· Application quality probe—For specific service flows forwarded through the SDWAN tunnels, RIR-SDWAN detects the quality of the application flows with the specified packet signatures for application analysis.

Application quality probe settings must be configured in application quality probe view.

If application quality probing is enabled, the device does not support the per-packet load balancing mode.

Examples

# Enter application quality probe view.

<Sysname> system-view

[Sysname] rir sdwan

[Sysname-rir-sdwan] application-quality

[Sysname-rir-sdwan-app]

client enable

Use client enable to enable the RIR client globally.

Use undo client enable to disable the RIR client globally.

Syntax

client enable

undo client enable

Default

The RIR client is disabled globally.

Views

RIR-VXLAN view

Predefined user roles

network-admin

Usage guidelines

To avoid NQA probes from occupying too many resources on a hub in a hub-spoke network, configure the hub as an RIR server and configure the spokes as RIR clients.

You can enable the RIR client globally or on an interface.

· Enabling the RIR client globally also enables the RIR client for all interfaces on the device. The interfaces can send link quality probe results for the RIR client.

· Enabling the RIR client on an interface allows only that interface to send link quality probe results for the RIR client.

When you enable the RIR client, follow these restrictions and guidelines:

· In a VXLAN network, only tunnel interfaces support enabling the RIR client. The RIR client uses the tunnel interfaces to send link quality probe results.

· The RIR server and RIR client cannot be both enabled on the same interface.

· If the enabled role (RIR server or client) on an interface is different from the globally enabled role, the interface-specific role takes effect on that interface.

Examples

# Enable the RIR client globally.

<Sysname> system-view

[Sysname] rir

[Sysname-rir] client enable

Related commands

probe connect

probe sync-port

server enable

collaboration peer local

Use collaboration peer local to enable the local device to establish RIR collaboration relationship with a peer device.

Use undo collaboration peer local to restore the default.

Syntax

collaboration peer [ vpn-instance vpn-instance-name ] peer-ipv4-address local local-ipv4-address sync-port port-number

undo collaboration peer [ vpn-instance vpn-instance-name ] peer-ipv4-address local

Default

The local device does not establish RIR collaboration relationship with any device.

Views

RIR-VXLAN view

Predefined user roles

network-admin

Parameters

vpn-instance vpn-instance-name: Specifies the MPLS L3VPN instance on which the local and peer devices establish RIR collaboration relationship. The vpn-instance-name argument is a case-sensitive string of 1 to 31 characters. The specified VPN instance must exist. If the local and peer IP addresses belong to the public network, do not specify this option.

peer-ipv4-address: Specifies an RIR collaboration peer by its IPv4 address.

local-ipv4-address: Specifies the IPv4 address of the local device. The local and peer devices must both belong to the public network or the same VPN instance.

sync-port port-number: Specifies the TCP port number used by the local and peer devices to synchronize link data. The value range for the port-number argument is 1024 to 65535. Make sure the port number is not used by any other service on the device.

Usage guidelines

Each pair of devices in an RIR collaboration device group must establish RIR collaboration relationship. You must configure this command on both the local and peer devices.

In a pair of devices with RIR collaboration relationship, the device with a lower IP address is the client. The client uses the port number specified by using this command to initiate a TCP connection request to its peer. Through the TCP connection, the local device can synchronize the configuration and status data of links that meet the service requirements to the peer device. The data does not include link data synchronized from other devices in the same RIR collaboration device group.

For the local device to select links from a peer device, you must execute the collaboration peer redirect command on both the local and peer devices.

The local and peer devices must use the same TCP port number for link data synchronization. A device can use the same or different TCP port numbers to synchronize data to different peers.

If you execute this command multiple times for the same pair of devices in the public network or a VPN instance, the most recent configuration takes effect.

Examples

# Establish RIR collaboration relationship between local device 1.1.1.1 and peer device 1.1.1.2 on the public network. They use TCP port number 6000 for link data synchronization.

<Sysname> system-view

[Sysname] rir

[Sysname-rir] collaboration peer 1.1.1.2 local 1.1.1.1 sync-port 6000

# Establish RIR collaboration relationship between local device 1.1.1.1 and peer device 1.1.1.2 in VPN instance a. They use TCP port number 6000 for link data synchronization.

<Sysname> system-view

[Sysname] rir

[Sysname-rir] collaboration peer vpn-instance a 1.1.1.2 local 1.1.1.1 sync-port 6000

Related commands

collaboration peer redirect

Use collaboration peer redirect to configure the redirect IP address of an RIR collaboration peer.

Use undo collaboration peer redirect to delete the redirect IP address of an RIR collaboration peer.

Syntax

collaboration peer [ vpn-instance vpn-instance-name ] peer-ipv4-address redirect [ vpn-instance redirect-vpn-instance-name ] redirect-ipv4-address

undo collaboration peer [ vpn-instance vpn-instance-name ] peer-ipv4-address redirect [ vpn-instance redirect-vpn-instance-name ]

Default

No redirect IP address is configured for an RIR collaboration peer.

Views

RIR-VXLAN view

Predefined user roles

network-admin

Parameters

vpn-instance vpn-instance-name: Specifies the MPLS L3VPN instance on which the local and peer devices establish RIR collaboration relationship. The vpn-instance-name argument is a case-sensitive string of 1 to 31 characters. If the local and peer devices establish RIR collaboration relationship on the public network, do not specify this option.

peer-ipv4-address: Specifies an RIR collaboration peer by its IPv4 address.

vpn-instance redirect-vpn-instance-name: Specifies the MPLS L3VPN instance for the packets to be redirected to the redirect IPv4 address of the peer device. The redirect-vpn-instance-name argument is a case-sensitive string of 1 to 31 characters. If the packets to be redirected belong to the public network, do not specify this option.

redirect-ipv4-address: Specifies the redirect IPv4 address of the peer device.

Usage guidelines

Use this command on both the local and peer devices that have established RIR collaboration relationship. This command specifies the redirect IP address for packets redirected to a peer device on the public network or a VPN instance. When the local device selects links from the peer device to forward packets on the public network or a VPN instance, it performs the following operations:

· Looks up the routing table of the public network or VPN instance based on the redirect IP address.

· Forwards the packets to the peer device through the RIR dedicated link.

If you execute the undo form of this command without the vpn-instance redirect-vpn-instance-name option for a peer, the redirect IPv4 address of the public network is deleted for the peer.

If you execute this command multiple times for the same peer on the public network or in the same redirect VPN instance, the most recent configuration takes effect.

Examples

# Specify 2.1.1.1 as the redirect IP address in VPN instance b for peer device 1.1.1.2 in VPN instance a.

<Sysname> system-view

[Sysname] rir

[Sysname-rir] collaboration peer vpn-instance a 1.1.1.2 redirect vpn-instance b 2.1.1.1

Related commands

collaboration peer local

cqi-weight

Use cqi-weight to configure the weights for the delay, jitter, and packet loss metrics used for computing CQI values.

Use undo cqi-weight to restore the default.

Syntax

cqi-weight delay delay-weight jitter jitter-weight packet-loss packet-loss-weight

undo cqi-weight

Default

The weights for the delay, jitter, and packet loss metrics are all 1.

Views

RIR-SDWAN flow template view

Predefined user roles

network-admin

Parameters

delay delay-weight: Sets the weight for the delay metric used for computing CQI values, in the range of 0 to 10.

jitter jitter-weight: Sets the weight for the jitter metric used for computing CQI values, in the range of 0 to 10.

packet-loss packet-loss-weight: Sets the weight for the packet loss metric used for computing CQI values, in the range of 0 to 10.

Usage guidelines

RIR-SDWAN computes Comprehensive Quality Indicator (CQI) values to evaluate link quality.

· If the probe result of a metric (delay, jitter, or packet loss rate) is lower than or equal to the associated quality threshold in the SLA, the CQI value for the metric is 100.

· If the probe result of a metric is higher than the associated quality threshold in the SLA, the CQI value for the metric is calculated with the formula: (metric threshold × 100) / probe result of the metric.

· The overall CQI value is calculated with the formula: (x × Ds+ y × Js + z × Ls) / (x + y + z).

In this formula, x, y, and z represent the weight values of delay, jitter, and packet loss rate, respectively. Ds, Js, and Ls represent the CQI values for delay, jitter, and packet loss rate, respectively.

To avoid frequent link switchovers, the device uses the approximate overall CQI value to evaluate link quality. The approximate overall CQI value is a multiple of 5 that is smaller than and closest to the overall CQI value. For example, if the overall CQI value is 82.5, the approximate overall CQI value is 80.

For quality tolerant link selection, the device selects the link with the highest approximate overall CQI value as the optimal link. If multiple links have the highest approximate overall CQI value, the device selects one or multiple optimal links from them based on the link load balancing mode.

The weights for the delay, jitter, and packet loss metrics cannot be all 0.

Examples

# Configure the weight values for the delay, jitter, and packet loss metrics as 2, 5, and 7, respectively, to compute CQI values for link quality evaluation of flow 1.

<Sysname> system-view

[Sysname] rir sdwan

[Sysname-rir-sdwan] flow 1

[Sysname-rir-sdwan-flow-1] cqi-weight delay 2 jitter 5 packet-loss 7

delay threshold

Use delay threshold to set the link delay threshold.

Use undo delay threshold to restore the default.

Syntax

delay threshold threshold-value

undo delay threshold

Default

The link delay threshold is 10 milliseconds.

Views

RIR-VXLAN SLA view

RIR-SDWAN SLA view

Predefined user roles

network-admin

Parameters

threshold-value: Sets the link delay threshold, in the range of 10 to 60000 milliseconds.

Usage guidelines

Link delay refers to the interval between the sending time and receiving time of a packet.

The shorter the delay time, the higher the link quality.

A flow template uses the link delay threshold in its associated SLA to filter links that meet the link delay requirement.

Examples

# In SLA 1, set the link delay threshold to 1000 milliseconds for RIR-VXLAN.

<Sysname> system-view

[Sysname] rir

[Sysname-rir] sla 1

[Sysname-rir-sla-1] delay threshold 1000

# In SLA 1, set the link delay threshold to 1000 milliseconds for RIR-SDWAN.

<Sysname> system-view

[Sysname] rir sdwan

[Sysname-rir-sdwan] sla 1

[Sysname-rir-sdwan-sla-1] delay threshold 1000

display rir sdwan application-quality

Use display rir sdwan application-quality to display application quality probe information.

Syntax

display rir sdwan application-quality instance instance-name [ flow flow-id ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

instance instance-name: Specifies an application quality probe instance by its name, a case-sensitive string of 1 to 63 characters.

flow-id flow-id: Specifies a flow template by its flow ID in the range of 1 to 65535. If you do not specify a flow ID, this command displays application quality probe information for all flow templates in the specified instance.

Usage guidelines

This command displays only the application quality probe information within the most recent 10 probe intervals.

Examples

# Display application quality probe information for all flow templates in instance abc.

<Sysname> display rir sdwan application-quality instance abc

Flow ID: 1

Tunnel1

Peer TTE: Site ID=1 Device ID=2 Interface ID=4

Period started at PktCount Timestamp (msec)

2020/11/16 14:28:00 100 1596273655

2020/11/16 14:27:00 100 1596273655

2020/11/16 14:26:00 100 1596273655

2020/11/16 14:25:00 100 1596273655

2020/11/16 14:24:00 100 1596273655

2020/11/16 14:23:00 100 1596273655

2020/11/16 14:22:00 100 1596273655

2020/11/16 14:21:00 100 1596273655

2020/11/16 14:20:00 100 1596273655

2020/11/16 14:19:00 100 1596273655

Peer TTE: Site ID=1 Device ID=2 Interface ID=5

Period started at PktCount Timestamp (msec)

2020/11/16 14:28:00 100 1596273655

2020/11/16 14:27:00 100 1596273655

2020/11/16 14:26:00 100 1596273655

2020/11/16 14:25:00 100 1596273655

2020/11/16 14:24:00 100 1596273655

2020/11/16 14:23:00 100 1596273655

2020/11/16 14:22:00 100 1596273655

2020/11/16 14:21:00 100 1596273655

2020/11/16 14:20:00 100 1596273655

2020/11/16 14:19:00 100 1596273655

Flow ID: 2

Tunnel2

Peer TTE: Site ID=1 Device ID=2 Interface ID=3

Period started at PktCount Timestamp (msec)

2020/11/16 14:28:00 100 1596273655

2020/11/16 14:27:00 100 1596273655

2020/11/16 14:26:00 100 1596273655

2020/11/16 14:25:00 100 1596273655

2020/11/16 14:24:00 100 1596273655

2020/11/16 14:23:00 100 1596273655

2020/11/16 14:22:00 100 1596273655

2020/11/16 14:21:00 100 1596273655

2020/11/16 14:20:00 100 1596273655

2020/11/16 14:19:00 100 1596273655

Peer TTE: Site ID=1 Device ID=2 Interface ID=6

Period started at PktCount Timestamp (msec)

2020/11/16 14:28:00 100 1596273655

2020/11/16 14:27:00 100 1596273655

2020/11/16 14:26:00 100 1596273655

2020/11/16 14:25:00 100 1596273655

2020/11/16 14:24:00 100 1596273655

2020/11/16 14:23:00 100 1596273655

2020/11/16 14:22:00 100 1596273655

2020/11/16 14:21:00 100 1596273655

2020/11/16 14:20:00 100 1596273655

2020/11/16 14:19:00 100 1596273655

Table 1 Command output

Field	Description
Flow ID	Flow template ID.
Tunneltunnel-number	SDWAN tunnel interface name.
Peer TTE	Peer Transport Tunnel Endpoint (TTE) information of the SDWAN tunnel.
Site ID	Peer TTE site ID of the SDWAN tunnel.
Device ID	Peer TTE device ID of the SDWAN tunnel.
Interface ID	Peer TTE interface ID of the SDWAN tunnel.
Period started at	Start time of the quality probe interval.
PktCount	Number of packets collected within the interval.
Timestamp (msec)	Timestamp (in milliseconds) when the device processed packets with the specified signature within the interval. The timestamp can be used to compute the delay.

‌

display rir sdwan bandwidth tte

Use display rir sdwan bandwidth tte to display bandwidth information for TTE connections.

Syntax

display rir sdwan bandwidth tte [ peer peer-site-id peer-device-id peer-interface-id [ local local-site-id local-device-id local-interface-id ] ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

peer: Specifies the site ID, device ID, and interface ID of the peer device.

peer-site-id: Specifies a site ID in the range of 1 to 65535.

peer-device-id: Specifies a device ID in the range of 1 to 255.

peer-interface-id: Specifies an SDWAN tunnel interface ID in the range of 1 to 255.

local: Specifies the site ID, device ID, and interface ID of the local device.

local-site-id: Specifies a site ID in the range of 1 to 65535.

local-device-id: Specifies a device ID in the range of 1 to 255.

local-interface-id: Specifies an SDWAN tunnel interface ID in the range of 1 to 255.

Examples

# Display bandwidth information for all TTE connections.

<Sysname> display rir sdwan bandwidth tte

PeerTTE :

SiteID/DevID/IfID : 2/2/2

Downstream bandwidth : 30000 kbps

Local used bandwidth : 2000 kbps

Collaboration used bandwidth : 500 kbps

LocalTTE :

SiteID/DevID/IfID Used bandwidth

1/1/1 1000 kbps

1/1/2 1000 kbps

Table 2 Command output

Field	Description
PeerTTE	Peer TTE connection information.
SiteID/DevID/IfID	Site ID/Device ID/Tunnel interface ID of the device.
Downstream bandwidth	Total available bandwidth of the local device in the inbound direction.
Local used bandwidth	Bandwidth used by the local device.
Collaboration used bandwidth	Bandwidth used by the collaboration channel.
LocalTTE	Local TTE connection information.
Used bandwidth	Bandwidth used by the TTE connection.

‌

display rir sdwan bandwidth tunnel

Use display rir sdwan bandwidth tunnel to display bandwidth information for the specified SDWAN tunnel interface and the associated output interface.

Syntax

display rir sdwan bandwidth tunnel tunnel-number

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

tunnel-number: Specifies an SDWAN tunnel interface by its tunnel interface number. The value range for the tunnel-number argument is 0 to 4294967295.

Examples

# Display bandwidth information for interface Tunnel 1 and the associated output interface.

<Sysname> display rir sdwan bandwidth tunnel 1

Tunnel bandwidth info:

Interface Total bandwidth Remaining bandwidth Bandwidth usage

Tunnel1 200 kbps 200 kbps 0 %

Output interface bandwidth info:

PeerTTE: SiteID=1 DeviceID=2 IfID=2

Interface Total bandwidth Remaining bandwidth Bandwidth usage

GE1/0/1 200 kbps 200 kbps 0 %

PeerTTE: SiteID=1 DeviceID=2 IfID=3

Interface Total bandwidth Remaining bandwidth Bandwidth usage

GE1/0/2 200 kbps 200 kbps 0 %

Table 3 Command output

Field	Description
Tunnel bandwidth info	Tunnel interface bandwidth information.
Interface	Interface name.
Total bandwidth	Total bandwidth of the tunnel interface or the associated physical output interface, in Kbps. The value is the expected bandwidth of the interface.
Remaining bandwidth	Remaining bandwidth of the tunnel interface or the associated physical output interface, in Kbps.
Bandwidth usage	Bandwidth usage of the tunnel interface or the associated physical output interface.
Output interface bandwidth info	Output interface bandwidth information.
PeerTTE	Peer TTE information of the SDWAN tunnel.
SiteID	Peer TTE site ID of the SDWAN tunnel.
DeviceID	Peer TTE device ID of the SDWAN tunnel.
IfID	Peer TTE interface ID of the SDWAN tunnel.

‌

display rir sdwan flow

Use display rir sdwan flow to display link selection policy information for the specified service flow.

Syntax

display rir sdwan flow flow-id

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

flow-id: Specifies a flow template by its flow ID in the range of 1 to 65535.

Examples

# Display link selection information for all available SDWAN tunnels in flow template 1.

<Sysname> display rir sdwan flow 1

Flow ID: 1

Session expected bandwidth: 2000 kbps

Quality policy: Yes

Tunnels with different preference values:

Preference: 8

Tunnel1

Site ID Device ID Interface ID CQI

100 1 100 80

100 2 110 90

Tunnel2

Site ID Device ID Interface ID CQI

100 1 100 80

100 2 110 90

Preference: 10

Tunnel2

Site ID Device ID Interface ID CQI

100 3 80 80

100 4 120 90

Table 4 Command output

Field	Description
Flow ID	Flow template ID.
Session expected bandwidth	Configured session expected bandwidth, in Kbps.
Quality policy	Quality policy status: · Yes—A quality policy is configured. · No—No quality policy is configured.
Tunnels with different preference values	Information about SDWAN tunnels with different preferences.
Preference	SDWAN tunnel preference. The smaller the value, the higher the preference.
Tunneltunnel-number	SDWAN tunnel interface name.
Site ID	Peer TTE site ID of the SDWAN tunnel.
Device ID	Peer TTE device ID of the SDWAN tunnel.
Interface ID	Peer TTE interface ID of the SDWAN tunnel.
CQI	Approximate overall CQI value of the SDWAN tunnel.

‌

display rir sdwan link-quality

Use display rir sdwan link-quality to display link quality probe information for SDWAN tunnels.

Syntax

display rir sdwan link-quality [ tunnel tunnel-number ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

tunnel tunnel-number: Specifies an SDWAN tunnel interface by its tunnel interface number. The value range for the tunnel-number argument is 0 to 4294967295.If you do not specify this option, the command displays link quality probe information for all SDWAN tunnels.

Usage guidelines

This command displays only the link quality probe information for SDWAN tunnels within the most recent probe interval.

Examples

# Display link quality probe information for all SDWAN tunnels.

<Sysname> display rir sdwan link-quality

Tunnel1

Interface ID=1

Peer TTE: Site ID=1 Device ID=2 Interface ID=3

Connectivity: Connected

PktLoss (per mill): 0

Delay (msec) : 0

Jitter (msec) : 0

Peer TTE: Site ID=1 Device ID=2 Interface ID=4

Connectivity: Connected

PktLoss (per mill): 0

Delay (msec) : 0

Table 5 Command output

Field	Description
Tunneltunnel-number	SDWAN tunnel interface name.
Interface ID	Local TTE interface ID of the SDWAN tunnel.
Peer TTE	Peer TTE information of the SDWAN tunnel.
Site ID	Peer TTE site ID of the SDWAN tunnel.
Device ID	Peer TTE device ID of the SDWAN tunnel.
Interface ID	Peer TTE interface ID of the SDWAN tunnel.
Connectivity	NQA link connectivity probe result of the SDWAN tunnel: · Connected. · Disconnected.
Period started at	Start time of the quality probe interval.
PktLoss (per mill)	Detected packet loss rate (per mill) of the SDWAN tunnel.
Delay (msec)	Detected delay (in milliseconds) of the SDWAN tunnel.
Jitter (msec)	Detected jitter (in milliseconds) of the SDWAN tunnel.

‌

display rir sdwan session-statistics tunnel

Use display rir sdwan session-statistics tunnel to display service session statistics of the specified tunnel interface.

Syntax

display rir sdwan session-statistics tunnel interface-number [ flow flow-id ] [ slot slot-number ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

interface-number: Specifies a tunnel interface by its number. The tunnel interface must have been created on the device.

flow flow-id: Specifies a flow template by its ID in the range of 1 to 65535. If you do not specify a flow ID, this command displays session statistics for all flow templates.

slot slot-number: Specifies a card by its slot number. If you do not specify a card, this command displays information on the active MPU.

Examples

# Display service session statistics of interface Tunnel 1.

<Sysname> system-view

[Sysname] display rir sdwan session-statistics tunnel 1

Tunnel interface: Tun1

Flow ID: 3

Collaboration sessions : 0

Local sessions : 1

Total sessions : 1

Session statistics:

SiteID DeviceID InterfaceID SessCount

10 1 2 1

Table 6 Command output

Field	Description
Tunnel interface	Tunnel interface name
Collaboration sessions	Numbers of sessions synchronized through the collaboration channel.
Local sessions	Number of local sessions.
Total sessions	Total number of sessions.
Session statistics	Session statistics information.
SiteID	Site ID of the session peer device.
DeviceID	Device ID of the session peer device.
InterfaceID	Tunnel interface ID of the session peer.
SessCount	Number of sessions.

‌

display sdwan collaboration channel

Use display sdwan collaboration channel to display collaboration channel status and packet statistics.

Syntax

display sdwan collaboration channel [ peer-device-id device-id ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

peer-device-id device-id: Specifies a peer device by its ID in the range of 1 to 255. If you do not specify this option, the command displays status and packet statistics for all collaboration channels on the local device.

Examples

# Display status of all collaboration channels on the device and statistics for all sent or received packets synchronized through the collaboration channels.

<Sysname> display sdwan collaboration channel

Peer device ID : 2

Peer IP : 1.1.1.2

Local IP : 1.1.1.1

VPN instance : aa

Sync-port : 1024

Status : Connected

Total collaboration channels: 1

Packet statistics:

Input(total) : 4 packets

Add tteConnectionPackets : 1

Delete tteConnectionPackets: 0

RirDataPackets : 1

SmoothStartPackets : 1

SmoothEndPackets : 1

SmoothDataPackets : 0

DropPackets : 0

Ouput(total) : 4 packets

Add tteConnectionPackers : 1

Delete tteConnectionPackets: 0

RirDataPackets : 1

SmoothStartPackets : 1

SmoothEndPackets : 1

SmoothDataPackets : 0

DropPackets : 0

Table 7 Command output

Field	Description
Peer device ID	Device ID of the peer device.
Peer IP	IP address of the RIR collaboration peer device.
Local IP	IP address of the local device in the RIR collaboration relationship.
VPN instance	Name of the VPN instance to which the collaboration relationship established with the peer belongs. If the collaboration relationship belongs to the public network instance, this field displays a hyphen (-).
Sync-port	Port number of the TCP connection used for synchronizing link data between the local and peer devices.
Status	Collaboration channel status: · Init—Initialized. · Connecting. · Checking. · Connected. · Closed—Disconnected.
Total collaboration connections	Number of collaboration channels on the local device.
Packet statistics	Packet statistics information.
Input(total)	Total number of packets received through the collaboration channels on the device.
Add tteConnectionPackets	Number of packets carrying added TTE connection information.
Delete tteConnectionPackets	Number of packets carrying deleted TTE connection information.
RirDataPackets	Number of packets carrying the RIR data.
SmoothStartPackets	Number of smoothing start packets.
SmoothEndPackets	Number of smoothing end packets.
SmoothDataPackets	Number of packets carrying smoothed TTE connection information.
DropPackets	Number of dropped packets.
Output(total)	Total number of packets sent through the collaboration channels on the device.

‌

display tunnel flow-statistics

Use display tunnel flow-statistics to display tunnel traffic rate statistics.

Syntax

display tunnel flow-statistics [ flow flow-id [ interface tunnel number ] ] [ tte-connection ] [ verbose ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

flow flow-id: Specifies a flow template by its flow ID, in the range of 0 to 65535. If you do not specify a flow ID, this command displays statistics for all flow templates.

interface tunnel number: Specifies a tunnel interface by its tunnel interface number. The value range for the number argument is 1 to 65535. If you do not specify a tunnel interface, this command displays statistics about the specified flow template for all tunnel interfaces.

tte-connection: Displays TTE connection-based tunnel traffic rate statistics. If you do not specify this keyword, the command displays tunnel traffic rate statistics for service flows.

verbose: Displays detailed information about TTE connection traffic rate statistics. If you do not specify this keyword, the command displays brief information about TTE connection traffic rate statistics.

Examples

# Display tunnel traffic rate statistics for RIR-VXLAN.

<Sysname> display tunnel flow-statistics

Flow 100:

Interface Out pps Out bps

Tunnel1 10 4800

Tunnel2 20 9600

Flow 101:

Interface Out pps Out bps

Tunnel3 10 4800

Tunnel4 20 9600

Table 8 Command output

Field	Description
RIR flow	Flow ID of an RIR flow template.
Interface	Tunnel interface name.
Out pps	Number of outgoing packets per second.
Out bps	Number of outgoing bits per second.

# Display brief tunnel traffic rate statistics for RIR-SDWAN.

<Sysname> display tunnel flow-statistics

Flow 100:

Interface Out pps Out bps

Tunnel1 10 4800

Tunnel2 20 9600

Flow 101:

Interface Out pps Out bps VPN instance

Tunnel3 10 4800 vpna

Tunnel4 20 9600 vpnb

# Display detailed tunnel traffic rate statistics for RIR-SDWAN.

<Sysname> display tunnel flow-statistics verbose

Flow 0:

Interface : Tunnel1

Out pps : 2

Out bps : 1840

Total Out Packets : 126691

Total Out Bytes : 14962336

Table 9 Command output

Field	Description
Flow	Flow ID of an RIR flow template.
Interface	Tunnel interface name.
Out pps	Number of outgoing packets per second.
Out bps	Number of outgoing bytes per second.
VPN instance	Name of the VPN instance to which the TTE connection belongs.
Total Out Packets	Total number of outgoing packets.
Total Out Bytes	Total number of outgoing bytes.

‌

# Display brief TTE connection traffic rate statistics for RIR-SDWAN.

<Sysname> display tunnel flow-statistics flow 100 tte-connection

Interface Tunnel1:

SiteID DevID IfID Out pps Out bps VPN instance

10 10 1 4222 6486048 vpna

# Display detailed TTE connection traffic rate statistics for RIR-SDWAN.

<Sysname> display tunnel flow-statistics flow 100 tte-connection verbose

Flow 0:

Interface Tunnel1:

SiteID/DevID/IfID : 20/20/1

VPN instance :

Out pps : 1

Out bps : 1088

Total Out Packets : 19063

Total Out Bytes : 2224796

Table 10 Command output

Field	Description
Flow flow-id	Flow ID of an RIR flow template.
Interface	Tunnel interface name.
SiteID	Site ID of the TTE connection.
DevID	Device ID of the TTE connection.
IfID	Interface ID of the TTE connection.
VPN instance	Name of the VPN instance to which the TTE connection belongs. If the TTE connection belongs to the public network, this field is empty.
Out pps	Number of outgoing packets per second.
Out bps	Number of outgoing bytes per second.
Total Out Packets	Total number of outgoing packets.
Total Out Bytes	Total number of outgoing bytes.

‌

Related commands

reset tunnel flow-statistics

tunnel flow-statistics enable

expect-bandwidth

Use expect-bandwidth to specify the per-session expected bandwidth.

Use undo expect-bandwidth to restore the default.

Syntax

expect-bandwidth bandwidth

undo expect-bandwidth

Default

The per-session expected bandwidth is 0 kbps.

Views

RIR-VXLAN flow template view

RIR-SDWAN flow template view

Predefined user roles

network-admin

Parameters

bandwidth: Specifies the bandwidth in kbps, in the range of 1 to 400000000.

Usage guidelines

The per-session expected bandwidth configured by using this command is not the actual bandwidth used by a session. It is only a value estimated based on user services.

When the device selects links for traffic of a session, it obtains the per-session expected bandwidth in real time, and performs bandwidth detection based on the obtained bandwidth. If the device fails to obtain the bandwidth, it performs bandwidth detection based on the per-session expected bandwidth in the flow template to which the session belongs. A link is qualified in the bandwidth detection if it meets the following requirements:

· For the link-attached output interface, the used bandwidth plus the per-session expected bandwidth is less than 80% of the total bandwidth.

· For the link, the used bandwidth plus the per-session expected bandwidth is less than 80% of the total bandwidth.

Only RIR-SDWAN supports obtaining the per-session expected bandwidth in real time. RIR-VXLAN supports only configuring the per-session expected bandwidth in flow template view.

If you execute this command multiple times, the most recent configuration takes effect.

Examples

# Set the per-session expected bandwidth to 10 kbps in flow template 1 for RIR-VXLAN.

<Sysname> system-view

[Sysname] rir

[Sysname-rir] flow 1

[Sysname-rir-flow-1] expect-bandwidth 10

# Set the per-session expected bandwidth to 10 kbps in flow template 1 for RIR-SDWAN.

<Sysname> system-view

[Sysname] rir sdwan

[Sysname-rir-sdwan] flow 1

[Sysname-rir-sdwan-flow-1] expect-bandwidth 10

Related commands

flow

Use flow to create a flow template and enter RIR-VXLAN or RIR-SDWAN flow template view, or enter the view of an existing RIR-VXLAN or RIR-SDWAN flow template.

Use undo flow to delete a flow template.

Syntax

flow flow-id

undo flow flow-id

Default

No flow templates exist.

Views

RIR-VXLAN view

RIR-SDWAN view

Predefined user roles

network-admin

Parameters

flow-id: Specifies a flow ID for the flow template. The flow ID is in the range of 1 to 65535.

Usage guidelines

Use a flow template to define link selection policies (including the quality policy and link preference) that can filter qualified links for a type of service flow. After the device identifies the service of a packet based on the quintuple and DSCP of the packet, it assigns a flow ID to the packet according to the QoS policy applied to the service. Then, RIR selects a qualified link for the packet based on the link selection policies of the flow template that uses the flow ID.

Examples

# Create flow template 1 and enter RIR-VXLAN flow template view.

<Sysname> system-view

[Sysname] rir

[Sysname-rir] flow 1

[Sysname-rir-flow-1]

# Create flow template 1 and enter RIR-SDWAN flow template view.

<Sysname> system-view

[Sysname] rir sdwan

[Sysname-rir-sdwan] flow 1

[Sysname-rir-sdwan-flow-1]

Related commands

remark flow-id (ACL and QoS Command Reference)

flow priority-based-schedule bandwidth-threshold

Use flow priority-based-schedule bandwidth-threshold to set the bandwidth usage thresholds for flow priority-based traffic scheduling.

Use undo flow priority-based-schedule bandwidth-threshold to restore the default.

Syntax

flow priority-based-schedule bandwidth-threshold upper upper-threshold lower lower-threshold

undo flow priority-based-schedule bandwidth-threshold

Default

The bandwidth usage upper threshold is 90% and the bandwidth usage lower threshold is 20%.

Views

RIR-VXLAN view

RIR-SDWAN view

Predefined user roles

network-admin

Parameters

upper upper-threshold: Sets the bandwidth usage upper threshold in percentage, in the range of 1 to 100. The upper threshold must be greater than or equal to the lower threshold.

lower lower-threshold: Sets the bandwidth usage lower threshold in percentage, in the range of 1 to 100.

Usage guidelines

If flow priority-based traffic scheduling is enabled, traffic scheduling is triggered when the bandwidth usage of a link-attached output interface exceeds the upper threshold. The scheduling might be last for several scheduling periods. Within each scheduling period, RIR redistributes the current lowest priority flow on this link to other links. The scheduling stops for a link in one of the following conditions:

· The bandwidth usage of all link-attached output interfaces for the current lowest priority flow is below the lower threshold.

· Only the highest priority flow is left on this link.

If you execute this command multiple times, the most recent configuration takes effect.

Examples

# For RIR-VXLAN, enable flow priority-based traffic scheduling and set the bandwidth usage upper threshold and lower threshold to 80% and 30%, respectively.

<Sysname> system-view

[Sysname] rir

[Sysname-rir] flow priority-based-schedule enable

[Sysname-rir] flow priority-based-schedule bandwidth-threshold upper 80 lower 30

# For RIR-SDWAN, enable flow priority-based traffic scheduling and set the bandwidth usage upper threshold and lower threshold to 80% and 30%, respectively.

<Sysname> system-view

[Sysname] rir sdwan

[Sysname-rir-sdwan] flow priority-based-schedule enable

[Sysname-rir-sdwan] flow priority-based-schedule bandwidth-threshold upper 80 lower 30

Related commands

flow priority-based-schedule enable

Use flow priority-based-schedule enable to enable flow priority-based traffic scheduling.

Use undo flow priority-based-schedule enable to disable flow priority-based traffic scheduling.

Syntax

flow priority-based-schedule enable

undo flow priority-based-schedule enable

Default

Flow priority-based traffic scheduling is disabled.

Views

RIR-VXLAN view

RIR-SDWAN view

Predefined user roles

network-admin

Usage guidelines

To ensure that services with higher priority preferentially use link resources, enable flow priority-based traffic scheduling.

The priority of a flow that matches a flow template is determined by the ID of the SLA associated with that flow template. The greater the SLA ID, the higher the flow priority. To specify an SLA for a flow template, use the quality-policy command. If the command is not configured in a flow template, flows that match the flow template have the lowest priority.

· The bandwidth usage of all link-attached output interfaces for the current lowest priority flow is below the lower threshold.

· Only the highest priority flow is left on this link.

Examples

# Enable flow priority-based traffic scheduling for RIR-VXLAN.

<Sysname> system-view

[Sysname] rir

[Sysname-rir] flow priority-based-schedule enable

# Enable flow priority-based traffic scheduling for RIR-SDWAN.

<Sysname> system-view

[Sysname] rir sdwan

[Sysname-rir-sdwan] flow priority-based-schedule enable

Related commands

quality-policy

sla

flow priority-based-schedule schedule-period

Use flow priority-based-schedule schedule-period to set the scheduling period for flow priority-based traffic scheduling.

Use undo flow priority-based-schedule schedule-period to restore the default.

Syntax

flow priority-based-schedule schedule-period schedule-period-value

undo flow priority-based-schedule schedule-period

Default

The scheduling period for flow priority-based traffic scheduling is 30 seconds.

Views

RIR-VXLAN view

RIR-SDWAN view

Predefined user roles

network-admin

Parameters

schedule-period-value: Sets the scheduling period for flow priority-based traffic scheduling, in seconds. The value range for this argument is 15 to 65535.

Usage guidelines

If flow priority-based traffic scheduling is enabled, traffic scheduling is triggered when the bandwidth usage of a link-attached output interface exceeds the upper threshold. The scheduling might be last for several scheduling periods. Within each scheduling period (set by using this command), RIR redistributes the current lowest priority flow on this link to other links. The scheduling stops for a link in one of the following conditions:

· The bandwidth usage of all link-attached output interfaces for the current lowest priority flow is below the lower threshold.

· Only the highest priority flow is left on this link.

If you execute this command multiple times, the most recent configuration takes effect.

Examples

# For RIR-VXLAN, set the scheduling period for flow priority-based traffic scheduling to 20 seconds.

<Sysname> system-view

[Sysname] rir

[Sysname-rir] flow priority-based-schedule enable

[Sysname-rir] flow priority-based-schedule schedule-period 20

# For RIR-SDWAN, set the scheduling period for flow priority-based traffic scheduling to 20 seconds.

<Sysname> system-view

[Sysname] rir sdwan

[Sysname-rir-sdwan] flow priority-based-schedule enable

[Sysname-rir-sdwan] flow priority-based-schedule schedule-period 20

instance

Use instance to create an application quality probe instance and enter its view, or enter the view of an existing application quality probe instance.

Use undo instance to delete an application quality probe instance.

Syntax

instance instance-name

undo instance instance-name

Default

No application quality probe instances exist.

Views

Application quality probe view

Predefined user roles

network-admin

Parameters

instance-name: Specifies an application quality probe instance by its name, a case-sensitive string of 1 to 63 characters excluding spaces.

Usage guidelines

To detect the quality of an application flow with the specified packet signature, create the same application quality probe instance (with the same name) on the two SDWAN devices. In addition, you must specify the instances as the source and destination instances, respectively, and configure the same signature and quality probe interval settings for the instances.

You can specify only one packet signature for an application quality probe instance. To detect applications with multiple packet signatures, create multiple application quality probe instances.

You can create a maximum of 16 application quality probe instances.

Examples

# Create application quality probe instance abc and enter its view.

<Sysname> system-view

[Sysname] rir sdwan

[Sysname-rir-sdwan] application-quality

[Sysname-rir-sdwan-app] instance abc

[Sysname-rir-sdwan-app-instance-abc]

link-bandwidth ignore

Use link-bandwidth ignore to disable the link bandwidth consideration feature during link selection.

Use undo link-bandwidth ignore to enable the link bandwidth consideration feature during link selection.

Syntax

link-bandwidth ignore

undo link-bandwidth ignore

Default

Link bandwidth is considered during link selection.

Views

RIR-SDWAN view

Predefined user roles

network-admin

Usage guidelines

If you are concerned about the forwarding path of service traffic and not concerned about link quality and bandwidth, you can use this command to disable the link bandwidth consideration feature during link selection.

Examples

# Disable the link bandwidth consideration feature during link selection.

<Sysname> system-view

[Sysname] rir sdwan

[Sysname-rir-sdwan] link-bandwidth ignore

link-quality probe interval

Use link-quality probe interval to set the link quality probe interval.

Use undo link-quality probe interval to restore the default.

Syntax

link-quality probe interval interval

undo link-quality probe interval

Default

The link quality probe interval is 60 seconds.

Views

RIR-SDWAN view

Predefined user roles

network-admin

Parameters

interval: Sets the link quality probe interval, in seconds. Supported values are 10, 30, 60, 300, and 600.

Usage guidelines

After you enable the RIR-SDWAN service, the device periodically probes link quality of all SDWAN tunnels at the specified intervals, and performs link selection based on the probe result.

If you modify the link quality probe interval, the device stops probing the quality of all SDWAN tunnels, and uses the new interval to start probing the link quality of all SDWAN tunnels.

Examples

# Set the link quality probe interval to 600 seconds.

<Sysname> system-view

[Sysname] rir sdwan

[Sysname-rir-sdwan] link-quality probe interval 600

jitter threshold

Use jitter threshold to set the link jitter threshold.

Use undo jitter threshold to restore the default.

Syntax

jitter threshold threshold-value

undo jitter threshold

Default

The link jitter threshold is 100 milliseconds.

Views

RIR-VXLAN SLA view

RIR-SDWAN SLA view

Predefined user roles

network-admin

Parameters

threshold-value: Sets the link jitter threshold, in the range of 0 to 3600000 milliseconds.

Usage guidelines

The jitter time equals the receiving time interval between two consecutive packets minus the sending time interval between the two consecutive packets. The shorter the jitter time, the higher the link quality. A flow template uses the jitter threshold in its associated SLA to filter links that meet the jitter requirement.

Examples

# In RIR-VXLAN SLA 1, set the link jitter threshold to 1000 milliseconds.

<Sysname> system-view

[Sysname] rir

[Sysname-rir] sla 1

[Sysname-rir-sla-1] jitter threshold 1000

# In RIR-SDWAN SLA 1, set the link jitter threshold to 1000 milliseconds.

<Sysname> system-view

[Sysname] rir sdwan

[Sysname-rir-sdwan] sla 1

[Sysname-rir—sdwan-sla-1] jitter threshold 1000

link-select delay

Use link-select delay to set the link selection delay.

Use undo link-select delay to restore the default.

Syntax

link-select delay delay

undo link-select delay

Default

The link selection delay is 60 seconds.

Views

RIR-VXLAN view

RIR-SDWAN view

Predefined user roles

network-admin

Parameters

delay: Sets the link selection delay in seconds, in the range of 1 to 65535.

Usage guidelines

To improve packet forwarding efficiency, the device does not repeatedly perform link selection for traffic of the same session. After the device performs link selection for traffic of a session, it forwards the subsequent traffic of that session according to the previous link selection result. Link reselection is triggered when any link in the session's flow template has one of the following changes:

· The quality of a link becomes qualified from unqualified or the quality of a link becomes unqualified from qualified.

· The bandwidth usage of a link has reached 90% of the maximum bandwidth.

· The bandwidth usage of a link-attached output interface has reached 90% of the maximum bandwidth.

To avoid frequent link selection caused by link flapping, RIR defines a link selection delay and link selection suppression period.

After the device performs link selection, it starts the link selection suppression period if the period has been configured. Within the link selection suppression period, the device does not perform link reselection, but it maintains the link state data. When the link selection suppression period ends, the link selection delay timer starts. If the link state still meets the conditions that can trigger link reselection when the delay timer expires, the device performs link reselection. If the link state changes to not meet the conditions that can trigger link reselection within the delay time, the device does not perform link reselection.

If you execute this command multiple times, the most recent configuration takes effect.

Examples

# Set the link selection delay to 30 seconds for RIR-VXLAN.

<Sysname> system-view

[Sysname] rir

[Sysname-rir] link-select delay 30

# Set the link selection delay to 30 seconds for RIR-SDWAN.

<Sysname> system-view

[Sysname] rir sdwan

[Sysname-rir-sdwan] link-select delay 30

Related commands

link-select suppress-period

link-select same-transport-network prefer

Use link-select same-transport-network prefer to enable preferred selection for the links of the same transport network.

Use undo link-select same-transport-network prefer to disable preferred selection for the links of the same transport network.

Syntax

link-select same-transport-network prefer

undo link-select same-transport-network prefer

Default

Preferred selection is disabled for the links of the same transport network.

Views

RIR-SDWAN flow template view

Predefined user roles

network-admin

Usage guidelines

With preferred selection enabled for the links of the same transport network, the device preferentially selects a TTE connection with the same transport network ID for packet forwarding. If none of the TTE connections with the same transport network ID meet the link selection conditions, the device selects links from the TTE connections with a different transport network ID. If multiple TTE connections with the same transport network ID exist, they load share traffic based on the link selection principles.

Examples

# Enable preferred selection for the links of the same transport network.

<Sysname> system-view

[Sysname] rir sdwan

[Sysname-rir-sdwan] flow 1

[Sysname-rir-sdwan-flow-1] link-select same-transport-network prefer

link-select suppress-period

Use link-select suppress-period to set the link selection suppression period.

Use undo link-select suppress-period to restore the default.

Syntax

link-select suppress-period period-value

undo link-select suppress-period

Default

No link selection suppression period is configured. The device does not start the link selection suppression period after a link selection.

Views

RIR-VXLAN view

RIR-SDWAN view

Predefined user roles

network-admin

Parameters

period-value: Sets the link selection suppression period in seconds, in the range of 1 to 131070.

Usage guidelines

To avoid frequent link selection caused by link flapping, configure a link selection suppression period. The device starts the link selection suppression period after it performs a link selection.

Within the link selection suppression period, the device does not perform link reselection, but it maintains the link state data. When the link selection suppression period ends, the link selection delay timer starts. If the link state still meets the conditions that can trigger link reselection when the delay timer expires, the device performs link reselection. If the link state changes to not meet the conditions that can trigger link reselection within the delay time, the device does not perform link reselection.

As a best practice, set the link selection suppression period to a multiple of the link selection delay time. Make sure the suppression period is at least double of the link selection delay time.

If you execute this command multiple times, the most recent configuration takes effect.

Examples

# Set the link selection suppression period to 60 seconds for RIR-VXLAN.

<Sysname> system-view

[Sysname] rir

[Sysname-rir] link-select suppress-period 60

# Set the link selection suppression period to 60 seconds for RIR-SDWAN.

<Sysname> system-view

[Sysname] rir sdwan

[Sysname-rir-sdwan] link-select suppress-period 60

Related commands

link-select delay

load-balance per-packet enable

Use load-balance per-packet enable to enable per-packet load balancing.

Use undo load-balance enable to restore the default.

Syntax

load-balance per-packet enable

undo load-balance per-packet enable

Default

The RIR global link load balancing mode applies.

Views

RIR-VXLAN flow template view

RIR-SDWAN flow template view

Predefined user roles

network-admin

Usage guidelines

Based on link bandwidth, RIR supports the following link load balancing modes:

· Per-session weight-based link selection mode—RIR global link load balancing mode that takes effect on all RIR flows. This mode can distribute the sessions that match the same flow template to different links according to the weights of the links. RIR selects only one link to transmit a session.

· Per-session periodic link adjustment mode—RIR global link load balancing mode that takes effect on all RIR flows. This mode not only can distribute the sessions that match the same flow template to different links, but also can periodically adjust links for the sessions. Within one adjustment period, RIR selects only one link to transmit a session.

· Per-packet mode—Flow-specific link load balancing mode that takes effect only on sessions that match the flow template where this mode is enabled. This mode can distribute the same session to different links for transmission.

The mechanisms of the per-packet mode are as follows:

· For preference-based primary link selection, preference-based backup link selection, and quality tolerant link selection—If multiple links are available (or multiple links have the highest approximate overall CQI value for quality tolerant link selection in RIR-SDWAN), all these links are candidate optimal links for this session. When forwarding traffic for the session, the device distributes the traffic to these links packet by packet. The probability that a link is selected is calculated by using the following formula: (remaining bandwidth of the link-attached output interface / remaining bandwidth sum of all available link-attached output interfaces) × (remaining bandwidth of the link / remaining bandwidth sum of all available links for the link-attached output interface). The used bandwidth of a link or an output interface includes the per-session expected bandwidth.

· For bandwidth tolerant link selection—If multiple links are available for a session, all these links are candidate optimal links for this session. When forwarding traffic for the session, the device distributes the traffic to these links packet by packet. Each link has the same probability to be selected.

Because packets of the same session are distributed to multiple links, the receiver might receive out-of-order packets. As a best practice, do not enable per-packet load balancing for order-sensitive services (except the services that use protocols to maintain a correct packet order, for example, TCP).

If Wide Area Application Services (WAAS) log packet compression or decompression is enabled, per-packet load balancing cannot be performed correctly. For more information about WAAS log packet compression and decompression, see WAAS configuration in Layer 3—IP Services Configuration Guide.

Examples

# Enable per-packet load balancing mode in flow template with flow ID 1 for RIR-VXLAN.

<Sysname> system-view

[Sysname] rir

[Sysname-rir] flow 1

[Sysname-rir-flow-1] load-balance per-packet enable

# Enable per-packet load balancing mode in flow template with flow ID 1 for RIR-SDWAN.

<Sysname> system-view

[Sysname] rir sdwan

[Sysname-rir-sdwan] flow 1

[Sysname-rir-sdwan-flow-1] load-balance per-packet enable

load-balance per-session periodic-adjust adjust-interval

Use load-balance per-session periodic-adjust adjust-interval to set the adjustment interval for per-session periodic link adjustment mode.

Use undo load-balance per-session periodic-adjust adjust-interval to restore the default.

Syntax

load-balance per-session periodic-adjust adjust-interval interval-value

undo load-balance per-session periodic-adjust adjust-interval

Default

The adjustment interval for per-session periodic link adjustment mode is 30 seconds.

Views

RIR-VXLAN view

RIR-SDWAN view

Predefined user roles

network-admin

Parameters

interval-value: Sets the adjustment interval for per-session periodic link adjustment mode, in the range of 15 to 65535 seconds.

Usage guidelines

In per-session periodic link adjustment mode, the device periodically detects the bandwidth usage of all links that have RIR sessions at intervals configured by using this command. RIR reselect links for sessions that match a flow template if the links in the flow template meets the following requirements: The difference between the largest remaining bandwidth ratio and smallest remaining bandwidth ratio of output interfaces becomes larger than or equal to the periodic adjustment upper threshold. The link adjustment might be last for several adjustment intervals. RIR stops link adjustment if one of the following requirements is met:

· The difference between the largest remaining bandwidth ratio and the smallest remaining bandwidth ratio of the output interfaces becomes smaller than the periodic adjustment lower threshold.

· The adjustment interval is the 20th interval after link reselection is triggered.

If you execute this command multiple times, the most recent configuration takes effect.

Examples

# Set the adjustment interval for per-session periodic link adjustment mode to 20 seconds for RIR-VXLAN.

<Sysname> system-view

[Sysname] rir

[Sysname-rir] load-balance per-session periodic-adjust adjust-interval 20

# Set the adjustment interval for per-session periodic link adjustment mode to 20 seconds for RIR-SDWAN.

<Sysname> system-view

[Sysname] rir sdwan

[Sysname-rir-sdwan] load-balance per-session periodic-adjust adjust-interval 20

Related commands

load-balance per-session periodic-adjust enable

load-balance per-session periodic-adjust threshold

load-balance per-session periodic-adjust enable

Use load-balance per-session periodic-adjust enable to enable per-session periodic link adjustment mode.

Use undo load-balance per-session periodic-adjust enable to restore the default.

Syntax

load-balance per-session periodic-adjust enable

undo load-balance per-session periodic-adjust enable

Default

The per-session weight-based link selection mode is used.

Views

RIR-VXLAN view

RIR-SDWAN view

Predefined user roles

network-admin

Usage guidelines

Based on link bandwidth, RIR supports the following link load balancing modes:

· Per-packet mode—Flow-specific link load balancing mode that takes effect only on traffic that matches the flow template where this mode is enabled. This mode can distribute the same session to different links for transmission.

The mechanisms of the per-session periodic link adjustment mode are as follows:

a. RIR selects the output interface with the lowest bandwidth usage for a session. The used bandwidth is the actually used bandwidth plus the per-session expected bandwidth.

b. RIR selects a link among the links available for the selected output interface by comparing the bandwidth usage of the links. The link with the lowest bandwidth usage is selected as the optimal link. The used bandwidth is the actually used bandwidth plus the per-session expected bandwidth.

· For bandwidth tolerant link selection—If multiple links meet the requirements of a flow template, RIR selects one optimal link for each session of the flow template from these links. The link selected the last time for a session takes precedence over the other links for that session. If RIR performs link selection for a session for the first time, it uses the following process:

c. Selects an output interface based on the remaining bandwidth weights of the available output interfaces.

d. Selects a link among the links available for the selected output interface based on the remaining bandwidth weights of the links.

The per-session expected bandwidth is added to the used bandwidth.

In per-session periodic link adjustment mode, the device periodically detects the bandwidth usage of output interfaces for all links that have RIR sessions at the configured adjustment intervals. RIR reselect links for sessions that match a flow template if the pyhsical output interfaces for the links in the flow template meets the following requirements: The difference between the largest remaining bandwidth ratio and smallest remaining bandwidth ratio of the output interfaces becomes larger than or equal to the periodic adjustment upper threshold. The link adjustment might be last for several adjustment intervals. RIR stops link adjustment if one of the following requirements is met:

· The difference between the largest remaining bandwidth ratio and the smallest remaining bandwidth ratio of the output interfaces becomes smaller than the periodic adjustment lower threshold.

· The adjustment interval is the 20th interval after link reselection is triggered.

For a flow template, the per-packet load balancing mode takes precedence over the global per-session periodic link adjustment mode. If the per-packet load balancing mode is not enabled for a flow template, the flow template uses the global link load balancing mode.

Examples

# Enable per-session periodic link adjustment mode for RIR-VXLAN.

<Sysname> system-view

[Sysname] rir

[Sysname-rir] load-balance per-session periodic-adjust enable

# Enable per-session periodic link adjustment mode for RIR-SDWAN.

<Sysname> system-view

[Sysname] rir sdwan

[Sysname-rir-sdwan] load-balance per-session periodic-adjust enable

Related commands

load-balance per-session periodic-adjust adjust-interval

load-balance per-session periodic-adjust threshold

Use load-balance per-session periodic-adjust threshold to set the periodic adjustment thresholds in per-session periodic link adjustment mode.

Use undo load-balance per-session periodic-adjust threshold to restore the default.

Syntax

load-balance per-session periodic-adjust threshold upper upper-threshold-value lower lower-threshold-value

undo load-balance per-session periodic-adjust threshold

Default

The periodic adjustment upper threshold is 50% and the periodic adjustment lower threshold is 20%.

Views

RIR-VXLAN view

RIR-SDWAN view

Predefined user roles

network-admin

Parameters

upper upper-threshold-value: Sets the periodic adjustment upper threshold, in the range of 1 to 100. The upper-threshold-value argument specifies the largest difference allowed between the largest remaining bandwidth ratio and the smallest remaining bandwidth ratio of all available output interfaces.

lower lower-threshold-value: Sets the periodic adjustment lower threshold, in the range of 1 to 100. After the difference between the largest remaining bandwidth ratio and the smallest remaining bandwidth ratio becomes smaller than this threshold, RIR stops link adjustment.

Usage guidelines

In per-session periodic link adjustment mode, the device periodically detects the bandwidth usage of output interfaces for all links that have RIR sessions at the configured adjustment intervals. RIR reselect links for sessions that match a flow template if the output interfaces for the links in the flow template meets the following requirements: The difference between the largest remaining bandwidth ratio and smallest remaining bandwidth ratio of the output interfaces becomes larger than or equal to the periodic adjustment upper threshold. The link adjustment might be last for several adjustment intervals. RIR stops link adjustment if one of the following requirements is met:

· The difference between the largest remaining bandwidth ratio and the smallest remaining bandwidth ratio of the output interfaces becomes smaller than the periodic adjustment lower threshold.

· The adjustment interval is the 20th interval after link reselection is triggered.

The periodic adjustment upper threshold must be greater than or equal to the periodic adjustment lower threshold.

If you execute this command multiple times, the most recent configuration takes effect.

Examples

# For RIR-VXLAN, set the periodic adjustment upper threshold and the periodic adjustment lower threshold to 60% and 30%, respectively.

<Sysname> system-view

[Sysname] rir

[Sysname-rir] load-balance per-session periodic-adjust threshold upper 60 lower 30

# For RIR-SDWAN, set the periodic adjustment upper threshold and the periodic adjustment lower threshold to 60% and 30%, respectively.

<Sysname> system-view

[Sysname] rir sdwan

[Sysname-rir-sdwan] load-balance per-session periodic-adjust threshold upper 60 lower 30

Related commands

load-balance per-session periodic-adjust enable

load-balance per-session periodic-adjust adjust-interval

log enable

Use log enable to enable RIR logging.

Use undo log enable to disable RIR logging.

Syntax

log enable

undo log enable

Default

RIR logging is disabled.

Views

RIR-VXLAN view

RIR-SDWAN view

Predefined user roles

network-admin

Usage guidelines

RIR logs record events occurred during the RIR process, such as link selection and reselection, quality change, bandwidth change, configuration change, and link fault events. The logs help the administrator analyze, maintain, and adjust the RIR network.

Flow logs can be load-balanced based on the session source IP, which means that a single flow log will be sent to only one specific log host among all the configured log hosts. However, RIR logs do not support this output method.

RIR logs are flow logs. To output RIR logs, you must also configure flow log features. For more information about flow logs, see Network Management and Monitoring Configuration Guide.

Examples

# Enable RIR logging for RIR-VXLAN.

<Sysname> system-view

[Sysname] rir

[Sysname-rir] log enable

# Enable RIR logging for RIR-SDWAN.

<Sysname> system-view

[Sysname] rir sdwan

[Sysname-rir-sdwan] log enable

Related commands

userlog flow export host (Network Management and Monitoring Command Reference)

userlog flow syslog (Network Management and Monitoring Command Reference)

no-optimal-link drop

Use no-optimal-link drop to enable the device to discard the specified service flow upon failure to find the optimal link.

Use undo no-optimal-link drop to restore the default.

Syntax

no-optimal-link drop

undo no-optimal-link drop

Default

The device forwards the specified service flow according to routing table lookup upon failure to find the optimal link.

Views

Flow template view

Predefined user roles

network-admin

Usage guidelines

With the RIR link selection mechanism, the device can select the optimal link from the links of the associated flow template to forward the service flow. If the optimal link is not found, the device forwards the service flow according to routing table lookup. If all links specified for a specific service fail, you can configure this command to not assign the service flow to other links. For example, you can configure this command to not assign low-priority video traffic to service links. After configuring this command, if the device fails to find the optimal link for the service flow, it discards the packets for that service flow.

Examples

# Enable the device to discard the service flow of flow template 1 upon failure to find the optimal link.

<Sysname> system-view

[Sysname] rir

[Sysname-rir] flow 1

[Sysname-rir-flow-1] no-optimal-link drop

Related commands

path link-type index preference

nqa

Use nqa to create an NQA link quality operation and enter its view, or enter the view of an existing NQA link quality operation.

Use undo nqa to delete an NQA link quality operation.

Syntax

nqa nqa-id

undo nqa nqa-id

Default

No NQA link quality operations exist.

Views

RIR-VXLAN view

Predefined user roles

network-admin

Parameters

nqa-id: Specifies an NQA link quality operation by its ID, in the range of 0 to 128.

Usage guidelines

An NQA link quality operation allows a flow template to start UDP jitter probes based on the probe parameters in the operation in order to detect the quality of links.

You can configure a quality policy for a flow template to associate the flow template with an SLA and an NQA link quality operation. The device monitors the quality of links in the flow template based on the NQA link quality operation and compares the NQA probe results with the thresholds in the SLA. If all parameter values in the probe results of a link are lower than or equal to the thresholds in the SLA, the link is qualified for the flow.

To differentiate service flows that have different link quality requirements, associate the flow templates with NQA link quality operations that contain different probe parameter values. Two NQA link quality operations with different probe parameter values might offer different probe results for the same link.

In a VXLAN network, the NQA link quality probe targets are VXLAN tunnel interfaces enabled with the RIR client.

The device supports a maximum of 129 NQA link quality operations.

Examples

# Create NQA link quality operation 1 and enter its view.

<Sysname> system-view

[Sysname] rir

[Sysname-rir] nqa 1

[Sysname-rir-nqa-1]

Related commands

nqa agent enable (Network Management and Monitoring Command Reference)

quality-policy

packet-loss threshold

Use packet-loss threshold to set the packet loss threshold.

Use undo packet-loss threshold to restore the default.

Syntax

packet-loss threshold threshold-value

undo packet-loss threshold

Default

The packet loss threshold is 100‰.

Views

RIR-VXLAN SLA view

RIR-SDWAN SLA view

Predefined user roles

network-admin

Parameters

threshold-value: Sets the packet loss threshold, in the range of 0 to 1000 in permillage.

Usage guidelines

The packet loss ratio is the number of lost packets to the total number of sent packets. The lower the packet loss ratio, the higher the link quality. A flow template uses the packet loss threshold in its associated SLA to filter links that meet the packet loss requirement.

Examples

# In RIR-VXLAN SLA 1, set the packet loss threshold to 500‰.

<Sysname> system-view

[Sysname] rir

[Sysname-rir] sla 1

[Sysname-rir-sla-1] packet-loss threshold 500

# In RIR-SDWAN SLA 1, set the packet loss threshold to 500‰.

<Sysname> system-view

[Sysname] rir sdwan

[Sysname-rir-sdwan] sla 1

[Sysname-rir-sdwan-sla-1] packet-loss threshold 500

Related commands

sla

path link-type index preference

Use path link-type index preference to specify a link preference for a type of links with a specific link index in a flow template.

Use undo path link-type index preference to restore the default.

Syntax

path link-type { 4g | internet | mpls | mstp } index link-index preference preference

undo path link-type { 4g | internet | mpls | mstp } index link-index

Default

No link preference is specified for a type of links with a specific link index in a flow template.

Views

RIR-VXLAN flow template view

Predefined user roles

network-admin

Parameters

4g: Specifies the 4G type.

internet: Specifies the Internet type.

mpls: Specifies the MPLS type.

mstp: Specifies the MSTP type.

index link-index: Specifies a link index in the range of 1 to 65535.

preference preference: Specifies a link preference in the range of 1 to 255. The lower the value, the higher the priority.

Usage guidelines

RIR preferentially selects links with higher preference.

The link type and link index specified in this command identify links on a VSI interface. .Because a VSI interface can have only one VXLAN tunnel between a hub and spoke, this command sets the link preference for a specific VXLAN tunnel.

You can assign the same link preference value to different links in the same flow template.

Examples

# In flow template 1, set the preference of MPLS link 1 to 100.

<Sysname> system-view

[Sysname] rir

[Sysname-rir] flow 1

[Sysname-flow-1] path link-type mpls index 1 preference 100

Related commands

rir link-type

path sdwan

Use path sdwan to configure a link preference for a flow template.

Use undo path sdwan to restore the default.

Syntax

path sdwan transport-network network-name [ group-id group-id ] preference preference

undo path sdwan transport-network network-name [ group-id group-id ]

Default

No link preference is configured in a flow template.

Views

RIR-SDWAN flow template view

Predefined user roles

network-admin

Parameters

transport-network network-name: Specifies a transport network name, a case-sensitive string of 1 to 31 characters that can contain only letters, digits, and dots (.).

group-id group-id: Specifies an SDWAN tunnel group ID for the links, in the range of 1 to 65535. If you do not specify this option, the links are not associated with any SDWAN tunnel group IDs.

preference preference: Specifies a link preference in the range of 1 to 255. The smaller the value, the higher the priority.

Usage guidelines

Use this command to assign a link preference to an SDWAN tunnel by its transport network name and use the sdwan group-id keyword to specify an SDWAN tunnel group ID in a flow template. RIR preferentially selects links with higher preference.

You can assign the same link preference value to different links in the same flow template.

A flow template supports assigning preference values to a maximum of 64 links.

Examples

# Assign preference 1 to the link with transport network name nt1.

<Sysname> system-view

[Sysname] rir sdwan

[Sysname-rir-sdwan] flow 1

[Sysname-rir-sdwan-flow-1] path sdwan transport-network nt1 preference 1

Related commands

sdwan transport-network

peer

Use peer to configure the peer device for application quality probing.

Use undo peer to delete the peer device for application quality probing.

Syntax

peer { source | destination } site-id site-id device-id device-id

undo peer

Default

No peer device is configured for application quality probing.

Views

Application quality probe instance view

Predefined user roles

network-admin

Parameters

source: Specifies the peer device as the source device for application quality probing.

destination: Specifies the peer device as the destination device for application quality probing.

site-id site-id: Specifies the site ID configured during SDWAN tunnel establishment for the peer device, in the range of 1 to 65535.

device-id device-id: Specifies the device ID configured during SDWAN tunnel establishment for the peer device, in the range of 1 to 255.

Usage guidelines

Use this command to specify a pair of peer devices as the source and destination devices for application quality probing. After you execute the probe flow command, the device uses iNQA to periodically probe the application flows with the specified packet signatures for application quality calculation. The application quality probe result is used for application analysis and does not affect link selection.

To modify the peer device settings of an instance, first execute the undo probe flow command to disable application quality probing for all service flows of the instance.

If you execute the peer command multiple times, the most recent configuration takes effect.

Examples

# Specify the peer device as the source device for application quality probing, and configure its site ID as 1 and device ID as 2.

<Sysname> system-view

[Sysname] rir sdwan

[Sysname-rir-sdwan] application-quality

[Sysname-rir-sdwan-app-instance-abc] instance abc

[Sysname-rir-sdwan-app-instance-abc] peer source site-id 1 device-id 2

Related commands

probe flow

sdwan device-id

sdwan site-id

probe connect

Use probe connect to configure NQA link connectivity probe parameters.

Use undo probe connect to restore the default.

Syntax

probe connect interval interval timeout timeout

undo probe connect

Default

For RIR-VXLAN, the NQA link connectivity probe interval is 100 milliseconds, and the timeout time is 3000 milliseconds for waiting for a response to a link connectivity probe packet.

Views

RIR-VXLAN view

Predefined user roles

network-admin

Parameters

interval interval: Sets the NQA link connectivity probe interval in milliseconds. The value range for the interval argument is 0 to 604800000. The value of 0 represents that only one probe is performed.

timeout timeout: Sets the timeout time for waiting for a response to a link connectivity probe packet. The value range for the timeout argument is 10 to 3600000 milliseconds.

Usage guidelines

The device starts to detect the connectivity of all links in flow templates after RIR-VXLAN is enabled. Spokes (RIR clients) performs consecutive probes at the configured intervals and wait for responses for the probe packets. If an RIR client has not received any responses on a link when the probe packet timeout timer expires, the client determines that the link has connectivity issues.

Setting a shorter probe interval obtains more precise probe results but requires more system resources.

Set a shorter probe packet timeout time if the requirement for link quality is high.

In a VXLAN network, the probe targets are VXLAN tunnel interfaces enabled with the RIR client.

Examples

# For RIR-VXLAN, set the NQA link connectivity probe interval to 30 milliseconds, and set the timeout time to 20 milliseconds for waiting for a response to a link connectivity probe packet.

<Sysname> system-view

[Sysname] rir

[Sysname-rir] probe connect interval 30 timeout 20

Related commands

client enable

probe sync-port

server enable

probe flow

Use probe connect to enable application quality probing for a service flow.

Use undo probe connect to disable application quality probing for a service flow.

Syntax

probe flow flow-id

undo probe flow [ flow-id ]

Default

Application quality probing is disabled for all service flows.

Views

Application quality probe instance view

Predefined user roles

network-admin

Parameters

flow-id: Specifies a flow template by its flow ID in the range of 1 to 65535. If you do not specify a flow ID, the undo probe flow command disables application quality probing for all flow templates.

Usage guidelines

For specific service flows forwarded through the SDWAN tunnel, use this command to probe the quality of the application flows with the specified packet signature (such as source or destination IP address). The application quality probe result is used for application analysis. You can enable application quality probing for multiple flow templates of an instance.

Before configuring this command, make sure you have configured the following settings:

· Create the associated flow template. Without the configuration, application quality probing cannot take effect on the service flow.

· Use the peer command to specify the role, site ID, and device ID for the peer device.

· Use the signature command to specify the packet signature for application quality probing.

For a specific service flow, the device does not probe the quality of an application flow without any packets matching the specified signature.

Examples

# Enable application quality probing for flow template 1.

<Sysname> system-view

[Sysname] rir sdwan

[Sysname-rir-sdwan] application-quality

[Sysname-rir-sdwan-app] instance abc

[Sysname-rir-sdwan-app-instance-abc] peer source site-id 1 device-id 2

[Sysname-rir-sdwan-app-instance-abc] signature source-ip 10.1.1.1 destination-ip 20.1.1.1

[Sysname-rir-sdwan-app-instance-abc] probe flow 1

Related commands

flow

peer

signature

probe interval (application quality probe instance view)

Use probe interval to set the application quality probe interval.

Use undo probe interval to restore the default.

Syntax

probe interval interval

undo probe interval

Default

The application quality probe interval is 60 seconds.

Views

Application quality probe instance view

Predefined user roles

network-admin

Parameters

interval: Sets the application quality probe interval. Supported values are 30, 60, 300, and 600 seconds.

Usage guidelines

After you execute the probe flow command, the device uses iNQA to probe the application flows with the specified packet signatures at the specified intervals for application quality calculation. The application quality probe result is used for application analysis and does not affect link selection.

To modify the application quality probe interval setting, first execute the undo probe flow command to disable application quality probing for all service flows of the instance.

If you execute the probe interval command multiple times, the most recent configuration takes effect.

Examples

# Set the application quality probe interval to 600 seconds for application quality probe instance abc.

<Sysname> system-view

[Sysname] rir sdwan

[Sysname-rir-sdwan] application-quality

[Sysname-rir-sdwan-app] instance abc

[Sysname-rir-sdwan-app-instance-abc] probe interval 600

Related commands

probe flow

probe interval (NQA link quality operation view)

Use probe interval to set the NQA link quality probe interval.

Use undo probe interval to restore the default.

Syntax

probe interval interval

undo probe interval

Default

The NQA link quality probe interval is 100 milliseconds.

Views

NQA link quality operation view

Predefined user roles

network-admin

Parameters

interval: Sets the NQA link quality probe interval, in the range of 0 to 604800000 milliseconds.

Usage guidelines

Use this command to specify the intervals at which the NQA client performs consecutive probes.

Examples

# In NQA link quality operation 1, set the probe interval to 60 milliseconds.

<Sysname> system-view

[Sysname] rir

[Sysname-rir] nqa 1

[Sysname-rir-nqa-1] probe interval 60

Related commands

nqa

probe packet-dscp

Use probe packet-dscp to set the DSCP value of NQA link quality probe packets.

Use undo probe packet-dscp to restore the default.

Syntax

probe packet-dscp dscp-value

undo probe packet-dscp

Default

The DSCP value of NQA link quality probe packets is 63.

Views

NQA link quality operation view

Predefined user roles

network-admin

Parameters

dscp-value: Sets the DSCP value of NQA link quality probe packets, in the range of 0 to 63. The larger the value, the higher the priority.

Usage guidelines

Assign different DSCP values to the probe packets of different NQA link quality operations to affect the priority of links in the flow templates associated with the operations.

Examples

# In NQA link quality operation 1, set the DSCP value of probe packets to 10.

<Sysname> system-view

[Sysname] rir

[Sysname-rir] nqa 1

[Sysname-rir-nqa-1] probe packet-dscp 10

Related commands

nqa

probe packet-interval

Use probe packet-interval to set the intervals at which NQA link quality probe packets are sent.

Use undo probe packet-interval to restore the default.

Syntax

probe packet-interval interval

undo probe packet-interval

Default

NQA link quality probe packets are sent at intervals of 20 milliseconds.

Views

NQA link quality operation view

Predefined user roles

network-admin

Parameters

interval: Sets the probe packet sending interval, in the range of 10 to 60000 milliseconds.

Usage guidelines

The device performs consecutive NQA link quality probes at intervals set by using the probe interval command and it sends multiple probe packets at each probe. The probe packet-interval command sets the probe packet sending interval within a probe.

Examples

# In NQA link quality operation 1, set the probe packet sending interval to 10 milliseconds.

<Sysname> system-view

[Sysname] rir

[Sysname-rir] nqa 1

[Sysname-rir-nqa-1] probe packet-interval 10

Related commands

nqa

probe packet-number

Use probe packet-number to set the number of NQA link quality probe packets sent per probe.

Use undo probe packet-number to restore the default.

Syntax

probe packet-number number

undo probe packet-number

Default

An NQA client sends 100 NQA link quality probe packets per probe.

Views

NQA link quality operation view

Predefined user roles

network-admin

Parameters

number: Sets the number of NQA link quality probe packets sent per probe, in the range of 10 to 1000.

Usage guidelines

The device performs consecutive NQA link quality probes at intervals set by using the probe interval command and it sends multiple probe packets at each probe. The probe packet-number command sets the number of probe packets sent at each probe.

Examples

# In NQA link quality operation 1, set the number of link quality probe packets sent per probe to 100.

<Sysname> system-view

[Sysname] rir

[Sysname-rir] nqa 1

[Sysname-rir-nqa-1] probe packet-number 100

Related commands

nqa

probe packet-timeout

Use probe packet-timeout to set the timeout time for waiting for a response to an NQA link quality probe packet.

Use undo probe packet-timeout to restore the default.

Syntax

probe packet-timeout packet-timeout

undo probe packet-timeout

Default

The timeout time is 3000 milliseconds.

Views

NQA link quality operation view

Predefined user roles

network-admin

Parameters

packet-timeout: Sets the timeout time for waiting for a response to an NQA link quality probe packet. The value range for this argument is 10 to 3600000 milliseconds.

Usage guidelines

A probe packet times out on an NQA client if the NQA client fails to receive any response to the probe packet when the probe packet timeout timer expires.

Examples

# In NQA link quality operation 1, set the NQA link quality probe packet timeout time to 200 milliseconds.

<Sysname> system-view

[Sysname] rir

[Sysname-rir] nqa 1

[Sysname-rir-nqa-1] probe packet-timeout 200

Related commands

nqa

probe port

Use probe port to specify a destination port for NQA link quality probes.

Use undo probe port to restore the default.

Syntax

probe port port-number

undo probe port

Default

No destination port is specified for NQA link quality probes.

Views

NQA link quality operation view

Predefined user roles

network-admin

Parameters

port-number: Specifies a destination port number in the range of 1024 to 65535.

Usage guidelines

Use this command for an NQA client. The destination port number must be the same as the listening port number on the NQA server.

Examples

# In NQA link quality operation 1, set the NQA link quality probe destination port to 65500.

<Sysname> system-view

[Sysname] rir

[Sysname-rir] nqa 1

[Sysname-rir-nqa-1] probe port 65500

Related commands

nqa

probe sync-port

Use probe sync-port to specify a port for synchronizing probe information between the RIR client and the RIR server.

Use undo probe sync-port to restore the default.

Syntax

probe sync-port port-number

undo probe sync-port

Default

No port is specified for synchronizing probe information between the RIR client and the RIR server.

Views

RIR-VXLAN view

Predefined user roles

network-admin

Parameters

port-number: Specifies a TCP port number in the range of 1024 to 65535.

Usage guidelines

Specify the same synchronization port on the RIR client and server for successful synchronization of link quality probe results.

Examples

# Set the port to 65550 for synchronizing probe information between the RIR client and the RIR server.

<Sysname> system-view

[Sysname] rir

[Sysname-rir] probe sync-port 65550

Related commands

client enable

probe connect

server enable

quality-policy

Use quality-policy to configure a quality policy for a flow template.

Use undo quality-policy to restore the default.

Syntax

RIR-VXLAN:

quality-policy sla sla-id nqa nqa-id

undo quality-policy

RIR-SDWAN:

quality-policy sla sla-id

undo quality-policy

Default

No quality policy is configured for a flow template.

Views

RIR-VXLAN flow template view

RIR-SDWAN flow template view

Predefined user roles

network-admin

Parameters

sla sla-id: Specifies an SLA by its ID, in the range of 0 to 128. The specified SLA must exist on the device.

nqa nqa-id: Specifies an NQA link quality operation by its ID in the range of 0 to 128. The specified NQA link quality operation must exist.

Usage guidelines

Use this command to specify a link quality for a flow template.

· For RIR-VXLAN, you need to specify an SLA and an NQA link quality operation for the flow template.

· For RIR-SDWAN, you need to specify an SLA for the flow template.

For flow priority-based traffic scheduling, the priority of a flow that matches a flow template is determined by the SLA ID specified in the quality policy of that flow template. The greater the SLA ID, the higher the flow priority. If no quality policy is configured for a flow template, flows that match the flow template have the lowest priority.

You can specify only one SLA and one NQA link quality operation for the quality policy of a flow template. However, you can specify the same SLA or NQA link quality operation for the quality policies of multiple flow templates.

If you execute this command multiple times for a flow template, the most recent configuration takes effect.

Examples

# For RIR-VXLAN, configure the quality policy of flow template 1 to associate SLA 2 with NQA link quality operation 1.

<Sysname> system-view

[Sysname] rir

[Sysname-rir] flow 1

[Sysname-rir-flow-1] quality-policy sla 2 nqa 1

# For RIR-SDWAN, configure the quality policy of flow template 1 and specify SLA 2 for the flow quality policy.

<Sysname> system-view

[Sysname] rir sdwan

[Sysname-rir-sdwan] flow 1

[Sysname-rir-sdwan-flow-1] quality-policy sla 2

Related commands

flow priority-based-schedule enable

nqa

sla

reset tunnel flow-statistics

Use reset tunnel flow-statistics to clear flow ID-based traffic rate statistics for tunnels.

Syntax

reset tunnel flow-statistics [ flow flow-id [ interface tunnel number ] ]

Views

User view

Predefined user roles

network-admin

Parameters

flow flow-id: Specifies a flow template by its flow ID, in the range of 0 to 65535. If you do not specify a flow ID, this command clears statistics for all flow templates.

interface tunnel number: Specifies a tunnel interface by its tunnel interface number. If you do not specify a tunnel interface, this command clears statistics about the specified flow template for all tunnel interfaces.

Examples

# Clear flow ID-based traffic rate statistics for tunnels.

<Sysname> reset tunnel flow-statistics

Related commands

display tunnel flow-statistics

tunnel flow-statistics enable

rir

Use rir to enable the RIR-VXLAN service and enter RIR-VXLAN view, or directly enter RIR-VXLAN view if the RIR-VXLAN service is already enabled.

Use undo rir to disable the RIR-VXLAN service.

Syntax

rir

undo rir

Default

The RIR-VXLAN service is disabled.

Views

System view

Predefined user roles

network-admin

Usage guidelines

RIR can be deployed based on VXLAN tunnels or SDWAN tunnels, which are called RIR-VXLAN and RIR-SDWAN, respectively

· For RIR-VXLAN, use the rir command to enable the RIR-VXLAN service.

· For RIR-SDWAN, use the rir sdwan command to enable the RIR-SDWAN service.

When you enable the RIR-VXLAN or RIR-SDWAN service, the system enables the RIR process. When you disable the RIR-VXLAN or RIR-SDWAN service, the system disables the RIR process.

You cannot enable both the RIR-VXLAN and RIR-SDWAN services.

· To enable the RIR-SDWAN service when the RIR-VXLAN service is enabled, you must first execute the undo rir command to disable the RIR-VXLAN service.

· To enable the RIR-VXLAN service when the RIR-SDWAN service is enabled, you must first execute the undo rir sdwan command to disable the RIR-SDWAN service.

For RIR-VXLAN, you must enable the RIR-VXLAN service on all hubs and spokes.

Examples

# Enable the RIR-VXLAN service and enter RIR-VXLAN view.

<Sysname> system-view

[Sysname] rir

[Sysname-rir]

rir backup

Use rir backup to configure a tunnel as an RIR backup tunnel.

Use undo rir backup to restore the default.

Syntax

rir backup

undo rir backup

Default

A tunnel is an RIR primary tunnel.

Views

VXLAN tunnel interface view

Predefined user roles

network-admin

Usage guidelines

This command enables the RIR process if the RIR process has not been enabled. The undo form of this command does not disable the RIR process.

RIR selects qualified primary links prior to qualified backup links.

A spoke is typically connected to both a primary hub and a backup hub. You can specify the tunnels connected to the backup hub as backup tunnels. If no suitable link is available to reach the primary hub, the spoke can forward traffic through the backup tunnels to the backup hub to ensure service continuity.

Examples

# Configure VXLAN tunnel Tunnel 1 as an RIR backup tunnel.

<Sysname> system-view

[Sysname] interface tunnel1 mode vxlan

[Sysname-Tunnel1] rir backup

rir collaboration-link-group

Use rir collaboration-link-group to assign a VXLAN tunnel to an RIR collaboration link group.

Use undo rir collaboration-link-group to restore the default.

Syntax

rir collaboration-link-group group-id

undo rir collaboration-link-group

Default

A VXLAN tunnel belongs to the RIR collaboration link group with a group ID of 0.

Views

VXLAN tunnel interface view

Predefined user roles

network-admin

Parameters

group-id: Specifies an RIR collaboration link group by its group ID in the range of 1 to 65535.

Usage guidelines

In an RIR collaboration device group, make sure all links to the same device or RIR collaboration device group are assigned to the same RIR collaboration link group. A device in an RIR collaboration device group can select links for service packets from the following links:

· ECMP links configured in the matching flow template on the local device.

· Links configured in the same flow template on devices that belong to the same RIR collaboration device group as the local device. In addition, the links belong to the same RIR collaboration link group as the candidate links on the local device.

You can use this command when RIR is enabled or disabled. However, this command takes effect only when RIR is enabled.

To ensure correct link selection, use this command on each device that belongs to the same RIR collaboration device group. Make sure all links to the same device or RIR collaboration device group are assigned to the same RIR collaboration link group.

In an RIR collaboration device group, make sure the links to different devices or RIR collaboration device groups are assigned to different RIR collaboration link groups.

In different RIR collaboration device groups, the links to the same device or RIR collaboration device group can be assigned to the same RIR collaboration link group. As a best practice to identify links, assign the links to different RIR collaboration link groups.

If you execute this command multiple times, the most recent configuration takes effect.

Examples

# Assign VXLAN tunnel 1 to RIR collaboration link group 1.

<Sysname> system-view

[Sysname] interface Tunnel 1

[Sysname-Tunnel1] rir collaboration-link-group 1

rir dedicated flow

Use rir dedicated flow to specify a tunnel as the dedicated link for the specified service flow.

Use undo rir dedicated flow to restore the default.

Syntax

rir dedicated flow flow-id

undo rir dedicated flow flow-id

Default

The tunnel is not the dedicated link for the service flow.

Views

SDWAN tunnel interface view

Predefined user roles

network-admin

Parameters

flow-id: Specifies a flow template by its ID in the range of 1 to 65535.

Usage guidelines

When you execute this command, if the RIR process is not started on the device, the system also starts the RIR process. When you execute the undo rir dedicated flow command, the system does not shut down the RIR process.

If a tunnel only needs to forward certain service traffic, such as a VXLAN tunnel established based on an MPLS VPN that only forwards video conferencing traffic, you can use this command to configure the tunnel as a dedicated link for the service traffic.

When the device intelligently selects links for the service traffic, it preferentially selects the dedicated link for that traffic.

· If only one dedicated link is available for the service traffic, the link is selected for forwarding.

· If multiple dedicated links are available for the service traffic, the device selects the one with the highest preference configured by the path link-type index preference command for forwarding. If multiple dedicated links with the same preference exist, the device load shares service traffic on these links according to the load sharing mode.

· If none of the dedicated links are available for the traffic, the device selects the optimal link from the flow template for forwarding.

When the device selects the dedicated link for the service traffic, it also schedules other service traffic to other links. If the device cannot select another link other than the dedicated link for other service traffic, it drops other service traffic packets to ensure traffic stability on the dedicated link. When the service traffic no longer uses the dedicated link, the device can reschedule other service traffic to the dedicated link.

After executing this command, you must also configure the preference of the dedicated link for the corresponding flow template by using the path link-type index preference command. Without the configuration, the device does not take that link as a dedicated link during link selection for the service traffic.

You can configure a tunnel as a dedicated link for only one type of service traffic, and configure multiple dedicated links for the same type of service traffic.

Examples

# Specify Tunnel 1 as the dedicated link for flow template 1.

<Sysname> system-view

[Sysname] interface tunnel 1 mode sdwan

[Sysname-Tunnel1] rir dedicated flow 1

Related commands

path link-type index preference

rir link-type index

Use rir link-type to assign a link type and link index to a VSI interface.

Use undo rir link-type to restore the default.

Syntax

rir link-type { 4g | internet | mpls | mstp } index link-index

undo rir link-type { 4g | internet | mpls | mstp } index link-index

Default

No link type or link index is assigned to a VSI interface.

Views

VSI interface view

Predefined user roles

network-admin

Parameters

4g: Specifies the 4G type.

internet: Specifies the Internet type.

mpls: Specifies the MPLS type.

mstp: Specifies the MSTP type.

index link-index: Specifies a link index in the range of 1 to 65535.

Usage guidelines

This command enables the RIR process if the RIR process has not been enabled. The undo form of this command does not disable the RIR process.

The link type and link index together uniquely identify a link between a hub and a spoke. For a flow template to use a link, you must assign a link type and index to the link. Use this command to configure the link type as 4G, Internet, MPLS, or MSTP. The link type only marks the network type of the link and it does not affect packet encapsulation.

VXLAN-based RIR allows a hub and a spoke to have only one VXLAN tunnel for a VSI interface (a VXLAN). By assigning a link type and index to the VSI interface, RIR can identify the VXLAN tunnel between the hub and spoke.

A VSI interface on a hub (or spoke) can have a VXLAN tunnel to each spoke (or hub). The VXLAN tunnels of the same VSI interface are assigned the same link type and link index.

A VSI interface can be associated only with one link type.

You must assign different link indexes to the same type of links on different VSI interfaces.

Examples

# Set the link type to MPLS and link index to 1 on VSI-interface 1.

<Sysname>system-view

[Sysname] interface vsi-interface 1

[Sysname-Vsi-interface1] rir link-type mpls index 1

rir redirect peer

Use rir redirect peer interface to configure the redirect address for RIR data packets.

Use undo rir redirect peer interface to restore the default.

Syntax

rir redirect peer peer-ipv4-address interface interface-type interface-number

undo rir redirect peer peer-ipv4-address

Default

No redirect address is configured for RIR data packets. That is, RIR data packets will not be redirected to the peer device.

Views

System view

Predefined user roles

network-admin

Parameters

peer-ipv4-address: Specifies a redirect address for RIR data packets, that is, the IPv4 address of the collaboration peer device.

interface interface-type interface-number: Specifies an interface to forward RIR redirect data packets by its type and number.

Usage guidelines

In the collaboration link selection network, the concept of Owner is introduced to ensure that the same service traffic is forwarded by the same collaboration device. Owner is calculated from the five-tuple of service traffic. If the same service traffic has the same five-tuple, the calculated Owner is also the same, ensuring that the same service traffic is forwarded by the same Owner device. For service traffic that is directly sent to a non-Owner collaboration device, configure this command to redirect the traffic to the collaboration device that acts as the Owner for processing.

Examples

# Configure the redirect address for RIR data packets as 1.1.1.1, and the interface to forward RIR redirect data packets as Ten-GigabitEthernet 0/0/6.

<Sysname> system-view

[Sysname] rir redirect peer 1.1.1.1 interface ten-gigabitethernet 0/0/6

Related commands

rir redirect group

Use rir redirect group to configure the collaboration group ID for the interface.

Use undo rir redirect group to restore the default.

Syntax

rir redirect group group-id

undo rir redirect group

Default

No collaboration group ID is configured for the interface.

Views

Interface view

Predefined user roles

network-admin

Usage guidelines

In the collaboration link selection network, to forward the same service traffic through the same Owner device, configure the same collaboration group on the service traffic receiving interfaces of the devices that establish RIR collaboration relationship. For service traffic sent to a non-Owner collaboration device, it carries the specified interface collaboration group ID and is redirected to the collaboration device that acts as the Owner. Upon receiving the service traffic carrying the same collaboration group ID as the local interface, the Owner device takes the receiving interface as the local interface and processes the packets.

Examples

# Configure collaboration group ID 1 for the interface.

<Sysname> system-view

[Sysname] interface ten-gigabitethernet 0/0/6

[Sysname-Ten-GigabitEthernet0/0/6] rir redirect group 1

Related commands

rir redirect peer

rir role

Use rir role to enable the RIR client or the RIR server on a VXLAN tunnel interface.

Use undo rir role to restore the default.

Syntax

rir role { client | server }

undo rir role

Default

The default for this command depends on the configuration of the client enable and server enable commands.

Views

VXLAN tunnel interface view

Predefined user roles

network-admin

Parameters

client: Specifies the RIR client.

server: Specifies the RIR server.

Usage guidelines

To avoid NQA probes from occupying too many resources on a hub in a hub-spoke network, configure the hub as an RIR server and configure the spokes as RIR clients.

You can enable the RIR client or server globally or on an interface.

· Enabling the RIR client or server globally also enables the RIR client or server for all interfaces on the device. The interfaces can send or receive link quality probe results.

· Enabling the RIR client or server on an interface allows only that interface to send or receive link quality probe results.

Enable the RIR server or RIR client, or use them in combination, depending on the role of the device in the network.

· If the device acts only as a hub, you can enable the RIR server globally.

· If the device acts only as a spoke, you can enable the RIR client globally.

· If the device acts as both a hub and a spoke, you can enable the RIR server and RIR client on the corresponding interfaces.

When you enable the RIR client or server, follow these restrictions and guidelines:

· In a VXLAN network, only tunnel interfaces support enabling the RIR client or server. The RIR server uses the tunnel interfaces to receive link quality probe results synchronized from RIR clients.

· The RIR client and RIR server cannot be both enabled on the same interface.

· If the enabled role (RIR server or client) on an interface is different from the globally enabled role, the interface-specific role takes effect on that interface.

To modify the role of an interface, you must first use the undo rir role command to remove the original role.

Examples

# Enable the RIR server on tunnel interface Tunnel 1.

<Sysname> system-view

[Sysname] interface Tunnel 1 mode vxlan

[Sysname-tunnel1] rir role client

Related commands

client enable

server enable

rir sdwan

Use rir sdwan to enable the RIR-SDWAN service and enter RIR-SDWAN view, or directly enter RIR-SDWAN view if the RIR-SDWAN service is already enabled.

Use undo rir sdwan to disable the RIR-SDWAN service.

Syntax

rir sdwan

undo rir sdwan

Default

The RIR-SDWAN service is disabled.

Views

System view

Predefined user roles

network-admin

mdc-admin

Usage guidelines

RIR can be deployed based on VXLAN tunnels or SDWAN tunnels, which are called RIR-VXLAN and RIR-SDWAN, respectively.

· For RIR-VXLAN, use the rir command to enable the RIR-VXLAN service.

· For RIR-SDWAN, use the rir sdwan command to enable the RIR-SDWAN service.

When you enable the RIR-VXLAN or RIR-SDWAN service, the system enables the RIR process. When you disable the RIR-VXLAN or RIR-SDWAN service, the system disables the RIR process.

You cannot enable both the RIR-VXLAN and RIR-SDWAN services.

· To enable the RIR-SDWAN service when the RIR-VXLAN service is enabled, you must first execute the undo rir command to disable the RIR-VXLAN service.

· To enable the RIR-VXLAN service when the RIR-SDWAN service is enabled, you must first execute the undo rir sdwan command to disable the RIR-SDWAN service.

For RIR-SDWAN, you must enable the RIR-SDWAN service on all SDWAN devices.

Examples

# Enable the RIR-SDWAN service and enter RIR-SDWAN view.

<Sysname> system-view

[Sysname] rir sdwan

[Sysname-rir-sdwan]

sdwan collaboration peer

Use sdwan collaboration peer to establish RIR collaboration relationship with the specified peer device.

Use undo sdwan collaboration peer device-id to restore the default.

Syntax

sdwan collaboration peer device-id device-id [ vpn-instance vpn-instance-name ] { peer-ipv4-address | peer-ipv6-address } local { local-ipv4-address | local-ipv6-address } [ sync-port port-number ]

undo sdwan collaboration peer device-id device-id

Default

The local device does not establish RIR collaboration relationship with the peer device.

Views

System view

Predefined user roles

network-admin

Parameters

device-id device-id: Specifies an RIR collaboration peer by its ID in the range of 1 to 255.

vpn-instance vpn-instance-name: Specifies the MPLS L3VPN instance on which the local and peer devices establish RIR collaboration relationship. The specified VPN instance must exist. The vpn-instance-name argument is a case-sensitive string of 1 to 31 characters. If the local and peer IP addresses belong to the public network, do not specify this option.

peer-ipv4-address: Specifies an RIR collaboration peer by its IPv4 address.

peer-ipv6-address: Specifies an RIR collaboration peer by its IPv6 address.

local-ipv4-address: Specifies the IPv4 address of the local device.

local-ipv6-address: Specifies the IPv6 address of the local device.

sync port port-number: Specifies the port number for the TCP connection through which the local and peer devices synchronize TTE connection and link quality data. The port number is in the range of 1024 to 65535, and the default value is 2005. The port number cannot be used by any other services on the device.

Usage guidelines

Make sure the devices in an RIR collaboration group reside at the same site. Each pair of devices in an RIR collaboration device group must establish RIR collaboration relationship. You must configure this command on both the local and peer devices.

In a pair of devices with RIR collaboration relationship, the device with a lower IP address is the client. The client uses the port number specified by using this command to initiate a TCP connection (collaboration channel) request to its peer. Through the collaboration channel, the local device can synchronize the TTE connection information and RIR link quality information on the specified tunnel interface to the peer device.

The local and peer devices must use the same TCP port number for link data synchronization. A device can use the same or different TCP port numbers to synchronize data to different peers.

If you execute this command multiple times for the same pair of devices (with the same local IP address, peer device ID, and peer IP address), the most recent configuration takes effect.

You can configure only one collaboration channel between the local device and peer device. Make sure the both the local and peer devices use the same IP address type.

Examples

# Establish RIR collaboration relationship between local device 1.1.1.1 and peer device 1.1.1.2 (with device ID 10). They use TCP port number 6000 for link data synchronization.

<Sysname> system-view

[Sysname] sdwan collaboration peer device-id 10 1.1.1.2 local 1.1.1.1 sync-port 6000

Related commands

collaboration peer local

sdwan collaboration peer-device-id

Use sdwan collaboration peer-device-id to synchronize TTE connection information and RIR link quality information on the local SDWAN tunnel interface to the peer device through the collaboration channel.

Use undo sdwan collaboration to restore the default.

Syntax

sdwan collaboration peer-device-id device-id

undo sdwan collaboration

Default

The device does not synchronize TTE connection information and RIR link quality information on the local SDWAN tunnel interface to the peer device through the collaboration channel.

Views

Tunnel interface view

Predefined user roles

network-admin

Parameters

device-id: Specifies the peer device ID in the range of 1 to 255.

Usage guidelines

With this command configured, the device synchronizes TTE connection information and RIR link quality information on the local SDWAN tunnel interface to the specified peer device through the collaboration channel.

Examples

# Synchronize TTE connection information and RIR link quality information on SDWAN tunnel interface 1 to peer device 10 through the collaboration channel.

<Sysname> system-view

[Sysname] interface Tunnel1 mode sdwan udp

[Sysname-Tunnel1] sdwan collaboration peer-device-id 10

Related commands

sdwan collaboration peer local

sdwan collaboration tte-connection aging

Use sdwan collaboration tte-connection aging to configure aging timer for the TTE connection synchronized through the collaboration channel upon collaboration channel disconnection.

Use undo sdwan collaboration tte-connection aging to restore the default.

Syntax

sdwan collaboration tte-connection aging aging-time

undo sdwan collaboration tte-connection aging

Default

The aging timer for the TTE connection synchronized through the collaboration channel upon collaboration channel disconnection is 180 seconds.

Views

System view

Predefined user roles

network-admin

Parameters

aging-time: Specifies the aging timer for the TTE connection synchronized through the collaboration channel upon collaboration channel disconnection, in the range of 0 to 300 seconds. Value 0 indicates that the TTE connection synchronized through the collaboration channel upon collaboration channel disconnection does not age out.

Examples

# Configure the aging timer for the TTE connection synchronized through the collaboration channel upon collaboration channel disconnection as 3 seconds.

<Sysname> system-view

[Sysname] sdwan collaboration tte-connection aging 3

sdwan collaboration-map peer-device-id peer-interface-id

Use sdwan collaboration-map peer-device-id peer-interface-id to associate the local SDWAN extended tunnel interface with the peer SDWAN tunnel interface.

Use undo sdwan collaboration-map peer-device-id to restore the default.

Syntax

sdwan collaboration-map peer-device-id device-id peer-interface-id interface-id

undo sdwan collaboration-map peer-device-id

Default

The local SDWAN extended tunnel interface is not associated with the peer SDWAN tunnel interface.

Views

SDWAN extended tunnel interface view

Predefined user roles

network-admin

Parameters

peer-device-id device-id: Specifies a peer device at the same site by its ID in the range of to 1 to 255.

peer-interface-id interface-id: Specifies an SDWAN tunnel interface on the peer device at the same site by its ID in the range of 1 to 255.

Usage guidelines

After associating the local SDWAN extended tunnel interface with the peer SDWAN tunnel interface, if the local device forwards data packets through the TTE connection on the peer device, it must complete SDWAN encapsulation locally and use the associated SDWAN extended tunnel interface to forward the data packets to the peer device.

Examples

Associate the local SDWAN extended tunnel interface Tunnel 1 with the peer SDWAN tunnel interface Tunnel 2.

<Sysname> system-view

[Sysname] interface tunnel 1 mode sdwan-ex gre

[Sysname-Tunnel1]sdwan collaboration-map peer-device-id 1 peer-interface-id 2

server enable

Use server enable to enable the RIR server globally.

Use undo server enable to disable the RIR server globally.

Syntax

server enable

undo server enable

Default

The RIR server is disabled globally.

Views

RIR-VXLAN view

Predefined user roles

network-admin

Usage guidelines

To avoid NQA probes from occupying too many resources on a hub in a hub-spoke network, configure the hub as an RIR server and configure the spokes as RIR clients.

You can enable the RIR server globally or on an interface.

· Enabling the RIR server globally also enables the RIR server for all interfaces on the device. The interfaces can receive link quality probe results synchronized from RIR clients.

· Enabling the RIR server on an interface allows only that interface to receive link quality probe results synchronized from RIR clients.

When you enable the RIR server, follow these restrictions and guidelines:

· In a VXLAN network, only tunnel interfaces support enabling the RIR server. The RIR server uses the tunnel interfaces to receive link quality probe results synchronized from RIR clients.

· The RIR server and RIR client cannot be both enabled on the same interface.

· If the enabled role (RIR server or client) on an interface is different from the globally enabled role, the interface-specific role takes effect on that interface.

Examples

# Enable the RIR server globally.

<Sysname> system-view

[Sysname] rir

[Sysname-rir] server enable

Related commands

client enable

probe connect

probe sync-port

signature

Use signature to configure the packet signature for application quality probing.

Use undo signature to delete the packet signature for application quality probing.

Syntax

signature { source-ip { any | src-ip-address [ src-mask-length ] } destination-ip { any | dest-ip-address [ dest-mask-length ] } | source-ipv6 { any | src-ipv6-address [ src-prefix-length ] } destination-ipv6 { any | dest-ipv6-address [ dest-prefix-length ] } }

undo signature

Default

No packet signature is configured for application quality probing.

Views

Application quality probe instance view

Predefined user roles

network-admin

Parameters

source-ip { any | src-ip-address [ src-mask-length ] }: Specifies a source IPv4 address for packets. The any keyword represents any source IPv4 address. The src-ip-address argument represents the source IPv4 address of packets, in dotted decimal notation. The src-mask-length argument represents the length of the subnet mask, in the range of 1 to 32. If you do not specify the src-mask-length argument, the command matches the exact source IPv4 address of packets.

destination-ip { any | dest-ip-address [ dest-mask-length ] }: Specifies a destination IPv4 address for packets. The any keyword represents any destination IPv4 address. The dest-ip-address argument represents the destination IPv4 address of packets, in dotted decimal notation. The dest-mask-length argument represents the length of the subnet mask, in the range of 1 to 32. If you do not specify the dest-mask-length argument, the command matches the exact destination IPv4 address of packets.

source-ipv6 { any | src-ipv6-address [ src-prefix-length ] }: Specifies a source IPv6 address for packets. The any keyword represents any source IPv6 address. The src-ipv6-address argument represents the source IPv6 address of packets, in colon-separated hexadecimal notation. The src-prefix-length argument represents the prefix length of the source IPv6 address, in the range of 1 to 128. If you do not specify the src-prefix-length argument, the command matches the exact source IPv6 address of packets.

destination-ipv6 { any | dest-ipv6-address [ dest-prefix-length ] }: Specifies a destination IPv6 address for packets. The any keyword represents any destination IPv6 address. The dest-ipv6-address argument represents the destination IPv6 address of packets, in colon-separated hexadecimal notation. The dest-prefix-length argument represents the prefix length of the destination IPv6 address, in the range of 1 to 128. If you do not specify the dest-prefix-length argument, the command matches the exact destination IPv6 address of packets.

Usage guidelines

After you execute the probe flow command for specific service flows, the device will probe the quality of the application flows with the specified packet signatures (such as source or destination IP address).

To modify the packet signature settings of an instance, first execute the undo probe flow command to disable application quality probing for all service flows of the instance.

If you execute the signature command multiple times, the most recent configuration takes effect.

Examples

# Configure the packet signature for application quality probing by specifying the source and destination IPv4 addresses for packets as 10.1.1.1 and 20.1.1.1, respectively.

<Sysname> system-view

[Sysname] rir sdwan

[Sysname-rir-sdwan] application-quality

[Sysname-rir-sdwan-app] instance abc

[Sysname-rir-sdwan-app-instance-abc] signature source-ip 10.1.1.1 destination-ip 20.1.1.1

Related commands

probe flow

sla

Use sla to create an SLA and enter RIR-VXLAN or RIR-SDWAN SLA view, or enter the view of an existing RIR-VXLAN or RIR-SDWAN SLA.

Use undo sla to delete an SLA.

Syntax

sla sla-id

undo sla sla-id

Default

No SLAs exist.

Views

RIR-VXLAN view

RIR-SDWAN view

Predefined user roles

network-admin

Parameters

sla-id: Specifies an SLA ID in the range of 0 to 128.

Usage guidelines

To meet the differentiated requirements of services on link quality, configure a Service Level Agreement (SLA) for each service. An SLA contains a set of parameters to evaluate link quality, including the link delay, jitter, and packet loss thresholds.

The device supports a maximum of 129 SLAs.

Examples

# For RIR-VXLAN, create SLA 1 and enter RIR-VXLAN SLA view.

<Sysname> system-view

[Sysname] rir

[Sysname-rir] sla 1

[Sysname-rir-sla-1]

# For RIR-SDWAN, create SLA 1 and enter RIR-SDWAN SLA view.

<Sysname> system-view

[Sysname] rir sdwan

[Sysname-rir-sdwan] sla 1

[Sysname-rir-sdwan-sla-1]

Related commands

flow priority-based-schedule enable

quality-policy

switch-back bandwidth-threshold

Use switch-back bandwidth-threshold to configure the service switchback bandwidth threshold.

Use undo switch-back bandwidth-threshold to restore the default.

Syntax

switch-back bandwidth-threshold threshold-value

undo switch-back bandwidth-threshold

Default

The service switchback bandwidth threshold is 70%.

Views

RIR-SDWAN view

Predefined user roles

network-admin

Parameters

threshold-value: Specifies the service switchback bandwidth threshold value in the range of 1 to 80.

Usage guidelines

In the RIR-SDWAN network, with the service switchback feature enabled, the device periodically checks (at intervals of 60 seconds) for a link with higher preference that meets the quality-based and bandwidth-based link selection policies. (The interval is more than 60 seconds for distributed devices and RIR collaboration devices). When such a link is available and its bandwidth usage is less than the configured service switchback bandwidth threshold, the device switches service traffic from the current link back to the link with higher preference. This ensures that traffic is forwarded through the optimal link.

Examples

# Configure the service switchback bandwidth threshold as 60%.

<Sysname> system-view

[Sysname] rir sdwan

[Sysname-rir-sdwan] switch-back bandwidth-threshold 60

switch-back enable

Use switch-back enable to enable the service switchback feature.

Use undo switch-back enable to disable the service switchback feature.

Syntax

switch-back enable

undo switch-back enable

Default

The service switchback feature is disabled.

Views

RIR-SDWAN view

Predefined user roles

network-admin

Usage guidelines

Examples

# Enable the service switchback feature.

<Sysname> system-view

[Sysname] rir sdwan

[Sysname-rir-sdwan] switch-back enable

Related commands

switch-back bandwidth-threshold

tunnel bfd enable

Use tunnel bfd enable to enable BFD for the tunnel.

Use undo tunnel bfd enable to disable BFD for the tunnel.

Syntax

tunnel bfd enable [ template template-name ]

undo tunnel bfd enable [ template template-name ]

Default

BFD is disabled for the tunnel.

Views

SDWAN extended tunnel interface view

Predefined user roles

network-admin

Parameters

template template-name: Specifies a BFD template by its name, a case-sensitive string of 1 to 63 characters that can contain only letters, digits, and dots (.). If you do not specify a BFD template or the specified BFD template does not exist, the default BFD session parameters of the device apply.

Usage guidelines

Enable BFD for the tunnel to avoid failure of CPE devices for detecting or timely detecting faults in the SDWAN extended tunnel, resulting in packet forwarding failure. This feature needs to be enabled on both CPE devices at both ends of the tunnel. CPE devices periodically send BFD control packets to the collaboration peer devices through the SDWAN extended tunnel. If no BFD control packet is received from the peer end within five seconds, the device sets the tunnel state to Defect. The interface state remains up. After the SDWAN extended tunnel failure is resolved, the tunnel state automatically restores to Up.

Examples

# Enable BFD for SDWAN extended tunnel Tunnel 1.

<Sysname> system-view

[Sysname] interface tunnel 1 mode sdwan-ex gre

[Sysname-Tunnel1] tunnel bfd enable template aa

tunnel flow-statistics enable

Use tunnel flow-statistics enable to enable flow ID-based traffic rate statistics for tunnels.

Use undo tunnel flow-statistics enable to disable flow ID-based traffic rate statistics for tunnels.

Syntax

tunnel flow-statistics enable

undo tunnel flow-statistics enable

Default

Flow ID-based traffic rate statistics for tunnels is disabled.

Views

System view

Predefined user roles

network-admin

Examples

# Enable flow ID-based traffic rate statistics for tunnels.

<Sysname> system-view

[Sysname] tunnel flow-statistics enable

Related commands

display tunnel flow-statistics

tunnel flow-statistics interval

Use tunnel flow-statistics interval to set the intervals at which the device collects flow ID-based traffic rate statistics for tunnels.

Use undo tunnel flow-statistics interval to restore the default.

Syntax

tunnel flow-statistics interval interval

undo tunnel flow-statistics interval

Default

The device collects flow ID-based traffic rate statistics for tunnels at intervals of 300 seconds.

Views

System view

Predefined user roles

network-admin

Parameters

interval: Specifies an interval in the range of 5 to 300 seconds.

Examples

# Enable the device to collect flow ID-based traffic rate statistics for tunnels at intervals of 100 seconds.

<Sysname> system-view

[Sysname] tunnel flow-statistics interval 100

Related commands

tunnel flow-statistics enable

09-Layer 3—IP Routing Command Reference

probe interval (NQA link quality operation view)

Intelligent Terminal Products

Product Support Services

Technical Service Solutions

Resource Center

Policy

Online Help

Become a Partner

Partner Policy & Program

Global Learning

Partner Sales Resources

Service Business

News & Events

Contact Us