16-EVPN Command Reference

HomeSupportSwitchesS9820 SeriesReference GuidesCommand ReferencesH3C S9820-64H Switch Command References-Release 6715-6W10016-EVPN Command Reference
Table of Contents
Related Documents
01-EVPN commands
Title Size Download
01-EVPN commands 489.85 KB

EVPN commands

address-family l2vpn evpn

Use address-family l2vpn evpn to create the BGP EVPN address family and enter its view, or enter the view of the existing BGP EVPN address family.

Use undo address-family l2vpn evpn to delete the BGP EVPN address family and all settings in BGP EVPN address family view.

Syntax

address-family l2vpn evpn

undo address-family l2vpn evpn

Default

The BGP EVPN address family does not exist.

Views

BGP instance view

Predefined user roles

network-admin

Usage guidelines

Configuration made in BGP EVPN address family view takes effect only on routes and peers of the BGP EVPN address family that are on the public network.

Examples

# Create the BGP EVPN address family and enter its view.

<Sysname> system-view

[Sysname] bgp 100

[Sysname-bgp-default] address-family l2vpn evpn

[Sysname-bgp-default-evpn]

advertise l2vpn evpn

Use advertise l2vpn evpn to enable BGP EVPN route advertisement to the local site.

Use undo advertise l2vpn evpn to disable BGP EVPN route advertisement to the local site.

Syntax

advertise l2vpn evpn

undo advertise l2vpn evpn

Default

BGP EVPN route advertisement to the local site is enabled.

Views

BGP-VPN IPv4 unicast address family view

BGP-VPN IPv6 unicast address family view

Predefined user roles

network-admin

Usage guidelines

This command enables the device to advertise BGP EVPN routes to the local site after the device adds the routes to the routing table of a VPN instance. The BGP EVPN routes here are IP prefix advertisement routes and MAC/IP advertisement routes that contain ARP or ND information.

Examples

# Enable BGP EVPN route advertisement to the local site for VPN instance vpn1.

<Sysname> system-view

[Sysname] bgp 100

[Sysname-bgp-default] ip vpn-instance vpn1

[Sysname-bgp-default-vpn1] address-family ipv4

[Sysname-bgp-default-ipv4-vpn1] advertise l2vpn evpn

arp mac-learning disable

Use arp mac-learning disable to disable a VSI EVPN instance from learning MAC addresses from ARP information.

Use undo arp mac-learning disable to restore the default.

Syntax

arp mac-learning disable

undo arp mac-learning disable

Default

An EVPN instance learns MAC addresses from ARP information.

Views

EVPN instance view

VSI EVPN instance view

Predefined user roles

network-admin

Usage guidelines

The MAC information and ARP information advertised by a remote VTEP or PE overlap. To avoid duplication, use this command to disable the learning of MAC addresses from ARP information. EVPN will learn remote MAC addresses only from the MAC information advertised from remote sites.

Examples

# Disable a VSI EVPN instance from learning MAC addresses from ARP information.

<Sysname> system-view

[Sysname] vsi aaa

[Sysname-vsi-aaa] evpn encapsulation vxlan

[Sysname-vsi-aaa-evpn-vxlan] arp mac-learning disable

display bgp l2vpn evpn

Use display bgp l2vpn evpn to display BGP EVPN routes.

Syntax

display bgp [ instance instance-name ] l2vpn evpn [ peer ipv4-address { advertised-routes | received-routes } [ statistics ] | [ route-distinguisher route-distinguisher | route-type { auto-discovery | es | imet | mac-ip } ] * [ { evpn-route route-length | evpn-prefix } [ advertise-info | as-path | cluster-list | community | ext-community ] | { ipv4-address | ipv6-address | mac-address } [ verbose ] ] | statistics ]

display bgp [ instance instance-name ] l2vpn evpn [ route-distinguisher route-distinguisher ] [ statistics ] community [ community-number&<1-32> | aa:nn&<1-32> ] [ internet | no-advertise | no-export | no-export-subconfed ] [ whole-match ]

display bgp [ instance instance-name ] l2vpn evpn [ route-distinguisher route-distinguisher ] [ statistics ] community-list { basic-community-list-number | adv-community-list-number | comm-list-name } [ whole-match ]

display bgp [ instance instance-name ] l2vpn evpn [ route-distinguisher route-distinguisher ] [ statistics ] ext-community [ bandwidth link-bandwidth-value | rt route-target | soo site-of-origin]&<1-32> [ whole-match ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

instance instance-name: Specifies a BGP instance by its name, a case-sensitive string of 1 to 31 characters. If you do not specify this option, the command displays BGP EVPN routes for the default BGP instance.

peer ipv4-address: Specifies a peer by its IPv4 address.

advertised-routes: Specifies the routes advertised to the specified peer.

received-routes: Specifies the routes received from the specified peer.

statistics: Displays BGP EVPN route statistics.

route-distinguisher route-distinguisher: Specifies a route distinguisher (RD), a string of 3 to 21 characters. The RD can use one of the following formats:

·     16-bit AS number:32-bit user-defined number. For example, 101:3.

·     32-bit IP address:16-bit user-defined number. For example, 192.168.122.15:1.

·     32-bit AS number:16-bit user-defined number. For example, 65536:1. The AS number must be equal to or greater than 65536.

route-type: Specifies a route type.

auto-discovery: Specifies Ethernet auto-discovery routes.

es: Specifies Ethernet segment (ES) routes.

imet: Specifies inclusive multicast Ethernet tag (IMET) routes.

mac-ip: Specifies MAC/IP advertisement routes.

s-pmsi: Specifies Selective Provider Multicast Service Interface (S-PMSI) routes.

evpn-route: Specifies a BGP EVPN route, a case-insensitive string of 1 to 512 characters.

route-length: Specifies the route length in bits, in the range of 0 to 65535.

evpn-prefix: Specifies a BGP EVPN route in the format of evpn-route/route-length, a case-insensitive string of 1 to 512 characters.

advertise-info: Displays advertisement information for BGP EVPN routes.

as-path: Specifies the AS path attribute.

cluster-list: Specifies the cluster list attribute.

community: Specifies the community attribute.

ext-community: Specifies the extended community attribute.

ipv4-address: Specifies an IPv4 address.

ipv6-address: Specifies an IPv6 address.

mac-address: Specifies a MAC address in MAC/IP advertisement routes. If you specify the route-type keyword, to use this argument, you must also specify the mac-ip keyword.

verbose: Displays detailed BGP EVPN route information. If you do not specify this keyword, the command displays brief BGP EVPN route information.

community-number&<1-32>: Specifies a community sequence number. The value range for the community-number argument is 1 to 4294967295. &<1-32> indicates that a maximum of 32 numbers can be specified.

aa:nn&<1-32>: Specifies a community number. Both aa and nn are in the range of 0 to 65535. &<1-32> indicates that a maximum of 32 numbers can be specified.

internet: Specifies the INTERNET community attribute. Routes with this attribute can be advertised to all BGP peers. By default, all routes have this attribute.

no-advertise: Specifies the NO_ADVERTISE community attribute. Routes with this attribute cannot be advertised to any BGP peers.

no-export: Specifies the NO_EXPORT community attribute. Routes with this attribute cannot be advertised outside the local AS or confederation, but can be advertised to other sub-ASs in the confederation.

no-export-subconfed: Specifies the NO_EXPORT_SUBCONFED community attribute. Routes with this attribute cannot be advertised outside the local AS or to other sub-ASs in the confederation.

whole-match: Displays BGP EVPN routes that exactly match the specified community list, community numbers, or extended community attribute. If you do not specify this keyword, the command displays BGP EVPN routes that include the specified community list, community numbers, or extended community attribute.

community-list: Specifies a community list to match BGP EVPN unicast routes.

basic-community-list-number: Specifies a basic community list by its number in the range of 1 to 99.

comm-list-name: Specifies a community list by its name, a case-sensitive string of 1 to 63 characters.

adv-community-list-number: Specifies an advanced community list by its number in the range of 100 to 199.

bandwidth link-bandwidth-value: Specifies the link bandwidth attribute value. The link-bandwidth-value value is a string of 3 to 16 characters in the 16-bit autonomous system number:32-bit user-defined number format, for example: 100:3. The range of values for the autonomous system number is 0 to 65535, and the value range of the user-defined number is 0 to 4294967295.

rt route-target: Specifies a route target, a string of 3 to 24 characters.

soo site-of-origin: Specifies the Site of Origin (SoO) extended community attribute, a string of 3 to 24 characters.

A route target or SoO attribute has the following forms:

·     16-bit AS number:32-bit self-defined number. For example, 101:3. The value range is 0 to 65535 for an AS number and 0 to 4294967295 for a self-defined number.

·     32-bit IP address:16-bit self-defined number. For example, 192.168.122.15:1. The value range is 0 to 65535 for a self-defined number.

·     32-bit AS number:16-bit self-defined number. For example, 70000:3. The value range is 65536 to 4294967295 for an AS number and 0 to 65535 for a self-defined number.

·     32-bit IP address/IPv4 address mask length:16-bit user-defined number. For example, 192.168.122.15/24:1.

·     32-bit AS number in dotted format:16-bit user-defined number. For example, 65535.65535:1.

&<1-32>: Specifies a maximum of 32 items.

Usage guidelines

If you do not specify any parameter, this command displays brief information about all BGP EVPN routes.

This command displays BGP EVPN routes that carry any community attribute and the whole-match keyword does not take effect if you do not specify the following parameters:

·     community-number

·     aa:nn

·     internet

·     no-advertise

·     no-export

·     no-export-subconfed

This command displays BGP EVPN routes that carry any extended community attribute and the whole-match keyword does not take effect if you do not specify the following parameters:

·     rt

·     soo

Examples

# Display brief information about all BGP EVPN routes.

<Sysname> display bgp l2vpn evpn

 

 BGP local router ID is 8.8.8.8

 Status codes: * - valid, > - best, d - dampened, h - history,

               s - suppressed, S - stale, i - internal, e - external

               a - additional-path

               Origin: i - IGP, e - EGP, ? - incomplete

 

 Total number of routes from all PEs: 3

 

 Route distinguisher: 1:1

 Total number of routes: 2

 

* >e Network : [2][0][48][0011-0022-0033][32][11.22.33.55]/136

     NextHop : 1.1.1.2                                  LocPrf    : 100

     PrefVal : 0                                        OutLabel  : NULL

     MED     : 0

     Path/Ogn: 20i

 

Route distinguisher of public instance: 1:15

Total number of routes: 1

 

* >i Network : [2][0][48][7010-0000-0001][0][0.0.0.0]/104

     NextHop : 1.1.1.4                                  LocPrf    : 100

     PrefVal : 0                                        OutLabel  : NULL

     MED     : 0

     Path/Ogn: 20i

# Display all BGP EVPN routes that carry community attributes.

<Sysname> display bgp l2vpn evpn community

 

 BGP local router ID is 1.1.1.9

 Status codes: * - valid, > - best, d - dampened, h - history,

               s - suppressed, S - stale, i - internal, e - external

               a – additional-path

               Origin: i - IGP, e - EGP, ? - incomplete

 

 Total number of routes from all PEs: 6

 

 Route distinguisher: 100:1

 Total number of routes: 3

 

     Network        NextHop        MED      LocPrf    PrefVal   Path/Ogn    Community

 

* >  [2][0][48][00aa.00bb.00cc][4][0.0.0.0]/136

                    10.1.1.2       0        32768               ?           <2:3>

*  e                10.1.1.1       0        0                   65410?      <2:3>

* >  [3][300][16][::ffff:1.1.1.1]/176

                    127.0.0.1      0        32768               ?           <3:4>

# Display all BGP EVPN routes that carry extended community attributes.

<Sysname> display bgp l2vpn evpn ext-community

 

 BGP local router ID is 1.1.1.9

 Status codes: * - valid, > - best, d - dampened, h - history,

               s - suppressed, S - stale, i - internal, e - external

               a – additional-path

               Origin: i - IGP, e - EGP, ? - incomplete

 

 Total number of routes from all PEs: 6

 

 Route distinguisher: 100:1

 Total number of routes: 3

 

     Network        NextHop        MED      LocPrf    PrefVal   Path/Ogn   Ext-Community

 

* >  [2][0][48][00aa.00bb.00cc][4][0.0.0.0]/136

                    10.1.1.2       0        32768               ?          <RT 2:3>

*  e                10.1.1.1       0        0                   65410?     <RT 2:3>

* >  [3][300][16][::ffff:1.1.1.1]/176

                    127.0.0.1      0        32768               ?          <RT 3:4>

Table 1 Command output

Field

Description

Status codes

Route status codes:

·     * - valid—Valid route.

·     > - best—Optimal route.

·     d - dampened—Dampened route.

·     h - history—History route.

·     i - internal—Internal route.

·     e - external—External route.

·     s - suppressed—Suppressed route.

·     S - stale—Stale route.

·     a - additional-path—Add-Path optimal route.

Origin

Origin of the route:

·     i – IGP—Originated in the AS. The origin of routes advertised by using the network command is IGP.

·     e – EGP—Learned through EGP.

·     ? – incomplete—Unknown origin. The origin of routes redistributed from IGP protocols is incomplete.

Network

BGP EVPN route/route length. For example, in the entry [2][0][48][1485-247c-0506][32][10.1.2.20]/136, [2][0][48][1485-247c-0506][32][10.1.2.20] is the route, and 136 is the route length in bytes.

BGP EVPN routes are as follows:

·     [1][ESI][EthernetTagID]

¡     1—Ethernet auto-discovery route.

¡     ESI—Ethernet segment identifier (ESI).

¡     EthernetTagID—Ethernet tag ID.

·     [2][EthernetTagID][MACLength][MAC][IPAddressLength][IPAddress]

¡     2—MAC/IP advertisement route.

¡     EthernetTagID—Ethernet tag ID.

¡     MACLength—MAC address length.

¡     MAC—MAC address.

¡     IPAddressLength—IP address length.

¡     IPAddress—IP address.

·     [3][EthernetTagID][IPAddressLength][IPAddress]

¡     3—IMET route.

¡     IPAddressLength—IP address length.

¡     IPAddress—IP address of the originating router.

·     [4][ESI][IPAddressLength][IPAddress]

¡     4—ES route.

¡     ESI—ESI.

¡     IPAddressLength—IP address length.

¡     IPAddress—IP address of the originating router.

·     [5][EthernetTagID][IPAddressLength][IPAddress]

¡     5—IP prefix advertisement route.

¡     EthernetTagID—Ethernet tag ID.

¡     IPAddressLength—IP address length.

¡     IPAddress—IP address of the originating router.

NextHop

Next hop IP address.

MED

Multi-Exit Discriminator (MED) attribute.

LocPrf

Local precedence.

OutLabel

Outgoing label.

PrefVal

Preferred value.

Path/Ogn

AS_PATH and ORIGIN attributes of the route.

Community

Community attribute.

Ext-Community

Extended community attribute.

 

# Display detailed information about BGP EVPN route [1][0001.0203.0405.0607.0809][5]/120 with RD 1.1.1.1:100.

<Sysname> display bgp l2vpn evpn route-distinguisher 1.1.1.1:100 [1][0001.0203.0405.0607.0809][5] 120

 

 BGP local router ID: 172.16.250.133

 Local AS number: 100

 

 

 Route distinguisher: 1.1.1.1:100

 Total number of routes: 1

 Paths:   1 available, 1 best

 

 BGP routing table information of [1][0001.0203.0405.0607.0809][5]/120:

 From            : 10.1.1.2 (192.168.56.17)

 Rely nexthop    : 10.1.1.2

 Original nexthop: 10.1.1.2

 OutLabel        : NULL

 Ext-Community   : <RT: 1:2>, <Encapsulation Type: MPLS >, <ESI Label: Flag 0,

                   Label 1>, <EVPN Layer 2 Attributes: MTU 1500, Control Flags 0x2>

 RxPathID        : 0x0

 TxPathID        : 0x0

 AS-path         : 200

 Origin          : igp

 Attribute value : MED 0, pref-val 0

 State           : valid, external, best

 IP precedence   : N/A

 QoS local ID    : N/A

 Traffic index   : N/A

 EVPN route type : Ethernet auto-discovery route

 ESI             : 0001.0203.0405.0607.0809

 Ethernet tag ID : 5

 MPLS label      : 10

Table 2 Command output

Field

Description

Paths

Number of routes:

·     available—Number of valid routes.

·     best—Number of optimal routes.

From

IP address of the BGP peer that advertised the route.

Rely nexthop

Next hop after route recursion. If no next hop is found, this field displays not resolved.

Original nexthop

Original next hop of the route. If the route was obtained from a BGP update message, the original next hop is the next hop IP address in the message.

OutLabel

Outgoing label of the route.

Ext-Community

Extended community attributes:

·     RT.

·     Encapsulation Type.

·     ESI Label.

·     EVPN Layer 2 Attributes.

RxPathID

Add-Path ID value of the received route.

This field is not supported by the BGP EVPN address family.

TxPathID

Add-Path ID value of the sent route.

This field is not supported by the BGP EVPN address family.

AS-path

AS_PATH attribute of the route. This attribute records the ASs the route has passed and avoids routing loops.

Origin

Origin of the route:

·     igp—Originated in the AS. The origin of routes advertised by using the network command is IGP.

·     egp—Learned through EGP.

·     incomplete—Unknown origin. The origin of routes redistributed from IGP protocols is incomplete.

Attribute value

Attributes of the route:

·     MED—MED value for the destination network.

·     localpref—Local preference value.

·     pref-val—Preferred value.

·     pre—Route preference value.

State

Current state of the route:

·     valid.

·     internal.

·     external.

·     local.

·     synchronize.

·     best.

·     localredist—The route is redistributed from a local VPN instance or public instance.

·     bgp-rib-only—The route will not be flushed to the routing table. This field is displayed only in the detailed command output.

·     not preferred for reason—Reason why the route is not preferred. See Table 3 for the reason.

IP precedence

IP precedence in the range of 0 to 7. N/A indicates that the IP precedence is invalid.

QoS local ID

QoS local ID in the range of 1 to 4095. N/A indicates that the QoS local ID is invalid.

Traffic index

Traffic index in the range of 1 to 64. N/A indicates that the traffic index is invalid.

MPLS label

MPLS label. The current software version does not support this field.

Table 3 Reason why a route is not preferred

Reason

Description

preferred-value

Routes with larger preferred values exist.

local-preference

Routes with larger local preference values exist.

local-origin-route

There are routes whose local-origin-route attribute has a higher priority.

BGP selects the optimal route from local routes in this order: route generated by the network command, route redistributed by the import-route command, and summary route.

as-path

Routes with smaller AS_PATH attribute values exist.

origin

There are routes whose origin has a higher priority. The route origins are IGP, EGP, and INCOMPLETE in descending order of priority.

med

Routes with smaller MED values exist.

remote-route

There are routes whose remote-route attribute has a higher priority.

BGP selects the optimal route from remote routes in this order:

·     Route learned from an EBGP peer.

·     Route learned from a confederation EBGP peer.

·     Route learned from a confederation IBGP peer.

·     Route learned from an IBGP peer.

igp-cost

Routes with smaller IGP metrics exist.

relydepth

Routes with smaller recursion depth values exist.

rfc5004

A route received from an EBGP peer is the current optimal route. BGP does not change the optimal route when it receives routes from other EBGP peers.

router-id

Routes with smaller router IDs exist.

If one of the routes is advertised by a route reflector, BGP compares the ORIGINATOR_ID of the route with the router IDs of other routes. Then, BGP selects the route with the smallest ID as the optimal route.

cluster-list

Routes with smaller CLUSTER_LIST attribute values exist.

peer-address

Routes advertised by peers with lower IP addresses exist.

redist-route

Routes of the current VPN instance exist.

rpki

Routes with higher RPKI validation state preferences exist.

received

Earlier learned routes exist.

evpn-macip-mobile

There are EVPN MAC/IP advertisement routes carrying the MAC mobility extended community attribute.

evpn-macip-mobile-static

There are EVPN MAC/IP advertisement routes whose static flag in the MAC mobility extended community attribute is set.

evpn-macip-mobile-seq

There are EVPN MAC/IP advertisement routes carrying a larger sequence number in the MAC mobility extended community attribute.

evpn-macip-mobile-routerid

There are EVPN MAC/IP advertisement routes carrying a smaller router ID in the MAC mobility extended community attribute.

# Display detailed information about BGP EVPN route [2][5][48][0001-0203-0405][32][4.5.5.5]/136 with RD 1.1.1.1:100.

<Sysname> display bgp l2vpn evpn route-distinguisher 1.1.1.1:100 [2][5][48][0001-0203-0405][32][5.5.5.5] 136

 

 BGP local router ID: 172.16.250.133

 Local AS number: 100

 

 

 Route distinguisher: 1.1.1.1:100

 Total number of routes: 1

 Paths:   1 available, 1 best

 

 BGP routing table information of [2][5][48][0001-0203-0405][32][5.5.5.5]/136:

 From            : 10.1.1.2 (192.168.56.17)

 Rely nexthop    : 10.1.1.2

 Original nexthop: 10.1.1.2

 OutLabel        : NULL

 Ext-Community   : <RT: 1:2>, <RT: 1:3>, <RT: 1:4>, <RT: 1:5>, <RT: 1:6>, <RT: 1:7

                   >, <Encapsulation Type: VXLAN>, <Router's Mac: 0006-0708-0910

                   >, <MAC Mobility: Flag 0, SeqNum 2>, <Default GateWay>

 RxPathID        : 0x0

 TxPathID        : 0x0

 AS-path         : 200

 Origin          : igp

 Attribute value : MED 0, pref-val 0

 State           : valid, external, best

 IP precedence   : N/A

 QoS local ID    : N/A

 Traffic index   : N/A

 EVPN route type : MAC/IP advertisement route

 ESI             : 0001.0203.0405.0607.0809

 Ethernet tag ID : 5

 MAC address     : 0001-0203-0405

 IP address      : 5.5.5.5/32

 MPLS label1     : 10

 MPLS label2     : 100

 Re-origination  : Enable

 

 Route distinguisher: 2.2.2.2:100

 Total number of routes: 1

 Paths:   1 available, 1 best

 

 BGP routing table information of [2][5][48][0001-0203-0405][32][5.5.5.5]/136:

 From            : 10.1.1.2 (192.168.56.17)

 Rely nexthop    : 10.1.1.2

 Original nexthop: 10.1.1.2

 OutLabel        : 0

 Ext-Community   : <RT: 1:2>, <RT: 1:3>, <RT: 1:4>, <RT: 1:5>, <RT: 1:6>, <RT: 1:7

                   >, <Encapsulation Type: VXLAN>, <Router's Mac: 0006-0708-0910

                   >, <MAC Mobility: Flag 0, SeqNum 2>, <Default GateWay>

 RxPathID        : 0x0

 TxPathID        : 0x0

 AS-path         : 200

 Origin          : igp

 Attribute value : MED 0, pref-val 0

 State           : valid, external, best, reoriginated, remoteredist

 IP precedence   : N/A

 QoS local ID    : N/A

 Traffic index   : N/A

 EVPN route type : MAC/IP advertisement route

 ESI             : 0001.0203.0405.0607.0809

 Ethernet tag ID : 5

 MAC address     : 0001-0203-0405

 IP address      : 5.5.5.5/32

 MPLS label1     : 200

 MPLS label2     : 300

Table 4 Command output

Field

Description

Paths

Number of routes:

·     available—Number of valid routes.

·     best—Number of optimal routes.

From

IP address of the BGP peer that advertised the route.

Rely nexthop

Next hop after route recursion. If no next hop is found, this field displays not resolved.

Original nexthop

Original next hop of the route. If the route was obtained from a BGP update message, the original next hop is the next hop IP address in the message.

OutLabel

Outgoing label of the route.

Ext-Community

Extended community attributes:

·     RT.

·     Encapsulation Type.

·     Router's Mac.

·     MAC Mobility—MAC mobility.

¡     Flag—Indicates whether the MAC address can move. A value of 1 indicates that the MAC address cannot move, and a value of 0 indicates that the MAC address can move.

¡     SeqNum—Identifies the most recent move of the MAC address.

·     MicroSegment-id—Microsegment ID attribute:

¡     Type—Microsegment ID type.

¡     ID—Microsegment ID.

 

State

Current state of the route:

·     valid.

·     internal.

·     external.

·     local.

·     synchronize.

·     best.

·     reoriginated—Reoriginated route.

·     remoteredist—MAC/IP advertisement route generated based on a remote route.

·     not preferred for reason—Reason why the route is not preferred. See Table 3 for the reason.

MPLS label1

VXLAN ID used for Layer 2 forwarding.

MPLS label2

This field is not supported in the current software version.

L3 VXLAN ID used for Layer 3 forwarding.

Re-origination

State of route reorigination:

·     Enable.

·     Disable.

# Display detailed information about BGP EVPN route [3][0][32][5.5.5.5]/80 with RD 1.1.1.1:100.

<Sysname> display bgp l2vpn evpn route-distinguisher 1.1.1.1:100 [3][0][32][4.5.5.5] 80

 

BGP local router ID: 172.16.250.133

 Local AS number: 100

 

 

 Route distinguisher: 1.1.1.1:100

 Total number of routes: 1

 Paths:   1 available, 1 best

 

 BGP routing table information of [3][0][32][4.5.5.5]/80:

 From            : 10.1.1.2 (192.168.56.17)

 Rely nexthop    : 10.1.1.2

 Original nexthop: 10.1.1.2

 OutLabel        : NULL

 Ext-Community   : <RT: 1:2>, <Encapsulation Type: VXLAN>

 RxPathID        : 0x0

 TxPathID        : 0x0

 PMSI tunnel     : Flag 0, TunnelType 6, Label 10, EndPointAddress 10.1.1.2

 AS-path         : 200

 Origin          : igp

 Attribute value : MED 0,pref-val 0

 State           : valid, external, best

 IP precedence   : N/A

 QoS local ID    : N/A

 Traffic index   : N/A

 EVPN route type : Inclusive multicast Ethernet tag route

 Ethernet tag ID : 0

 Origin address  : 5.5.5.5/32

 Re-origination  : Enable

 

 Route distinguisher: 2.2.2.2:100

 Total number of routes: 1

 Paths:   1 available, 1 best

 BGP routing table information of [3][0][32][4.5.5.5]/80:

 From            : 10.1.1.2 (192.168.56.17)

 Rely nexthop    : 10.1.1.2

 Original nexthop: 10.1.1.2

 OutLabel        : NULL

 Ext-Community   : <RT: 1:2>, <Encapsulation Type: VXLAN>

 RxPathID        : 0x0

 TxPathID        : 0x0

 PMSI tunnel     : Flag 0, TunnelType 6, Label 10, EndPointAddress 10.1.1.2

 AS-path         : 200

 Origin          : igp

 Attribute value : MED 0,pref-val 0

 State           : valid, external, best, reoriginated, remoteredist

 IP precedence   : N/A

 QoS local ID    : N/A

 Traffic index   : N/A

 EVPN route type : Inclusive multicast Ethernet tag route

 Ethernet tag ID : 0

 Origin address  : 5.5.5.5/32

Table 5 Command output

Field

Description

Ext-Community

Extended community attributes:

·     RT.

·     Encapsulation Type.

State

Route state:

·     valid—Valid route.

·     internal—Internal route.

·     external—External route.

·     local—Locally originated route.

·     synchronize—Synchronized route.

·     best—Optimal route.

·     reoriginated—Reoriginated route.

·     remoteredist—IMET route originated based on a remote route.

·     not preferred for reason—Reason why the route is not preferred. See Table 3 for the reason.

PMSI tunnel

P-Multicast Service Interface (PMSI) tunnel information:

·     Flag—This field is fixed at 0 in the current software version.

·     TunnelType—This field is fixed at 6 in the current software version, which represents a head-end replication tunnel.

·     Label—VXLAN ID.

·     EndPointAddress—Tunnel destination address.

Origin address

IP address of the originating router.

Re-origination

Status of route reorigination:

·     Enable.

·     Disable.

 

# Display detailed information about BGP EVPN route [4][0000.0000.0000.0000.000a][32][4.5.5.5]/128 with RD 1.1.1.1:100.

<Sysname> display bgp l2vpn evpn route-distinguisher 1.1.1.1:100 [4][0000.0000.0000.0000.000a][32][4.5.5.5] 128

 

 BGP local router ID: 172.16.250.133

 Local AS number: 100

 

 

 Route distinguisher: 1.1.1.1:100

 Total number of routes: 1

 Paths:   1 available, 1 best

 

 BGP routing table information of [4][0000.0000.0000.0000.000a][32][4.5.5.5]/128:

 From            : 10.1.1.2 (192.168.56.17)

 Rely nexthop    : 10.1.1.2

 Original nexthop: 10.1.1.2

 OutLabel        : NULL

 Ext-Community   : <RT: 1:2>, <Encapsulation Type: VXLAN>, <ES-Import RT: 1:1>

 RxPathID        : 0x0

 TxPathID        : 0x0

 AS-path         : 200

 Origin          : igp

 Attribute value : MED 0,pref-val 0

 State           : valid, external, best

 IP precedence   : N/A

 QoS local ID    : N/A

 Traffic index   : N/A

 EVPN route type : Ethernet segment route

 ESI             : 0000.0000.0000.0000.000a

 Origin address  : 4.5.5.5/32

Table 6 Command output

Field

Description

Ext-Community

Extended community attributes:

·     RT.

·     Encapsulation Type.

·     ES-Import RT.

Origin address

IP address of the originating router.

 

# Display detailed information about BGP EVPN route [5][10][32][4.5.5.5]/80 with RD 1.1.1.1:100.

<Sysname> display bgp l2vpn evpn route-distinguisher 1.1.1.1:100 [5][10][32][4.5.5.5] 80

 

 BGP local router ID: 172.16.250.133

 Local AS number: 100

 

 

 Route distinguisher: 1.1.1.1:100

 Total number of routes: 1

 Paths:   1 available, 1 best

 

 BGP routing table information of [5][10][32][4.5.5.5]/80:

 From            : 10.1.1.2 (192.168.56.17)

 Rely nexthop    : 10.1.1.2

 Original nexthop: 10.1.1.2

 OutLabel        : NULL

 Ext-Community   : <RT: 1:2>, <Encapsulation Type: VXLAN>, <Router's Mac:

                   0006-0708-0910>

 RxPathID        : 0x0

 TxPathID        : 0x0

 AS-path         : 200

 Origin          : igp

 Attribute value : MED 0,pref-val 0

 State           : valid, external, best

 IP precedence   : N/A

 QoS local ID    : N/A

 Traffic index   : N/A

 EVPN route type : IP prefix advertisement route

 ESI             : 0000.0000.0000.0000.000a

 Ethernet tag ID : 10

 IP address      : 4.5.5.5/32

 Gateway address : 0.0.0.0

 MPLS Label      : 1

 Re-origination  : Enable

 

 Route distinguisher: 2.2.2.2:100

 Total number of routes: 1

 Paths:   1 available, 1 best

 

 BGP routing table information of [5][10][32][4.5.5.5]/80:

 From            : 10.1.1.2 (192.168.56.17)

 Rely nexthop    : 10.1.1.2

 Original nexthop: 10.1.1.2

 OutLabel        : 0

 Ext-Community   : <RT: 1:2>, <Encapsulation Type: VXLAN>, <Router's Mac:

                   0006-0708-0910>

 RxPathID        : 0x0

 TxPathID        : 0x0

 AS-path         : 200

 Origin          : igp

 Attribute value : MED 0,pref-val 0

 State           : valid, external, best, reoriginated, remoteredist

 IP precedence   : N/A

 QoS local ID    : N/A

 Traffic index   : N/A

 EVPN route type : IP prefix advertisement route

 ESI             : 0000.0000.0000.0000.000a

 Ethernet tag ID : 10

 IP address      : 4.5.5.5/32

 Gateway address : 0.0.0.0

 MPLS Label      : 20

Table 7 Command output

Field

Description

Ext-Community

Extended community attributes:

·     RT.

·     Encapsulation Type.

·     Router's Mac.

State

Current state of the route:

·     valid.

·     internal.

·     external.

·     local.

·     synchronize.

·     best.

·     reoriginated—Reoriginated route.

·     localredist—IP prefix advertisement route generated based on a local route.

·     remoteredist—IP prefix advertisement route generated based on a remote route.

·     not preferred for reason—Reason why the route is not preferred. See Table 3 for the reason.

IP address

IP address and prefix length.

MPLS Label

L3 VXLAN ID used for Layer 3 forwarding.

Re-origination

State of route reorigination:

·     Enable.

·     Disable.

# Display detailed information about BGP EVPN route [6][0][32][10.1.1.1][32][224.224.224.224][32][192.168.3.1]/160 with RD 1.1.1.1:100.

<Sysname> display bgp l2vpn evpn route-distinguisher 1.1.1.1:100 [6][0][32][10.1.1.1][32][224.224.224.224][32][192.168.3.1] 160

 

 BGP local router ID: 172.16.250.133

 Local AS number: 100

 

 

 Route distinguisher: 1.1.1.1:100

 Total number of routes: 1

 Paths:   1 available, 1 best

 

 BGP routing table information of [6][0][32][10.1.1.1][32][224.224.224.224][32][192.168.3.1]/160:

 From            : 10.1.1.2

 Rely nexthop    : 10.1.1.2

 Original nexthop: 10.1.1.2

 OutLabel        : NULL

 Ext-Community   : <RT: 1:2>, <Encapsulation Type: VXLAN>,

 RxPathID        : 0x0

 TxPathID        : 0x0

 AS-path         : 200

 Origin          : igp

 Attribute value : MED 0,pref-val 0

 State           : valid, external, best

 IP precedence   : N/A

 QoS local ID    : N/A

 Traffic index   : N/A

 EVPN route type : Selective multicast Ethernet tag route

 Ethernet tag ID : 0

 Source length   : 32

 Source address  : 10.1.1.1

 Group length    : 32

 Group address   : 224.224.224.224

 Origin address  : 192.168.3.1

 IGMP flags      : v3, include

Table 8 Command output

Field

Description

Ext-Community

Extended community attributes:

·     RT.

·     Encapsulation Type.

Source length

Length of the multicast source address.

Source address

Multicast source address.

Group length

Length of the multicast group address.

Group address

Multicast group address.

Origin address

IP address of the originating router.

 

# Display detailed information about BGP EVPN route [7][00:00:00:00:00:00:00:00:00][0][32][10.1.1.1][32][224.224.224.224][32][192.168.3.1]/240 with RD 1.1.1.1:100.

<Sysname> display bgp l2vpn evpn route-distinguisher 1.1.1.1:100 [7][0000.0000.0000.0000.0000][0][32][10.1.1.1][16][224.224.224.224][32][192.168.3.1] 240

 

 BGP local router ID: 172.16.250.133

 Local AS number: 100

 

 

 Route distinguisher: 1.1.1.1:100

 Total number of routes: 1

 Paths:   1 available, 1 best

 

 BGP routing table information of [7][0000.0000.0000.0000.0000][0][32][10.1.1.1][32][224.224.224.224][32][192.168.3.1]/240:

 From            : 10.1.1.2

 Rely nexthop    : 10.1.1.2

 Original nexthop: 10.1.1.2

 OutLabel        : NULL

 Ext-Community   : <RT: 1:2>, <Encapsulation Type: VXLAN>, < ESI-RT: 0:0>

 RxPathID        : 0x0

 TxPathID        : 0x0

 AS-path         : 200

 Origin          : igp

 Attribute value : MED 0,pref-val 0

 State           : valid, external, best

 IP precedence   : N/A

 QoS local ID    : N/A

 Traffic index   : N/A

 EVPN route type : IGMP join synch route

 ESI             : 0000.0000.0000.0000.0000

 Ethernet tag ID : 0

 Source length   : 32

 Source address  : 10.1.1.1

 Group length    : 32

 Group address   : 224.224.224.224

 Origin address  : 192.168.3.1

 IGMP flags      : v3, include

Table 9 Command output

Field

Description

Ext-Community

Extended community attributes:

·     RT.

·     Encapsulation Type.

·     EVI-RT—Route target associated with EVI.

Source length

Length of the multicast source address.

Source address

Multicast source address.

Group length

Length of the multicast group address.

Group address

Multicast group address.

Origin address

IP address of the originating router.

 

# Display detailed information about BGP EVPN route [8][ 00:00:00:00:00:00:00:00:00][0][32][10.1.1.1][32][224.224.224.224][32][192.168.3.1][0]/272 with RD 1.1.1.1:100.

<Sysname> display bgp l2vpn evpn route-distinguisher 1.1.1.1:100 [8][0000.0000.0000.0000.0000][0][32][10.1.1.1][32][224.224.224.224][32][192.168.3.1][0] 272

 

 BGP local router ID: 172.16.250.133

 Local AS number: 100

 

 

 Route distinguisher: 1.1.1.1:100

 Total number of routes: 1

 Paths:   1 available, 1 best

 

 BGP routing table information of [8][0000.0000.0000.0000.0000]  [0][32][10.1.1.1][32][224.224.224.224][32][192.168.3.1][0]/272:

 From            : 10.1.1.2

 Rely nexthop    : 10.1.1.2

 Original nexthop: 10.1.1.2

 OutLabel        : NULL

 Ext-Community   : <RT: 1:2>, <Encapsulation Type: VXLAN>, < ESI-RT: 1:200>

 RxPathID        : 0x0

 TxPathID        : 0x0

 AS-path         : 200

 Origin          : igp

 Attribute value : MED 0,pref-val 0

 State           : valid, external, best

 IP precedence   : N/A

 QoS local ID    : N/A

 Traffic index   : N/A

 EVPN route type : IGMP leave synch route

 ESI             : 0000.0000.0000.0000.0000

 Ethernet tag ID : 0

 Source length   : 32

 Source address  : 10.1.1.1

 Group length    : 32

 Group address   : 224.224.224.224

 Origin address  : 192.168.3.1

 Leave group sync: 0

 Max ResponseTime: 2500ms

 Max ResponseCode: 25

 IGMP flags      : v3, include

Table 10 Command output

Field

Description

Ext-Community

Extended community attributes:

·     RT.

·     Encapsulation Type.

·     ESI-RT—Route target associated with the ESI.

Source length

Length of the multicast source address.

Source address

Multicast source address.

Group length

Length of the multicast group address.

Group address

Multicast group address.

Origin address

IP address of the originating router.

Leave group sync

Leave group synchronization sequence number.

Max ResponseTime

Maximum response time in milliseconds.

Max ResponseCode

Maximum response time in the received packet, in deciseconds.

# Display detailed information about BGP EVPN route [10][0][32][7.21.0.7][32][225.0.0.0][32][2.2.2.2]/160 with RD 1.1.1.1:100.

<Sysname> display bgp l2vpn evpn route-distinguisher 1.1.1.1:100 [10][0][32][7.21.0.7][32][225.0.0.0][32][2.2.2.2]/160

 

 BGP local router ID: 2.2.2.2

 Local AS number: 200

 

 

Route distinguisher: 1.1.1.1:100(vpna)

 Total number of routes: 1

 Paths:   1 available, 1 best

 

 BGP routing table information of [10][0][32][7.21.0.7][32][225.0.0.0][32][2.2.2.2]/160:

 From            : 1.1.1.1 (1.1.1.1)

 Rely nexthop    : 12.1.1.1

 Original nexthop: 0.0.0.0

 OutLabel        : NULL

 Ext-Community   : <RT: 1:1>, <Encapsulation Type: VXLAN>

 RxPathID        : 0x0

 TxPathID        : 0x0

 Org-validation  : Valid

 PMSI tunnel     : Flag 0, TunnelType 3, Label 1000, Reserved 0, SenderAddr 2.2.2.2,

                   PGroupAddr 232.0.0.0

 AS-path         : (null)

 Origin          : igp

 Attribute value : MED 0, localpref 100, pref-val 32768

 State           : valid, local, best

 IP precedence   : N/A

 QoS local ID    : N/A

 Traffic index   : N/A

 EVPN route type : S-PMSI A-D route

 Ethernet tag ID : 0

 Source length   : 32

 Source address  : 7.21.0.7

 Group length    : 32

 Group address   : 225.0.0.0

 Origin address  : 2.2.2.2

Table 11 Command output

Field

Description

Ext-Community

Extended community attributes:

·     RT.

·     Encapsulation Type.

EVPN route type

S-PMSI (selective provider multicast service interface) route.

Org-validation

RPKI source AS check result:

·     Valid.

·     Not found.

·     Invalid.

PMSI tunnel

PMSI tunnel information:

·     Flag—Flag, which is fixed at 0 in the current software version.

·     TunnelType—Tunnel type, which is fixed at 6 (head-end replication tunnel) in the current software version.

·     Label—VXLAN ID.

·     Reserved—Reserved field. The value is fixed at 0 in the current software version.

·     SenderAddr—Sender address.

·     PgroupAddr—Multicast group address of the service provider.

Source length

Length of the multicast source address.

Source address

Multicast source address.

Group length

Length of the multicast group address.

Group address

Multicast group address.

Origin address

IP address of the originating router.

# Display community attribute information about BGP EVPN route [4][00:00:00:00:00:00:00:00:00:0a][32][4.5.5.5]/128 with RD 1.1.1.1:100.

<Sysname> display bgp l2vpn evpn route-distinguisher 1.1.1.1:100 [4][00:00:00:00:00:00:00:00:00:0a][32][4.5.5.5] 128 community

 

 BGP local router ID: 1.1.1.9

 Local AS number: 100

 

 

 Route distinguisher: 1.1.1.1:100

 Total number of routes: 1

 Paths:   1 available, 1 best

 

 BGP routing table information of [4][00:00:00:00:00:00:00:00:00:0a][32][4.5.5.5]/128:

 Community: no-export

# Display extended community attribute information about BGP EVPN route [4][00:00:00:00:00:00:00:00:00:0a][32][4.5.5.5]/128 with RD 1.1.1.1:100.

<Sysname> display bgp l2vpn evpn route-distinguisher 1.1.1.1:100 [4][00:00:00:00:00:00:00:00:00:0a][32][4.5.5.5] 128 ext-community

 

 BGP local router ID: 1.1.1.9

 Local AS number: 100

 

 

 Route distinguisher: 1.1.1.1:100

 Total number of routes: 1

 Paths:   1 available, 1 best

 

 BGP routing table information of [4][00:00:00:00:00:00:00:00:00:0a][32][4.5.5.5]/128:

 Ext-Community: <RT 1:1>

# Display the AS path attribute of BGP EVPN route [4][00:00:00:00:00:00:00:00:00:0a][32][4.5.5.5]/128 with RD 1.1.1.1:100.

<Sysname> display bgp l2vpn evpn route-distinguisher 1.1.1.1:100 [4][00:00:00:00:00:00:00:00:00:0a][32][4.5.5.5] 128 as-path

 

 BGP local router ID: 1.1.1.9

 Local AS number: 100

 

 

 Route distinguisher: 1.1.1.1:100

 Total number of routes: 1

 Paths:   1 available, 1 best

 

 BGP routing table information of [4][00:00:00:00:00:00:00:00:00:0a][32][4.5.5.5]/128:

 As-path: 80

# Display the cluster ID list attribute of BGP EVPN route [4][00:00:00:00:00:00:00:00:00:0a][32][4.5.5.5]/128 with RD 1.1.1.1:100.

<Sysname> display bgp l2vpn evpn route-distinguisher 1.1.1.1:100 [4][00:00:00:00:00:00:00:00:00:0a][32][4.5.5.5] 128 cluster-list

 

 BGP local router ID: 1.1.1.9

 Local AS number: 100

 

 

 Route distinguisher: 1.1.1.1:100

 Total number of routes: 1

 Paths:   1 available, 1 best

 

 BGP routing table information of [4][00:00:00:00:00:00:00:00:00:0a][32][4.5.5.5]/128:

 Cluster list: 80

Table 12 Command output

Field

Description

Paths

Numbers of available routes and optimal routes.

Community

Community attribute.

Ext-Community

Extended community attribute.

As-path

AS path attribute.

Cluster-list

Cluster ID list attribute.

 

# Display statistics about the BGP EVPN routes with community attributes.

<Sysname> display bgp l2vpn evpn statistics community

 

 Total number of routes from all PEs: 1

 

 Route distinguisher: 100:1(vpn1)

 Total number of routes: 4

display evpn auto-discovery

Use display evpn auto-discovery to display information about IPv4 peers that are automatically discovered through BGP.

Syntax

display evpn auto-discovery { imet | mac-ip } [ peer ip-address] [ vsi vsi-name ] [ count ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

imet: Specifies IPv4 peers discovered through IMET routes.

mac-ip: Specifies IPv4 peers discovered through MAC/IP advertisement routes that do not carry L3 VXLAN IDs.

peer ip-address: Specifies a peer by its IPv4 address. If you do not specify this option, the command displays information about all automatically discovered IPv4 peers.

vsi vsi-name: Specifies a VSI by its name, a case-sensitive string of 1 to 31 characters. If you do not specify this option, the command displays IPv4 peer information for all VSIs.

count: Displays the number of IPv4 peers. If you do not specify this keyword, the command displays detailed IPv4 peer information.

Examples

# Display information about IPv4 peers discovered through IMET routes.

<Sysname> display evpn auto-discovery imet

Total number of automatically discovered peers: 2

 

VSI name: vpna

EVPN instance: -

RD                    PE_address      Tunnel_address  Tunnel mode VXLAN ID

1:10                  2.2.2.2         2.2.2.2         VXLAN       10

2:100                 3.3.3.3         3.3.3.3         VXLAN       10

Table 13 Command output

Field

Description

EVPN instance

EVPN instance name. If the EVPN instance is created on a VSI, this field displays a hyphen (-).

This field is supported only by EVPN VXLAN.

PE_address

Identifier of the remote VTEP or PE on the VSI.

Tunnel_address

Tunnel destination IP address.

Tunnel mode

Tunnel mode:

·     VXLAN.

·     VXLAN-DCI.

·     PW.

In/Out label

Incoming and outgoing labels for the PW. If the labels are invalid, this field displays a hyphen (-).

 

# Display information about IPv4 peers discovered through MAC/IP advertisement routes that do not carry L3 VXLAN IDs.

<Sysname> display evpn auto-discovery mac-ip

Total number of automatically discovered peers: 1

 

VSI name: vpna

EVPN instance: -

Destination IP  Source IP       VXLAN ID    Tunnel mode     Tunnel name

6.6.6.6         1.1.1.9         100         VXLAN           Tunnel1

Table 14 Command output

Field

Description

EVPN instance

EVPN instance name. If the EVPN instance is created on a VSI, this field displays a hyphen (-).

This field is supported only by EVPN VXLAN.

Destination IP

Tunnel destination IP address.

Source IP

Tunnel source IP address.

Tunnel mode

Tunnel mode:

·     VXLAN.

·     PW.

In/Out label

Incoming and outgoing labels for the PW. If the labels are invalid, this field displays a hyphen (-).

 

display evpn df-election

Use display evpn df-election to display DF election information.

Syntax

display evpn df-election [ vsi vsi-name | xconnect-group group-name ] [ esi esi-id ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

vsi vsi-name: Specifies a VSI by its name, a case-sensitive string of 1 to 31 characters.

xconnect-group group-name: Specifies a cross-connect group by its name, a case-sensitive string of 1 to 31 characters.

esi esi-id: Specifies an ES by its ESI in XXXX.XXXX.XXXX.XXXX.XXXX format. Each X represents a hexadecimal digit. The ESI cannot be all zeros. If you do not specify this option, the command displays information about all ESs.

Usage guidelines

If you do not specify a VSI or cross-connect group, this command displays DF election information about all VSIs and cross-connect groups.

Examples

# Display DF election information about all VSIs and cross-connect groups.

<Sysname> display evpn df-election

Status codes : * - invalid

VSI name: 1

  ESI : 0021.1001.1001.1001.1002

  Interface : HundredGigE1/0/1

  Service instance ID : 1000

  Link ID             : 1

  Ethernet tag ID     : 12

  DF state            : Primary

  FSM                 : DF_DONE

  Number of member devices : 2

    Originating IP   DF state   Algorithm   Preference Capability

    100.100.100.100  Primary    Preference  65535      DP

    100.100.100.200  Backup     Preference  200        DP

 

  ESI : 0002.0002.0002.0002.0002

  Interface : HundredGigE1/0/2

  Link ID             : 0

  Ethernet tag ID     : -

  DF state            : 0

  FSM                 : DF_CALC

  Number of member devices : 2

    Originating IP   DF state   Algorithm   Preference Capability

    1.1.1.1          -          Preference  32767      -

    2.2.2.2          -          Preference  32767      -

 

Xconnect-group name : 1

 Connection name : 1

  ESI : 0001.0001.0001.0001.0001

  Interface : HundredGigE1/0/3

  Link ID             : 1

  Ethernet tag ID     : 0

  DF state            : -

  FSM                 : DF_CALC

  Number of member devices : 1

    Originating IP   DF state   Algorithm   Preference Capability

    2.2.2.2          -          Preference  32767      -

Table 15 Command output

Field

Description

Status codes

Status code for a device in DF election. An asterisk (*) indicates that a device cannot participate in DF election.

Link ID

The AC's link ID on the VSI.

DF state

DF election result:

·     Backup—The device is a BDF.

·     Primary—The device is the DF.

If DF election has not finished, this field displays a hyphen (-).

FSM

State of the finite state machine for DF election:

·     INIT—Initializing.

·     DF_WAIT—The DF election delay has not timed out.

·     DF_CALC—DF election is in progress.

·     DF_DONE—DF election has finished.

Originating IP

IP address of the member device that participates in DF election.

DF state

DF election result:

·     Backup—The member device is a BDF.

·     Primary—The member device is the DF.

If DF election has not finished, this field displays a hyphen (-).

Algorithm

Algorithm used in DF election:

·     modulus—VLAN tag-based algorithm.

·     Preference—Preference-based algorithm.

Preference

DF election preference.

Capability

Supported DF election capabilities. DP represents non-revertive mode. If no capability is supported, this field displays a hyphen (-).

 

display evpn es

Use display evpn es to display EVPN ES information.

Syntax

display evpn es { local [ vsi vsi-name | xconnect-group group-name ] [ esi esi-id ] [ verbose ] | remote [ vsi vsi-name | xconnect-group group-name ] [ esi esi-id ] [ nexthop next-hop ] }

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

local: Specifies local ES information.

vsi vsi-name: Specifies a VSI by its name, a case-sensitive string of 1 to 31 characters. If you do not specify this option, the command displays ES information about all VSIs.

xconnect-group group-name: Specifies a cross-connect group by its name, a case-sensitive string of 1 to 31 characters. If you do not specify a cross-connect group, this command displays EVPN local or remote ES information about all cross-connect groups.

esi esi-id: Specifies an ES by its ESI in XXXX.XXXX.XXXX.XXXX.XXXX format. Each X represents a hexadecimal digit. The ESI must begin with 00 and cannot be all zeros. If you do not specify this option, the command displays information about all ESs.

verbose: Displays detailed ES information. If you do not specify this keyword, the command displays brief ES information.

remote: Specifies remote ES information.

nexthop next-hop: Specifies a next hop. If you do not specify this option, the command displays ES information received from all next hops.

Examples

# Display brief information about local ESs of VSI vpna.

<Sysname> display evpn es local vsi vpna

Redundancy mode: A – All-active, S – Single-active

 

VSI name : vpna

ESI                         Tag ID      DF address      Mode  State ESI label

0001.0002.0002.0002.0002    -           1.1.1.1         A     Up    1000

0001.0002.0003.0004.0005    -           1.1.1.1         A     Up    1001

0003.0003.0003.0003.0003    2           2.2.2.2         A     Up    1002

# Display brief information about all local ESs.

<Sysname> display evpn es local

Redundancy mode: A – All-active, S – Single-active

 

VSI name : v1

EVPN instance: -

ESI                         Tag ID      DF address      Mode  State ESI label

0003.0003.0003.0003.0003    1           1.1.1.1         A     Up    -

0003.0003.0003.0003.0003    3           3.3.3.3         A     Up    -

0003.0003.0003.0003.0003    10          2.2.2.2         A     Up    -

 

VSI name : vpna

ESI                         Tag ID      DF address      Mode  State ESI label

0001.0002.0002.0002.0002    -           1.1.1.1         A     Up    1000

0001.0002.0003.0004.0005    -           1.1.1.1         A     Up    1001

0003.0003.0003.0003.0003    2           2.2.2.2         A     Up    1002

 

Xconnect group name: vpna

ESI                         Tag ID      DF address      Mode  State ESI label

0001.0002.0002.0002.0002    -           1.1.1.1         A     Up    -

Table 16 Command output

Field

Description

EVPN instance

EVPN instance name. If the EVPN instance is created on a VSI, this field displays a hyphen (-).

This field is supported only by EVPN VXLAN.

Tag ID

Ethernet tag ID.

DF address

Router ID of the VTEP elected as the DF.

Mode

Redundancy mode of the ES:

·     A—All-active mode.

·     S—Single-active mode.

State

State of the ES:

·     Up.

·     Down.

ESI label

ESI label. For EVPN VPWS and EVPN VXLAN, this field is invalid and displays a hyphen (-).

 

# Display detailed information about all local ESs.

<Sysname> display evpn es local verbose

 

VSI name : v1

  ESI                      : 0003.0003.0003.0003.0003

  Interface                : HundredGigE1/0/1

  Redundancy mode          : All-active

  State                    : Up

  AD-delay remaining time  : 100

  ACs                      :

    Link ID     Service instance ID   Tag ID      DF address        ESI label

    0           1                     1           1.1.1.1           1000

    1           3                     3           3.3.3.3           1001

    2           10                    10          2.2.2.2           1002

 

VSI name : vpna

EVPN instance: -

  ESI                      : 0001.0002.0002.0002.0002

  Interface                : HundredGigE1/0/2

  Redundancy mode          : All-active

  State                    : Up

  AD-delay remaining time  : 100

  ACs                      :

    Link ID     Service instance ID   Tag ID      DF address        ESI label

    1           -                     -           1.1.1.1           -

 

  ESI                      : 0001.0002.0003.0004.0005

  Interface                : HundredGigE1/0/3

  Redundancy mode          : All-active

  State                    : Up

  AD-delay remaining time  : 100

  ACs                      :

    Link ID     Service instance ID   Tag ID      DF address        ESI label

    0           -                     -           1.1.1.1           -

 

  ESI                      : 0003.0003.0003.0003.0003

  Interface                : HundredGigE1/0/4

  Redundancy mode          : All-active

  State                    : Up

  AD-delay remaining time  : 100

  ACs                      :

    Link ID     Service instance ID   Tag ID      DF address        ESI label

    2           2                     2           2.2.2.2           -

 

Xconnect-group name : vpna

 Connection name           : vpna

  ESI                      : 0000.0000.0000.0000.1111

  AC                       : GE0/0/1

  Redundancy mode          : All-active

  State                    : Up

  AD-delay remaining time  : 100

  Link ID                  : 1

  Tag ID                   : -

  DF address               : 1.1.1.1

Table 17 Command output

Field

Description

EVPN instance

EVPN instance name. If the EVPN instance is created on a VSI, this field displays a hyphen (-).

This field is supported only by EVPN VXLAN.

Xconnect group name

Cross-connect group name.

Connection name

Cross-connect name.

AC

AC name. This field displays a Layer 3 interface name or a Layer 2 interface name and an Ethernet service instance name.

Redundancy mode

Redundancy mode of the ES:

·     All-active.

·     Single-active.

State

State of the ES:

·     Up.

·     Down.

If the ES is not manually assigned an ESI, a hyphen (-) is displayed.

ES-delay remaining time

Remaining time of the ES route advertisement delay timer, in seconds.

ACs

The VSI's ACs on the ES.

Link ID

The AC's link ID on the VSI.

Service instance ID

Ethernet service instance ID.

Tag ID

Ethernet tag ID.

DF address

Router ID of the VTEP or PE elected as the DF.

ESI label

ESI label. For EVPN VPWS and EVPN VXLAN, this field is invalid and displays a hyphen (-).

 

# Display information about remote ESs of all VSIs.

<Sysname> display evpn es remote

Control Flags: P – Primary, B – Backup, C - Control word

VSI name : v1

EVPN instance: -

  ESI                     : 0003.0003.0003.0003.0003

  A-D per ES routes       :

    Peer IP             Remote Redundancy mode

    1.1.1.1             All-active

  A-D per EVI routes      :

    Tag ID      Peer IP

    1           1.1.1.1

    3           1.1.1.1

    10          1.1.1.1

 

VSI name : vpna

  ESI                     : 0001.0000.0000.0000.0001

  Ethernet segment routes :

    1.1.1.1

    3.3.3.3

  A-D per ES routes       :

    Peer IP             Remote Redundancy mode

    1.1.1.1             All-active

    3.3.3.3             All-active

  A-D per EVI routes      :

    Tag ID      Peer IP

    -           1.1.1.1

    -           3.3.3.3

 

  ESI                     : 0001.0002.0003.0004.0005

  Ethernet segment routes :

    1.1.1.1

  A-D per ES routes       :

    Peer IP             Remote Redundancy mode

    1.1.1.1             All-active

  A-D per EVI routes      :

    Tag ID      Peer IP

    -           1.1.1.1

 

Xconnect group name : vpna

  ESI                     : 0000.0000.0000.0000.1111

  Ethernet segment routes :

    2.2.2.2

  A-D per ES routes       :

    Peer IP             Remote Redundancy mode

    2.2.2.2             All-active

  A-D per EVI routes      :

    Tag ID      Peer IP             Control Flags

    1           2.2.2.2             P

# Display remote ES information received from next hop 3.3.3.3 for VSI vpna.

<Sysname> display evpn es remote vsi vpna nexthop 3.3.3.3

Control Flags: P - Primary, B - Backup, C - Control word

 

VSI name : vpna

EVPN instance: -

  ESI                     : 0001.0000.0000.0000.0001

  Ethernet segment routes :

    1.1.1.1

  A-D per ES routes       :

    Peer IP             Remote Redundancy mode

    1.1.1.1             All-active

  A-D per EVI routes      :

    Tag ID      Peer IP

    -           3.3.3.3

Table 18 Command output

Field

Description

EVPN instance

EVPN instance name. If the EVPN instance is created on a VSI, this field displays a hyphen (-).

This field is supported only by EVPN VXLAN.

Xconnect group name

Cross-connect group name.

Redundancy mode

Redundancy mode of the ES:

·     All-active.

·     Single-active.

Ethernet segment routes

Ethernet segment routes for the ES.

A-D per ES routes

A-D per Ethernet segment routes for the ES.

A-D per EVI routes

A-D per EVI routes for the ES.

Tag ID

Ethernet tag ID.

Peer IP

IP address of the remote peer.

Remote Redundancy mode

Redundancy mode of the remote ES:

·     All-active.

·     Single-active.

Control Flags

Layer 2 attributes control flags of the remote route:

·     P—Primary flag.

·     B—Backup flag.

·     C—Control word flag.

 

display evpn route mac

Use display evpn route mac to display IPv4 EVPN MAC address entries.

Syntax

display evpn route mac [ local | remote | nexthop ipv4-address ] [ vsi vsi-name ] [ count ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

local: Specifies local MAC address entries.

remote: Specifies remote MAC address entries.

nexthop ipv6-address: Specifies a next hop.

vsi vsi-name: Specifies a VSI by its name, a case-sensitive string of 1 to 31 characters. If you do not specify this option, the command displays MAC address entries for all VSIs.

count: Displays the number of MAC address entries. If you do not specify this keyword, the command displays detailed information about MAC address entries.

Usage guidelines

If you do not specify the mpls or vxlan keyword, this command displays IPv4 EVPN MAC address entries for both EVPN VPLS and EVPN VXLAN.

If you do not specify the local, remote, or nexthop keyword, this command displays both local and remote IPv4 EVPN MAC address entries.

Examples

# Display all IPv4 EVPN MAC address entries.

<Sysname> display evpn route mac

Flags: D - Dynamic   B - BGP      L - Local active

       G - Gateway   S - Static   M - Mapping        I - Invalid

       A - MAC-authentication     P – Multiport/Multicast

 

VSI name: bbb

EVPN instance: -

MAC address     Link ID/Name   Flags   Encap           Next hop

0000-0000-000a  1              DL      VXLAN           -

0000-0000-0009  Tunnel1        B       VXLAN           2.2.2.2

0001-2000-4000  -              BI      VXLAN           3.3.3.3

# Display the total number of IPv4 EVPN MAC address entries.

<Sysname> display evpn route mac count

Total number of entries: 3

Table 19 Command output

Field

Description

EVPN instance

EVPN instance name. If the EVPN instance is created on a VSI, this field displays a hyphen (-).

This field is supported only by EVPN VXLAN.

Link ID/Name

For a local MAC address, this field displays the AC's link ID on the VSI.

For a remote MAC address, this field displays the tunnel interface name.

Flags

MAC address entry type:

·     D—The entry is dynamically learned.

·     B—The entry is learned from BGP EVPN routes.

·     L—The local entry is active. If this flag is not set and the B flag is set, the entry learned from BGP EVPN routes is active.

·     S—The static entry is active.

·     M—The entry from a remote VXLAN mapped to a local VXLAN is active.

·     I—The entry is invalid. Possible reasons:

¡     The VSI has been administratively shut down by using the shutdown command.

¡     The outgoing tunnel interface does not exist.

·     A—The entry was learned by MAC authentication.

·     P—The entry is a multiport MAC address entry or multicast MAC address entry.

Encap

Packet encapsulation type:

VXLAN.

Next hop

IP address of the remote VTEP or PE. If the MAC address entry is a local entry, a hyphen (-) is displayed.

 

display evpn route mac-mobility

Use display evpn route mac-mobility to display EVPN MAC mobility information.

Syntax

display evpn [ ipv6 ] route mac-mobility [ vsi vsi-name ] [ mac-address mac-address ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

ipv6: Specifies IPv6 EVPN MAC mobility information. If you do not specify this keyword, the command displays IPv4 EVPN MAC mobility information.

vsi vsi-name: Specifies a VSI by its name, a case-sensitive string of 1 to 31 characters. If you do not specify a VSI, this command displays MAC mobility information about all VSIs.

mac-address mac-address: Specifies a MAC address in the format of H-H-H. You can omit the consecutive zeros at the beginning of each segment. For example, you can enter f-e2-1 for 000f-00e2-0001. If you do not specify a MAC address, this command displays MAC mobility information about all MAC addresses in the specified VSI or all VSIs.

Usage guidelines

If you do not specify any parameters, this command displays IPv4 EVPN MAC mobility information about all VSIs.

Examples

# Display IPv4 EVPN MAC mobility information about all VSIs.

<Sysname> display evpn route mac-mobility

Flags: S - Suppressed, N - Not suppressed

  Suppression threshold: 5

  Detection cycle      : 180s

  Suppression time     : Permanent

 

VSI name      : vsia

EVPN instance : -

  MAC address     Move count Moved from               Flags Suppressed at

  1000-0000-0000  10         HGE1/0/1                 S     15:30:30 2018/03/30

  1000-0000-0001  -          -                        N     -

 

VSI name      : vsib

EVPN instance : -

  MAC address     Move count Moved from               Flags Suppressed at

  1000-0000-0003  2          HGE1/0/2                 N     -

  1000-0000-0005  10         5.5.5.5                  S     17:24:33 2018/04/01

# Display IPv6 EVPN MAC mobility information about all VSIs.

<Sysname> display evpn ipv6 route mac-mobility

Flags: S - Suppressed, N - Not suppressed

  Suppression threshold: 5

  Detection cycle      : 180s

  Suppression time     : Permanent

 

VSI name      : vpna

EVPN instance : -

  MAC address          : 1000-1000-1000

  Move count           : 5

  Moved from           : HGE1/0/1

  Flags                : S

  Suppressed at        : 15:30:30 2018/03/30

 

VSI name      : vpnb

EVPN instance : -

  MAC address          : 1000-1000-1001

  Move count           : 5

  Moved from           : 1::1

  Flags                : S

  Suppressed at        : 15:30:30 2018/03/30

Table 20 Command output

Field

Description

Suppression threshold

MAC mobility suppression threshold, which is the number of MAC moves from the local site to a remote site.

If MAC mobility suppression is disabled, this field displays a hyphen (-).

Detection cycle

MAC mobility detection cycle in seconds.

If MAC mobility suppression is disabled, this field displays a hyphen (-).

Suppression time

Suppression time in seconds. If this field displays Permanent, MAC moves are suppressed permanently.

If MAC mobility suppression is disabled, this field displays a hyphen (-).

EVPN instance

EVPN instance name. If the EVPN instance is created on a VSI, this field displays a hyphen (-).

This field is supported only by EVPN VXLAN.

Move count

Number of MAC moves from the interface to other interfaces.

Moved from

Source interface or source VTEP/PE IP address for the MAC move.

Flags

Whether the MAC move was suppressed:

·     S—Suppressed.

·     N—Not suppressed.

Suppressed at

Time when the MAC move was suppressed.

 

Related commands

evpn route mac-mobility suppression

display evpn routing-table

Use display evpn routing-table to display the EVPN routing table for a VPN instance.

Syntax

display evpn routing-table [ nexthop ipv4-address ] [ count ]

display evpn routing-table ipv6 [ nexthop ipv6-address ] [ count ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

ipv6: Specifies IPv6 information. If you do not specify this keyword, the command displays IPv4 information.

nexthop: Specifies a next hop. If you do not specify a next hop, the command displays all routing table information.

ipv4-address: Specifies an IPv4 next hop.

ipv6-address: Specifies an IPv6 next hop.

count: Displays the number of entries in the routing table. If you do not specify this keyword, the command displays detailed information about the routing table.

Examples

# Display the EVPN IPv4 routing table for VPN instance vpn1.

<Sysname> display evpn routing-table vpn-instance vpn1

Flags: E - with valid ESI   A – A-D ready   L - Local ES exists

 

VPN instance name: vpn1                             Local L3VNI: 7

IP address       Nexthop          Outgoing interface    NibID       Flags

10.1.1.11        1.1.1.1          Vsi-interface3        0x18000000  EAL

10.1.1.12        2.2.2.2          Vsi-interface3        0x18000001  EA

# Display the EVPN IPv4 routing table for the public instance.

<Sysname> display evpn routing-table public-instance

Flags: E - with valid ESI   A – A-D ready   L - Local ES exists

 

Public instance                                     Local L3VNI: 3900

IP address       Nexthop          Outgoing interface    NibID       Flags

10.1.1.11        1.1.1.1          Vsi-interface3        0x18000000  EAL

10.1.1.12        2.2.2.2          Vsi-interface3        0x18000001  EA

# Display the number of EVPN route entries in the IPv4 routing table for VPN instance vpn1.

<Sysname> display evpn routing-table vpn-instance vpn1 count

Total number of entries: 2

# Display the EVPN IPv6 routing table for VPN instance vpna.

<Sysname> display evpn routing-table ipv6 vpn-instance vpna

 

VPN instance: vpna                              Local L3VNI: 7

IPv6 address        :      BC10:0300:1000:0020:0200:0300:0100:0034

Next hop            :      1.1.1.1

Outgoing interface  :      Vsi-interface3

NibID               :      0x18000000

 

IPv6 address        :      BC10:0300:1000:0020:0200:0300:0100:0035

Next hop            :      2.2.2.2

Outgoing interface  :      Vsi-interface3

NibID               :      0x18000001

Table 21 Command output

Field

Description

NibID

Next hop ID.

Flags

Flags of the route:

·     E—The route carries a valid ESI.

·     A—All Ethernet auto-discovery routes are received. The ECMP routes for the next hop can be issued.

·     L—An active local ESI exists. Remote routes are not issued.

·     -—The MAC/IP advertisement route does not have a valid ESI. ECMP routes are not supported.

 

display l2vpn forwarding evpn split-horizon

Use display l2vpn forwarding evpn split-horizon to display site-facing interfaces excluded from traffic forwarding by split horizon.

Syntax

display l2vpn forwarding evpn split-horizon { ac interface interface-type interface-number | ac interface interface-type interface-number service-instance instance-id | tunnel tunnel-number } slot slot-number

 Views

Any view

Predefined user roles

network-admin

network-operator

 Parameters

ac interface interface-type interface-number: Specifies a Layer 3 interface by its type and number. These parameters apply to EVPN VPLS.

ac interface interface-type interface-number service-instance instance-id: Specifies an Ethernet service instance on a Layer 2 interface. The interface-type interface-number argument specifies the interface by its type and number. The instance-id argument specifies the Ethernet service instance by its ID in the range of 1 to 4096. These parameters apply to EVPN VPLS.

tunnel tunnel-number: Specifies an existing VXLAN tunnel interface number. If you do not specify this option, the command displays all site-facing interfaces excluded from traffic forwarding by split horizon. This option applies to EVPN VXLAN.

slot slot-number: Specifies an IRF member device by its member ID.

Examples

# Display site-facing interfaces excluded from traffic forwarding for Tunnel 0.

<Sysname> display l2vpn forwarding evpn split-horizon tunnel 0

Tunnel name: 0

  Total number of filtered interfaces: 2

  Filtered interfaces:

    HGE1/0/1

    HGE1/0/2

# Display site-facing interfaces excluded from traffic forwarding for AC HundredGigE 1/0/1.

<Sysname> display l2vpn forwarding evpn split-horizon ac interface hundredgige 1/0/1

Interface name  : HundredGigE1/0/1

AC link ID              : 0

Service instance ID     : 100

PW count                : 2

VSI name        PW link ID         ESI label

vpna            8                  775128

vpna            9                  775128

Table 22 Command output

Field

Description

Tunnel name

VXLAN tunnel interface name.

Filtered interfaces

Site-facing interfaces that do not forward the flood traffic received from the VXLAN tunnel.

 

esi

Use esi to assign an ESI to an interface.

Use undo esi to restore the default.

Syntax

esi esi-id

undo esi

Default

No ESI is assigned to an interface.

Views

Interface view

Predefined user roles

network-admin

Parameters

esi-id: Specifies an ES by its ESI in XXXX.XXXX.XXXX.XXXX.XXXX format. Each X represents a hexadecimal digit. The ESI must begin with 00 and cannot be all zeros.

Usage guidelines

An ESI uniquely identifies an ES. The links on interfaces with the same ESI belong to the same ES. Traffic of the ES can be distributed among the links for load sharing.

You can assign ESIs to a main interface and its subinterfaces.

·     If you assign an ESI to a subinterface, the subinterface-specific ESI and redundancy mode takes precedence over those configured on the main interface.

·     If you do not assign an ESI to a subinterface, it inherits the ESI and redundancy mode (if configured) of the main interface. In this scenario, the redundancy mode configured on the subinterface does not take effect.

To modify the ESI of an interface, first use the undo esi command to delete the original ESI.

Examples

# Assign ESI 0000.0001.0002.0003.0004 to HundredGigE 1/0/1.

<Sysname> system-view

[Sysname] interface hundredgige 1/0/1

[Sysname-HundredGigE1/0/1] esi 0000.0001.0002.0003.0004

esi type-1

Use esi type-1 to configure an interface to automatically generate a type-1 ESI.

Use undo esi type-1 to restore the default.

Syntax

esi type-1 [ pe ]

undo esi type-1

Default

An interface does not automatically generate a type-1 ESI.

Views

Layer 2 aggregate interface view

Predefined user roles

network-admin

Parameters

pe: Indicates that the LACP parameters used for automatically generating an ESI are derived from the PE device. If this keyword is not specified, the LACP parameters used for automatically generating an ESI are derived from the CE device.

Usage guidelines

An ESI uniquely identifies an ES. The links on interfaces with the same ESI belong to the same ES. Traffic of the ES can be distributed among the links for load sharing. With this feature configured, the device will automatically generate an ESI by using LACP-related parameters, and you do not need to manually assign an ESI.

To have this feature take effect, you must first enable LACP .

On the same interface, this command, the esi command, and the esi type-3 command are mutually exclusive.

Examples

# Configure an interface to automatically generate a type-1 ESI.

<Sysname> system-view

[Sysname] interface bridge-aggregation 1

[Sysname-Bridge-Aggregation1] esi type-1

Related commands

esi

esi type-3

esi type-3

Use esi type-3 to configure an interface to automatically generate a type-3 ESI.

Use undo esi type-3 to restore the default.

Syntax

esi type-3 system-mac mac-address local-discriminator local-discriminator

undo esi type-3

Default

An interface does not automatically generate a type-3 ESI.

Views

Layer 2 aggregate interface view

Predefined user roles

network-admin

Parameters

system-mac mac-address: Specifies a system MAC address for an interface, in the format of H-H-H. Multicast, all-zero, and all-F MAC addresses are not supported.

local-discriminator local-discriminator: Specifies a local discriminator for an interface. A local discriminator must be a number in the range of 1 to 16777215.

Usage guidelines

An ESI uniquely identifies an ES. The links on interfaces with the same ESI belong to the same ES. Traffic of the ES can be distributed among the links for load sharing. With this feature configured, the device will automatically generate an ESI for an interface by using the system MAC address and local discriminator of the interface, and you do not need to manually assign an ESI.

On the same interface, this command, the esi command, and the esi type-1 command are mutually exclusive.

Examples

# Configure an interface to automatically generate a type-3 ESI, with the system MAC address as 0-0-1 and the local discriminator as 100.

<Sysname> system-view

[Sysname] interface bridge-aggregation 1

[Sysname-Bridge-Aggregation1] esi type-3 system-mac 0-0-1 local-discriminator 100

Related commands

esi

esi type-1

evpn df-election ac-influence enable

Use evpn df-election ac-influence enable to enable AC state-based DF election.

Use undo evpn df-election ac-influence enable to disable AC state-based DF election.

Syntax

evpn df-election ac-influence enable

undo evpn df-election ac-influence enable

Default

AC state-based DF election is disabled.

Views

System view

Predefined user roles

network-admin

Usage guidelines

Application scenarios

At a multihomed EVPN network site, all PEs or VTEPs attached to an ES participate in DF election by default, regardless of their AC states. If the AC on the PE or VTEP elected as the DF is down, traffic forwarding will fail. You can configure AC state-based DF election to resolve this issue.

Operating mechanism

After you configure AC state-based DF election, a PE or VTEP participates in DF election only when the AC on the PE or VTEP is up. A PE or VTEP determines that the AC on the remote PE or VTEP is up only when it receives AD per ES and AD per EVI routes from the remote PE or VTEP.

Restrictions and guidelines

AC state-based DF election takes effect only after you enable this feature on all PEs or VTEPs attached to an ES.

Examples

# Enable AC state-based DF election.

<Sysname> system-view

[Sysname] evpn df-election ac-influence enable

evpn df-election algorithm (interface view)

Use evpn df-election algorithm to configure the DF election algorithm on an interface.

Use undo evpn df-election algorithm to restore the default.

Syntax

evpn df-election algorithm algorithm

undo evpn df-election algorithm

Default

The DF election algorithm specified in system view takes effect.

Views

Interface view

Predefined user roles

network-admin

Parameters

Algorithm: Specifies a DF election algorithm. The value of this argument can only be preference, which represents the preference-based algorithm.

Usage guidelines

At a multihomed EVPN network site, you can modify the DF election algorithm with this command to control the DF election result.

You can configure the DF election algorithm in system view and in interface view. The global DF election algorithm takes effect on all ESs, and the interface-specific DF election algorithm takes effect only on the ESs on an interface. The interface-specific DF election algorithm takes precedence over the global DF election algorithm.

Examples

# Configure HundredGigE 1/0/1 to use the preference-based algorithm for DF election.

<Sysname> system-view

[Sysname] interface hundredgige 1/0/1

[Sysname-HundredGigE1/0/1] evpn df-election algorithm preference

Related commands

evpn df-election algorithm (system view)

evpn df-election preference

evpn df-election algorithm (system view)

Use evpn df-election algorithm to configure the DF election algorithm globally.

Use undo evpn df-election algorithm to restore the default.

Syntax

evpn df-election algorithm algorithm

undo evpn df-election algorithm

Default

The VLAN tag-based algorithm is used for DF election.

Views

System view

Predefined user roles

network-admin

Parameters

Algorithm: Specifies a DF election algorithm. The value of this argument can only be preference, which represents the preference-based algorithm.

Usage guidelines

At a multihomed EVPN network site, you can modify the DF election algorithm with this command to control the DF election result.

You can configure the DF election algorithm in system view and in interface view. The global DF election algorithm takes effect on all ESs, and the interface-specific DF election algorithm takes effect only on the ESs on an interface. The interface-specific DF election algorithm takes precedence over the global DF election algorithm.

Examples

# Configure the global DF election algorithm as the preference-based algorithm.

<Sysname> system-view

[Sysname] evpn df-election algorithm preference

Related commands

evpn df-election algorithm (interface view)

evpn df-election preference

evpn df-election preference

Use evpn df-election preference to set the DF election preference.

Use undo evpn df-election preference to restore the default.

Syntax

evpn df-election preference preference

undo evpn df-election preference

Default

The DF election preference is 32767.

Views

Interface view

Predefined user roles

network-admin

Parameters

Preference: Sets the DF election preference in the range of 0 to 65535. The larger the value, the higher the preference.

Usage guidelines

Use this command to set the preference used in preference-based DF election. The device with higher preference will be elected as the DF.

This command takes effect after the evpn df-election algorithm preference command is executed in interface view or system view.

Examples

# Set the DF election preference to 100.

<Sysname> system-view

[Sysname] interface hundredgige 1/0/1

[Sysname-HundredGigE1/0/1] evpn df-election preference 100

Related commands

evpn df-election algorithm (interface view)

evpn df-election algorithm (system view)

evpn df-election preference non-revertive

Use evpn df-election preference non-revertive to enable non-revertive mode for preference-based DF election.

Use undo evpn df-election preference non-revertive to disable non-revertive mode for preference-based DF election.

Syntax

evpn df-election preference non-revertive

undo evpn df-election preference non-revertive

Default

Non-revertive mode is disabled for preference-based DF election.

Views

Interface view

Predefined user roles

network-admin

Usage guidelines

Preference-based DF election selects the device with the highest preference as the DF. The BDF takes over the DF role if one of the following events occurs:

·     The DF fails.

·     The site-facing link on the DF fails.

·     The DF election preference of the BDF is set to be higher than that of the DF.

When the original DF or its site-facing link recovers, or its preference is set to be higher than that of the new DF, the original DF will take over the DF role. To avoid undesired traffic loss, you can disable reversion to the original DF by enabling non-revertive mode for preference-based DF election.

This command takes effect after the evpn df-election algorithm preference command is executed in interface view or system view.

Examples

# Enable non-revertive mode for preference-based DF election.

<Sysname> system-view

[Sysname] interface hundredgige 1/0/1

[Sysname-HundredGigE1/0/1] evpn df-election preference non-revertive

Related commands

evpn df-election algorithm (interface view)

evpn df-election algorithm (system view)

evpn m-lag local mac-ip

Use evpn m-lag local mac-ip to allow only MAC/IP advertisement routes to carry the local VTEP address.

Use undo m-lag local mac-ip to restore the default.

Syntax

evpn m-lag local mac-ip

undo evpn m-lag local mac-ip

Default

IMET routes, MAC/IP advertisement routes, and IP prefix advertisement routes carry the local VTEP address.

Views

System view

Predefined user roles

network-admin

Usage guidelines

If you specify the local VTEP address for EVPN M-LAG, the device advertises the following BGP EVPN routes.

·     IMET route in which the originator IP address is the local VTEP address.

·     IP prefix advertisement route in which the next hop is the local VTEP address.

·     MAC/IP advertisement route in which the next hop is the local VTEP address. This route is advertised for each MAC address entry or ARP entry learned on a local interface attached to a singlehomed peer device.

The device also advertises BGP EVPN routes that carry the virtual VTEP address of the M-LAG system. As a result, a peer VTEP sets up the following VXLAN tunnels with the device:

·     A VXLAN tunnel sourced from the IP address of the peer VTEP and destined for the local VTEP address of the device. This tunnel is used to forward broadcast, unknown-unicast, and multicast (BUM) traffic and known unicast traffic for which the outgoing interface is an AC-attached interface facing a singlehomed device.

·     A VXLAN tunnel sourced from the IP address of the peer VTEP and destined for the virtual VTEP address. This tunnel is used to forward BUM traffic and known unicast traffic for which the outgoing interface is an M-LAG interface.

If no peer device is singlehomed to an AC-attached interface of the M-LAG system, the VXLAN tunnel set up with the local VTEP address does not forward service traffic. To save tunnel resources, allow only MAC/IP advertisement routes to carry the local VTEP address. Then, the IMET routes and IP prefix advertisement routes advertised by the device will not carry the local VTEP address. If the device does not learn a MAC address entry or ARP entry on a local interface attached to a singlehomed peer device, it will not advertise a MAC/IP advertisement route in which the next hop is the local VTEP address. As a result, a peer VTEP will not set up a VXLAN tunnel with the local VTEP address.

Examples

# Allow only MAC/IP advertisement routes to carry the local VTEP address for VXLAN M-LAG.

<Sysname> system-view

[Sysname] evpn m-lag local mac-ip

Related commands

evpn m-lag local

evpn encapsulation

Use evpn encapsulation to create an EVPN instance on a VSI or cross-connect group and enter its view, or enter the view of the existing EVPN instance on a VSI or cross-connect group.

Use undo evpn encapsulation to restore the default.

Syntax

In VSI view:

evpn encapsulation vxlan

undo evpn encapsulation

Default

No EVPN instance exists.

Views

VSI view

Predefined user roles

network-admin

Parameters

vxlan: Specifies VXLAN encapsulation.

Usage guidelines

Before you can configure EVPN settings, you must create an EVPN instance.

Examples

# Create an EVPN instance on VSI aaa and enter its view.

<Sysname> system-view

[Sysname] vsi aaa

[Sysname-vsi-aaa] evpn encapsulation vxlan

[Sysname-vsi-aaa-evpn-vxlan]

Related commands

evpn encapsulation vxlan binding instance

evpn encapsulation vxlan binding instance

Use evpn encapsulation vxlan binding instance to bind a VSI to an EVPN instance.

Use undo evpn encapsulation vxlan binding instance to restore the default.

Syntax

evpn encapsulation vxlan binding instance instance-name vsi-tag { tag-id | auto-vxlan }

undo evpn encapsulation vxlan binding instance instance-name

Views

VSI view

Default

A VSI is not bound to any EVPN instance.

Predefined user roles

network-admin

Parameters

instance-name: Specifies an EVPN instance by its name, a case-sensitive string of 1 to 31 characters.

vsi-tag: Specifies a VSI tag ID. An EVPN instance uses tag IDs to identify VSIs when it is bound to multiple VSIs.

tag-id: Specifies a tag ID in the range of 1 to 16777215.

auto-vxlan: Automatically generates a tag ID based on the VXLAN ID of the VSI.

Usage guidelines

This command is applicable only to EVPN VXLAN.

You can bind a VSI only to one EVPN instance.

This command is mutually exclusive with the evpn encapsulation command. You cannot use them together on the same VSI.

Examples

# Bind VSI vpna to EVPN instance evpna.

<Sysname> system-view

[Sysname] vsi vpna

[Sysname-vsi-vpna] evpn encapsulation vxlan binding instance evpna vsi-tag auto-vxlan

Related commands

evpn encapsulation

evpn instance

evpn instance

Use evpn instance to create an EVPN instance and enter its view, or enter the view of an existing EVPN instance.

Use undo evpn instance to delete an EVPN instance.

Syntax

evpn instance instance-name

undo evpn instance instance-name

Views

System view

Default

No EVPN instance exists.

Predefined user roles

network-admin

Parameters

instance-name: Specifies an EVPN instance name, a case-sensitive string of 1 to 31 characters.

Usage guidelines

You must create an EVPN instance before you can configure EVPN on it.

You can bind an EVPN instance created in system view to multiple VSIs to simplify configuration.

Examples

# Create EVPN instance evpn1 and enter its view.

<Sysname> system-view

[Sysname] evpn instance evpn1

[Sysname-evpn-instance-evpn1]

evpn mac-ip preference

Use evpn mac-ip preference to set the preference of MAC/IP advertisement routes redistributed to the BGP-VPN unicast address families.

Use undo evpn mac-ip preference to restore the default.

Syntax

evpn mac-ip preference { external-preference internal-preference | route-policy route-policy-name }

undo evpn mac-ip preference

Default

The preference of both EBGP and IBGP routes is 255.

Views

BGP-VPN IPv4 unicast address family view

BGP-VPN IPv6 unicast address family view

Predefined user roles

network-admin

Parameters

external-preference: Sets the preference of EBGP routes learned from EBGP peers to a value in the range of 1 to 255.

internal-preference: Sets the preference of IBGP routes learned from IBGP peers to a value in the range of 1 to 255.

route-policy-name: Specifies a routing policy by its name, a case-sensitive string of 1 to 63 characters. The preference of routes matching the routing policy will be set based on the routing policy. Routes that do not match the routing policy will use the default preference.

Usage guidelines

Application scenarios

Different routing protocols, direct routes, and static routes might discover different routes for the same destination in the IP routing table, but not all of these routes are optimal. To determine the optimal route, each routing protocol, direct route, and static route is assigned a preference, and the route discovered by the routing protocol with higher preference will become the optimal route.

Set the preference of MAC/IP advertisement routes redistributed to the BGP-VPN unicast address families for the routes to become the optimal routes in the IP routing table of a VPN instance.

Restrictions and guidelines

To use a routing policy for preference configuration, first use the apply preference command to set the preference of matching routes for the routing policy. If you do not set the preference of matching routes, the matching routes will use the default preference.

Examples

# In BGP-VPN IPv4 unicast address family view, set the preference to 20 for the MAC/IP advertisement routes learned from EBGP and IBGP peers.

<Sysname> system-view

[Sysname] bgp 100

[Sysname-bgp-default] ip vpn-instance vpn1

[Sysname-bgp-default-vpn1] address-family ipv4 unicast

[Sysname-bgp-default-ipv4-vpn1] evpn mac-ip preference 20 20

evpn multihoming advertise disable

Use evpn multihoming advertise disable to disable advertisement of EVPN multihoming routes and withdraw the EVPN multihoming routes that have been advertised to remote sites.

Use undo evpn multihoming advertise disable to restore the default.

Syntax

evpn multihoming advertise disable

undo evpn multihoming advertise disable

Default

The device advertises EVPN multihoming routes.

Views

System view

Predefined user roles

network-admin

Usage guidelines

Do not use this command on VTEPs at a multihomed EVPN VXLAN site if EVPN forwards multicast traffic based on SMET, IGMP join sync, and IGMP leave sync routes. Violation of this restriction might cause multicast forwarding errors.

EVPN multihoming routes include Ethernet auto-discovery routes and Ethernet segment routes.

In a multihomed EVPN network, execute this command on a redundant VTEP or PE before you reboot it. This operation allows other VTEPs or PEs to refresh their EVPN routing table to prevent traffic interruption caused by the reboot.

Examples

# Disable advertisement of EVPN multihoming routes and withdraw the EVPN multihoming routes that have been advertised to remote sites.

<Sysname> system-view

[Sysname] evpn multihoming advertise disable

evpn multihoming timer df-delay

Use evpn multihoming timer df-delay to set the DF election delay.

Use undo evpn multihoming timer df-delay to restore the default.

Syntax

evpn multihoming timer df-delay delay-value

undo evpn multihoming timer df-delay

Default

The DF election delay is 3 seconds.

Views

System view

Predefined user roles

network-admin

Parameters

delay-value: Specifies the DF election delay, in the range of 1 to 1200 seconds.

Usage guidelines

DF election delay defines the minimum interval allowed between two DF elections.

The DF election can be triggered by site-facing interface status changes, redundant VTEP or PE membership changes, and interface ESI changes. To prevent frequent DF elections from degrading network performance, set the DF election delay.

To fast elect a DF and avoid traffic interruption upon DF failure, set the DF election delay to 0 seconds.

Examples

# Set the DF election delay to 5 seconds.

<Sysname> system-view

[Sysname] evpn multihoming timer df-delay 5

evpn multihoming vxlan-frr local

Use evpn multihoming vxlan-frr local to enable local FRR globally for EVPN VXLAN.

Use undo evpn multihoming vxlan-frr local to disable local FRR globally for EVPN VXLAN.

Syntax

evpn multihoming vxlan-frr local

undo evpn multihoming vxlan-frr local

Default

Local FRR is disabled globally for EVPN VXLAN.

Views

System view

Predefined user roles

network-admin

Usage guidelines

Local FRR enables two VTEPs at a multihomed EVPN VXLAN network site to set up a bypass VXLAN tunnel between them. This feature helps reduce the traffic loss caused by AC failure.

At a multihomed EVPN VXLAN network site, VM 1 is dualhomed to VTEP 1 and VTEP 2, and VTEP 1 is the DF. When the AC on VTEP 1 fails, VTEP 1 deletes the related MAC address entries and advertises the local unreachable event to VTEP 2 and remote VTEPs. Then, the remote VTEPs will switch traffic to the tunnels to VTEP 2. In this situation, VTEP 1 drops the packets that the remote VTEPs send before they are notified of the local unreachable event as the AC's MAC address entries have been deleted. To resolve this issue, enable local FRR on VTEP 1. If an AC fails, VTEP 1 changes the outgoing interface of the AC's MAC address entries to the index of the VXLAN tunnel between VTEP 1 and VTEP 2. When receiving packets from remote VTEPs after its AC fails, VTEP 1 forwards the packets to VTEP 2 over the VXLAN tunnel to prevent traffic loss.

Examples

# Enable local FRR globally for EVPN VXLAN.

<Sysname> system-view

[Sysname] evpn multihoming vxlan-frr local

Related commands

evpn frr local (VSI EVPN instance view)

evpn route mac-mobility suppression

Use evpn route mac-mobility suppression to enable MAC mobility event suppression.

Use undo evpn route mac-mobility suppression to disable MAC mobility event suppression.

Syntax

evpn route mac-mobility suppression [ detect-cycle detect-time | detect-threshold move-times | suppression-time [ suppression-time | permanent ] ] *

undo evpn route mac-mobility suppression

Default

MAC mobility event suppression is disabled.

Views

System view

Predefined user roles

network-admin

Parameters

detect-cycle detect-time: Specifies the MAC mobility detection cycle in seconds. The value range for the detect-time argument is 60 to 900, and the default is 180.

detect-threshold move-times: Specifies the MAC mobility suppression threshold, which is the number of MAC moves from the local site to a remote site. The value range for the move-times argument is 3 to 10, and the default is 5.

suppression-time: Specifies the length of time that a MAC address entry is suppressed. After the suppression time expires, the MAC address entry can move again. The default suppression time is permanent.

suppression-time: Specifies the suppression time in seconds. The value range for this argument is 120 to 3600.

permanent: Suppresses MAC moves permanently.

Usage guidelines

On an EVPN VXLAN or EVPN VPLS network, misconfiguration of MAC addresses might cause two sites to contain the same MAC address. In this condition, VTEPs or PEs at the two sites constantly synchronize and update EVPN MAC entries and determine that MAC mobility events occur. As a result, an inter-site loop might occur, and the bandwidth is occupied by MAC entry synchronization traffic. To eliminate loops and suppress those MAC mobility events, enable MAC mobility event suppression on the VTEPs or PEs. This feature allows a MAC address to move a specified number of times (the MAC mobility suppression threshold) from a site within a MAC mobility detection cycle. If a MAC address moves more than the MAC mobility suppression threshold, the VTEP or PE at the site will suppress the last MAC move to the local site and will not advertise information about the MAC address.

After you execute the undo evpn route mac-mobility suppression command or the suppression time expires, a VTEP or PE acts as follows:

·     Advertises MAC address entries immediately for the suppressed MAC address entries that have not aged out.

·     Relearns the MAC addresses for the suppressed MAC address entries that have aged out and advertises the MAC address entries.

Examples

# Enable MAC mobility event suppression.

<Sysname> system-view

[Sysname] evpn route mac-mobility suppression

Related commands

display evpn route mac-mobility

evpn timer es-recovery

Use evpn timer es-recovery to set the ES route advertisement delay.

Use undo evpn timer es-recovery to restore the default.

Syntax

evpn timer es-recovery recovery-time

undo evpn timer es-recovery

Default

ES route advertisement delay is disabled when preference-based DF election is used.

Views

Interface view

Predefined user roles

network-admin

Parameters

recovery-time: Sets the ES route advertisement delay in the range of 3 to 1200 seconds.

Usage guidelines

When the DF restarts or the process restarts and a new DF is elected, the original DF will immediately advertise ES routes after the restart to become the DF again. However, access-side connections restore slowly and packet loss might occur after DF switchover. To resolve this issue, set the ES route advertisement delay.

As a best practice, configure this feature when the all-active redundancy mode is used. Do not configure this feature when the single-active redundancy mode is used.

Examples

# Set the ES route advertisement delay to 300 seconds.

<Sysname> system-view

[Sysname] interface gigabitethernet 1/0/1

[Sysname-GigabitEthernet1/0/1] evpn timer es-recovery 300

igp-metric inherit

Use igp-metric inherit to set the metric of a BGP EVPN route added to a VPN instance's routing table to the metric of the IGP route pointing to the next hop in the original BGP EVPN route.

Use undo igp-metric inherit to restore the default.

Syntax

igp-metric inherit

undo igp-metric inherit

Default

The device sets the metric to 0 when adding BGP EVPN routes a VPN instance's routing table.

Views

BGP EVPN address family view

Predefined user roles

network-admin

Usage guidelines

After you execute this command, the device sets the metric of a BGP EVPN route added to a VPN instance's routing table to the metric of the IGP route pointing to the next hop in the original BGP EVPN route.

Examples

# Set the metric of a BGP EVPN route added to a VPN instance's routing table to the metric of the IGP route pointing to the next hop in the original BGP EVPN route.

<Sysname> system-view

[Sysname] bgp 100

[Sysname-bgp-default] address-family l2vpn evpn

[Sysname-bgp-default-evpn] igp-metric inherit

import evpn mac-ip

Use import evpn mac-ip to enable the device to redistribute received MAC/IP advertisement routes that contain ARP or ND information into a BGP unicast routing table.

Use undo import evpn mac-ip to disable the device from redistributing received MAC/IP advertisement routes that contain ARP or ND information into a BGP unicast routing table.

Syntax

import evpn mac-ip

undo import evpn mac-ip

Default

MAC/IP advertisement routes that contain ARP or ND information are not redistributed into any BGP unicast routing table.

Views

BGP IPv4 unicast address family view

BGP IPv6 unicast address family view

BGP-VPN IPv4 unicast address family view

BGP-VPN IPv6 unicast address family view

Predefined user roles

network-admin

Usage guidelines

This command enables the device to redistribute received MAC/IP advertisement routes that contain ARP or ND information into a BGP unicast routing table.

·     If you use this command in BGP IPv4 or IPv6 unicast address family view, the device will redistribute the routes into the BGP IPv4 or IPv6 unicast routing table. In addition, the device will advertise the routes to the local site.

·     If you use this command in BGP-VPN IPv4 or IPv6 unicast address family view, the device will redistribute the routes into the BGP-VPN IPv4 or IPv6 unicast routing table of the corresponding VPN instance. To advertise the routes to the local site, you must configure the advertise l2vpn evpn command.

Examples

# Redistribute received MAC/IP advertisement routes into the BGP-VPN IPv4 unicast routing table of VPN instance vpna.

<Sysname> system-view

[Sysname] bgp 100

[Sysname-bgp-default] ip vpn-instance vpna

[Sysname-bgp-default-vpna] address-family ipv4

[Sysname-bgp-default-ipv4-vpna] import evpn mac-ip

Related commands

advertise l2vpn evpn

ipv6 nd proxy-send enable

Use ipv6 nd proxy-send enable to enable ND request proxy.

Use undo ipv6 nd proxy-send enable to disable ND request proxy.

Syntax

ipv6 nd proxy-send enable

undo ipv6 nd proxy-send enable

Default

ND request proxy is disabled on VSI interfaces.

Views

VSI interface view

Predefined user roles

network-admin

Usage guidelines

ND request proxy allows a VSI interface to send an ND request sourced from itself when the VTEP forwards an ND request. This feature helps resolve certain communication issues.

In an EVPN VXLAN network, VM 1 and VM 2 are attached to VTEP 1 and VTEP 2, respectively, and the VMs are in the same subnet. The gateway interfaces of VM 1 and VM 2 are VSI-interface 1 on VTEP 1 and VSI-interface 2 on VTEP 2, respectively. The following conditions exist on the VTEPs:

·     The VTEPs have established BGP EVPN neighbor relationships.

·     EVPN is disabled from learning MAC addresses from ND information.

·     MAC address advertisement is disabled, and advertised MAC addresses are withdrawn.

·     Remote-MAC address learning is disabled.

·     Local proxy ND is enabled on the VSI interfaces.

·     The VSI interfaces use different IP addresses and MAC addresses.

In this network, when VM 1 attempts to communicate with VM 2, the following process occurs:

1.     VM 1 sends an NS packet.

2.     VTEP 1 learns the MAC address of VM 1 from the NS packet, replies to VM 1 on behalf of VM 2, and sends an NS packet to obtain the MAC address of VM 2.

3.     VTEP 2 forwards the NS packet, and VM 2 replies to VTEP 1.

4.     VTEP 2 forwards the NA packet sent by VM 2 without learning the MAC address of VM 2 because EVPN is disabled from learning MAC addresses from ND information.

5.     VTEP 1 does not learn the MAC address of VM 2 because remote-MAC address learning is disabled.

As a result, VM 1 fails to communicate with VM 2.

For VM 1 to communicate with VM 2, enable NS packet proxy on VSI-interface 2 of VTEP 2. When receiving the NS packet sent by VTEP 1, VTEP 2 forwards it and sends an NS packet sourced from VSI-interface 2 simultaneously, and VM 2 replies to both NS packets. Then, VTEP 2 learns the MAC address of VM 2 from the NA packet sent to VSI-interface 2 and advertises the MAC address to VTEP 1 through BGP EVPN routes. In this way, VTEP 1 obtains the MAC address of VM 2, and VM 1 and VM 2 can communicate.

Examples

# Enable ND request proxy on VSI-interface 100.

<Sysname> system-view

[Sysname] interface vsi-interface 100

[Sysname-vsi-interface100] ipv6 nd proxy-send enable

Related commands

local-proxy-nd enable (Layer 3—IP Services Command Reference)

l2vpn m-lag peer-link tunnel

Use l2vpn m-lag peer-link tunnel to enable an M-LAG member device to automatically set up a VXLAN tunnel with the peer M-LAG member device.

Use undo l2vpn m-lag peer-link tunnel to disable an M-LAG member device from automatically setting up a VXLAN tunnel with the peer M-LAG member device.

Syntax

l2vpn m-lag peer-link tunnel { source source-ipv4 destination destination-ipv4 | source source-ipv6 destination destination-ipv6 }

undo l2vpn m-lag peer-link tunnel

Default

The M-LAG member devices in an M-LAG system do not set up a VXLAN tunnel between them.

Views

System view

Predefined user roles

network-admin

Parameters

source source-ipv4 destination destination-ipv4: Specifies source and destination IPv4 addresses for the automatically established VXLAN tunnel.

source source-ipv6 destination destination-ipv6: Specifies source and destination IPv6 addresses for the automatically established VXLAN tunnel.

Usage guidelines

This command applies to an M-LAG system that uses a direct peer link.

By default, the dynamic ACs created on the peer link use frame match criteria and VSI mappings identical to those of the site-facing ACs. If you configure the same frame match criterion for the site-facing ACs of different VSIs, the dynamic ACs created for the site-facing ACs will conflict with each other. To resolve this issue, use this command to enable the M-LAG member devices to automatically set up a VXLAN tunnel between them.

After you execute this command, the M-LAG member devices no longer create dynamic ACs on the peer link. Instead, they set up a VXLAN tunnel and assign it to all VXLANs. The VXLAN tunnel and the peer link transmit different types of traffic.

·     The VXLAN tunnel is used to forward data traffic. When a site-facing AC on one M-LAG member device fails, the device forwards the remote packets destined for the AC to the other M-LAG member device over the VXLAN tunnel. The remote packets are encapsulated with the VXLAN ID of the failed site-facing AC. When the other M-LAG member device receives the packets, it decapsulates them and forwards them in the VXLAN where they belong.

·     The peer link is used to exchange M-LAG protocol packets and synchronize MAC and ARP entries.

The l2vpn m-lag peer-link tunnel and l2vpn m-lag peer-link ac-match-rule vxlan-mapping commands are mutually exclusive. Do not use them together.

If you use this command on an M-LAG system that uses a VXLAN tunnel as the peer link, the M-LAG member devices do not assign the automatically established VXLAN tunnel to VXLANs and thus cannot use it to forward traffic.

To change the tunnel source and destination addresses, first execute the undo l2vpn m-lag peer-link tunnel command to delete the existing VXLAN tunnel.

Examples

# Enable the device to set up a VXLAN tunnel with its M-LAG peer. Specify the source and destination IPv4 addresses of the VXLAN tunnel as 1.1.1.1 and 2.2.2.2, respectively.

<Sysname> system-view

[Sysname] l2vpn m-lag peer-link tunnel source 1.1.1.1 destination 2.2.2.2

mac-address forwarding-conversational-learning

Use mac-address forwarding-conversational-learning to enable conversational learning for remote MAC address entries.

Use undo mac-address forwarding-conversational-learning to disable conversational learning for remote MAC address entries.

Syntax

mac-address forwarding-conversational-learning

undo mac-address forwarding-conversational-learning

Default

Conversational learning is disabled for remote MAC address entries.

Views

System view

Predefined user roles

network-admin

Usage guidelines

Use this command only on an EVPN network.

By default, the device issues a remote MAC address entry to the hardware after the remote MAC address is advertised to the local site by BGP EVPN routes. This feature enables the device to issue a remote MAC address entry to the hardware only when the entry is required for packet forwarding. This feature saves hardware resources on the device.

With this feature enabled, the device generates a blackhole MAC address entry for an unknown MAC address if receiving 50 frames destined for that MAC address within the MAC aging time. Those blackhole MAC address entries age out when the MAC aging timer expires. After a blackhole MAC address entry ages out, the device can forward the traffic destined for the MAC address. For more information about the MAC aging time and blackhole MAC address entries, see MAC address table configuration in Layer 2—LAN Switching Configuration Guide.

Examples

# Enable conversational learning for remote MAC address entries.

<Sysname> system-view

[Sysname] mac-address forwarding-conversational-learning

mac-advertising disable

Use mac-advertising disable to disable MAC address advertisement and withdraw advertised MAC addresses.

Use undo mac-advertising disable to restore the default.

Syntax

mac-advertising disable

undo mac-advertising disable

Default

MAC address advertisement is enabled.

Views

EVPN instance view

VSI EVPN instance view

Predefined user roles

network-admin

Usage guidelines

The MAC information and ARP information advertised by the VTEP or PE overlap. To avoid duplication, use this command to disable MAC address advertisement and withdraw the MAC addresses advertised to remote VTEPs or PEs.

Examples

# Disable MAC address advertisement and withdraw advertised MAC addresses for a VSI EVPN instance.

<Sysname> system-view

[Sysname] vsi aaa

[Sysname-vsi-aaa] evpn encapsulation vxlan

[Sysname-vsi-aaa-evpn-vxlan] mac-advertising disable

nd mac-learning disable

Use nd mac-learning disable to disable a VSI EVPN instance from learning MAC addresses from ND information.

Use undo nd mac-learning disable to restore the default.

Syntax

nd mac-learning disable

undo nd mac-learning disable

Default

A VSI EVPN instance learns MAC addresses from ND information.

Views

EVPN instance view

VSI EVPN instance view

Predefined user roles

network-admin

Usage guidelines

The MAC information and ND information advertised by a remote VTEP overlap. To avoid duplication, use this command to disable the learning of MAC addresses from ND information. EVPN will learn remote MAC addresses only from the MAC information advertised from remote sites.

Examples

# Disable a VSI EVPN instance from learning MAC addresses from ND information.

<Sysname> system-view

[Sysname] vsi aaa

[Sysname-vsi-aaa] evpn encapsulation vxlan

[Sysname-vsi-aaa-evpn-vxlan] nd mac-learning disable

nexthop recursive-lookup default-route ignore

Use nexthop recursive-lookup default-route ignore to enable the device to ignore default routes in route recursion.

Use undo nexthop recursive-lookup default-route ignore to restore the default.

Syntax

nexthop recursive-lookup default-route ignore [ route-policy route-policy-name ]

undo nexthop recursive-lookup default-route ignore

Default

The device can select a default route for forwarding after performing route recursion.

Views

BGP EVPN address family view

Predefined user roles

network-admin

Parameters

route-policy route-policy-name: Specifies a routing policy by its name, a case-sensitive string of 1 to 63 characters. The device will ignore default routes when performing route recursion for the routes that match the if-match interface criterion in the routing policy. If you do not specify a routing policy or the specified routing policy does not exist, the device ignores default routes when performing route recursion for all received BGP routes.

Usage guidelines

 

CAUTION

CAUTION:

After you execute this command, VXLAN tunnels might be reestablished, and transient VXLAN traffic loss might occur. As a best practice, enable BGP EVPN route reception and advertisement again after you execute this command.

 

By default, the device selects a default route to forward traffic if only the default route is obtained after BGP route recursion. If the default route does not point to the desired next hop, traffic forwarding will fail.

To resolve this issue, enable the device to ignore default routes in route recursion. If only the default route is obtained after route recursion is performed for a BGP route, that BGP route becomes invalid, and other BGP routes with the same prefix are selected for forwarding.

Enable this feature if multiple links exist between the device and a destination IP address. If one of the links fail, traffic will be switched to the other available links instead of being incorrectly forwarded based on a default route.

Examples

# Enable the device to ignore default routes when it performs route recursion for the BGP EVPN routes that match routing policy policy1.

<Sysname> system-view

[Sysname] bgp 100

[Sysname-bgp-default] address-family l2vpn evpn

[Sysname-bgp-default-evpn] nexthop recursive-lookup default-route ignore route-policy policy1

Related commands

if-match interface (Layer 3—IP Routing Command Reference)

peer split-group

Use peer split-group to specify the horizontal split group to which the BGP EVPN peer/peer group belongs.

Use undo peer split-group to restore the default.

Syntax

peer { group-name | ipv4-address [ mask-length ] | ipv6-address [ prefix-length ] } split-group split-group-name

undo peer { group-name | ipv4-address [ mask-length ] | ipv6-address [ prefix-length ] } split-group

Default

The horizontal split group to which the BGP EVPN peer/peer group belongs is not specified.

Views

BGP EVPN address family view

Predefined user roles

network-admin

Parameters

group-name: Specifies the peer group name, a case-sensitive string of 1 to 47 characters. Make sure the specified peer group already exists.

ipv4-address: Specifies the IPv4 address of the peer. Make sure the peer already exists.

mask-length: Specifies the IPv4 address mask in the range of 0 to 32. If you specify this argument, it indicates a dynamic peer in the specified network segment.

ipv6-address: Specifies the IPv6 address of the peer. Make sure the peer already exists.

prefix-length: Specifies the IPv6 prefix length in the range of 0 to 128. If you specify this argument, it indicates a dynamic peer in the specified network segment.

split-group-name: Specifies the name of the horizontal split group, a case-sensitive string of 1 to 31 characters.

Usage guidelines

Operating mechanism

The horizontal split group is a configuration strategy. After you execute this command, the specified peer/peer group joins the designated horizontal split group. The device will not forward traffic received from peers within a horizontal split group to other peers in the same group. It can still forward traffic to peers in different horizontal split groups or to peers that have not been assigned to a horizontal split group. As a result, precise traffic control can be implemented by setting up horizontal split groups, thereby avoiding unnecessary traffic transmission and the creation of loops.

In the EVPN data center interconnect scenario, by assigning the EDs of different data centers to the same horizontal split group, horizontal segmentation of traffic from remote data center EDs can be achieved. This prevents the traffic from being forwarded to the EDs of other data centers, thus avoiding potential routing loops.

Restrictions and guidelines

The horizontal split group has only local significance, which means that this configuration is effective only on the current device.

Examples

# Configure BGP EVPN peer 1.1.1.1 to join horizontal split group group1.

<Sysname> system-view

[Sysname] bgp 100

[Sysname-bgp-default] address-family l2vpn evpn

[Sysname-bgp-default-evpn] peer 1.1.1.1 split-group group1

policy vpn-target

Use policy vpn-target to enable route target filtering for BGP EVPN routes.

Use undo policy vpn-target to disable route target filtering for BGP EVPN routes.

Syntax

policy vpn-target

undo policy vpn-target

Default

Route target filtering is enabled for BGP EVPN routes.

Views

BGP EVPN address family view

Predefined user roles

network-admin

Usage guidelines

When route target filtering is enabled for BGP EVPN routes, the EVPN routing table accepts only BGP EVPN routes of which the export route targets match the local import route targets. If the device must save all BGP EVPN routes, use the undo policy vpn-target command to disable route target filtering for BGP EVPN routes.

Examples

# Disable route target filtering for BGP EVPN routes.

<Sysname> system-view

[Sysname] bgp 100

[Sysname-bgp-default] address-family l2vpn evpn

[Sysname-bgp-default-evpn] undo policy vpn-target

reset evpn route mac-mobility suppression

Use reset evpn route mac-mobility suppression to cancel MAC mobility event suppression.

Syntax

reset evpn route mac-mobility suppression [ vsi vsi-name [ mac mac-address ] ]

Views

User view

Predefined user roles

network-admin

Parameters

vsi vsi-name: Specifies a VSI by its name, a case-sensitive string of 1 to 31 characters. If you do not specify this option, the command cancels suppression on MAC addresses for all VSIs.

mac mac-address: Specifies a MAC address in the format of H-H-H. You can omit the consecutive zeros at the beginning of each segment. For example, you can enter f-e2-1 for 000f-00e2-0001. If you do not specify a MAC address, this command cancels suppression all MAC addresses of the specified VSI.

Usage guidelines

Use this command to cancel the MAC mobility event suppression done on MAC addresses. After you cancel suppression for a MAC address, the MAC address can move between sites, and the device advertises the MAC address entry. The device still suppresses the MAC address if the suppression criteria are met.

Examples

# Cancel the MAC mobility event suppression done on 1-1-1 of VSI vpna.

<Sysname> reset evpn route mac-mobility suppression vsi vpna mac 1-1-1

Related commands

display evpn route mac-mobility

route-distinguisher

Use route-distinguisher to configure an RD for an EVPN instance.

Use undo route-distinguisher to restore the default.

Syntax

In VSI EVPN instance view or cross-connect group EVPN instance view:

route-distinguisher { route-distinguisher | auto [ router-id ] }

undo route-distinguisher

Default

No RD is configured for an EVPN instance.

Views

EVPN instance view

Cross-connect group EVPN instance view

VSI EVPN instance view

Predefined user roles

network-admin

Parameters

route-distinguisher: Specifies an RD, a string of 3 to 21 characters. The RD cannot be all zeros and can use one of the following formats:

·     16-bit AS number:32-bit user-defined number. For example, 101:3.

·     32-bit IP address:16-bit user-defined number. For example, 192.168.122.15:1.

·     32-bit AS number:16-bit user-defined number. For example, 65536:1. The AS number must be equal to or greater than 65536.

auto: Automatically generates an RD in the N:VXLAN ID format. The initial value of N is 1. If N:VXLAN ID is already in use, the system increases the value of N by 1 until the RD is available.

router-id: Automatically generates an RD based on the router ID in the Router ID:N format. The initial value of N is 1. If Router ID:N is already in use, the system increases the value of N by 1 until the RD is available. If you do not specify this keyword with the auto keyword, the system automatically generates an RD based on the VXLAN ID in the N:VXLAN ID format.

Usage guidelines

EVPN uses MP-BGP to advertise BGP EVPN routes for automatic VTEP or PE discovery, MAC reachability information advertisement, and host route advertisement. MP-BGP uses the RD to differentiate BGP EVPN routes of different EVPN instances.

Examples

# Configure 22:1 as the RD of the EVPN instance on VSI aaa.

<Sysname> system-view

[Sysname] vsi aaa

[Sysname-vsi-aaa] evpn encapsulation vxlan

[Sysname-vsi-aaa-evpn-vxlan] route-distinguisher 22:1

rr-filter

Use rr-filter to create a route reflector (RR) reflection policy.

Use undo rr-filter to restore the default.

Syntax

rr-filter ext-comm-list-number

undo rr-filter

Default

An RR does not filter reflected BGP EVPN routes.

Views

BGP EVPN address family view

Predefined user roles

network-admin

Parameters

ext-comm-list-number: Specifies an extended community attribute list by its number in the range of 1 to 65535.

Usage guidelines

This command enables an RR to reflect only received BGP EVPN routes that match the attributes in the specified extended community attribute list.

If a cluster contains multiple RRs, you can configure different reflection policies on the RRs for load sharing among the RRs.

For more information about the extended community attribute list, see Layer 3—IP Routing Configuration Guide.

Examples

# Configure a reflection policy for the device to reflect BGP EVPN routes that match extended community attribute list 10.

<Sysname> system-view

[Sysname] bgp 100

[Sysname-bgp-default] address-family l2vpn evpn

[Sysname-bgp-default-evpn] rr-filter 10

Related commands

ip extcommunity-list (Layer 3—IP Routing Command Reference)

snmp-agent trap enable evpn

Use snmp-agent trap enable evpn to enable SNMP notifications for EVPN.

Syntax

snmp-agent trap enable evpn [ mac-mobility-suppression ]

undo snmp-agent trap enable evpn [ mac-mobility-suppression ]

Views

System view

Default

SNMP notifications are disabled for EVPN.

Predefined user roles

network-admin

Parameters

mac-mobility-suppression: Specifies the MAC mobility suppression notification.

Usage guidelines

If SNMP notifications are enabled for EVPN, a MAC mobility suppression notification is sent to SNMP module after the MAC mobility suppression threshold is reached. For SNMP notifications to be sent correctly, you must also configure SNMP on the device. For more information about SNMP configuration, see Network Management and Monitoring Configuration Guide.

If you do not specify any parameter, all EVPN notifications are enabled or disabled.

Examples

# Enable SNMP notifications for EVPN.

<Sysname> system-view

[Sysname] snmp-agent trap enable evpn

vpn-target

Use vpn-target to configure route targets for EVPN.

Use undo vpn-target to delete route targets for EVPN.

Syntax

vpn-target { vpn-target&<1-8> | auto } [ both | export-extcommunity | import-extcommunity ]

undo vpn-target { vpn-target&<1-8> | auto | all } [ both | export-extcommunity | import-extcommunity ]

Default

EVPN does not have route targets.

Views

EVPN instance view

VSI EVPN instance view

Predefined user roles

network-admin

Parameters

vpn-target&<1-8>: Specifies a space-separated list of up to eight route targets. Each route target is a string of 3 to 21 characters in one of the following formats:

·     16-bit AS number:32-bit user-defined number. For example, 101:3.

·     32-bit IP address:16-bit user-defined number. For example, 192.168.122.15:1.

·     32-bit AS number:16-bit user-defined number. For example, 65536:1. The AS number must be equal to or greater than 65536.

auto: Automatically generates a route target in the format of BGP AS number:VXLAN ID.

both: Uses the specified route targets as both import and export targets. If you do not specify the both, export-extcommunity, or import-extcommunity keyword, the both keyword applies.

export-extcommunity: Uses the specified route targets as export targets.

import-extcommunity: Uses the specified route targets as import targets.

all: Specifies all route targets.

Usage guidelines

EVPN uses MP-BGP to advertise BGP EVPN routes for automatic VTEP or PE discovery, MAC reachability information advertisement, and host route advertisement. MP-BGP uses route targets to control the advertisement and acceptance of BGP EVPN routes.

A VTEP or PE sets the export targets for BGP EVPN routes before advertising the routes to remote VTEPs or PEs. The VTEP or PE checks the export targets of BGP EVPN routes from remote VTEPs or PEs and imports only BGP EVPN routes of which the export targets match the local import targets.

If you execute this command multiple times, all configured route targets take effect.

Examples

# Configure import route targets 10:1, 100:1, and 1000:1 for the EVPN instance on VSI aaa.

<Sysname> system-view

[Sysname] vsi aaa

[Sysname-vsi-aaa] evpn encapsulation vxlan

[Sysname-vsi-aaa-evpn-vxlan] vpn-target 10:1 100:1 1000:1 import-extcommunity

 

  • Cloud & AI
  • InterConnect
  • Intelligent Computing
  • Intelligent Storage
  • Security
  • SMB Products
  • Intelligent Terminal Products
  • Product Support Services
  • Technical Service Solutions
All Services
  • Resource Center
  • Policy
  • Online Help
  • Technical Blogs
All Support
  • Become A Partner
  • Partner Policy & Program
  • Global Learning
  • Partner Sales Resources
  • Partner Business Management
  • Service Business
All Partners
  • Profile
  • News & Events
  • Online Exhibition Center
  • Contact Us
All About Us