Use address-family ipv6 sr-policy to create the BGP IPv6 SR policy address family and enter its view, or enter the view of the existing BGP IPv6 SR policy address family.

Use undo address-family ipv6 sr-policy to delete the BGP IPv6 SR policy address family and all the configuration in the BGP IPv6 SR policy address family.

Syntax

address-family ipv6 sr-policy

undo address-family ipv6 sr-policy

Default

The BGP IPv6 SR policy address family does not exist.

Views

BGP instance view

Predefined user roles

network-admin

Usage guidelines

The configuration in BGP IPv6 SR policy address family view applies only to routes and peers in the BGP IPv6 SR policy address family.

Examples

# In BGP instance view, create the BGP IPv6 SR policy address family and enter its view.

<Sysname> system-view

[Sysname] bgp 100

[Sysname-bgp-default] address-family ipv6 sr-policy

[Sysname-bgp-default-srpolicy-ipv6]

advertise ebgp enable

Use advertise ebgp enable to enable advertising BGP IPv6 SR policy routes to EBGP peers.

Use undo advertise ebgp enable to restore the default.

Syntax

advertise ebgp enable

undo advertise ebgp enable

Default

BGP IPv6 SR policy routes are not advertised to EBGP peers.

Views

BGP IPv6 SR policy address family

Predefined user roles

network-admin

Usage guidelines

By default, BGP IPv6 SR policy routes are advertised among IBGP peers. To advertise BGP IPv6 SR policy routes to EBGP peers, you must execute this command to enable the advertisement capability.

Examples

# Enable advertising BGP IPv6 SR policy routes to EBGP peers.

<Sysname> system-view

[Sysname] bgp 100

[Sysname-bgp-default] address ipv6 sr-policy

[Sysname-bgp-default-srpolicy-ipv6] advertise ebgp enable

affinity (SRv6 TE ODN dynamic view)

Use affinity to create the affinity attribute rule and enter its view, or enter the view of the existing affinity attribute rule.

Use undo affinity to delete the affinity attribute rule view and all the configurations in the view.

Syntax

affinity { include-all | include-any | exclude-any }

undo affinity { include-all | include-any | exclude-any }

Default

The affinity attribute rule is not created for an SRv6 TE policy.

Views

SRv6 TE ODN dynamic view

Predefined user roles

network-admin

Parameters

include-all: Uses the links that include all specific affinity attributes.

include-any: Uses the links that include any specific affinity attribute.

exclude-any: Uses the links that do not include any specific affinity attribute.

Examples

# Create the include-all affinity attribute rule and enter affinity attribute rule view.

<Sysname> system-view

[Sysname] segment-routing ipv6

[Sysname-segment-routing-ipv6] traffic-engineering

[Sysname-srv6-te] on-demand color 1

[Sysname-srv6-te-odn-1] dynamic

[Sysname-srv6-te-odn-1-dynamic] affinity include-all

[Sysname-srv6-te-odn-1-dynamic-aff-include-all]

affinity (SRv6 TE policy constraints view)

Use affinity to create and enter the affinity attribute view, or enter the existing affinity attribute view.

Use undo affinity to delete the affinity attribute view and all the configurations in the view.

Syntax

affinity

undo affinity

Default

The affinity attribute is not created for an SRv6 TE policy.

Views

Constraints view

Predefined user roles

network-admin

Examples

# Enter affinity attribute view.

<Sysname> system-view

[Sysname] segment-routing-ipv6

[Sysname-segment-routing-ipv6] traffic-engineering

[Sysname-srv6-te] policy a1

[Sysname-srv6-te-policy-a1] candidate-paths

[Sysname-srv6-te-policy-a1-path] preference 200

[Sysname-srv6-te-policy-a1-path-pref-200] constraints

[Sysname-srv6-te-policy-a1-path-pref-200-const] affinity

[Sysname-srv6-te-policy-a1-path-pref-200-const-aff]

affinity-map

Use affinity-map to create the constraints mapping and enter its view, or enter the view of the existing constraints mapping.

Use undo affinity-map to delete the constraints mapping view and all the configurations in the view.

Syntax

affinity-map

undo affinity-map

Default

No constraints mapping exists.

Views

SRv6 TE view

Predefined user roles

network-admin

Examples

# Create the constraints mapping and enter its view

<Sysname> system-view

[Sysname] segment-routing ipv6

[Sysname-segment-routing-ipv6] traffic-engineering

[Sysname-srv6-te] affinity-map

[Sysname-srv6-te-affinity-map]

autoroute enable (SRv6 TE policy view)

Use autoroute enable to enable automatic route advertisement for an SRv6 TE policy.

Use undo autoroute enable to disable automatic route advertisement for an SRv6 TE policy.

Syntax

autoroute enable [ isis | ospfv3 ]

undo autoroute enable

Default

Automatic route advertisement is disabled for an SRv6 TE policy.

Views

SRv6 TE policy view

Predefined user roles

network-admin

Parameters

isis: Enables automatic route advertisement for IPv6 IS-IS.

ospfv3: Enables automatic route advertisement for OSPFv3.

Usage guidelines

The automatic route advertisement feature takes an SRv6 TE policy tunnel as a direct link to participate in IGP (OSPFv3 or IPv6 IS-IS) route computation, allowing traffic to be forwarded through the SRv6 TE policy tunnel.

An SRv6 TE policy supports only automatic route advertisement in IGP shortcut mode, which is also called autoroute announce. Autoroute announce regards the SRv6 TE policy tunnel as a link that connects the tunnel ingress and egress. The tunnel ingress includes the SRv6 TE policy tunnel in IGP route computation.

If you do not specify the isis or ospfv3 keyword, both OSPFv3 and IPv6 IS-IS will include the SRv6 TE policy tunnel in route computation.

If you use the autoroute enable command both for an SRv6 TE policy group and an SRv6 TE policy, and the SRv6 TE policy group tunnel and SRv6 TE policy tunnel form ECMP routes, the device preferentially forwards traffic through the SRv6 TE policy group tunnel.

Examples

# Enable automatic route advertisement for an SRv6 TE policy.

<Sysname> system-view

[Sysname] segment-routing ipv6

[Sysname-segment-routing-ipv6] traffic-engineering

[Sysname-srv6-te] policy srv6policy

[Sysname-srv6-te-policy-srv6policy] autoroute enable

Related commands

autoroute metric (SRv6 TE policy view)

autoroute enable (SRv6 TE policy group view)

Use autoroute enable to enable automatic route advertisement for an SRv6 TE policy group.

Use undo autoroute enable to disable automatic route advertisement for an SRv6 TE policy group.

Syntax

autoroute enable isis

undo autoroute enable

Default

Automatic route advertisement is disabled for an SRv6 TE policy group.

Views

SRv6 TE policy group view

Predefined user roles

network-admin

Parameters

isis: Enables automatic route advertisement for IPv6 IS-IS.

Usage guidelines

Operating mechanism

The automatic route advertisement feature takes an SRv6 TE policy group tunnel as an ingress-to-egress direct link to participate in IGP (IPv6 IS-IS) route computation, allowing traffic to be forwarded through the SRv6 TE policy group tunnel.

An SRv6 TE policy group supports only automatic route advertisement in IGP shortcut mode, which is also called autoroute announce. Autoroute announce regards the SRv6 TE policy group tunnel as a link that connects the tunnel ingress and egress. The tunnel ingress includes the SRv6 TE policy group tunnel in IGP route computation.

Restrictions and guidelines

After automatic route advertisement is enabled for an SRv6 TE policy group, traffic destined for the public network can be steered to the SRv6 TE policy group for further forwarding. The SRv6 TE policy group cannot correctly forward traffic to public-network IP addresses if one of the following conditions exists:

· The SRv6 TE policy group is configured to forward traffic only in SRv6 BE mode.

· The SRv6 TE policy group forwards traffic only in SRv6 BE mode, because all members in the SRv6 TE policy group are in down state and do not take effect.

Examples

# Enable automatic route advertisement for an SRv6 TE policy group.

<Sysname> system-view

[Sysname] segment-routing ipv6

[Sysname-segment-routing-ipv6] traffic-engineering

[Sysname-srv6-te] policy-group 1

[Sysname-srv6-te-policy-group-1] autoroute enable isis

Related commands

autoroute metric (SRv6 TE policy group view)

autoroute isis

Use autoroute isis to configure a policy for automatic route advertisement in IS-IS.

Use undo autoroute isis to restore the default.

Syntax

autoroute isis { host-only | include-ipv4 | route-policy route-policy-name } *

undo autoroute isis

Default

All IPv6 IS-IS routes can be automatically redirected and recursed to an SRv6 TE policy group or SRv6 TE policy tunnel. IPv4 IS-IS routes cannot be automatically redirected or recursed to an SRv6 TE policy group or SRv6 TE policy tunnel.

Views

SRv6 TE policy group view

SRv6 TE policy view

Predefined user roles

network-admin

Parameters

host-only: Allows only host routes to recurse to an SRv6 TE policy group or SRv6 TE policy tunnel.

include-ipv4: Allows both IPv4 IS-IS routes and IPv6 IS-IS routes to recurse to an SRv6 TE policy group or SRv6 TE policy tunnel. With this keyword, the device includes the SRv6 TE policy group or SRv6 TE policy tunnel as a direct link in the route calculation of IPv4 IS-IS and IPv6 IS-IS. If you do not specify this keyword, the device allows only IPv6 IS-IS routes to recurse to the SRv6 TE policy group or SRv6 TE policy tunnel.

route-policy route-policy-name: Specifies a routing policy by its name. The route-policy-name argument is a case-sensitive string of 1 to 63 characters. If you specify a routing policy, this command allows only routes that match the specified routing policy to recurse to an SRv6 TE policy group or SRv6 TE policy tunnel.

Usage guidelines

By default, IPv6 IS-IS takes an SRv6 TE policy or SRv6 TE policy group tunnel as an ingress-to-egress direct link to participate in all IPv6 IS-IS route computations. If the link has the optimal IS-IS metric value, traffic destined for IPv6 IS-IS routes will be steered to the SRv6 TE policy or SRv6 TE policy group tunnel for forwarding.

To use an SRv6 TE policy or SRv6 TE policy group tunnel to guarantee traffic destined for specific routes, and to control the forwarding path of the traffic, you can use this command. This command recurses only the routes that meet the specified conditions to the SRv6 TE policy or SRv6 TE policy group tunnel.

For the autoroute isis command to take effect in SRv6 TE policy view or SRv6 TE policy group view, you must execute the following commands:

· The autoroute enable command in SRv6 TE policy view or SRv6 TE policy group view.

· The srv6-policy autoroute enable command in IS-IS IPv6 address family view.

If you execute the autoroute isis command multiple times in the same view, the most recent configuration takes effect.

Examples

# Configure IS-IS automatic route advertisement to allow only host routes to recurse to SRv6 TE policy p1.

<Sysname> system-view

[Sysname] segment-routing ipv6

[Sysname-segment-routing-ipv6] traffic-engineering

[Sysname-srv6-te] policy p1

[Sysname-srv6-te-policy-p1] autoroute enable isis

[Sysname-srv6-te-policy-p1] autoroute isis host-only

# Configure IS-IS automatic route advertisement to allow only host routes to recurse to SRv6 TE policy group 1.

<Sysname> system-view

[Sysname] segment-routing ipv6

[Sysname-segment-routing-ipv6] traffic-engineering

[Sysname-srv6-te] policy-group 1

[Sysname-srv6-te-policy-group-1] autoroute enable isis

[Sysname-srv6-te-policy-group-1] autoroute isis host-only

Related commands

autoroute enable (SRv6 TE Policy group view)

autoroute enable (SRv6 TE Policy view)

srv6-policy autoroute enable

autoroute metric (SRv6 TE policy view)

Use autoroute metric to configure an autoroute metric for an SRv6 TE policy.

Use undo autoroute metric to restore the default.

Syntax

autoroute metric { absolute value | relative value }

undo autoroute metric

Default

The autoroute metric of an SRv6 TE policy equals its IGP metric.

Views

SRv6 TE policy view

Predefined user roles

network-admin

Parameters

absolute value: Specifies an absolute metric, an integer in the range of 1 to 65535.

relative value: Specifies a relative metric, an integer in the range of –10 to +10. The specified relative metric plus the shortest IGP metric of the SRv6 TE policy tunnel from the ingress to the egress is the actual metric of the SRv6 TE policy.

Usage guidelines

After automatic route advertisement is enabled for an SRv6 TE policy, the policy is included in IGP route computation as a link. You can use this command to configure the metric of this link used for IGP route computation.

Examples

# Set an absolute metric of 15 for SRv6 TE policy srv6policy.

<Sysname> system-view

[Sysname] segment-routing ipv6

[Sysname-segment-routing-ipv6] traffic-engineering

[Sysname-srv6-te] policy srv6policy

[Sysname-srv6-te-policy-srv6policy] autoroute metric absolute 15

Related commands

autoroute enable

autoroute metric (SRv6 TE policy group view)

Use autoroute metric to configure an autoroute metric for an SRv6 TE policy group.

Use undo autoroute metric to restore the default.

Syntax

autoroute metric { absolute value | relative value }

undo autoroute metric

Default

The autoroute metric of an SRv6 TE policy group equals the default IGP metric. For IPv6 IS-IS, the autoroute metric of an SRv6 TE policy group is 10.

Views

SRv6 TE policy group view

Predefined user roles

network-admin

Parameters

absolute value: Specifies an absolute metric, an integer in the range of 1 to 65535.

relative value: Specifies a relative metric, an integer in the range of –10 to +10. The specified relative metric plus the shortest IGP metric of the SRv6 TE policy group tunnel from the ingress to the egress is the actual metric of the SRv6 TE policy group.

Usage guidelines

After automatic route advertisement is enabled for an SRv6 TE policy group, the policy group is included in IGP route computation as a direct link. You can use this command to configure the metric of this link used for IGP route computation.

Examples

# Set an absolute metric of 15 for SRv6 TE policy group 1.

<Sysname> system-view

[Sysname] segment-routing ipv6

[Sysname-segment-routing-ipv6] traffic-engineering

[Sysname-srv6-te] policy-group 1

[Sysname-srv6-te-policy-group-1] autoroute metric absolute 15

Related commands

autoroute enable (SRv6 TE policy group view)

backup hot-standby

Use backup hot-standby to configure hot standby for an SRv6 TE policy.

Use undo backup hot-standby to restore the default.

Syntax

backup hot-standby { disable | enable }

undo backup hot-standby

Default

Hot standby is not configured for an SRv6 TE policy.

Views

SRv6 TE policy view

Predefined user roles

network-admin

Parameters

disable: Disables hot standby for the SRv6 TE policy.

enable: Enables hot standby for the SRv6 TE policy.

Usage guidelines

The hot standby feature takes the candidate path with the greatest preference value in the SRv6 TE policy as the primary path and that with the second greatest preference value as the standby path. When the forwarding paths corresponding to all SID lists of the primary path fail, the standby path immediately takes over to minimize service interruption.

You can enable hot standby for all SRv6 TE policies globally in SRv6 TE view or for a specific SRv6 TE policy in SRv6 TE policy view. The policy-specific configuration takes precedence over the global configuration. An SRv6 TE policy uses the global configuration only when it has no policy-specific configuration.

Examples

# Enable hot standby for SRv6 TE policy 1.

<Sysname> system-view

[Sysname] segment-routing ipv6

[Sysname-segment-routing-ipv6] traffic-engineering

[Sysname-srv6-te] policy 1

[Sysname-srv6-te-policy-1] backup hot-standby enable

Related commands

srv6-policy backup hot-standby enable

bestroute encap-type

Use bestroute encap-type to specify the packet encapsulation type preferred in optimal route selection.

Use undo bestroute encap-type to restore the default.

Syntax

bestroute encap-type { mpls | srv6 } [ preferred ]

undo bestroute encap-type

Default

The device does not select optimal routes according to the packet encapsulation type.

Views

BGP-VPN instance view.

Predefined user roles

network-admin

Parameters

mpls: Prefers to use MPLS-encapsulated routes during optimal route selection.

srv6: Prefers to use SRv6-encapsulated routes during optimal route selection.

preferred: Increases the priority of packet encapsulation type in BGP route selection.

Usage guidelines

For more information about the priority order of the configuration in this command in BGP route selection, see BGP overview in Layer 3—IP Routing Configuration Guide.

If you execute this command multiple times, the most recent configuration takes effect.

Examples

# Configure BGP to prefer SRv6-encapsulated routes during optimal route selection.

<Sysname> system-view

[Sysname] bgp 100

[Sysname-bgp-default] ip vpn-instance vpn1

[Sysname-bgp-default-vpn1] bestroute encap-type srv6

best-effort match dscp (DSCP forward type view)

Use best-effort match dscp to specify DSCP values to match traffic that will be forwarded in SRv6 BE mode in an SRv6 TE policy group ODN template.

Use undo best-effort match dscp to remove the DSCP values specified for the SRv6 BE mode to match traffic in an SRv6 TE policy group ODN template.

Syntax

best-effort match dscp { ipv4 | ipv6 } dscp-value-list

undo best-effort match dscp { ipv4 | ipv6 } [ dscp-value-list ]

best-effort { ipv4 | ipv6 } default

undo best-effort { ipv4 | ipv6 } default

Default

No DSCP values are specified for the SRv6 BE mode to match traffic.

Views

DSCP forward type view

Predefined user roles

network-admin

Parameters

ipv4: Specifies DSCP values of IPv4 packets.

ipv6: Specifies DSCP values of IPv6 packets.

dscp-value-list: Specifies a space-separated list of up to 32 DSCP value items. Each item specifies a DSCP value or a range of DSCP values in the form of dscp-value1 to dscp-value2. The value range for DSCP values in 0 to 63. The value for the dscp-value2 argument must be greater than or equal to the value for the dscp-value1 argument. If you do not specify a DSCP value for the undo best-effort match dscp command, the command removes all DSCP values specified for the SRv6 BE mode to match traffic.

default: Specifies SRv6 BE mode as the default forwarding mode for packets in a specific address family. If the DSCP values of the packets do not match any SRv6 TE policy or SRv6 BE forwarding policy, the device will forward the packets in SRv6 BE mode. Typically, SRv6 BE mode is used as a backup method for SRv6 TE policy-based forwarding.

Usage guidelines

About this task

Use this command to configure traffic with the specified DSCP values to be forwarded in SRv6 BE mode after the traffic is steered to an SRv6 TE policy group created based on the SRv6 TE policy group ODN template. When the device forwards packets in SRv6 BE mode, it encapsulates the original packets with a new IPv6 header. The destination address in the new IPv6 header is the VPN SID assigned to routes by the egress node of the SRv6 TE policy group. Then, the device performs an IPv6 routing table lookup to forward the encapsulated packets. If the VPN SID is unreachable, the SRv6 BE mode is invalid.

Operating mechanism

After a packet is steered to an SRv6 TE policy group, the device searches for a matching forwarding policy for the packet based on the DSCP value in the packet and the configuration status of the color match dscp, best-effort match dscp, and drop-upon-mismatch enable commands. If the device finds a matching forwarding policy by a match criterion and the forwarding policy is valid, it uses the forwarding policy to forward the packet. If no matching forwarding policy is found or the matching forwarding policy is invalid, the device proceeds to use the next match criterion to find a matching forwarding policy. The procedure to find a matching forwarding policy is as follows:

1. Matches the DSCP value in the packet with the mappings configured by using the color match dscp and best-effort match dscp commands for the address family of the packet. If a match is found, the device uses the matching SRv6 TE policy to forward the packet or forwards the packet in SRv6 BE mode.

2. Uses the default SRv6 TE policy specified by using the color match dscp default command for the address family of the packet to forward the packet.

3. Identifies whether SRv6 BE mode has been specified as the default forwarding mode for the address family of the packet by using the best-effort { ipv4 | ipv6 } default command. If yes, the device forwards the packet in SRv6 BE mode.

4. Uses the default SRv6 TE policy specified by using the color match dscp default command for the other address family to forward the packet.

5. Identifies whether SRv6 BE mode has been specified as the default forwarding mode for the other address family by using the best-effort { ipv4 | ipv6 } default command. If yes, the device forwards the packet in SRv6 BE mode.

6. Handles the packet according to whether the drop-upon-mismatch enable command is used.

¡ If the drop-upon-mismatch enable command is used, the device discards the packet.

¡ If the drop-upon-mismatch enable command is not used, the device searches for the DSCP mapping with the smallest DSCP value. The device will use the forwarding method specified in the DSCP mapping to forward the packet.

Restrictions and guidelines

In an SRv6 TE policy group, you can configure DSCP-based traffic steering separately for the IPv4 address family and IPv6 address family. For a specific address family, a DSCP value can be mapped to only one SRv6 TE policy or to only the SRv6 BE mode.

If one of the following conditions exists, an SRv6 TE policy group will not be used for traffic forwarding:

· All SRv6 TE policies in the SRv6 TE policy group are invalid.

· The SRv6 TE policy group is enabled with SRv6 BE-based traffic forwarding, and no SRv6 TE policy is specified for traffic forwarding.

Examples

# In an SRv6 TE policy group ODN template, configure the system to forward IPv6 packets with DSCP value 30 in SRv6 BE mode.

<Sysname> system-view

[Sysname] segment-routing ipv6

[Sysname-segment-routing-ipv6] traffic-engineering

[Sysname-srv6-te] on-demand-group color 1

[Sysname-srv6-te-odn-group-1] forward-type dscp

[Sysname-srv6-te-odn-group-1-dscp] best-effort match dscp ipv6 30

# In an SRv6 TE policy group ODN template, configure the system to forward IPv6 packets that do not match any DSCP-based forwarding policy in SRv6 BE mode.

<Sysname> system-view

[Sysname] segment-routing ipv6

[Sysname-segment-routing-ipv6] traffic-engineering

[Sysname-srv6-te] on-demand-group color 1

[Sysname-srv6-te-odn-group-1] forward-type dscp

[Sysname-srv6-te-odn-group-1-dscp] best-effort ipv6 default

Related commands

color match dscp (DSCP forward type view)

drop-upon-mismatch enable

best-effort match dscp (SRv6 TE policy group view)

Use best-effort match dscp to specify DSCP values to match traffic that will be forwarded in SRv6 BE mode.

Use undo best-effort match dscp to remove the DSCP values specified for the SRv6 BE mode to match traffic.

Syntax

best-effort match dscp { ipv4 | ipv6 } dscp-value-list

undo best-effort match dscp { ipv4 | ipv6 } [ dscp-value-list ]

best-effort { ipv4 | ipv6 } default

undo best-effort { ipv4 | ipv6 } default

Default

No DSCP values are specified for the SRv6 BE mode to match traffic.

Views

SRv6 TE policy group view

Predefined user roles

network-admin

Parameters

ipv4: Specifies DSCP values of IPv4 packets.

ipv6: Specifies DSCP values of IPv6 packets.

dscp-value-list: Specifies a space-separated list of up to 32 DSCP value items. Each item specifies a DSCP value or a range of DSCP values in the form of dscp-value1 to dscp-value2. The value range for DSCP values is 0 to 63. The value for the dscp-value2 argument must be greater than or equal to the value for the dscp-value1 argument. If you do not specify a DSCP value for the undo best-effort match dscp command, the command removes all DSCP values specified for the SRv6 BE mode to match traffic.

Usage guidelines

About this task

Use this command to configure traffic with the specified DSCP values to be forwarded in SRv6 BE mode after the traffic is steered to the SRv6 TE policy group for forwarding. When the device forwards packets in SRv6 BE mode, it encapsulates the original packets with a new IPv6 header. The destination address in the new IPv6 header is the VPN SID assigned to routes by the egress node of the SRv6 TE policy group. Then, the device performs an IPv6 routing table lookup to forward the encapsulated packets. If the VPN SID is unreachable, the SRv6 BE mode is invalid.

Operating mechanism

2. Uses the default SRv6 TE policy specified by using the color match dscp default command for the address family of the packet to forward the packet.

4. Uses the default SRv6 TE policy specified by using the color match dscp default command for the other address family to forward the packet.

6. Handles the packet according to whether the drop-upon-mismatch enable command is used.

¡ If the drop-upon-mismatch enable command is used, the device discards the packet.

Restrictions and guidelines

If one of the following conditions exists, an SRv6 TE policy group will not be used for traffic forwarding:

· All SRv6 TE policies in the SRv6 TE policy group are invalid.

· The SRv6 TE policy group is enabled with SRv6 BE-based traffic forwarding, and no SRv6 TE policy is specified for traffic forwarding.

Examples

# In an SRv6 TE policy group named 10, configure the system to forward IPv4 packets with DSCP value 5 in SRv6 BE mode.

<Sysname> system-view

[Sysname] segment-routing ipv6

[Sysname-segment-routing-ipv6] traffic-engineering

[Sysname-srv6-te] policy-group 10

[Sysname-srv6-te-policy-group-10] best-effort match dscp ipv4 5

# In an SRv6 TE policy group named 10, configure the system to forward IPv4 packets that do not match any DSCP-based forwarding policy in SRv6 BE mode.

<Sysname> system-view

[Sysname] segment-routing ipv6

[Sysname-segment-routing-ipv6] traffic-engineering

[Sysname-srv6-te] policy-group 10

[Sysname-srv6-te-policy-group-10] best-effort ipv4 default

Related commands

color match dscp (SRv6 TE policy group view)

drop-upon-mismatch enable

best-effort match service-class (service class forward type view)

Use best-effort match service-class to specify service class values with which traffic will be forwarded in SRv6 BE mode in an SRv6 TE policy group ODN template.

Use undo best-effort match service-class to remove the service class values specified for forwarding traffic in SRv6 BE mode in an SRv6 TE policy group ODN template.

Syntax

best-effort match service-class service-class-value-list

undo best-effort match service-class service-class-value-list

best-effort match service-class default

undo best-effort match service-class [ default ]

Default

No service class values are specified for the device to forward traffic in SRv6 BE mode in an SRv6 TE policy group ODN template.

Views

Service class forward type view

Predefined user roles

network-admin

Parameters

service-class-value-list: Specifies a space-separated list of up to eight service class value items. Each item specifies a service class value or a range of service class values in the form of service-class-value1 to service-class-value2. The value range for service class values is 1 to 15. The value for the service-class-value2 argument must be greater than or equal to the value for the service-class-value1 argument.

default: Forwards packets that do not match any SRv6 BE-to-service class mapping in SRv6 BE mode.

Usage guidelines

About this command

Use this command to configure traffic with the specified service class values to be forwarded in SRv6 BE mode after the traffic is steered to an SRv6 TE policy group for forwarding. When the device forwards packets in SRv6 BE mode, it encapsulates the original packets with a new IPv6 header. The destination address in the new IPv6 header is the VPN SID assigned to public or private network routes by the egress node of the SRv6 TE policy group. Then, the device performs an IPv6 routing table lookup to forward the encapsulated packets. If the VPN SID is unreachable, the SRv6 BE mode is invalid.

The service class is a type of local ID on the device. You can use the remark service-class command to mark the service class of traffic. For more information about the remark service-class command, see QoS commands in ACL and QoS Command Reference.

Operating mechanism

When service class-based traffic steering is used, the device uses the following process to forward a packet:

1. Matches the service class value in the packet with the mappings configured by using the color match service-class and best-effort match service-class commands. If a match is found, the device uses the matching SRv6 TE policy to forward the packet or forwards the packet in SRv6 BE mode.

2. Uses the default SRv6 TE policy specified by using the color match service-class default command to forward the packet in the following situations:

¡ The service class value in the packet does not match an SRv6 TE policy or the SRv6 BE mode.

¡ The service class value in the packet matches an SRv6 TE policy or the SRv6 BE mode. However, the matching SRv6 TE policy or the SRv6 BE mode is invalid.

3. Forwards the packet in SRv6 BE mode if both of the following requirements are met:

¡ No default SRv6 TE policy is specified by using the color match service-class default command, or the default SRv6 TE policy is invalid.

¡ The best-effort match service-class default command is used and the SRv6 BE mode is valid.

4. Handles the packet according to whether the drop-upon-mismatch enable command is used if the best-effort match service-class default command is not used or the SRv6 BE path is invalid.

¡ If the drop-upon-mismatch enable command is used, the device discards the packet.

¡ If the drop-upon-mismatch enable command is not used, the device searches for the service class mapping with the smallest service class value. The device will use the forwarding method specified in the service class mapping to forward the packet.

Restrictions and guidelines

For an SRv6 TE policy group, a service class value can be mapped only to the SRv6 BE mode or to one SRv6 TE policy.

If one of the following conditions exists, an SRv6 TE policy group will not be used for traffic forwarding:

· All SRv6 TE policies in the SRv6 TE policy group are invalid.

· The SRv6 TE policy group is enabled with SRv6 BE-based traffic forwarding, and no SRv6 TE policy is specified for traffic forwarding.

Examples

# In SRv6 TE policy group ODN template, steer packets with service class 5 to the SRv6 BE path.

<Sysname> system-view

[Sysname] segment-routing ipv6

[Sysname-segment-routing-ipv6] traffic-engineering

[Sysname-srv6-te] on-demand-group color 1

[Sysname-srv6-te-odn-group-1] forward-type service-class

[Sysname-srv6-te-odn-group-1-service-class] best-effort match service-class 6

Related commands

color match service-class (service class forward type view)

drop-upon-mismatch enable

forward-type (SRv6 TE ODN policy group view)

best-effort match service-class (SRv6 TE policy group view)

Use best-effort match service-class to specify service class values with which traffic will be forwarded in SRv6 BE mode.

Use undo best-effort match service-class to remove the service class values specified for forwarding traffic in SRv6 BE mode.

Syntax

best-effort match service-class service-class-value-list

undo best-effort match service-class service-class-value-list

best-effort match service-class default

undo best-effort match service-class [ default ]

Default

No service class values are specified for the device to forward traffic in SRv6 BE mode.

Views

SRv6 TE policy group view

Predefined user roles

network-admin

Parameters

default: Forwards packets that do not match any SRv6 BE-to-service class mapping in SRv6 BE mode.

Usage guidelines

Prerequisites

Execute the forward-type service-class command before using this command.