07-Segment Routing Command Reference

HomeSupportRouters5G IPRAN Access RoutersReference GuidesCommand ReferencesH3C RA5300 Router Command Reference-R7607-6W10107-Segment Routing Command Reference
04-SRv6 VPN commands
Title Size Download
04-SRv6 VPN commands 349.73 KB

SRv6 VPN commands

bfd static evpn-vpws-srv6

Use bfd static evpn-vpws-srv6 to create a static BFD session for SRv6 PW connectivity detection in an EVPN VPWS over SRv6 network and enter static BFD session view, or enter the view of an existing static BFD session.

Use undo bfd static to delete a static BFD session and all settings in static BFD session view.

Syntax

bfd static session-name evpn-vpws-srv6 interface interface-type interface-number remote-peer remote-ipv6-address [ discriminator auto ]

undo bfd static session-name

Default

No static BFD sessions exist.

Views

System view

Predefined user roles

network-admin

Parameters

session-name: Specifies the name of the static BFD session, a case-sensitive string of 1 to 64 characters.

interface interface-type interface-number: Specifies a Layer 3 interface mapped to a cross-connect. The interface-type argument represents the interface type and the interface-number argument represents the interface number.

remote-peer remote-ipv6-address: Specifies a remote PE by its IPv6 address.

discriminator auto: Enables the device to automatically assign a local discriminator value to the static BFD session. If you do not specify the keywords, you must use the discriminator command to specify the local and remote discriminators for the session.

Usage guidelines

Enable BFD on both ends of an SRv6 PW for quick link connectivity detection. The PEs periodically send BFD control packets to each other out of the Layer 3 interfaces mapped to the cross-connect of the SRv6 PW. A PE sets the PW state to Down if it does not receive control packets from the remote end within a detection interval. To avoid packet forwarding failure, the PE switches packets to the backup SRv6 PW or an equal-cost SRv6 PW.

Make sure the static BFD session is in Asynchronous mode.

Use this command on both PEs at the two ends of an SRv6 PW.

In a primary/backup SRv6 PW scenario or an equal-cost SRv6 PW scenario, you must configure a static BFD session for each SRv6 PW to detect their connectivity.

Examples

# Create a static BFD session named abc to test the connectivity of the SRv6 PW associated with a cross-connect mapped to Ten-GigabitEthernet 2/0/0. The IPv6 address of the remote PE is 20::1.

<Sysname> system-view

[Sysname] bfd static abc evpn-vpws-srv6 interface ten-gigabitethernet 2/0/0 remote-peer 20::1

[Sysname-bfd-static-session-abc]

default color

Use default color to specify the default color for BGP EVPN routes.

Use undo default color to restore the default.

Syntax

default color color-value

undo default color

Default

No default color is specified for BGP EVPN routes.

Views

EVPN instance view

Predefined user roles

network-admin

Parameters

color-value: Specifies the default color, in the range of 0 to 4294967295.

Usage guidelines

A BGP EVPN route uses the default color for color-based traffic steering if the route does not have the color extended community attribute or match a routing policy to obtain a color.

Examples

# In VSI EVPN instance view, specify the default color for BGP EVPN routes.

<Sysname> system-view

[Sysname] vsi aaa

[Sysname-vsi-aaa] evpn encapsulation srv6

[Sysname-vsi-aaa-mpls-srv6] default color 6

# In cross-connect group EVPN instance view, specify the default color for BGP EVPN routes.

<Sysname> system-view

[Sysname] xconnect-group vpna

[Sysname-xcg-vpna] evpn encapsulation srv6

[Sysname-xcg-vpna-evpn-mpls] default color 6

display l2vpn forwarding srv6

Use display l2vpn forwarding srv6 to display L2VPN SRv6 forwarding information.

Syntax

display l2vpn forwarding srv6 [ xconnect-group group-name ] [ verbose ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

xconnect-group group-name: Specifies a cross-connect group by its name, a case-sensitive string of 1 to 31 characters. The group name cannot contain hyphens (-).

verbose: Displays detailed L2VPN SRv6 forwarding information. If you do not specify this keyword, the command displays only brief L2VPN SRv6 forwarding information.

Usage guidelines

If you do not specify a cross-connect group, this command displays L2VPN SRv6 forwarding information for all cross-connect groups.

Examples

# Display brief L2VPN SRv6 forwarding information.

<Sysname> display l2vpn forwarding srv6

Total number of SRv6 tunnels: 2, 2 up, 0 blocked, 0 down

 

Xconnect-group Name : vpna

Connection Name     : pw1

Link ID             : 0x1         Type: BE    State: Up

In SID              : 100::1

Out SID             : 200::1

Table 1 Command output

Field

Description

Link ID

Link ID of the SRv6 tunnel on the VSI or cross-connect group.

Type

Route recursion mode.

After the PE receives a customer packet destined for an End.DX2, End.DT2M, or End.DT2U SID, it forwards the packet according to the route recursion mode.

·     BE—SRv6 BE mode. In this mode, the PE first encapsulates the End.DX2, End.DT2M, or End.DT2U SID into the packet. Then, the PE searches the IPv6 routing table based on the SID encapsulated in the packet to forward the encapsulated packet.

·     TE—SRv6 TE mode. In this mode, the PE first searches the tunnel policies for a matching SRv6 TE policy based on the next hop of a matching route. Then, the PE adds an SRH to the packet. The SRH includes the End.DX2, End.DT2M, or End.DT2U SID and the SID list of the SRv6 TE policy. Finally, the PE forwards the encapsulated packet through the SRv6 TE policy.

·     BE/TE—SRv6 TE and SRv6 BE hybrid mode. In this mode, the PE preferentially uses the SRv6 TE mode to forward the packet. If no SRv6 TE policy is available for the packet, the PE forwards the packet in SRv6 BE mode.

State

SRv6 tunnel status:

·     Up—The SRv6 tunnel is up.

·     Down—The SRv6 tunnel is down.

·     Blocked—The SRv6 tunnel is a bakup tunnel. Its tunnel interface is up, but the tunnel is blocked because the primary tunnel is operating correctly.

In SID

Input SID, which is a local SID.

Out SID

Output SID, which is a remote SID.

# Display detailed L2VPN SRv6 forwarding information.

Xconnect-group Name: vpna

 Connection Name: pw1

  Link ID                : 0x1

  SRv6 Tunnel State      : Up

  In  SID                : 200::1

  Out SID                : 100::1

  MTU                    : 1500

  SRv6 Tunnel Attributes : Main

  SRv6 Forwarding IDs    : -

Table 2 Command output

Field

Description

Link ID

Link ID of the SRv6 tunnel on the VSI or cross-connect group.

SRv6 Tunnel State

SRv6 tunnel status:

·     Up—The SRv6 tunnel is up.

·     Down—The SRv6 tunnel is down.

·     Blocked—The SRv6 tunnel is a bakup tunnel. Its tunnel interface is up, but the tunnel is blocked because the primary tunnel is operating correctly.

In SID

Input SID, which is a local SID.

Out SID

Output SID, which is a remote SID.

MTU

Maximum transmission unit, in bytes.

SRv6 Tunnel Attributes

SRv6 tunnel attributes:

·     Main—The primary tunnel.

·     Backup—The backup tunnel.

·     ac-Bypass—The Bypass tunnel for AC bypass.

·     ECMP—ECMP tunnel.

SRv6 Forwarding IDs

Forwarding entry IDs of the candidate paths in an SRv6 TE policy.

If service traffic is not forwarded through an SRv6 TE policy tunnel, this field displays a hyphen (-).

Remote Leaf Argument

Argument value used by the remote PE to identify leaf ACs.

If no argument value exists, this field displays a hyphen (-).

display l2vpn peer srv6

Use display l2vpn peer srv6 to display L2VPN SRv6 information.

Syntax

display l2vpn peer srv6 [ xconnect-group group-name ]  [ state-machine | verbose ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

xconnect-group group-name: Specifies a cross-connect group by its name, a case-sensitive string of 1 to 31 characters.

state-machine: Displays L2VPN SRv6 state machine information.

verbose: Displays detailed L2VPN SRv6 information.

Usage guidelines

If you do not specify a cross-connect group, this command displays L2VPN SRv6 information for all cross-connect groups.

If you do not specify the state-machine or verbose keyword, this command displays brief information about L2VPN SRv6.

Examples

# Display brief information about L2VPN SRv6.

<Sysname> display l2vpn peer srv6

Total number of SRv6 Tunnels: 2

2 up, 0 blocked, 0 down

 

Xconnect-group Name: vpna

   Peer            : 2::2

   Flag            : Main

   State           : Up

   Remote SrvID    : 2

# Display detailed information about L2VPN SRv6.

<Sysname> display l2vpn peer srv6 verbose

 

Xconnect-group Name: vpna

 Connection Name: pw1

  Peer: 2::2

   Remote Service ID             : 2

   Signaling Protocol            : EVPN

   Link ID                       : 0x1

   SRv6 Tunnel State             : Up

   In SID                        : 100::1

   Out SID                       : 200::1

   MTU                           : 1500

   SRv6 Tunnel Attributes        : Main

   Tunnel Group ID               : 0x1000000030000000

   SRv6 Forwarding IDs           : 0

   Color                         : -

   Recursion Mode                : SID based

   Input Statistics              :

     Octets             : 0

     Packets            : 0

     Errors             : 0

     Discards           : 0

   Output Statistics             :

     Octets             : 0

     Packets            : 0

     Errors             : 0

     Discards           : 0

   Input Rate                    :

     Bytes per second   : 0

     Packets per second : 0

   Output Rate                   :

     Bytes per second   : 0

     Packets per second : 0

Table 3 Command output

Field

Description

Peer

IPv6 address of the peer PE.

Flag

SRv6 tunnel flags:

·     Main—The primary tunnel.

·     Backup—The backup tunnel.

·     ac-Bypass—The Bypass tunnel for AC bypass.

·     ECMP—ECMP tunnel.

State/SRv6 Tunnel State

SRv6 tunnel status:

·     Up—The SRv6 tunnel is up.

·     Down—The SRv6 tunnel is down.

·     Blocked—The SRv6 tunnel is a backup tunnel. Its tunnel interface is up, but the tunnel is blocked because the primary tunnel is operating correctly.

Remote SrvID/Remote Service ID

Remote service ID.

Signaling Protocol

Signaling protocol used to establish the SRv6 tunnel. The value is EVPN.

Link ID

Link ID of the SRv6 tunnel on the VSI or cross-connect group.

In SID

Input SID, which is a local SID.

Out SID

Output SID, which is a remote SID.

MTU

Maximum transmission unit, in bytes.

SRv6 Tunnel Attributes

SRv6 tunnel attributes:

·     Main—The primary tunnel.

·     Backup—The backup tunnel.

·     ac-Bypass—The Bypass tunnel for AC bypass.

·     ECMP—ECMP tunnel.

Tunnel Group ID

ID of the public network tunnel group that carries the SRv6 tunnel.

SRv6 Forwarding IDs

Forwarding entry IDs of the candidate paths in an SRv6 TE policy.

If service traffic is not forwarded through an SRv6 TE policy tunnel, this field displays a hyphen (-).

Color

Color attribute of the expected SRv6 TE policy for route recursion.

If no color attribute is available, this field displays a hyphen (-).

Remote Leaf Argument

Argument value used by the remote PE to identify leaf ACs.

If no argument value exists, this field displays a hyphen (-).

Recursion Mode

Route recursion mode of the SRv6 tunnel:

·     SID based—SRv6 BE mode.

·     Nexthop based—SRv6 TE mode.

·     Nexthop based/SID based—SRv6 TE and SRv6 BE hybrid mode.

Down Reason

SRv6 tunnel down reason:

·     MTU not match—The MTUs at the two ends of the SRv6 tunnel do not match.

·     Local AC Down—The local AC is down.

·     Local VSI admin Down—The local VSI is administratively down.

·     EVPN VPWS AD per EVI route received from peer—In the EVPN VPWS over SRv6 network, the local end does not receive A-D per EVI routes sent from the peer end.

·     EVPN VPWS AD per ES route not received from peer—In the EVPN VPWS over SRv6 network, the local end does not receive A-D per ES routes sent from the peer end.

·     SRv6 not configured with best effort or traffic engineering—No route recursion mode is configured for the SRv6 tunnel.

·     Tunnel Down—The route is not reachable in SRv6 BE recursion mode or no SRv6 TE policy is configured in SRv6 TE recursion mode.

·     BFD session for SRv6 PW down—BFD detects that the SRv6 tunnel is down.

·     Unknown.

Input Statistics

SRv6 PW incoming traffic statistics:

·     Octets—Number of incoming bytes.

·     Packets—Number of incoming packets.

·     Errors—Number of error packets.

·     Discards—Number of dropped packets.

This field is not available in an EVPN VPLS over SRv6 network.

Output statistics

SRv6 PW outgoing traffic statistics:

·     Octets—Number of outgoing bytes.

·     Packets—Number of outgoing packets.

·     Errors—Number of error packets.

·     Discards—Number of dropped packets.

Input Rate

SRv6 PW incoming traffic rate:

·     Bytes per second—Number of incoming bytes per second.

·     Packets per second—Number of incoming packets per second.

This field is not available in an EVPN VPLS over SRv6 network.

Output Rate

SRv6 PW outgoing traffic rate:

·     Bytes per second—Number of outgoing bytes per second.

·     Packets per second—Number of outgoing packets per second.

# Display state machine information about L2VPN SRv6.

<Sysname> display l2vpn peer srv6 state-machine

SRv6 tunnel group state:

  Idle: Idle    N: Normal    UA: Unavailable    PF: Protecting failure

  P: Protection tunnel failure    W: Working tunnel failure    L: Local

Total number of SRv6 tunnels: 2

 

Xconnect-group Name: vpna

 Connection Name: pw1

  SRv6 Group Link ID            : 0x1

    Main SRv6 Tunnel:

      Peer                      : 2::2

      Service ID                : 2

    Backup SRv6 Tunnel          : -

    Signaling Protocol          : EVPN

    Main SRv6 Defect State      : No defect

    Backup SRv6 Defect State    : -

    Switch Result               : Working

    Switch Reason               : None

    Remote Event                : -

    Local Event                 : SFCW

    SRv6 Group Old State        : Idle

    SRv6 Group State            : UA:P:L

Table 4 Command output

Field

Description

Main SRv6 Tunnel

Primary SRv6 tunnel.

Peer

IPv6 address of the remote PE for the SRv6 tunnel.

Service ID

Service ID of the remote PE.

Backup SRv6 Tunnel

Backup SRv6 tunnel.

Signaling Protocol

Signaling protocol used to establish the SRv6 tunnels. The value is EVPN.

Main SRv6 Defect State

Defect state of the primary SRv6 tunnel:

·     No defect.

·     Signal defect—The signaling protocol detected defects.

Backup SRv6 Defect State

Defect state of the backup SRv6 tunnel:

·     No defect.

·     Signal defect—The signaling protocol detected defects.

If no backup SRv6 tunnel exists, this field displays a hyphen (-).

Switch Result

SRv6 tunnel in use after a primary/backup tunnel switchover:

·     None—Neither the primary nor the backup SRv6 tunnel is in use.

·     Working—The primary SRv6 tunnel is in use.

·     Backup—The backup SRv6 tunnel is in use.

Switch Reason

Reason that causes the primary/backup tunnel switchover:

·     Config changed—An SRv6 tunnel is added to or removed from the tunnel redundancy group.

·     Fault detected—An SRv6 tunnel fault is detected.

·     SRv6 down—The state of an SRv6 tunnel changes from active to down.

·     SRv6 up—The state of an SRv6 tunnel changes from active to up.

·     None—No primary/backup tunnel switchover has occurred.

Remote Event

This field is not supported in the current software version.

Remote state machine event.

Local Event

Local state machine event:

·     SFW—Local primary SRv6 tunnel defect event.

·     SFP—Local backup SRv6 tunnel defect event.

·     SFCW—Local primary SRv6 tunnel up event.

·     SFCP—Local backup SRv6 tunnel up event.

·     None—No local event.

SRv6 Group Old State

SRv6 tunnel redundancy group state before switchover:

·     Idle—Both the primary and backup SRv6 tunnels are not available.

·     Normal—Both the primary and backup SRv6 tunnels are available. The primary SRv6 tunnel is up and the backup SRv6 tunnel is blocked. The primary SRv6 tunnel is used to forward traffic.

·     UA:P:L—The backup SRv6 tunnel has defects and the primary SRv6 tunnel is up.

·     PF:W:L—The primary SRv6 tunnel has defects and the back SRv6 tunnel is up.

SRv6 Group State

SRv6 tunnel redundancy group state after switchover. The supported values are the same as those of the SRv6 Group Old State field.

display l2vpn vsi

Use display l2vpn vsi to display L2VPN VSI information.

Syntax

display l2vpn vsi [ evpn-srv6 | name vsi-name ] [ count | verbose ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

evpn-srv6: Specifies VSIs in the EVPN VPLS over SRv6 network.

name vsi-name: Specifies a VSI by its name, a case-sensitive string of 1 to 31 characters.

count: Displays VSI statistics.

verbose: Displays detailed VSI information.

Usage guidelines

If you do not specify a VSI or the evpn-srv6 keyword, this command displays L2VPN VSI information for all VSIs.

If you do not specify the count or verbose keyword, this command displays brief VSI information.

Examples

# Display brief information about all VSIs in the EVPN VPLS over SRv6 network.

<Sysname> display l2vpn vsi evpn-srv6

Total number of VSIs: 1, 1 up, 0 down, 0 admin down

 

VSI Name                        VSI Index       MTU    State

vpnb                            0               1500   Up

# Display statistics about all VSIs in the EVPN VPLS over SRv6 network.

<Sysname> display l2vpn vsi evpn-srv6 count

Total number of VSIs: 1, 1 up, 0 down, 0 admin down

Table 5 Command output

Field

Description

MTU

Maximum transmission unit of the VSI.

State

VSI state:

·     Up—The VSI is up.

·     Down—The VSI is down.

·     Admin down—The VSI is manually shut down by using the shutdown command.

# Display detailed information about all VSIs in the EVPN VPLS over SRv6 network.

<Sysname> display l2vpn vsi evpn-srv6 verbose

VSI Name: vpnb

  VSI Index               : 0

  VSI Description         : vsi for vpnb

  VSI State               : Up

  MTU                     : 1500

  Diffserv Mode           : -

  Bandwidth               : -

  Broadcast Restrain      : 5120 kbps

  Multicast Restrain      : 5120 kbps

  Unknown Unicast Restrain: 5120 kbps

  MAC Learning            : Enabled

  MAC Table Limit         : -

  MAC Learning rate       : Unlimited

  Local MAC aging time    : 300 sec

  Remote MAC aging time   : 300 sec

  Drop Unknown            : Disabled

  PW Redundancy Mode      : Slave

  Flooding                : Enabled

  ESI                     : 0000.0000.0000.0000.0000

  Redundancy Mode         : All-active

  Statistics              : Disabled

  VXLAN ID                : -

  EVPN Encapsulation      : SRv6

  SRv6 SIDs:

    Dt2U SID  : 222::1(64/64/0)

    Dt2UL SID : 222::2(64/64/0)

    Dt2M SID  : 222::3(64/64/0)

  SRv6 tunnels:

   Peer        : 2::2

   Link ID     : 0x9000000

   State       : Up

  ACs:

    AC                                 Link ID    State

    XGE2/0/0                           0x0        Up

    Statistics: Disabled

# Display detailed information about all VSIs in the EVPN VPLS over SRv6 network.

<Sysname> display l2vpn vsi verbose

VSI Name: vpnb

  VSI Index               : 0

  VSI Description         : vsi for vpnb

  VSI State               : Up

  MTU                     : 1500

  Diffserv Mode           : -

  Bandwidth               : -

  Broadcast Restrain      : 5120 kbps

  Multicast Restrain      : 5120 kbps

  Unknown Unicast Restrain: 5120 kbps

  MAC Learning            : Enabled

  MAC Table Limit         : -

  MAC Learning rate       : Unlimited

  Local MAC aging time    : 300 sec

  Remote MAC aging time   : 300 sec

  Drop Unknown            : Disabled

  PW Redundancy Mode      : Slave

  Flooding                : Enabled

  ESI                     : 0000.0000.0000.0000.0000

  Redundancy Mode         : All-active

  Statistics              : Disabled

  VXLAN ID                : -

  EVPN Encapsulation      : SRv6

  SRv6 SIDs:

    Dt2U SID  : 222::1(64/64/0)

    Dt2UL SID : 222::2(64/64/0)

    Dt2M SID  : 222::3(64/64/0)

  SRv6 tunnels:

   Peer        : 2::2

   Link ID     : 0x9000000

   State       : Up

  ACs:

    AC                                 Link ID    State

    XGE2/0/2 srv1                       0x0        Up

    Statistics: Disabled

Table 6 Command output

Field

Description

VSI Description

VSI description.

If no description is configured, this field is not available.

VSI State

VSI state:

·     Up—The VSI is up.

·     Down—The VSI is down.

·     Admin down—The VSI is manually shut down by using the shutdown command.

MTU

Maximum transmission unit of the VSI.

Diffserv Mode

DiffServ mode. Options include the following:

·     ingress—DiffServ mode for the inbound direction.

·     egress—DiffServ mode for the outbound direction.

·     pipe—Pipe mode.

·     short-pipe—Short-pipe mode.

·     uniform—Uniform mode

·     trust—Priority trust mode

¡     inner-dot1p—Trusts the inner 802.1p priority in packets.

¡     dscp—Trusts the DSCP in packets.

af1, af2, af3, af4, be, cs6, cs7, or ef represents the MPLS EXP value.

If no DiffServ mode is configured, this field displays a hyphen (-).

Bandwidth

Maximum bandwidth (in kbps) for known unicast traffic on the VSI.

Broadcast Restrain

Broadcast restraint bandwidth (in kbps).

Multicast Restrain

Multicast restraint bandwidth (in kbps).

Unknown Unicast Restrain

Unknown unicast restraint bandwidth (in kbps).

MAC Learning

State of the MAC learning feature.

MAC Tabel Limit

Maximum number of MAC address entries on the VSI.

If the VSI does not limit the maximum number of MAC address entries, this field displays Unlimited.

MAC Learning rate

MAC address entry learning rate of the VSI.

Local MAC aging time

MAC aging time for dynamic local-MAC entries, in seconds.

If dynamic local-MAC entries do not age out, this field displays NotAging.

Remote MAC aging time

MAC aging time for dynamic remote-MAC entries, in seconds.

If dynamic remote-MAC entries do not age out, this field displays NotAging.

Drop Unknown

Action on source MAC-unknown frames received after the maximum number of MAC entries is reached.

PW Redundancy Mode

PW redundancy operation mode:

·     Slave—Master/slave mode and the local PE operates as the slave node.

·     Master—Master/slave mode and the local PE operates as the master node.

·     Independent—Independent mode.

Flooding

State of the VSI's flooding feature.

This field is not supported by VPLS.

ESI

Ethernet Segment Identifier of the VSI.

Redundancy mode

ES redundancy mode:

·     All-active.

·     Single-active.

Statistics

Packet statistics state.

Input Statistics

Incoming traffic statistics:

·     Octets—Number of incoming bytes.

·     Packets—Number of incoming packets.

·     Errors—Number of error packets.

·     Discards—Number of dropped packets.

Output statistics

Outgoing traffic statistics:

·     Octets—Number of outgoing bytes.

·     Packets—Number of outgoing packets.

·     Errors—Number of error packets.

·     Discards—Number of dropped packets.

Input Rate

Incoming traffic rate:

·     Bytes per second—Number of incoming bytes per second.

·     Packets per second—Number of incoming packets per second.

This field is not available in an EVPN VPLS over SRv6 network.

Output Rate

Outgoing traffic rate:

·     Bytes per second—Number of outgoing bytes per second.

·     Packets per second—Number of outgoing packets per second.

VXLAN ID

VXLAN ID.

This field is not supported by VPLS.

EVPN Encapsulation

EVPN encapsulation type:

·     MPLS.

·     SRv6.

SRv6 SIDs

SRv6 SIDs of the VSI.

Dt2U SID

SRv6 SID used for unicast forwarding in the EVPN VPLS over SRv6 network. The values in parentheses are the length of each segment in the SID, which are the locator length, opcode length, and argument length in sequence. The total length of those segments is 128.

Dt2Ul SID

SRv6 SID used for unicast forwarding over the bypass tunnel at the multihomed EVPN VPLS over SRv6 site. The values in parentheses are the length of each segment in the SID, which are the locator length, opcode length, and argument length in sequence. The total length of those segments is 128.

Dt2M SID

SRv6 SID used for flood forwarding in the EVPN VPLS over SRv6 network. The values in parentheses are the length of each segment in the SID, which are the locator length, opcode length, and argument length in sequence. The total length of those segments is 128.

SRv6 Tunnels

SRv6 tunnels on the VSI.

Peer

IPv6 address of the PW remote PE.

Link ID

Link ID of the SRv6 tunnel on the VSI.

State

SRv6 tunnel state, which can be Up, Down, Blocked, or Defect.

ACs

ACs of the VSI.

AC

For a Layer 3 interface, this field displays the interface name.

Link ID

Link ID of the AC on the VSI.

State

AC state, which can be Up or Down.

Statistics

AC packet statistics state.

display l2vpn xconnect-group

Use display l2vpn xconnect-group to display L2VPN cross-connect group information.

Syntax

display l2vpn xconnect-group [ evpn-srv6 | name group-name [ connection connection-name ] ] [ count | verbose ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

evpn-srv6: Specifies cross-connect groups in the EVPN VPWS over SRv6 network.

name group-name: Specifies a cross-connect group by its name, a case-sensitive string of 1 to 31 characters.

connection connection-name: Specifies a cross-connect by its name, a case-sensitive string of 1 to 20 characters. The cross-connect name cannot contain hyphens (-). If you do not specify a cross-connect, this command displays information about all cross-connects in the specified cross-connect group.

count: Displays cross-connect group statistics.

verbose: Displays detailed cross-connect group information.

Usage guidelines

If you do not specify a cross-connect group or the evpn-srv6 keyword, this command displays information for all cross-connect groups.

If you do not specify the count or verbose keyword, this command displays brief cross-connect group information.

Examples

# Display brief information about all cross-connect groups in the EVPN VPWS over SRv6 network.

<Sysname> display l2vpn xconnect-group evpn-srv6

 

Status Codes: UP - Up, DN - Down, DF - Defect, BD - Blocked, AD - Admin Down,

              DL - Idle, DP - Duplicate

 

Total number of cross-connections: 1, 1 up, 0 down, 0 admin down

 

Xconnect-group                          Connection                          ST

Segment1                            ST  Segment2                            ST

--------------------------------------------------------------------------------

vpna                                    pw1                                 UP

XGE2/0/1                            UP  EVPN   2::2                         UP

--------------------------------------------------------------------------------

# Display statistics about all cross-connect groups in the EVPN VPWS over SRv6 network.

<Sysname> display l2vpn xconnect-group evpn-srv6 count

 

Status Codes: UP - Up, DN - Down, DF - Defect, BD - Blocked, AD - Admin Down,

              DL - Idle, DP - Duplicate

 

Total number of cross-connections: 1, 1 up, 0 down, 0 admin down

Table 7 Command output

Field

Description

ST

State of the cross-connect:

·     UP—The cross-connect is up.

·     DN—The cross-connect is down.

·     AD—The cross-connect is manullay shut down by using the shutdown command.

Segment1 / Segment2

For an AC segment:

If the AC is a Layer 3 interface, this field displays the interface name.

For an SRv6 tunnel segment, this field displays the establishment method of the SRv6 tunnel and the IPv6 address of the remote PE. Only the EVPN establishment method is supported.

ST

If this field displays AC state, the following options are available:

·     UP—The AC is up.

·     DN—The AC is down.

If this field displays SRv6 tunnel state, the following options are available:

·     UP—The tunnel is up.

·     DN—The tunnel is down.

·     DF—BFD detects that the tunnel has defects.

·     BD—The tunnel is a backup tunnel. Its tunnel interface is up, but the tunnel is blocked because the primary tunnel is operating correctly.

·     DL—The input SID of the tunnel is not available.

·     DP—This option is not supported in the current software version.

# Display detailed information about all cross-connect groups in the EVPN VPWS over SRv6 network.

<Sysname> display l2vpn xconnect-group evpn-srv6 verbose

Xconnect-group Name: vpna

 Connection Name        : pw1

  Connection ID         : 1

  State                 : Up

  MTU                   : 1500

  PW Redundancy Mode    : Slave

  Diffserv Mode         : -

  SRv6 tunnels:

   Peer        : 2::2

   Link ID     : 0x1

   State       : Up

  ACs:

    AC                                 Link ID    State

    XGE2/0/0                           0x0        Up

    Statistics: Disabled

# Display detailed information about all cross-connect groups in the EVPN VPWS over SRv6 network.

<Sysname> display l2vpn xconnect-group evpn-srv6 verbose

Xconnect-group Name: vpna

 Connection Name        : pw1

  Connection ID         : 1

  State                 : Up

  MTU                   : 1500

  PW Redundancy Mode    : Slave

  Diffserv Mode         : -

  SRv6 tunnels:

   Peer        : 2::2

   Link ID     : 0x1

   State       : Up

  ACs:

    AC                                 Link ID    State

    XGE2/0/3 srv1                       0x0        Up

    Statistics: Disabled

Table 8 Command output

Field

Description

Description

Description of the cross-connect group.

If no description is configured, this field is not available.

State

Cross-connect group state:

·     Up—The cross-connect group is up.

·     Down—The cross-connect group is down.

·     Administratively down—The cross-connect group is manually shut down by using the shutdown command.

MTU

Maximum transmission unit of cross-connects.

PW Redundancy Mode

PW redundancy operation mode:

·     Slave—Master/slave mode and the local PE operates as the slave node.

·     Master—Master/slave mode and the local PE operates as the master node.

·     Independent—Independent mode.

Diffserv Mode

DiffServ mode. Options include the following:

·     ingress—DiffServ mode for the inbound direction.

·     egress—DiffServ mode for the outbound direction.

·     pipe—Pipe mode.

·     short-pipe—Short-pipe mode.

·     uniform—Uniform mode

·     trust—Priority trust mode

¡     inner-dot1p—Trusts the inner 802.1p priority in packets.

¡     dscp—Trusts the DSCP in packets.

af1, af2, af3, af4, be, cs6, cs7, or ef represents the MPLS EXP value.

If no DiffServ mode is configured, this field displays a hyphen (-).

SRv6 tunnels

SRv6 tunnel information.

Peer

IPv6 address of the SRv6 tunnel remote PE.

Link ID

Link ID of the SRv6 tunnel on the cross-connect.

State

SRv6 tunnel state, which can be Up, Down, Blocked, or Defect.

ACs

AC information.

AC

For a Layer 3 interface, this field displays the interface name.

Link ID

Link ID of the AC on the cross-connect.

State

AC state, which can be Up or Down.

Statistics

AC packet statistics state.

encapsulation source-address

Use encapsulation source-address to specify a source address for the outer IPv6 header of SRv6 VPN packets.

Use undo encapsulation source-address to restore the default.

Syntax

encapsulation source-address ipv6-address

undo encapsulation source-address

Default

No source address is specified for the outer IPv6 header of SRv6 VPN packets.

Views

SRv6 view

Predefined user roles

network-admin

Parameters

ipv6-address: Specifies a source IPv6 address. The IPv6 address cannot be a loopback address, link-local address, multicast address, or unspecified address.

Usage guidelines

To ensure correct VPN traffic forwarding in an SRv6 VPN network, you must specify a source address for the outer IPv6 header of SRv6 VPN packets.

You must specify an IPv6 address of the local device as the source IPv6 address, and make sure the IPv6 address has been advertised by a routing protocol. As a best practice, specify a loopback interface address of the local device as the source IPv6 address.

Examples

# Specify 1::1 as the source address of SRv6 VPN packets in the outer IPv6 header.

<Sysname> system-view

[Sysname] segment-routing ipv6

[Sysname-segment-routing-ipv6] encapsulation source-address 1::1

evpn encapsulation srv6

Use evpn encapsulation srv6 to create an EVPN instance, specify it to use SRv6 encapsulation, and enter its view, or enter the view of an existing EVPN instance that uses SRv6 encapsulation.

Use undo evpn encapsulation to restore the default.

Syntax

evpn encapsulation srv6

undo evpn encapsulation

Default

No EVPN instance is created.

Views

Cross-connect group view

Predefined user roles

network-admin

Usage guidelines

Before you can configure EVPN settings for a VSI or cross-connect group, you must create an EVPN instance on it.

Examples

# Create an EVPN instance and specify it to use SRv6 encapsulation on cross-connect group aa and enter its view.

<Sysname> system-view

[Sysname] xconnect-group aa

[Sysname-xcg-aa] evpn encapsulation srv6

[Sysname-xcg-aa-evpn-srv6]

export route-policy

Use export route-policy to apply an export routing policy to an EVPN instance.

Use undo export route-policy to restore the default.

Syntax

export route-policy route-policy

undo export route-policy

Default

No export routing policy is applied to an EVPN instance.

Views

EVPN instance view

Predefined user roles

network-admin

Parameters

route-policy: Specifies a routing policy by its name, a case-sensitive string of 1 to 63 characters.

Usage guidelines

You can specify an export routing policy to filter advertised routes or modify their route attributes for EVPN.

If you execute this command multiple times, the most recent configuration takes effect.

Examples

# Apply export routing policy poly-1 to the EVPN instance.

<Sysname> system-view

[Sysname] xconnect-group aa

[Sysname-xcg-aa] evpn encapsulation srv6

[Sysname-xcg-aa-evpn-srv6] export route-policy poly-1

Related commands

route-policy (Layer 3—IP Routing Command Reference)

import route-policy

Use import route-policy to apply an import routing policy to an EVPN instance.

Use undo import route-policy to restore the default.

Syntax

import route-policy route-policy

undo import route-policy

Default

No import routing policy is applied to an EVPN instance. The EVPN instance accepts a route when the route targets of the route match local import route targets.

Views

EVPN instance view

Predefined user roles

network-admin

Parameters

route-policy: Specifies a routing policy by its name, a case-sensitive string of 1 to 63 characters.

Usage guidelines

You can specify an import routing policy to filter received routes or modify their route attributes for EVPN.

If you execute this command multiple times, the most recent configuration takes effect.

Examples

# Apply import routing policy poly-1 to the EVPN instance.

<Sysname> system-view

[Sysname] xconnect-group aa

[Sysname-xcg-aa] evpn encapsulation srv6

[Sysname-xcg-aa-evpn-srv6] route-distinguisher 1:1

[Sysname-xcg-aa-evpn-srv6] import route-policy poly-1

Related commands

route-policy (Layer 3—IP Routing Command Reference)

locator-sbfd enable

Use locator-sbfd enable to enable SBFD for SRv6 locators.

Use undo locator-sbfd enable to restore the default.

Syntax

locator-sbfd enable [ template template-name ] [ prefix-list prefix-list-name ]

undo locator-sbfd enable

Default

SBFD is not configured for SRv6 locators.

Views

SRv6 view

Predefined user roles

network-admin

mdc-admin

Parameters

template template-name: Specifies a BFD template name, a case-sensitive string of 1 to 63 characters. If you do not specify this option, an SBFD session uses the multihop BFD parameters configured in system view.

prefix-list prefix-list-name: Specifies an IPv6 prefix list by its name, a case-sensitive string of 1 to 63 characters. If you do not specify this option, the system performs SBFD on all locators which are the recursive nexthops of routes.

Usage guidelines

Application scenarios

In the IP L3VPN over SRv6 BE, EVPN L3VPN over SRv6 BE, or public IP over SRv6 BE scenario, with FRR enabled on a local PE, the PE can use the backup path upon failure of the primary path when a peer CE is dualhomed to two PEs. For fast traffic switchover to the backup path when the primary path fails, configure this feature on the local PE to detect connectivity of the SRv6 locator advertised by the peer PE through BGP.

Operating mechanism

SBFD uses the following procedure to detect connectivity of SRv6 locators advertised through BGP:

1.     The initiator (local PE) sends an SBFD packet with the destination IP address as the network segment for the SID identified by an SRv6 locator.

2.     Upon receiving the SBFD packet, the reflector (peer PE) identifies whether the discriminator in the packet is consistent with the local discriminator. If they are consistent, the reflector sends an SBFD response to the initiator through IPv6 routing. If they are inconsistent, the reflector discards the SBFD packet.

3.     The initiator switches to the backup path if it does not receive an SBFD response before the timeout timer expires. If it receives an SBFD response before the timeout timer expires, the SRv6 locator is reachable.

Restrictions and guidelines

For this feature to take effect, perform the following tasks:

·     Execute the sbfd destination ipv6 remote-discriminator command on the local PE to associate the destination IPv6 address of the detected path with the remote discriminator of the SBFD session for the initiator.

·     Execute the sbfd local-discriminator command on the peer device of the main path to set the local discriminator for the reflector and make sure the discriminator is consistent on the local PE and peer PE.

Examples

# Enable SBFD for SRv6 locators advertised through BGP.

<Sysname> system-view

[Sysname] segment-routing ipv6

[Sysname-segment-routing-ipv6] locator-sbfd enable

Related commands

sbfd destination ipv6 remote-discriminator (High Availability Command Reference)

sbfd local-discriminator (High Availability Command Reference)

nexthop interface (BGP SRv6 next hop view/BGP-VPN SRv6 next hop view/BGP-VPN IPv6 EVPN SR next hop view)

Use nexthop interface to specify a next hop to which an End.DX6 SID can be dynamically allocated and specify the output interface of the next hop.

Use undo nexthop to restore the default.

Syntax

nexthop nexthop-ipv6-address interface interface-type interface-number

undo nexthop nexthop-ipv6-address

Default

No End.DX6 SID is allocated to a next hop.

Views

BGP-VPN IPv6 SR next hop view

BGP-VPN IPv6 EVPN SR next hop view

BGP IPv6 SR next hop view

Predefined user roles

network-admin

Parameters

nexthop-ipv6-address: Specifies a next hop by its IPv6 address.

interface-type interface-number: Specifies an output interface by its type and number.

Usage guidelines

This command is applicable to the IPv6 MPLS L3VPN over SRv6, IPv6 EVPN L3VPN over SRv6, or public network IPv6 over SRv6 scenario to accelerate traffic forwarding. This command allocates an End.DX6 SID to the specified next hop for BGP IPv6 routes and associates the next hop with an output interface.

Use one of the following methods to allocate End.DX6 SIDs to next hops:

·     Use this command to dynamically allocate an End.DX6 SID to a next hop from the locator applied to the VPN instance or public instance.

Make sure the output interface specified for the next hop in this command is consistent with the output interface of that next hop in the routing table. If they are inconsistent, the device cannot dynamically allocate an End.DX6 SID to the next hop.

·     Use the opcode end-dx6 vpn-instance command to manually configure an End.DX6 SID in the locator applied to the VPN instance or public instance.

Make sure the output interface specified for the next hop in the opcode end-dx6 vpn-instance command is consistent with the output interface of that next hop in the routing table. If they are inconsistent, the device cannot use the manually configured End.DX6 SID to forward traffic.

If both methods are used for the same next hop, the manually configured End.DX6 SID takes precedence over the dynamically allocated one.

You can specify only one output interface for one next hop. To change the output interface of a next hop, first use the undo nexthop command to remove the original next hop and output interface association.

The device might be unable to dynamically allocate SIDs to BGP IPv6 routes based on the route next hops when dynamic SID resources are insufficient. If the device does not have manually configured End.DX6 SIDs, it allocates the End.DT6 SID or End.DT46 SID of the VPN instance or public instance to the routes.

Examples

# In BGP IPv6 SR next hop view, allow the system to allocate an End.DX6 SID to next hop 10::1:2 and specify Ten-GigabitEthernet 2/0/0 as the output interface of the next hop.

<Sysname> system-view

[Sysname] bgp 100

[Sysname-bgp-default] address-family ipv6 unicast

[Sysname-bgp-default-ipv6] segment-routing ipv6 locator aaa

[Sysname-bgp-default-ipv6] segment-routing ipv6 apply-sid specify-nexthop

[Sysname-bgp-default-sid-np-ipv6] nexthop 10::1:2 interface ten-gigabitethernet 2/0/0

Related commands

opcode

peer advertise encap-type srv6

Use peer advertise encap-type srv6 to enable SRv6 encapsulation for the EVPN IP prefix advertisement routes advertised to a peer or peer group.

Use undo peer advertise encap-type srv6 to disable SRv6 encapsulation for the EVPN IP prefix advertisement routes advertised to a peer or peer group.

Syntax

peer { group-name | ipv6-address [ prefix-length ] } advertise encap-type srv6

undo peer { group-name | ipv6-address [ prefix-length ] } advertise encap-type srv6

Default

IP prefix advertisement routes use VXLAN encapsulation.

Views

BGP EVPN address family view

Predefined user roles

network-admin

Parameters

group-name: Specifies a peer group by its name, a case-sensitive string of 1 to 47 characters. The peer group must exist.

ipv6-address: Specifies a peer by its IPv6 address. The peer must exist.

prefix-length: Specifies a prefix length in the range of 0 to 128. To specify a subnet, you must specify both the ipv6-address and prefix-length arguments.

Usage guidelines

Use this command to enable the device to advertise EVPN IP prefix advertisement routes with SRv6 encapsulation in an EVPN L3VPN over SRv6 network.

Execute this command on the edge nodes of the EVPN L3VPN network and RRs.

Examples

# Enable SRv6 encapsulation for the IP prefix advertisement routes advertised to peer 1::1.

<Sysname> system-view

[Sysname] bgp 100

[Sysname-bgp-default] address-family l2vpn evpn

[Sysname-bgp-default-evpn] peer 1::1 advertise encap-type srv6

peer advertise original-route

Use peer advertise original-route to enable the device to advertise original BGP VPNv4, VPNv6, or EVPN routes to a peer or peer group.

Use undo peer advertise original-route to restore the default.

Syntax

peer { group-name | ipv4-address [ mask-length ] | ipv6-address [ prefix-length ] } advertise original-route

undo peer { group-name | ipv4-address [ mask-length ] | ipv6-address [ prefix-length ] } advertise original-route

Default

The device advertises reoriginated BGP VPNv4, VPNv6, or EVPN routes to peers and peer groups after the peer re-originated command is executed.

Views

BGPN VPNv4 address family view

BGPN VPNv6 address family view

BGP EVPN address family view

Predefined user roles

network-admin

Parameters

group-name: Specifies a peer group by its name, a case-sensitive string of 1 to 47 characters. The peer group must exist.

ipv4-address: Specifies a peer by its IPv4 address. The peer must exist.

mask-length: Specifies a mask length in the range of 0 to 32. To specify a subnet, you must specify both the ipv4-address and mask-length arguments.

ipv6-address: Specifies a peer by its IPv6 address. The peer must exist.

prefix-length: Specifies a prefix length in the range of 0 to 128. To specify a subnet, you must specify both the ipv6-address and prefix-length arguments.

Usage guidelines

For this command to take effect, you must execute the peer re-originated command.

The device configured with the peer re-originated command advertises only reoriginated BGP VPNv4, VPNv6, or EVPN routes. For the device to advertise both original and reoriginated BGP VPNv4, VPNv6, or EVPN routes to a peer or peer group, execute the peer advertise original-route command on the device.

Examples

# In BGP VPNv4 address family view, enable the device to advertise original BGP VPNv4 routes to peer 1.1.1.1.

<Sysname> system-view

[Sysname] bgp 100

[Sysname-bgp-default] address-family vpnv4

[Sysname-bgp-default-vpnv4] peer 1.1.1.1 advertise original-route

Related commands

peer re-originated

peer suppress re-originated

peer prefix-sid

Use peer prefix-sid to enable BGP to exchange SRv6 SID information with an IPv6 peer or peer group.

Use undo peer prefix-sid to restore the default.

Syntax

peer { group-name | ipv6-address [ prefix-length ] } prefix-sid

undo peer { group-name | ipv6-address [ prefix-length ] } prefix-sid

Default

BGP does not exchange SRv6 SID information with an IPv6 peer or peer group.

Views

BGP VPNv4 address family view

BGP VPNv6 address family view

BGP IPv4 unicast address family view

BGP IPv6 unicast address family view

Predefined user roles

network-admin

Parameters

group-name: Specifies a peer group by its name, a case-sensitive string of 1 to 47 characters. The peer group must exist.

ipv6-address: Specifies a peer by its IPv6 address. The peer must exist.

prefix-length: Specifies a prefix length in the range of 0 to 128. To specify a subnet, you must specify both the ipv6-address and prefix-length arguments.

Usage guidelines

Use this command to enable IPv6 peers in an SRv6 VPN network to exchange SRv6 SID information through BGP VPNv4, VPNv6, IPv4 unicast, or IPv6 unicast routes.

Examples

# In BGP VPNv4 address family view, enable BGP to exchange SRv6 SID information with peer 2001:1::1.

<Sysname> system-view

[Sysname] bgp 100

[Sysname-bgp-default] address-family vpnv4

[Sysname-bgp-default-vpnv4] peer 2001:1::1 prefix-sid

peer re-originated

Use peer re-originated to enable the device to reoriginate BGP VPNv4, VPNv6, or EVPN routes based on the BGP VPNv4, VPNv6, or EVPN routes received from a peer or peer group.

Use undo peer re-originated to disable the device from reoriginating BGP VPNv4, VPNv6, or EVPN routes based on the BGP VPNv4, VPNv6, or EVPN routes received from a peer or peer group.

Syntax

peer { group-name | ipv4-address [ mask-length ] | ipv6-address [ prefix-length ] } re-originated [ replace-rt ]

undo peer { group-name | ipv4-address [ mask-length ] | ipv6-address [ prefix-length ] } re-originated

Default

The device does not reoriginate BGP VPNv4, VPNv6, or EVPN routes based on received BGP VPNv4, VPNv6, or EVPN routes.

Views

BGP VPNv4 address family view

BGP VPNv6 address family view

BGP EVPN address family view

Predefined user roles

network-admin

Parameters

group-name: Specifies a peer group by its name, a case-sensitive string of 1 to 47 characters. The peer group must exist.

ipv4-address: Specifies a peer by its IPv4 address. The peer must exist.

mask-length: Specifies a mask length in the range of 0 to 32. To specify a subnet, you must specify both the ipv4-address and mask-length arguments.

ipv6-address: Specifies a peer by its IPv6 address. The peer must exist.

prefix-length: Specifies a prefix length in the range of 0 to 128. To specify a subnet, you must specify both the ipv6-address and prefix-length arguments.

replace-rt: Modifies route information.

·     Replaces the RD and route targets of VPNv4 or VPNv6 routes with those of the matching local VPN instance, and adds MPLS labels or SRv6 SIDs to the routes. If you do not specify this keyword, the device performs the same operations except that it does not replace the route targets.

·     Replaces the L3 VXLAN ID, RD, and route targets of EVPN IP prefix advertisement routes with those of the matching local VPN instance, and adds MPLS labels or SRv6 SIDs to the routes. If you do not specify this keyword, the device performs the same operations except that it does not replace the route targets.

Usage guidelines

Use this command on a PE that connects the MPLS L3VPN and MPLS L3VPN over SRv6 networks or connects the EVPN L3VPN and EVPN L3VPN over SRv6 networks.This command enables the PE to modify VPNv4, VPNv6, or EVPN route information to realize intercommunication between the MPLS and SRv6 networks.

After you execute this command on a PE, the PE performs the following operations after receiving BGP VPNv4, VPNv6, or EVPN routes from the MPLS L3VPN or EVPN L3VPN network:

1.     Matches the route targets of the routes with the import route targets of local VPN instances.

2.     Replaces the L3 VXLAN ID (for EVPN L3VPN), RD, and route targets of the routes with those of the matching local VPN instance. In addition, the PE adds an SRv6 SID to the routes and maps the SRv6 SID of the routes to the private label of the routes.

3.     Advertises the reoriginated routes to the SRv6 network.

After you execute this command on a PE, the PE performs the following operations after receiving BGP VPNv4, VPNv6, or EVPN routes from the SRv6 network:

1.     Matches the route targets of the routes with the import route targets of local VPN instances.

2.     Replaces the L3 VXLAN ID (for EVPN L3VPN), RD, and route targets of the routes with those of the matching local VPN instance. In addition, the PE adds MPLS labels to the routes and maps the private label of the routes to the SRv6 SID of the routes.

3.     Advertises the reoriginated routes to the MPLS L3VPN or EVPN L3VPN network.

After you execute this command on a PE, the PE advertises only reoriginated routes to the specified peer or peer group. The original routes are not advertised.

If the RD of a received BGP VPNv4, VPNv6, or EVPN route is identical to the RD of the matching local VPN instance, a PE does not modify the route or reoriginate the route. As a result, the PE does not advertise the route. As a best practice, assign unique RDs to VPN instances on different devices if you use this command.

Examples

# In BGP VPNv4 address family view, replace the RD and route targets of the BGP VPNv4 routes received from peer 1.1.1.1 and add an MPLS label or SRv6 SID to the routes.

<Sysname> system-view

[Sysname] bgp 100

[Sysname-bgp-default] address-family vpnv4

[Sysname-bgp-default-vpnv4] peer 1.1.1.1 re-originated replace-rt

Related commands

peer advertise original-route

peer suppress re-originated

peer srv6-vpn compatible

Use peer srv6-vpn compatible to enable SRv6 VPN compatibility between the device and a peer or peer group.

Use undo peer srv6-vpn compatible to disable SRv6 VPN compatibility between the device and a peer or peer group.

Syntax

peer { group-name | ipv6-address [ prefix-length ] } srv6-vpn compatible

undo peer { group-name | ipv6-address [ prefix-length ] } srv6-vpn compatible

Default

SRv6 VPN compatibility is disabled.

Views

BGP VPNv4 address family view

BGP VPNv6 address family view

Predefined user roles

network-admin

Parameters

group-name: Specifies a peer group by its name, a case-sensitive string of 1 to 47 characters. The peer group must exist.

ipv6-address: Specifies a peer by its IPv6 address. The peer must exist.

prefix-length: Specifies a prefix length in the range of 0 to 128. To specify a subnet, you must specify both the ipv6-address and prefix-length arguments.

Usage guidelines

In an IP L3VPN over SRv6 network, the device can establish BGP peer relationship with PEs from other vendors. The device and its peer PEs might add different values to the SRv6 L3 Service Type field (represents the SRv6 L3VPN service type) in the BGP Update messages used to advertise SRv6 SIDs. As a result, they cannot exchange routing information. To resolve this issue, use this command to ensure that a Comware device can communicate with PEs from other vendors.

Examples

# Enable SRv6 VPN compatibility between the device and peer 2::2.

<Sysname> system-view

[Sysname] bgp 1

[Sysname-bgp-default] address-family vpnv4

[Sysname-bgp-default-vpnv4] peer 2::2 srv6-vpn compatible

peer suppress re-originated

Use peer suppress re-originated to suppress advertisement of reoriginated BGP VPNv6, or BGP VPNv4 routes to a peer or peer group.

Use undo peer suppress re-originated to restore the default.

Syntax

BGP VPNv4 address family view/BGP VPNv6 address family view:

peer { group-name | ipv4-address [ mask-length ] | ipv6-address [ prefix-length ] } suppress re-originated

undo peer { group-name | ipv4-address [ mask-length ] | ipv6-address [ prefix-length ] } suppress re-originated

In BGP EVPN address family view:

peer { group-name | ipv4-address [ mask-length ] | ipv6-address [ prefix-length ] } suppress re-originated ip-prefix

undo peer { group-name | ipv4-address [ mask-length ] | ipv6-address [ prefix-length ] } suppress re-originated ip-prefix

Default

The device advertises reoriginated BGP VPNv6, or BGP VPNv4 routes to peers and peer groups after the peer re-originated command is executed.

Views

BGP VPNv4 address family view

BGP VPNv6 address family view

Predefined user roles

network-admin

Parameters

group-name: Specifies a peer group by its name, a case-sensitive string of 1 to 47 characters. The peer group must exist.

ipv4-address: Specifies a peer by its IPv4 address. The peer must exist.

mask-length: Specifies a mask length in the range of 0 to 32. To specify a subnet, you must specify both the ipv4-address and mask-length arguments.

ipv6-address: Specifies a peer by its IPv6 address. The peer must exist.

prefix-length: Specifies a prefix length in the range of 0 to 128. To specify a subnet, you must specify both the ipv6-address and prefix-length arguments.

ip-prefix: Suppresses advertisement of reoriginated IP prefix advertisement routes.

Usage guidelines

The device configured with the peer re-originated and peer advertise original-route commands advertises both original and reoriginated BGP VPNv6, or BGP VPNv4 routes. For the device to advertise only original BGP VPNv6, or BGP VPNv4 routes to a peer or peer group, execute the peer suppress re-originated command on the device.

Examples

# In BGP VPNv4 address family view, suppress advertisement of reoriginated BGP VPNv4 routes to peer 1.1.1.1.

<Sysname> system-view

[Sysname] bgp 100

[Sysname-bgp-default] address-family vpnv4

[Sysname-bgp-default-vpnv4] peer 1.1.1.1 suppress re-originated

Related commands

peer advertise original-route

peer re-originated

ping evpn vpls srv6

Use ping evpn vpls srv6 to test the connectivity of an SRv6 PW in an EVPN VPLS over SRv6 network by pinging a remote PE from the local PE.

Syntax

ping evpn vpls srv6 vsi vsi-name mac mac-address [ end-op endop ] [ -a source-ipv6 | -c count | -h hop-limit | -m interval | -r reply-mode | -s packet-size | -t time-out | -tc tc ] *

Views

Any view

Predefined user roles

network-admin

Parameters

vsi vsi-name: Specifies a VSI by its name, a case-sensitive string of 1 to 31 characters.

mac mac-address: Specifies a host attached to a remote PE by its MAC address in H-H-H format. Do not specify a broadcast MAC address, multicast MAC address, or all-zeros MAC address.

end-op endop: Specifies an End.OP SID to be added to MPLS echo requests. The End.OP SID is used to locate the destination node. If you do not specify an End.OP SID, the device does not add an End.OP SID to MPLS echo requests.

-a source-ipv6: Specifies the source IPv6 address of MPLS echo requests. If you do not specify a source IPv6 address, the IPv6 address of the traffic output interface is used as the source IPv6 address of MPLS echo requests.

-c count: Specifies the number of MPLS echo requests to be sent. The value range for the count argument is 1 to 4294967295, and the default value is 5.

-h hop-limit: Specifies the maximum number of hops allowed for an MPLS echo request. The value range for the hop-limit argument is 1 to 255, and the default value is 255.

-m interval: Specifies the interval at which an MPLS echo request is sent, in milliseconds. The value range for the interval argument is 1 to 10000, and the default value is 2000.

-r reply-mode: Specifies the reply mode used by the receiver (the remote PE) to reply to MPLS echo requests. The value for the reply-mode argument can be 2 or 4, and the default value is 2. If the mode is 2, the receiver searches the IP forwarding table for the destination IP address to forward MPLS echo replies. If the mode is 4, the receiver searches the IPv6 routing table for the source IPv6 address of the echo requests, encapsulates an SRH to the replies, and forwards them.

-s packet-size: Specifies the length of MPLS echo requests, in bytes. The value range for the packet-size argument is 80 to 1200, and the default value is 100. The specified packet length does not include the IPv6 header and UDP header length.

-t time-out: Specifies the timeout time of MPLS echo replies, in milliseconds. The value range for the time-out argument is 0 to 65535, and the default value is 2000. If the local PE does not receive an MPLS echo reply within the timeout time after sending an MPLS echo request, it determines that the MPLS echo reply times out.

-tc tc: Specifies the traffic class value in MPLS echo requests. The value range for the tc argument is 0 to 255 and the default value is 0.

Usage guidelines

In an EVPN VPLS over SRv6 network, a PE transmits data packets to a remote PE over an SRv6 PW. Use this command to test the connectivity of the SRv6 PW from the local PE to the remote PE when packet loss or traffic interruption occurs between the PEs.

Examples

# Test the connectivity of the SRv6 PW from the local PE to the remote PE attached to the host with MAC address 2-2-2 in VSI vpna.

<System> ping evpn vpls srv6 vsi vpna mac 2-2-2

Ping a remote PE in VSI vpna over SRv6 by reaching remote-MAC 0002-0002-0002: 100 data bytes.

Press CTRL+C to break.

100 bytes from 11::2: sequence=1 time=1 ms

100 bytes from 11::2: sequence=2 time=2 ms

100 bytes from 11::2: sequence=3 time=1 ms

100 bytes from 11::2: sequence=4 time=2 ms

100 bytes from 11::2: sequence=5 time=1 ms

 

--- Ping statistics for MAC 0002-0002-0002 ---

5 packets transmitted, 5 packets received, 0.0% packets lost

Round-trip min/avg/max = 1/1/2 ms

Table 9 Command output

Field

Description

Ping a remote PE in VSI vpna over SRv6 by reaching remote-MAC 0002-0002-0002: 100 data bytes

Ping a remote PE through an SRv6 PW in VSI vpna by reaching remote-MAC 0002-0002-0002.

Each MPLS echo request contains 100 bytes.

Press CTRL+C to break

Press escape key Ctrl+C to abort the ping operation.

100 bytes from 11::2: sequence=1 time=1 ms

Received MPLS echo replies from the device whose IPv6 address is 11::2.

·     bytes—Number of bytes in the MPLS echo reply.

·     Sequence—Packet sequence, used to determine whether a segment is lost, disordered or repeated.

·     time—Response time.

If no MPLS echo reply is received when the echo reply timeout time expires, the device displays Request time out.

Ping statistics for MAC 0002-0002-0002

Statistics on data received and sent in the ping operation.

5 packets transmitted

Number of MPLS echo requests sent.

5 packets received

Number of MPLS echo replies received.

0.0% packets lost

Percentage of unacknowledged packets to the total packets sent.

Round-trip min/avg/max = 1/1/2 ms

Minimum, average, or maximum response time, in milliseconds.

 

Related commands

tracert evpn vpls srv6

ping evpn vpws srv6

Use ping evpn vpws srv6 to test the connectivity of an SRv6 PW in an EVPN VPWS over SRv6 network by pinging a remote PE from the local PE.

Syntax

ping evpn vpws srv6 xconnect-group group-name local-service-id  remote-service-id [ -a source-ipv6 | -c count | -h hop-limit | -m interval | -r reply-mode | -s packet-size | -t time-out | -tc tc ] *

Views

Any view

Predefined user roles

network-admin

Parameters

xconnect-group group-name: Specifies a cross-connect group by its name, a case-sensitive string of 1 to 31 characters. The string cannot contain a hyphen (-).

local-service-id: Specifies a local service ID in the range of 1 to 16777215.

remote-service-id: Specifies a remote service ID in the range of 1 to 16777215.

-a source-ipv6: Specifies the source IPv6 address of MPLS echo requests. If you do not specify a source IPv6 address, the IPv6 address of the traffic output interface is used as the source IPv6 address of MPLS echo requests.

-c count: Specifies the number of MPLS echo requests to be sent. The value range for the count argument is 1 to 4294967295, and the default value is 5.

-h hop-limit: Specifies the maximum number of hops allowed for an MPLS echo request. The value range for the hop-limit argument is 1 to 255 and the default value is 255.

-m interval: Specifies the interval at which an MPLS echo request is sent. The value range for the interval argument is 1 to 10000 milliseconds and the default value is 2000 milliseconds.

-r reply-mode: Specifies the reply mode used by the receiver (the remote PE) to reply to MPLS echo requests. The value for the reply-mode argument can be 2 or 4, and the default value is 2. If the mode is 2, the receiver searches the IP forwarding table for the destination IP address to forward MPLS echo replies. If the mode is 4, the receiver searches the IPv6 routing table for the source IPv6 address of the echo requests, encapsulates an SRH to the replies, and forwards them.

-s packet-size: Specifies the length of MPLS echo requests, in bytes. The value range for the packet-size argument is 80 to 1200, and the default value is 100. The specified packet length does not include the IPv6 header and UDP header length.

-t time-out: Specifies the timeout time of MPLS echo replies, in milliseconds. The value range for the time-out argument is 0 to 65535, and the default value is 2000. If the local PE does not receive an MPLS echo reply within the timeout time after sending an MPLS echo request, it determines that the MPLS echo reply times out.

-tc tc: Specifies the traffic class value in MPLS echo requests. The value range for the tc argument is 0 to 255 and the default value is 0.

Usage guidelines

In an EVPN VPWS over SRv6 network, a PE transmits data packets to a remote PE over an SRv6 PW. Use this command to test the connectivity of the SRv6 PW from the local PE to the remote PE when packet loss or traffic interruption occurs between the PEs.

Examples

# Ping a remote PE through an SRv6 PW with local service ID 2 and remote service ID 1 in cross-connect group xcga.

<Sysname> ping evpn vpws srv6 xconnect-group xcga 2 1

Ping a remote PE over SRv6 through a PW with local service ID 2 and remote service ID 1 in cross-connect group xcga: 100 data bytes.

Press CTRL+C to break.

100 bytes from 111::100: sequence=1 time=2 ms

100 bytes from 111::100: sequence=2 time=2 ms

100 bytes from 111::100: sequence=3 time=1 ms

100 bytes from 111::100: sequence=4 time=1 ms

100 bytes from 111::100: sequence=5 time=2 ms

 

--- Ping statistics for the PW with local ID 2 and remote ID 1 ---

5 packets transmitted,5 packets received,0.00% packets lost

Round-trip min/avg/max = 1/1/2 ms

Table 10 Command output

Field

Description

Ping a remote PE over SRv6 through a PW with local service ID 2 and remote service ID 1 in cross-connect group xcga: 100 data bytes

Ping a remote PE through an SRv6 PW with local service ID 2 and remote service ID 1 in cross-connect group xcga.

Each MPLS echo request contains 100 bytes.

Press CTRL+C to break

Press escape key Ctrl+C to abort the ping operation.

100 bytes from 111::100: sequence=5 time=1 ms

Received MPLS echo replies from the device whose IPv6 address is 111::100.

·     bytes—Number of bytes in the MPLS echo reply.

·     sequence—Packet sequence, used to determine whether a segment is lost, disordered or repeated.

·     time—Response time.

If no MPLS echo reply is received when the echo reply timeout time expires, the device displays Request time out.

Ping statistics for the PW with local ID 2 and remote ID 1

Statistics on data received and sent in the ping operation.

5 packets transmitted

Number of MPLS echo requests sent.

5 packets received

Number of MPLS echo replies received.

0.0% packets lost

Percentage of unacknowledged packets to the total packets sent.

Round-trip min/avg/max = 1/1/2 ms

Minimum, average, or maximum response time, in milliseconds.

 

Related commands

tracert evpn vpws srv6

segment-routing ipv6

Use segment-routing ipv6 to specify a route recursion mode.

Use undo segment-routing ipv6 to restore the default.

Syntax

In EVPN instance view:

segment-routing ipv6 { best-effort | traffic-engineering | traffic-engineering best-effort }

undo segment-routing ipv6

In cross-connect group EVPN instance view or VSI EVPN instance view:

segment-routing ipv6 { best-effort | traffic-engineering [ track-bfd ] | traffic-engineering [ track-bfd ] best-effort }

undo segment-routing ipv6

Default

The device searches the IPv6 routing table based on the next hop of a matching EVPN route to forward traffic.

Views

Cross-connect group EVPN instance view

VSI EVPN instance view

Predefined user roles

network-admin

Parameters

best-effort: Specifies the SRv6 BE mode.

traffic-engineering: Specifies the SRv6 TE mode.

traffic-engineering best-effort: Specifies the SRv6 TE and SRv6 BE hybrid mode.

track-bfd: Associates the SRv6 TE policy that contains paths between two PEs with the static BFD session specified for testing the IP connectivity between the PEs in SRv6 TE mode. For this purpose, you must specify this keyword and create a static BFD session to test the IP connectivity between the two PEs. If the static BFD session goes down, the state of the SRv6 TE policy also changes to down. This mechanism avoids traffic forwarding failure caused by path disconnectivity.

Usage guidelines

Use this command in an EVPN VPWS over SRv6 or EVPN VPLS over SRv6 network.

After the PE receives a customer packet destined for an End.DX2, End.DT2M, or End.DT2U SID, it forwards the packet according to the route recursion mode.

·     SRv6 BE mode—This mode is also called SID-based forwarding mode. In this mode, the PE first encapsulates the End.DX2, End.DT2M, or End.DT2U SID into the packet. Then, the PE searches the IPv6 routing table based on the SID encapsulated in the packet to forward the packet.

·     SRv6 TE mode—This mode is also called next hop-based forwarding mode. In this mode, when the PE forwards the packet, it first searches the tunnel policies for a matching SRv6 TE policy based on the next hop of a matching route. Then, the PE adds an SRH to the packet. The SRH includes the End.DX2, End.DT2M, or End.DT2U SID and the SID list of the SRv6 TE policy. Finally, the PE forwards the encapsulated packet through the SRv6 TE policy.

·     SRv6 TE and SRv6 BE hybrid mode—In this mode, the PE preferentially uses the SRv6 TE mode to forward the packet. If no SRv6 TE policy is available for the packet, the PE forwards the packet in SRv6 BE mode.

Examples

# In VSI EVPN instance view, specify the SRv6 BE route recursion mode.

<Sysname> system-view

[Sysname] vsi aaa

[Sysname-vsi-aaa] evpn encapsulation srv6

[Sysname-vsi-aaa-mpls-srv6] segment-routing ipv6 best-effort

# In cross-connect group EVPN instance view, specify the SRv6 BE route recursion mode.

<Sysname> system-view

[Sysname] xconnect-group vpna

[Sysname-xcg-vpna] evpn encapsulation srv6

[Sysname-xcg-vpna-evpn-mpls] segment-routing ipv6 best-effort

Related commands

bfd static (High Availability Command Reference)

segment-routing ipv6 best-effort

Use segment-routing ipv6 best-effort to recurse routes to SRv6 BE tunnels.

Use undo segment-routing ipv6 best-effort to restore the default.

Syntax

In BGP-VPN IPv4 unicast address family view or BGP-VPN IPv6 unicast address family view:

segment-routing ipv6 best-effort [ evpn ]

undo segment-routing ipv6 best-effort [ evpn ]

In BGP IPv4 unicast address family view or BGP IPv6 unicast address family view:

segment-routing ipv6 best-effort

undo segment-routing ipv6 best-effort

Default

A PE searches the IPv6 routing table based on the next hop of a matching route to forward traffic.

Views

BGP-VPN IPv4 unicast address family view

BGP-VPN IPv6 unicast address family view

BGP IPv4 unicast address family view

BGP IPv6 unicast address family view

Predefined user roles

network-admin

Parameters

evpn: Recurses EVPN routes to SRv6 BE tunnels. If you do not specify this keyword, the device recurses BGP VPNv4 or VPNv6 routes to SRv6 BE tunnels.

Usage guidelines

This command is applicable to the MPLS L3VPN over SRv6 and EVPN L3VPN over SRv6 networks. This command enables a PE to forward packets by looking up the IPv6 routing table based on the SRv6 SIDs in the packets.

Use this command in different address family views according to your network scenario.

·     In the private network IPv4 or IPv6 over SRv6 scenario, use this command in BGP-VPN IPv4 unicast address family view or BGP-VPN IPv6 unicast address family view.

·     In the public network IPv4 or IPv6 over SRv6 scenario, use this command in BGP IPv4 unicast address family view or BGP IPv6 unicast address family view.

This command is mutually exclusive with the segment-routing ipv6 traffic-engineering command.

Examples

# In BGP-VPN IPv4 unicast address family view, recurse private network routes to SRv6 BE tunnels.

<Sysname> system-view

[Sysname] bgp 100

[Sysname-bgp-default] ip vpn-instance vpn1

[Sysname-bgp-default-vpn1] address-family ipv4

[Sysname-bgp-default-ipv4-vpn1] segment-routing ipv6 best-effort

# In BGP-VPN IPv6 unicast address family view, recurse private network routes to SRv6 BE tunnels.

<Sysname> system-view

[Sysname] bgp 100

[Sysname-bgp-default] ip vpn-instance vpn1

[Sysname-bgp-default-vpn1] address-family ipv6

[Sysname-bgp-default-ipv6-vpn1] segment-routing ipv6 best-effort

Related commands

segment-routing ipv6 locator

segment-routing ipv6 locator

Use segment-routing ipv6 locator to apply a locator to a BGP family.

Use undo segment-routing ipv6 locator to restore the default.

Syntax

In BGP-VPN IPv4 unicast address family view or BGP-VPN IPv6 unicast address family view:

segment-routing ipv6 locator locator-name [ evpn ] [ auto-sid-disable ]

undo segment-routing ipv6 locator [ evpn ]

Default

No locator is applied to a BGP family.

Views

BGP-VPN IPv4 unicast address family view

BGP-VPN IPv6 unicast address family view

BGP IPv4 unicast address family view

BGP IPv6 unicast address family view

Predefined user roles

network-admin

Parameters

locator-name: Specifies a locator by its name, a case-sensitive string of 1 to 31 characters. The specified locator must exist.

evpn: Adds the SID attribute to private network routes when the routes are converted to EVPN routes. If you do not specify this keyword, the command adds the SID attribute to private network routes when the routes are converted to BGP VPNv4 or VPNv6 routes.

auto-sid-disable: Disables automatic SRv6 SID allocation. If you do not specify this keyword, the device allows dynamically allocated SRv6 SIDs. If static SRv6 SIDs are configured when automatic SRv6 SID allocation is enabled, the static SRv6 SIDs take precedence. If no static SRv6 SIDs are configured when automatic SRv6 SID allocation is enabled, the system dynamically allocates SRv6 SIDs.

Usage guidelines

Use this command to enable a BGP family to use BGP routes to advertise SRv6 SIDs in the specified locator.

If you execute this command multiple times for the same address family, the most recent configuration takes effect.

Examples

# Apply locator abc to BGP-VPN IPv4 unicast address family view.

<Sysname> system-view

[Sysname] bgp 100

[Sysname-bgp-default] ip vpn-instance vpn1

[Sysname-bgp-default-vpn1] address-family ipv4

[Sysname-bgp-default-ipv4-vpn1] segment-routing ipv6 locator abc

# Apply locator abc to BGP-VPN IPv6 unicast address family view.

<Sysname> system-view

[Sysname] bgp 100

[Sysname-bgp-default] ip vpn-instance vpn1

[Sysname-bgp-default-vpn1] address-family ipv6

[Sysname-bgp-default-ipv6-vpn1] segment-routing ipv6 locator abc

# Apply locator abc to BGP-VPN IPv6 unicast address family view.

<Sysname> system-view

[Sysname] bgp 100

[Sysname-bgp-default] ip vpn-instance vpn1

[Sysname-bgp-default-vpn1] address-family ipv6

[Sysname-bgp-default-ipv6-vpn1] segment-routing ipv6 locator abc evpn

segment-routing ipv6 traffic-engineering

Use segment-routing ipv6 traffic-engineering to recurse routes to SRv6 TE policy tunnels.

Use undo segment-routing ipv6 traffic-engineering to restore the default.

Syntax

In BGP-VPN IPv4 unicast address family view or BGP-VPN IPv6 unicast address family view:

segment-routing ipv6 traffic-engineering [ best-effort ] [ evpn ]

undo segment-routing ipv6 traffic-engineering [ best-effort ] [ evpn ]

Default

A PE searches the IPv6 routing table based on the next hop of a matching route to forward traffic.

Views

BGP-VPN IPv4 unicast address family view

BGP-VPN IPv6 unicast address family view

BGP IPv4 unicast address family view

BGP IPv6 unicast address family view

Predefined user roles

network-admin

Parameters

best-effort: Switches to the SRv6 BE route recursion mode when the matching SRv6 TE policy tunnel fails for L3VPN traffic. If you do not specify this keyword, the PE looks up the routing table based on the destination IP address to forward L3VPN traffic when the matching SRv6 TE policy tunnel fails.

evpn: Recurses the private network routes based on the SID attribute in EVPN routes. If you do not specify this keyword, the device recurses the private network routes based on the SID attribute in BGP VPNv4 or VPNv6 routes.

Usage guidelines

This command is applicable to the MPLS L3VPN over SRv6 and EVPN L3VPN over SRv6 networks. This command enables PEs to recurse routes to SRv6 TE policy tunnels and use the tunnels to forward L3VPN traffic between the PEs.

To improve high availability for L3VPN packet forwarding, specify the best-effort keyword. A PE forwards an L3VPN packet as follows:

1.     The PE forwards the packet through the matching SRv6 TE policy tunnel.

2.     If the matching SRv6 TE policy tunnel fails, the PE forwards the packet in SRv6 BE mode.

3.     If the packet forwarding still fails in SRv6 BE mode, the PE forwards the packet by looking up the routing table based on the destination IP address of the packet.

4.     If the packet forwarding still fails, the PE drops the packet.

Use this command in different address family views according to your network scenario.

·     In the private network IPv4 or IPv6 over SRv6 scenario, use this command in BGP-VPN IPv4 unicast address family view or BGP-VPN IPv6 unicast address family view.

·     In the public network IPv4 or IPv6 over SRv6 scenario, use this command in BGP IPv4 unicast address family view or BGP IPv6 unicast address family view.

This command is mutually exclusive with the segment-routing ipv6 best-effort command.

Examples

# In BGP IPv4 unicast address family view, recurse routes to SRv6 TE policy tunnels.

<Sysname> system-view

[Sysname] bgp 100

[Sysname-bgp-default] address-family ipv4

[Sysname-bgp-default-ipv4] segment-routing ipv6 traffic-engineering

Related commands

segment-routing ipv6 best-effort

srv6-pw-type

Use srv6-pw-type to specify the SRv6 PW data encryption type.

Use undo srv6-pw-type to restore the default.

Syntax

srv6-pw-type { ethernet | vlan }

undo srv6-pw-type

Default

The SRv6 PW data encryption type is not specified. The VLAN type applies.

Views

PW class view

Predefined user roles

network-admin

Parameters

ethernet: Specifies the SRv6 PW data encryption type as Ethernet.

vlan: Specifies the SRv6 PW data encryption type as VLAN.

Usage guidelines

With Ethernet specified as the SRv6 PW data encryption type, the frames transmitted on the SRv6 PW cannot carry P-Tags (service delimiters added to distinguish users as required by ISPs).

·     If the PE receives a packet carrying a P-Tag from the CE, it removes the P-Tag, adds an SRv6 SID, and then forwards the packet.

·     If the PE receives a packet without a P-Tag from the CE, it directly adds an SRv6 SID, and then forwards the packet.

·     For a packet to be sent to the CE, if the access mode is specified as VLAN with the ac interface command, the PE adds the P-Tag and then forwards the packet to the CE. If the access mode is specified as Ethernet, the PE forwards the packet to the CE without adding a P-Tag. In addition, it does not rewrite or remove any tags.

With VLAN specified as the SRv6 PW data encryption type, the frames transmitted on the SRv6 PW must carry P-Tags.

·     If the PE receives a packet carrying a P-Tag from the CE, it retains the P-Tag, adds an SRv6 SID, and then forwards the packet.

·     If the PE receives a packet without a P-Tag from the CE, it adds an empty P-Tag with value 1, adds an SRv6 SID, and then forwards the packet.

·     For a packet to be sent to the CE, if the access mode is specified as VLAN with the ac interface command, the PE rewrites or retains the P-Tag and then forwards the packet to the CE. If the access mode is specified as Ethernet, the PE removes the P-Tag and then forwards the packet to the CE.

Examples

# Specify the SRv6 PW data encryption type as Ethernet.

<Sysname> system-view

[Sysname] pw-class pw100

[Sysname-pw-pw100] srv6-pw-type ethernet

tracert evpn vpls srv6

Use tracert evpn vpls srv6 to trace the path of an SRv6 PW from the local PE to the remote PE in an EVPN VPLS over SRv6 network.

Syntax

tracert evpn vpls srv6 vsi vsi-name mac mac-address [ end-op endop ] [ -a source-ipv6 | -h hop-limit | -r reply-mode | -t time-out | -tc tc ] *

Views

Any view

Predefined user roles

network-admin

Parameters

vsi vsi-name: Specifies a VSI by its name, a case-sensitive string of 1 to 31 characters.

mac mac-address: Specifies a host attached to a remote PE by its MAC address in H-H-H format. Do not specify a broadcast MAC address, multicast MAC address, or all-zeros MAC address.

end-op endop: Specifies an End.OP SID to be added to MPLS echo requests. The End.OP SID is used to locate the destination node. If you do not specify an End.OP SID, the local PE does not add an End.OP SID to MPLS echo requests.

-a source-ipv6: Specifies the source IPv6 address of MPLS echo requests. If you do not specify a source IPv6 address, the IPv6 address of the traffic output interface is used as the source IPv6 address of MPLS echo requests.

-h hop-limit: Specifies the maximum number of hops allowed for an MPLS echo request. The value range for the hop-limit argument is 1 to 255, and the default value is 255.

-r reply-mode: Specifies the reply mode used by the receiver (the remote PE) to reply to MPLS echo requests. The value for the reply-mode argument can be 2 or 4, and the default value is 2. If the mode is 2, the receiver searches the IP forwarding table for the destination IP address to forward MPLS echo replies. If the mode is 4, the receiver searches the IPv6 routing table for the source IPv6 address of the echo requests, encapsulates an SRH to the replies, and forwards them.

-t time-out: Specifies the timeout time of MPLS echo replies, in milliseconds. The value range for the time-out argument is 0 to 65535, and the default value is 2000. If the local PE does not receive an MPLS echo reply within the timeout time after sending an MPLS echo request, it determines that the MPLS echo reply times out.

-tc tc: Specifies the traffic class value in MPLS echo replies. The value range for the tc argument is 0 to 255 and the default value is 0.

Usage guidelines

In an EVPN VPLS over SRv6 network, a PE transmits data packets to a remote PE over an SRv6 PW. Use this command to trace the path of the SRv6 PW from the local PE to the remote PE when packet loss or traffic interruption occurs between the PEs. This command helps you locate the failed nodes on the path.

Examples

# Trace route to a remote PE through an SRv6 PW in VSI vpna by reaching remote-MAC 0002-0002-0002.

<Sysname> tracert evpn vpls srv6 vsi vpna mac 2-2-2

Trace route to a remote PE in VSI vpna over SRv6 by reaching remote-MAC 0002-0002-0002.

Press CTRL+C to break.

  Hop  Wait time     Type       Replier

  0    0 ms           Ingress

  1    4 ms           Transit    1111::2

  2    5 ms           Transit    2222::2

  3    6 ms           Transit    3333::2

  4    6 ms           Egress     4444::2

Table 11 Command output

Field

Description

Trace route to a remote PE in VSI vpna over SRv6 by reaching remote-MAC 0002-0002-0002

Trace route to a remote PE through an SRv6 PW in VSI vpna by reaching remote-MAC 0002-0002-0002.

Press CTRL+C to break

Press escape key Ctrl+C to abort the tracert operation.

Hop

Hop number.

Wait time

Interval between the time when an echo request was sent and the time when the reply of the echo request was received. The unit is millisecond.

Type

Node type:

·     Ingress.

·     Transit.

·     Egress.

Replier

IPv6 address of the node.

Request time out

This field is available if the local PE does not receive any MPLS echo reply to an MPLS echo request when the echo reply timeout time expires.

 

Related commands

ping evpn vpls srv6

tracert evpn vpws srv6

Use tracert evpn vpws srv6 to trace the path of an SRv6 PW from the local PE to the remote PE in an EVPN VPWS over SRv6 network.

Syntax

tracert evpn vpws srv6 xconnect-group group-name local-service-id  remote-service-id [ -a source-ip | -h hop-limit | -r reply-mode | -t time-out | -tc tc ] *

Views

Any view

Predefined user roles

network-admin

Parameters

xconnect-group group-name: Specifies a cross-connect group by its name, a case-sensitive string of 1 to 31 characters. The string cannot contain a hyphen (-).

local-service-id: Specifies a local service ID in the range of 1 to 16777215.

remote-service-id: Specifies a remote service ID in the range of 1 to 16777215.

-a source-ip: Specifies the source IPv6 address of MPLS echo requests. If you do not specify a source IPv6 address, the IPv6 address of the traffic output interface is used as the source IPv6 address of MPLS echo requests.

-h hop-limit: Specifies the maximum number of hops allowed for an MPLS echo request. The value range for the hop-limit argument is 1 to 255, and the default value is 255.

-r reply-mode: Specifies the reply mode used by the receiver (the remote PE) to reply to an MPLS echo request. The value for the reply-mode argument can be 2 or 4, and the default value is 2. If the mode is 2, the receiver searches the IP forwarding table for the destination IP address to forward MPLS echo replies. If the mode is 4, the receiver searches the IPv6 routing table for the source IPv6 address of the echo requests, encapsulates an SRH to the replies, and forwards them.

-t time-out: Specifies the timeout time of MPLS echo replies, in milliseconds. The value range for the time-out argument is 0 to 65535, and the default value is 2000. If the local PE does not receive an MPLS echo reply within the timeout time after sending an MPLS echo request, it determines that the MPLS echo reply times out.

-tc tc: Specifies the traffic class value in MPLS echo replies. The value range for the tc argument is 0 to 255 and the default value is 0.

Usage guidelines

In an EVPN VPWS over SRv6 network, a PE transmits data packets to a remote PE over an SRv6 PW. Use this command to trace the path of the SRv6 PW from the local PE to the remote PE when packet loss or traffic interruption occurs between the PEs. This command helps you locate the failed nodes on the path.

Examples

# Trace the route that an SRv6 PW traverses from the local PE to the remote PE in an EVPN VPWS over SRv6 network. The SRv6 PW belongs to cross-connect group xcga, its local service ID is 2, and its remote service ID is 1.

<Sysname> tracert evpn vpws srv6 xconnect-group xcga 1 2

Trace route to a remote PE over SRv6 through a PW with local service ID 2 and remote service ID 1 in cross-connect group xcga.

Press CTRL+C to break.

  Hop   Wait time      Type       Replier

  0     0 ms            Ingress

  1     4 ms            Transit    1111::2

  2     5 ms            Transit    2222::2

  3     6 ms            Transit    3333::2

  4     6 ms            Egress     3333::2

Table 12 Command output

Field

Description

Trace route to a remote PE over SRv6 through a PW with local service ID 2 and remote service ID 1 in cross-connect group xcga

Trace route to a remote PE through an SRv6 PW with local service ID 2 and remote service ID 1 in cross-connect group xcga.

Hop

Hop number.

Wait time

Interval between the time when an echo request was sent and the time when the reply of the echo request was received. The unit is millisecond.

Press CTRL+C to break

Press escape key Ctrl+C to abort the tracert operation.

Type

Node type:

·     Ingress.

·     Transit.

·     Egress.

Replier

IPv6 address of the node.

Request time out

This field is available if the local PE does not receive any MPLS echo reply to an MPLS echo request when the echo reply timeout time expires.

 

Related commands

ping evpn vpws srv6

 

  • Cloud & AI
  • InterConnect
  • Intelligent Computing
  • Intelligent Storage
  • Security
  • SMB Products
  • Intelligent Terminal Products
  • Product Support Services
  • Technical Service Solutions
All Services
  • Resource Center
  • Policy
  • Online Help
  • Technical Blogs
All Support
  • Become A Partner
  • Partner Policy & Program
  • Global Learning
  • Partner Sales Resources
  • Partner Business Management
  • Service Business
All Partners
  • Profile
  • News & Events
  • Online Exhibition Center
  • Contact Us
All About Us
新华三官网