locate failed nodes on the path for a PW that has traffic loss or interruption issues in an EVPN VPWS network.
To trace the route over a PW, make sure the PW uses a PW class whose VCCV control channel type has been configured by using the vccv cc command.
Examples
# Trace the route for the PW whose local service ID is 100 and remote service ID is 200 for cross-connect group xcga.
<Sysname> tracert evpn vpws xconnect-group xcga 100 200
Trace route to a remote PE through a PW with local service ID 100 and remote
service ID 200 in cross-connect group 4.
TTL Replier Time Type Downstream
0 Ingress 42.1.1.2/[3 1892]
1 Request time out
2 41.1.1.1 4 ms Egress
Table 46 Command output
Field |
Description |
TTL |
Number of hops. |
Replier |
Address of the node that replied to the request. |
Time |
Packet round-trip delay in milliseconds. |
Type |
Node type: · Ingress. · Transit. · Egress. |
Downstream |
Address of the next hop and the outgoing label. |
ReturnCode |
Return code. The number in parentheses represents a return subcode. |
Request time out |
No MPLS echo reply is received within the timeout period. |
tracert evpn vsi
Use tracert evpn vsi to trace the route from the source PE to the destination PE for a PW in an EVPN VPLS network.
Syntax
tracert evpn vsi vsi-name mac mac-address [ -a source-ip | -exp exp-value | -h ttl-value | -r reply-mode | -rtos tos-value | -t time-out ] *
Views
Any view
Predefined user roles
network-admin
Parameters
vsi vsi-name: Specifies a VSI by its name, a case-sensitive string of 1 to 31 characters.
mac mac-address: Specifies a host attached to a remote PE by its MAC address in H-H-H format. Do not specify a broadcast MAC address, multicast MAC address, or all-zero MAC address.
-a source-ip: Specifies the source IP address of MPLS echo requests. If you do not specify a source IP address, the primary IP address of the traffic outgoing interface is used as the source IP address of MPLS echo requests.
-exp exp-value: Specifies the EXP value of MPLS echo requests. The value range for the exp-value argument is 0 to 7, and the default value is 0.
-h ttl-value: Specifies the maximum TTL value in the MPLS echo requests. The value range for the ttl-value argument is 1 to 255, and the default value is 255.
-r reply-mode: Specifies the reply mode used by the receiver to reply to MPLS echo requests. The value of the reply-mode argument can be 2 or 4, and the default value is 2. The value 2 represents forwarding the replies based on the IP forwarding table, and the value 4 represents forwarding the replies over the PWs of the VSI.
-rtos tos-value: Specifies the ToS value in the IP header of MPLS echo replies. The value range for the tos-value argument is 0 to 7, and the default value is 6.
-t time-out: Specifies the timeout time of MPLS echo replies, in milliseconds. The value range for the time-out argument is 0 to 65535, and the default value is 2000. If the device does not receive an MPLS echo reply within the timeout time after sending an MPLS echo request, it determines the MPLS echo reply times out.
Usage guidelines
Use this command to locate failed nodes on the path for a PW that has traffic loss or interruption issues in an EVPN VPLS network. The process of a tracert operation is as follows:
1. The PW source PE sends MPLS echo requests that contain the PW labels of the PW to the PW destination PE based on the destination MAC address and VSI you specify. The TTL in the IP header of the requests is set to 1.
2. The first hop on the path responds to the PW source PE with a TTL-expired ICMP error message.
3. The PW source PE sends MPLS echo requests with the TTL set to 2 if the PE receives the TTL-expired ICMP error message or has not received any packets within the timeout period.
4. The second hop responds with a TTL-expired ICMP error message.
5. This process continues until an MPLS echo request reaches the PW destination PE or the maximum TTL value is reached. If an MPLS echo request reaches the PW destination PE, the PW destination PE sends an MPLS echo reply to the PW source PE.
6. The PW source PE outputs packet statistics and the test result based on the received ICMP error messages and on whether an MPLS echo reply is received.
Examples
# In an EVPN VPLS network, trace the route for the PW whose remote PE is attached to a host with MAC address 1-1-1 in VSi vpna.
<Sysname> tracert evpn vsi vpna mac 1-1-1
Trace route to a remote PE in VSI vpna by reaching remote-MAC 0001-0001-0001.
Press CTRL+C to break.
TTL Replier Time Type
0 Ingress
1 11.1.1.2 1 ms Transit
2 12.1.1.1 1 ms Egress
Table 47 Command output
Field |
Description |
TTL |
Number of hops. |
Replier |
Address of the node that replied to the request. |
Time |
Packet round-trip delay in milliseconds. |
Type |
Node type: · Ingress. · Transit. · Egress. |
Request time out |
No MPLS echo reply is received within the timeout period. |
tunnel-policy
Use tunnel-policy to specify a tunnel policy for a VSI EVPN instance.
Use undo tunnel-policy to restore the default.
Syntax
tunnel-policy tunnel-policy-name
undo tunnel-policy
Default
No tunnel policy is specified for a VSI EVPN instance.
Views
EVPN instance view
VSI EVPN instance view
Predefined user roles
network-admin
Parameters
tunnel-policy-name: Specifies a tunnel policy by its name, a case-sensitive string of 1 to 126 characters.
Usage guidelines
This command is supported only by EVPN instances that use MPLS encapsulation.
The PWs of the VSI EVPN instance use the specified tunnel policy to select public tunnels.
In EVPN instance view, the specified tunnel policy takes effect on all VSIs associated with the EVPN instance.
If you do not specify a tunnel policy or specify a nonexistent tunnel policy, the default tunnel policy applies. The default tunnel policy selects only one public tunnel for a PW in this order: LSP tunnel, GRE tunnel, CRLSP tunnel, and SRLSP tunnel.
If you execute this command multiple times, the most recent configuration takes effect.
Examples
# Specify tunnel policy policy1 for the EVPN instance on VSI aa.
<Sysname> system-view
[Sysname] vsi aa
[Sysname-vsi-aa] evpn encapsulation mpls
[Sysname-vsi-aa-evpn-mpls] tunnel-policy policy1
unknown-mac-route
Use unknown-mac-route to enable UMR advertisement or reception.
Use undo unknown-mac-route to disable UMR advertisement and reception.
Syntax
unknown-mac-route send { receive | send [ detail-suppressed ] [ receive ] }
undo unknown-mac-route
Default
UMR advertisement and reception are disabled.
Views
VSI EVPN instance view
Predefined user roles
network-admin
Parameters
receive: Enables UMR reception.
send: Enables UMR advertisement.
detail-suppressed: Suppresses detail routes. If you do not specify this keyword, detail routes are advertised with UMR routes simultaneously.
Usage guidelines
In an EVPN VXLAN, EVPN VPLS, or EVPN VPLS over SRv6 network, you can configure edge devices such as VTEPs and PEs to advertise and receive UMRs. UMRs refer to MAC/IP advertisement routes for MAC address 0-0-0.
With UMR reception enabled, an edge device adds a MAC address entry for MAC address 0-0-0 to the MAC address table of the related VSI after receiving a UMR route. That MAC address entry is a default MAC address entry. When the edge device receives a packet from an AC of the VSI, it looks up the MAC address table for a matching entry. If no match is found for the destination MAC address, the edge device forwards the packet based on the default MAC address entry.
You can use UMRs for the following purposes:
· To reduce the MAC address table size on edge devices and the number of MAC/IP advertisement routes when network sites accommodate a large number of hosts.
· To avoid traffic loss when unknown unicast floods are suppressed. When unknown unicast floods are suppressed on the local edge device, enable remote edge devices to advertise UMRs for the local edge device to forward unknown unicast packets to the remote sites.
After an edge device receives a UMR, it forwards all unknown unicast packets to the remote edge device that advertises the UMR. If the UMR does not point to the remote site that accommodates the destination of the unknown unicast packets, forwarding failure will occur. To ensure correct traffic forwarding, enable UMR advertisement or reception with caution.
To modify UMR advertisement and reception settings, first use the undo unknown-mac-route command to disable UMR advertisement and reception.
Examples
# Enable UMR advertisement and reception in EVPN instance view of VSI vpna.
<Sysname> system-view
[Sysname] vsi vpna
[Sysname-vsi-vpna] evpn encapsulation srv6
[Sysname-vsi-vpna-evpn-srv6] unknown-mac-route send receive
vpn-orf enable
Use vpn-orf enable to enable EVPN ORF.
Use undo vpn-orf enable to disable EVPN ORF.
Syntax
vpn-orf enable
undo vpn-orf enable
Default
EVPN ORF is disabled.
Views
BGP EVPN address family view
Predefined user roles
network-admin
Usage guidelines
Application scenarios
Enable EVPN ORF to reduce the BGP EVPN routes advertised by BGP EVPN peers in a large EVPN network.
By default, the device advertises BGP EVPN routes to a peer even if no EVPN instance on the peer matches the route targets in the BGP EVPN routes. To reduce resource consumption and save bandwidth, enable EVPN ORF for the device to advertise only BGP EVPN routes of interest to each BGP EVPN peer.
Operating mechanism
To use EVPN ORF, you must also configure BGP IPv4 RT-Filter route exchange. With EVPN ORF enabled, the device filters all BGP EVPN routes advertised to the BGP EVPN peers with which the device has established BGP EVPN sessions and BGP IPv4 RT-Filter sessions as follows:
· If the route targets in a BGP EVPN route match a received BGP IPv4 RT-Filter route, the device advertises the BGP EVPN route to the peer that advertises the BGP IPv4 RT-Filter route.
· If the route targets in a BGP EVPN route do not match any received BGP IPv4 RT-Filter route, the device does not advertise the BGP EVPN route.
With EVPN ORF disabled, the device advertises the route targets configured in public instance IPv4 address family view and VPN instance address family view through BGP IPv4 RT-Filter routes. After you enable EVPN ORF, the device also advertises the following route targets through BGP IPv4 RT-Filter routes:
· Import targets configured in VPN instance EVPN view and public instance EVPN view.
· Import targets configured for EVPN in VPN instance IPv4 address family view.
· Import targets configured in VSI EVPN instance view.
· ES-Import route targets automatically generated based on the ESIs of interfaces, UPWs, and VSIs.
All the route targets carried by BGP IPv4 RT-Filter routes are used for filtering of BGP EVPN routes.
Restrictions and guidelines
To use EVPN ORF, enable it on both ends of a BGP EVPN session. With EVPN ORF enabled, the device does not filter the BGP EVPN routes advertised to peers with which the device has established only BGP EVPN sessions. The device advertises all BGP EVPN routes to those peers.
BGP IPv4 RT-Filter routes do not carry the route targets configured for IPv6 VPN. Therefore, some BGP EVPN routes carrying IPv6 addresses cannot be advertised. For example, if import target 8:8 is configured for EVPN in IPv6 address family view of VPN instance vpn1, BGP IPv4 RT-Filter routes do not carry this route target. As a result, the device cannot receive the IPv6 BGP EVPN routes carrying export target 8:8. To resolve this issue, configure identical route targets for IPv6 VPN and IPv4 VPN.
With EVPN ORF enabled, the device filters BGP EVPN routes advertised to all BGP EVPN peers with which the device has established both BGP EVPN sessions and BGP IPv4 RT-Filter sessions. If EVPN ORF is not enabled on a BGP EVPN peer, the BGP EVPN peer might advertise only some local route targets or even does not advertise local route targets. As a result, the device advertises only some BGP EVPN routes or even does not advertise BGP EVPN routes to the BGP EVPN peer. For the device to advertise BGP EVPN routes to the EVPN ORF-incapable BGP EVPN peers that have established BGP IPv4 RT-Filter sessions with the device, disable EVPN ORF for those BGP EVPN peers by using the peer vpn-orf ignore command. The device will skip route filtering when advertising BGP EVPN routes to those BGP EVPN peers.
Follow these guidelines when you use the vpn-orf enable and peer capability-advertise orf prefix-list commands in BGP EVPN address family view:
· The peer capability-advertise orf prefix-list command enables BGP EVPN route filtering based on the prefix list. The vpn-orf enable command enables BGP EVPN route filtering based on route targets. These commands are independent of each other.
· The peer capability-advertise orf prefix-list command takes effect on MAC/IP advertisement routes and IP prefix advertisement routes. The vpn-orf enable command takes effect on all BGP EVPN routes.
Examples
# Enable EVPN ORF in BGP EVPN address family view.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp-default] address-family l2vpn evpn
[Sysname-bgp-default-evpn] vpn-orf enable
Related commands
peer capability-advertise orf prefix-list (Layer 3—IP Routing Command Reference)
peer enable (Layer 3—IP Routing Command Reference)
peer vpn-orf ignore
vpn-route cross multipath
Use vpn-route cross multipath to enable ECMP VPN route redistribution.
Use undo vpn-route cross multipath to disable ECMP VPN route redistribution.
Syntax
vpn-route cross multipath
undo vpn-route cross multipath
Default
ECMP VPN route redistribution is disabled. If multiple routes have the same prefix and RD, BGP only imports the optimal route into the EVPN routing table.
Views
BGP EVPN address family view
Predefined user roles
network-admin
Usage guidelines
ECMP VPN route redistribution enables BGP to import all routes that have the same prefix and RD into the EVPN routing table.
Examples
# Enable ECMP VPN route redistribution.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp-default] address-family l2vpn evpn
[Sysname-bgp-default-evpn] vpn-route cross multipath
vpn-target
Use vpn-target to configure route targets for EVPN.
Use undo vpn-target to delete route targets for EVPN.
Syntax
In VSI EVPN instance view:
vpn-target { vpn-target&<1-8> | auto } [ both | export-extcommunity | import-extcommunity ]
undo vpn-target { vpn-target&<1-8> | auto | all } [ both | export-extcommunity | import-extcommunity ]
In VPN instance EVPN view, public instance view, public instance IPv4 address family view, public instance IPv6 address family view, cross-connect group EVPN instance view, public instance EVPN view, or EVPN instance view:
vpn-target vpn-target&<1-8> [ both | export-extcommunity | import-extcommunity ]
undo vpn-target { all | vpn-target&<1-8> [ both | export-extcommunity | import-extcommunity ] }
Default
EVPN does not have route targets.
Views
EVPN instance view
VSI EVPN instance view
VPN instance EVPN view
Public instance view
Public instance EVPN view
Public instance IPv4 address family view
Public instance IPv6 address family view
Cross-connect group EVPN instance view
Predefined user roles
network-admin
Parameters
vpn-target&<1-8>: Specifies a space-separated list of up to eight route targets. Each route target is a string of 3 to 21 characters in one of the following formats:
· 16-bit AS number:32-bit user-defined number. For example, 101:3.
· 32-bit IP address:16-bit user-defined number. For example, 192.168.122.15:1.
· 32-bit AS number:16-bit user-defined number. For example, 65536:1. The AS number must be equal to or greater than 65536.
· 32-bit dotted AS number:16-bit user-defined number. For example, 10.1:1.
auto: Automatically generates a route target in the format of BGP AS number:VXLAN ID.
both: Uses the specified route targets as both import and export targets. If you do not specify the both, export-extcommunity, or import-extcommunity keyword, the both keyword applies.
export-extcommunity: Uses the specified route targets as export targets.
import-extcommunity: Uses the specified route targets as import targets.
all: Specifies all route targets.
Usage guidelines
EVPN uses MP-BGP to advertise BGP EVPN routes for automatic VTEP or PE discovery, MAC reachability information advertisement, and host route advertisement. MP-BGP uses route targets to control the advertisement and acceptance of BGP EVPN routes.
A VTEP or PE sets the export targets for BGP EVPN routes before advertising the routes to remote VTEPs or PEs. The VTEP or PE checks the export targets of BGP EVPN routes from remote VTEPs or PEs and imports only BGP EVPN routes of which the export targets match the local import targets.
If you execute this command multiple times, all configured route targets take effect.
Examples
# Configure import route targets 10:1, 100:1, and 1000:1 for an EVPN instance.
<Sysname> system-view
[Sysname] vsi aaa
[Sysname-vsi-aaa] evpn encapsulation vxlan
[Sysname-vsi-aaa-evpn-vxlan] vpn-target 10:1 100:1 1000:1 import-extcommunity