Only the default MDC support NetAnalysis for RoCEv2. Non-default MDCs do not support NetAnalysis for RoCEv2 commands. For more information about MDCs, see Virtual Technologies Configuration Guide.

display netanalysis rocev2 cache

Use display netanalysis rocev2 cache to display the configuration and status of the RoCEv2 cache.

Syntax

display netanalysis rocev2 cache [ destination destination-ip | dstvxlan-id dstvxlan-id | source source-ip | srcvxlan-id srcxlan-id ]*

Views

Any view

Predefined user roles

network-admin

network-operator

mdc-admin

mdc-operator

Parameters

destination destination-ip: Specifies a server IP address.

dstvxlan-id dstvxlan-id: Specifies the destination VXLAN ID for the RoCEv2 flow. The value range of the dstvxlan-id argument is 0 to 16777215.

source source-ip: Specifies a client IP address.

srcvxlan-id srcvxlan-id: Specifies the source VXLAN ID for the RoCEv2 flow. The value range of the srcvxlan-id argument is 0 to 16777215.

Usage guidelines

The device uses the RoCEv2 cache to save RoCEv2 traffic statistics after receiving RoCEv2 flows. When an RoCEv2 flow ages out, the device deletes the related traffic statistics from the RoCEv2 cache.

Examples

# Display the configuration and status of the RoCEv2 cache when bidirectional mode is used for RoCEv2 traffic analysis.

<Sysname> display netanalysis rocev2 cache source 1.1.1.2 destination 2.2.2.1

NOTE:

S2D: source to destination D2S: destination to source

RTT: round trip time RPT: packet throughput in read mode

WPT: packet throughput in write mode SPT: packet throughput in send mode

I: input O: output L: local R: remote

NetAnalysis cache information:

--------------------------------------------------------------------------------

Flow created at Service type

Src IP Src QP S2D RTT S2D RPT S2D SPT/WPT

S2D NAK Pkts S2D Interface(I) S2D Interface(O)

S2D Src VXLAN ID S2D Dst VXLAN ID

Dst IP Dst QP D2S RTT D2S RPT D2S SPT/WPT

D2S NAK Pkts D2S Interface(I) D2S Interface(O)

D2S Src VXLAN ID D2S Dst VXLAN ID

--------------------------------------------------------------------------------

01/22/2019 09:08:15 RC

1.1.1.2 93309 50 11 11

2 XGE3/0/1(L) XGE3/0/2(L)

10 10

2.2.2.1 85353 50 11 11

8373 XGE3/0/2(L) XGE3/0/1(L)

10 10

Table 1 Command output

Field	Description
NOTE: S2D: source to destination D2S: destination to source RTT: round trip time RPT: packet throughput in read mode WPT: packet throughput in write mode SPT: packet throughput in send mode I: input O: output L: local R: remote	Meanings of the acronyms: · S2D—Statistics about an RoCEv2 flow sent from a client to a server. · D2S—Statistics about an RoCEv2 flow sent from a server to a client. · RTT—RTT for an RoCEv2 flow. · RPT—Read packet throughput. · WPT—Write packet throughput. · SPT—Send packet throughput. · I—Incoming interface for an RoCEv2 flow. · O—Outgoing interface for an RoCEv2 flow. · L—Local interface. · R—Interface on an M-LAG peer.
NetAnalysis cache information	Configuration and status of the RoCEv2 cache.
Flow created at	Time when the RoCEv2 flow was created.
Service type	Service type of the RoCEv2 flow: · RC—Reliable connection. · UC—Unreliable connection. This type is not supported in the current software version. · RD—Reliable datagram. This type is not supported in the current software version. · UD—Unreliable datagram. · XRC—Extended reliable connection. This type is not supported in the current software version.
Src IP	Client IP address for the RoCEv2 flow.
Dst IP	Server IP address for the RoCEv2 flow.
Src QP	Client QP for the RoCEv2 flow.
Dst QP	Server QP for the RoCEv2 flow.
S2D RPT	Throughput in KBps for the Read packets sent from the client.
D2S RPT	Throughput in KBps for the Read packets sent from the server.
S2D SPT/WPT	Throughput in KBps for the Send and Write packets sent from the client.
D2S SPT/WPT	Throughput in KBps for the Send and Write packets sent from the server.
S2D RTT	RTT in microseconds for the RoCEv2 flow sent from the client.
D2S RTT	RTT in microseconds for the RoCEv2 flow sent from the server.
S2D NAK Pkts	Number of NAK packets sent from the client. Packet loss has occurred if this field is not 0.
D2S NAK Pkts	Number of NAK packets sent from the server. Packet loss has occurred if this field is not 0.
S2D Interface(I)	Incoming interface for the RoCEv2 flow sent from the client.
S2D Interface(O)	Outgoing interface for the RoCEv2 flow sent from the client.
D2S Interface(I)	Incoming interface for the RoCEv2 flow sent from the server. Packets sent by a loopback interface cannot carry physical interface information. If the RoCEv2 flow service type is UD, this field displays 0.
D2S Interface(O)	Outgoing interface for the RoCEv2 flow sent from the server.
S2D Src VXLAN ID	‌ Source VXLAN ID of the RoCEv2 flow sent from the client. A value of N/A indicates non-VXLAN flow table.
S2D Dst VXLAN ID	‌ Destination VXLAN ID for the RoCEv2 flow originating from the client. A value of N/A indicates non-VXLAN flow table.
D2S Src VXLAN ID	‌ Source VXLAN ID for the RoCEv2 flow returned from the server. A value of N/A indicates non-VXLAN flow table.
D2S Dst VXLAN ID	‌ Destination VXLAN ID for the RoCEv2 flow returned from the server. A value of N/A indicates non-VXLAN flow table.

# Display the configuration and status of the RoCEv2 cache when unidirectional mode is used for RoCEv2 traffic analysis.

<sysname> display netanalysis rocev2 cache source 1.1.1.2 destination 2.2.2.1

NOTE:

RPT: packet throughput in read mode WPT: packet throughput in write mode

SPT: packet throughput in send mode

I: input O: output L: local R: remote

NetAnalysis cache information:

-----------------------------------------------------------------------------

Flow created at Service type

Src IP Dst IP Src QP Dst QP

Interface(I) Interface(O) RPT SPT/WPT

Src VXLAN ID Dst VXLAN ID

-----------------------------------------------------------------------------

01/22/2019 09:08:15 RC

1.1.1.2 2.2.2.1 N/A 8373

XGE3/0/1(L) XGE3/0/2(L) 11 11

10 10

Table 2 Command output

Field	Description
NOTE: RPT: packet throughput in read mode WPT: packet throughput in write mode SPT: packet throughput in send mode I: input O: output L: local R: remote	Meanings of the acronyms: · RPT—Read packet throughput. · WPT—Write packet throughput. · SPT—Send packet throughput. · I—Incoming interface for an RoCEv2 flow. · O—Outgoing interface for an RoCEv2 flow. · L—Local interface. · R—Interface on an M-LAG peer.
NetAnalysis cache information	Configuration and status of the RoCEv2 cache.
Flow created at	Time when the RoCEv2 flow was created.
Service type	Service type of the RoCEv2 flow: · RC—Reliable connection. · UC—Unreliable connection. This type is not supported in the current software version. · RD—Reliable datagram. This type is not supported in the current software version. · UD—Unreliable datagram. · XRC—Extended reliable connection. This type is not supported in the current software version.
Src IP	Source IP address for the RoCEv2 flow.
Dst IP	Destination IP address for the RoCEv2 flow.
Src QP	Source QP for the RoCEv2 flow.
Dst QP	Destination QP for the RoCEv2 flow.
RPT	Throughput in KBps for Read packets.
SPT/WPT	Throughput in KBps for the Send and Write packets.
NAK Pkts	Number of NAK packets. Packet loss has occurred if this field is not 0.
Interface(I)	Incoming interface for the RoCEv2 flow.
Interface(O)	Outgoing interface for the RoCEv2 flow.
Src VXLAN ID	‌ Source VXLAN ID for the RoCEv2 flow. A value of N/A indicates non-VXLAN flow table.
Dst VXLAN ID	‌ Destination VXLAN ID for the RoCEv2 flow. A value of N/A indicates non-VXLAN flow table.

display netanalysis rocev2 statistics

Use display netanalysis rocev2 statistics to display RoCEv2 traffic statistics.

Syntax

display netanalysis rocev2 statistics

Views

Any view

Predefined user roles

network-admin

network-operator

mdc-admin

mdc-operator

Examples

# Display RoCEv2 traffic statistics when bidirectional mode is used for RoCEv2 traffic analysis.

<Sysname> display netanalysis rocev2 statistics

Last statistics resetting time: Never

--------------------------------------------------------------------------------

Received packets: 1833088

--------------------------------------------------------------------------------

Type

Active Aged Created Reported

(Sessions) (Sessions) (Sessions) (Sessions)

--------------------------------------------------------------------------------

RoCEv2

2 0 2 10

--------------------------------------------------------------------------------

# Display RoCEv2 traffic statistics when unidirectional mode is used for RoCEv2 traffic analysis.

<Sysname> display netanalysis rocev2 statistics

Last statistics resetting time: Never

--------------------------------------------------------------------------------

Received packets: 2833088

--------------------------------------------------------------------------------

Type

Active Aged Created Reported

(Flows) (Flows) (Flows) (Flows)

--------------------------------------------------------------------------------

RoCEv2

4 0 2 20

--------------------------------------------------------------------------------

Table 3 Command output

Field	Description
Last statistics resetting time	Time when the RoCEv2 traffic statistics were last cleared.
Received packets	Number of received RoCEv2 packets.
Type	Flow type. The current software version supports only the RoCEv2 flow type.
Active (Flows)	Number of active flows.
Aged (Flows)	Number of aged flows.
Created (Flows)	Number of created flows.
Reported (Flows)	Number of flows reported to the NDA.
Active (Sessions)	Number of active sessions.
Aged (Sessions)	Number of aged sessions.
Created (Sessions)	Number of created sessions.
Reported (Sessions)	Number of sessions reported to the NDA.

Related commands

reset netanalysis rocev2 statistics

netanalysis rocev2 ai-ecn enable

Use netanalysis rocev2 ai-ecn enable to enable AI ECN for RoCEv2 traffic statistics collection.

Use undo netanalysis rocev2 ai-ecn enable to disable AI ECN for RoCEv2 traffic statistics collection.

Syntax

netanalysis rocev2 ai-ecn enable

undo netanalysis rocev2 ai-ecn enable

Default

AI ECN is disabled for RoCEv2 traffic statistics collection.

Views

System view

Predefined user roles

network-admin

mdc-admin

Usage guidelines

AI ECN allows the device to collect RoCEv2 traffic statistics on a per-session basis on the outgoing interfaces for RoCEv2 traffic and send the RoCEv2 traffic statistics to the NDA. Based on the RoCEv2 traffic statistics, the NDA automatically adjusts the ECN threshold for lossless queues to ensure low latency and high throughput for lossless traffic. For more information about ECN, see QoS configuration in ACL and QoS Configuration Guide.

This feature is based on the global RoCEv2 traffic analysis. You must specify the global keyword for at least one of netanalysis rocev2 statistics, netanalysis rocev2 vxlan statistics, netanalysis rocev2 vxlan-ip statistics commands.

Examples

# Enable AI ECN for RoCEv2 traffic statistics collection.

<Sysname> system-view

[Sysname] netanalysis rocev2 ai-ecn enable

Related commands

netanalysis rocev2 mode

netanalysis rocev2 drop global

Use netanalysis rocev2 drop global to enable RoCEv2 packet loss analysis globally.

Use undo netanalysis rocev2 drop global to disable RoCEv2 packet loss analysis globally.

Syntax

netanalysis rocev2 drop global

undo netanalysis rocev2 drop global

Default

RoCEv2 packet loss analysis is disabled globally.

Views

System view

Predefined user roles

network-admin

mdc-admin

Usage guidelines

For RoCEv2 packet loss analysis to take effect, first enable bidirectional mode for RoCEv2 traffic analysis.

This command enables the device to perform RoCEv2 packet loss analysis for all received RoCEv2 packets.

To view RoCEv2 packet loss statistics, examine the S2D NAK Pkts and D2S NAK Pkts fields in the output from the display netanalysis rocev2 cache command.

Examples

# Enable RoCEv2 packet loss analysis globally.

<Sysname> system-view

[Sysname] netanalysis rocev2 drop global

Related commands

netanalysis rocev2 mode

Use netanalysis rocev2 mode to set the mode of RoCEv2 traffic analysis.

Use undo netanalysis rocev2 mode to restore the default.

Syntax

netanalysis rocev2 mode { bidir | single } [ session ]

undo netanalysis rocev2 mode

Default

RoCEv2 traffic analysis is disabled, and the mode of RoCEv2 traffic analysis is not set.

Views

System view

Predefined user roles

network-admin

mdc-admin

Parameters

bidir: Specifies bidirectional mode. In this mode, NetAnalysis collects RoCEv2 traffic statistics based on RoCEv2 sessions and provides the RTT and lost packet count for each RoCEv2 session.

single: Specifies unidirectional mode. In this mode, NetAnalysis collects RoCEv2 traffic statistics based on RoCEv2 flows and does not provides the flow-specific RTT or lost packet count.

session: Specifies session mode. In this mode, NetAnalysis collects RoCEv2 traffic statistics and analyze packet loss based on sessions

Usage guidelines

For NetAnalysis features to take effect, first set the mode of RoCEv2 traffic analysis.

When you change the mode of RoCEv2 traffic analysis, all NetAnalysis configuration and the RoCEv2 cache are cleared. Make sure you are fully aware of the impact of this operation when you perform it on a live network.

When multiple paths exist between an RDMA client and an RDMA server, set the mode of RoCEv2 traffic analysis as follows to ensure correct RoCEv2 traffic analysis:

· Enable bidirectional mode on the devices attached to the server and the client.

· Enable unidirectional mode on the intermediate devices.

If you set the bidirectional mode, the ACL specified in the netanalysis rocev2 statistics command must match both client-to-server traffic and server-to-client traffic.

When you specify the session keyword, the device analyzes RoCEv2 traffic based on session information (five-tuple and Opcode field) for NetAnalysis and packet loss, and sends the results to the NAP. In this case, you cannot configure NetAnalysis statistics or packet loss analysis separately on RoCEv2 traffic.

If you specify the session keyword, the sampling rate for RoCEv2 packets set by the netanalysis rocev2 sampling-rate rate command does not take effect.

On the device with IPCC enabled, if you the session keyword, IPCC will only obtain part of RoCEv2 flow entries. As a best practice, do not specify the session keyword and enable IPCC at the same time. For more information about IPCC, see Intelligent Lossless Network Configuration Guide.

If you specify the session keyword, the device does not support NetAnalysis for RoCEv2 traffic in a VXLAN network.

Examples

# Enable unidirectional RoCEv2 traffic analysis.

<Sysname> system-view

[Sysname] netanalysis rocev2 mode single

This operation will erase all the NetAnalysis configuration.

Continue?[Y/N]:y

# Enable bidirectional RoCEv2 traffic analysis.

<Sysname> system-view

[Sysname] netanalysis rocev2 mode bidir

This operation will erase all the NetAnalysis configuration.

Continue?[Y/N]:y

Related commands

netanalysis rocev2 statistics

netanalysis rocev2 report-interval

Use netanalysis rocev2 report-interval to set the interval for reporting RoCEv2 traffic statistics to the NDA.

Use undo netanalysis rocev2 report-interval to restore the default.

Syntax

netanalysis rocev2 report-interval interval

undo netanalysis rocev2 report-interval

Default

The device reports RoCEv2 traffic statistics to the NDA at an interval of 10 seconds.

Views

System view

Predefined user roles

network-admin

mdc-admin

Parameters

seconds: Specifies an interval value in seconds, in the range of 5 to 500.

Usage guidelines

Use this command to adjust the interval at which the device reports RoCEv2 traffic statistics to the NDA.

Examples

# Configure the device to report RoCEv2 traffic statistics to the NDA at an interval of 15 seconds.

<Sysname> system-view

[Sysname] netanalysis rocev2 report-interval 15

netanalysis rocev2 sampling-rate

Use netanalysis rocev2 sampling-rate to set the sampling rate for RoCEv2 packets.

Use undo netanalysis rocev2 sampling-rate to restore the default.

Syntax

netanalysis rocev2 sampling-rate rate

undo netanalysis rocev2 sampling-rate

Default

No sampling rate is set for RoCEv2 packets.

Views

System view

Predefined user roles

network-admin

mdc-admin

Parameters

rate rate: Specifies the sampling rate for RoCEv2 packets. The value range for the rate argument is 1 to 16384.

Usage guidelines

For the sampling rate to take effect, first set the mode of RoCEv2 traffic analysis.

A sampling rate allows the device to sample one packet from a number of RoCEv2 packets for analysis. For example, if you configure the sampling rate as 1000, the device samples 1 packet from 1000 RoCEv2 packets.

This command does not take effect if you specify the session keyword when setting the mode of RoCEv2 traffic analysis.

Examples

# Set the sampling rate for RoCEv2 packets to 1024.

<Sysname> system-view

[Sysname] netanalysis rocev2 sampling-rate 1024

Related commands

netanalysis rocev2 mode

netanalysis rocev2 statistics

Use netanalysis rocev2 statistics to enable RoCEv2 traffic statistics collection.

Use undo netanalysis rocev2 statistics to disable RoCEv2 traffic statistics collection.

Syntax

netanalysis rocev2 statistics { global | acl name acl-name }

undo netanalysis rocev2 statistics

Default

RoCEv2 traffic statistics collection is disabled.

Views

System view

Predefined user roles

network-admin

mdc-admin

Parameters

global: Specifies all received RoCEv2 traffic.

acl name acl-name: Specifies an advanced ACL for filtering RoCEv2 traffic by its name, a case-insensitive string of 1 to 63 characters. The ACL name must begin with an uppercase or lowercase letter and cannot be all.

Usage guidelines

Use this command to enable NetAnalysis to analyze RoCEv2 traffic and send the analysis results to the NAP. You can use an ACL to match the RoCEv2 traffic of interest. The deny or permit action in the ACL does not take effect. NetAnalysis supports the following rules of advanced ACLs:

· Rule 1—Matches the UDP protocol and destination IPv4 address.

· Rule 2—Matches the UDP protocol and source IPv4 address.

· Rule 3—Matches the UDP protocol and source and destination IPv4 addresses.

To ensure correct collection and reporting of RoCEv2 traffic statistics, use the rules supported by NetAnalysis. For more information about ACLs, see ACL and QoS Configuration Guide.

If the specified ACL does not exist or does not contain any rules, this command does not take effect.

In an ACL, rules do not support the vpn-instance criterion, and the rule applies to both public network traffic and VPN traffic.

If you execute this command multiple times, the most recent configuration takes effect.

Examples

# Enable NetAnalysis to collect statistics about all received RoCEv2 traffic.

<Sysname> system-view

[Sysname] netanalysis rocev2 statistics global

# Enable NetAnalysis to collect statistics about the received RoCEv2 traffic that matches ACL abc.

<Sysname> system-view

[Sysname] netanalysis rocev2 statistics acl name abc

netanalysis rocev2 timeout inactive

Use netanalysis rocev2 timeout inactive to set the aging timer for inactive RoCEv2 flows.

Use undo netanalysis rocev2 timeout inactive to restore the default.

Syntax

netanalysis rocev2 timeout inactive seconds

undo netanalysis rocev2 timeout inactive

Default

The aging timer for inactive RoCEv2 flows is set to 30 seconds.

Views

System view

Predefined user roles

network-admin

mdc-admin

Parameters

seconds: Sets the aging timer for inactive RoCEv2 flows, in seconds. The value range for this argument is 5 to 500 seconds.

Usage guidelines

When an inactive RoCEv2 flow ages out, the device outputs the related traffic statistics to the NDA and deletes these traffic statistics from the RoCEv2 cache.

Examples

# Set the aging timer for inactive RoCEv2 flows to 10 seconds.

<Sysname> system-view

[Sysname] netanalysis rocev2 timeout inactive 10

netanalysis rocev2 vxlan statistics

Use netanalysis rocev2 vxlan statistics to enable the NetAnalysis statistics feature for RoCEv2 traffic on VXLAN tunnel intermediate nodes.

Use undo netanalysis rocev2 vxlan statistics to disable the NetAnalysis statistics feature for RoCEv2 traffic on VXLAN tunnel intermediate nodes.

Syntax

netanalysis rocev2 vxlan statistics { acl name acl-name | global }

undo netanalysis rocev2 vxlan statistics

Default

The NetAnalysis statistics feature is disabled for RoCEv2 traffic on VXLAN tunnel intermediate nodes.

Views

System view

Predefined user roles

network-admin

mdc-admin

Parameters

acl name acl-name: Specifies the name of an advanced ACL. The acl-name represents the ACL name, a case-insensitive string of 1 to 63 characters. The string must start with a letter but cannot be all. If you do not specify this option, the command enables the statistics feature for all RoCEv2 flows on the intermediate nodes. If the specified ACL does not exist or the specified ACL does not contain valid rules, the configuration does not take effect and the command does not enable the statistics feature for any RoCEv2 flows on the intermediate nodes.

global: Enables NetAnalysis statistics for all RoCEv2 flows on the intermediate nodes.

Usage guidelines

Application scenarios

To understand and optimize network performance, and to enhance the transmission speed and reliability, you can configure the NetAnalysis statistics feature for RoCEv2 traffic within a VXLAN tunnel.

Operating mechanism

With this feature enabled, the device performs NetAnalysis statistical analysis on RoCEv2 traffic on VXLAN tunnel intermediate nodes. It characterizes each traffic flow's data, including volume, bandwidth, and latency, and uploads the analysis results to the Net-analysis Processor (NAP) for further processing.

Restrictions and guidelines

The specified RoCEv2 traffic is matched through ACL rules, but the designated deny or permit actions do not take effect. Currently, only the following advanced ACL rules are supported:

· rule1—Configures only the UDP protocol and destination IPv4 address.

· rule2—Configures only the UDP protocol and source IPv4 address.

· rule3—Configures only the UDP protocol, source IPv4 address, and destination IPv4 address.

Unsupported ACL rules do not take effect, preventing NAP from receiving the matched traffic flows. For more information about ACL rule configuration, see ACL and QoS Configuration Guide.

If you execute this command multiple times, the most recent configuration takes effect.

Examples

# Enable the NetAnalysis statistics feature for RoCEv2 traffic matching ACL abc on VXLAN tunnel intermediate nodes

<Sysname> system-view

[Sysname] netanalysis rocev2 vxlan statistics acl name abc

# Enable the NetAnalysis statistics feature for all RoCEv2 traffic on VXLAN tunnel intermediate nodes.

<Sysname> system-view

[Sysname] netanalysis rocev2 vxlan statistics global

netanalysis rocev2 vxlan drop global

Use netanalysis rocev2 vxlan drop global to enable the global packet loss analysis feature for RoCEv2 traffic on VXLAN tunnel intermediate nodes.

Use undo netanalysis rocev2 vxlan drop global to disable the global packet loss analysis feature for RoCEv2 traffic on VXLAN tunnel intermediate nodes.

Syntax

netanalysis rocev2 vxlan drop global

undo netanalysis rocev2 vxlan drop global

Default

The global packet loss analysis feature is disabled for RoCEv2 traffic on VXLAN tunnel intermediate nodes.

Views

System view

Predefined user roles

network-admin

mdc-admin

Usage guidelines

For this feature to take effect, you must first set the mode of RoCEv2 traffic analysis to bidirectional.

In a VXLAN network with RoCEv2, ensuring zero packet loss for network traffic is crucial. You can configure this feature to analyze packet loss for decapsulated RoCEv2 traffic on intermediate nodes within the VXLAN tunnel.

You can execute the display netanalysis rocev2 cache command and view the S2D NAK Pkts and D2S NAK Pkts fields in the command output to view packet loss information.

Examples

# Enable the global packet loss analysis feature for RoCEv2 traffic on VXLAN tunnel intermediate nodes.

<Sysname> system-view

[Sysname] netanalysis rocev2 vxlan drop global

Related commands

netanalysis rocev2 mode

netanalysis rocev2 vxlan-ip statistics

Use netanalysis rocev2 vxlan-ip statistics to enable the NetAnalysis statistics feature for RoCEv2 traffic at the VXLAN tunnel edges.

Use undo netanalysis rocev2 vxlan-ip statistics to disable the NetAnalysis statistics feature for RoCEv2 traffic at the VXLAN tunnel edges.

Syntax

netanalysis rocev2 vxlan-ip statistics { acl name acl-name | global }

undo netanalysis rocev2 vxlan-ip statistics

Default

The NetAnalysis statistics feature is disabled for RoCEv2 traffic at the edges of a VXLAN tunnel.

Views

System view

Predefined user roles

network-admin

mdc-admin

Parameters

acl name acl-name: Specifies the name of an advanced ACL. The acl-name represents the ACL name, a case-insensitive string of 1 to 63 characters. The string must start with a letter but cannot be all. If you do not specify this option, the command enables the statistics feature for all RoCEv2 flows at the VXLAN tunnel edges. If the specified ACL does not exist or the specified ACL does not contain valid rules, the configuration does not take effect and the command does not enable the statistics feature for any RoCEv2 flows at the VXLAN tunnel edges.

global: Enables NetAnalysis statistics for all RoCEv2 flows at the VXLAN tunnel edges.

Usage guidelines

Application scenarios

To understand and optimize network performance, and to enhance the transmission speed and reliability, you can configure the NetAnalysis statistics feature for RoCEv2 traffic within a VXLAN tunnel.

Operating mechanism

With this feature enabled, the device performs NetAnalysis statistical analysis on RoCEv2 traffic at VXLAN tunnel edges. It characterizes each traffic flow's data, including volume, bandwidth, and latency, and uploads the analysis results to the Net-analysis Processor (NAP) for further processing.

Restrictions and guidelines

The specified RoCEv2 traffic is matched through ACL rules, but the designated deny or permit actions do not take effect. Currently, only the following advanced ACL rules are supported:

· rule1—Configures only the UDP protocol and destination IPv4 address.

· rule2—Configures only the UDP protocol and source IPv4 address.

· rule3—Configures only the UDP protocol, source IPv4 address, and destination IPv4 address.

Unsupported ACL rules do not take effect, preventing NAP from receiving the matched traffic flows. For more information about ACL rule configuration, see ACL and QoS Configuration Guide.

If you execute this command multiple times, the most recent configuration takes effect.

Examples

# Enable the NetAnalysis statistics feature for RoCEv2 traffic matching ACL abc at the VXLAN tunnel edges.

<Sysname> system-view

[Sysname] netanalysis rocev2 vxlan-ip statistics acl name abc

# Enable the NetAnalysis statistics feature for all RoCEv2 traffic at the VXLAN tunnel edges.

<Sysname> system-view

[Sysname] netanalysis rocev2 vxlan-ip statistics global

netanalysis rocev2 vxlan-ip drop global

Use netanalysis rocev2 vxlan-ip drop global to enable the global packet loss analysis feature for RoCEv2 traffic at the VXLAN tunnel edges.

Use undo netanalysis rocev2 vxlan-ip drop global to disable the global packet loss analysis feature for RoCEv2 traffic at the VXLAN tunnel edges.

Syntax

netanalysis rocev2 vxlan-ip drop global

undo netanalysis rocev2 vxlan-ip drop global

Default

The global packet loss analysis feature is disabled for RoCEv2 traffic at the VXLAN tunnel edges.

Views

System view

Predefined user roles

network-admin

mdc-admin

Usage guidelines

For this feature to take effect, you must first set the mode of RoCEv2 traffic analysis to bidirectional.

In a VXLAN network with RoCEv2, ensuring zero packet loss for network traffic is crucial. You can configure this feature to analyze packet loss for decapsulated RoCEv2 traffic at the edges of the VXLAN tunnel.

You can execute the display netanalysis rocev2 cache command and view the S2D NAK Pkts and D2S NAK Pkts fields in the command output to view packet loss information.

Examples

# Enable the global packet loss analysis feature for RoCEv2 traffic at the VXLAN tunnel edges.

<Sysname> system-view

[Sysname] netanalysis rocev2 vxlan-ip drop global

Related commands

netanalysis rocev2 mode

reset netanalysis rocev2 statistics

Use reset netanalysis rocev2 statistics to clear RoCEv2 traffic statistics.

Syntax

reset netanalysis rocev2 statistics

Views

User view

Predefined user roles

network-admin

mdc-admin

Usage guidelines

Use this command to clear RoCEv2 traffic statistics if you want to collect RoCEv2 traffic statistics for a specific time period.

You cannot recover cleared RoCEv2 traffic statistics. Make sure you are fully aware of the impact of this command when you use it on a live network.

Examples

# Clear RoCEv2 traffic statistics.

<Sysname> reset netanalysis rocev2 statistics

Related commands

display netanalysis rocev2 statistics

NetAnalysis for UDP commands

display netanalysis udp cache

Use display netanalysis udp cache to display configuration and status of the UDP cache.

Syntax

display netanalysis udp cache [ destination destination-ip | interface interface-type interface-number | source source-ip | vni vxlan-id ]*

Views

Any view

Predefined user roles

network-admin

network-operator

mdc-admin

mdc-operator

Parameters

destination destination-ip: Specifies the IP address at the server end of the UDP flow.

interface interface-type interface-number: Specifies the ingress interface number of the UDP flow.

source source-ip: Specifies the IP address at the client end of the UDP flow.

vni vxlan-id: Specifies the VXLAN ID of the UDP flow, in the range of 1 to 16777215.

Usage guidelines

When the device receives UDP traffic, it does not immediately send NetAnalysis statistical information to the analyzer. Instead, it caches the statistical information in the UDP flow cache. The flow statistical information in the cache will be cleared after the inactive aging time of the UDP flow is reached.

Examples

# Display configuration and status of the UDP cache.

<sysname> display netanalysis udp cache source 1.1.1.2 destination 2.2.2.1

NetAnalysis cache information:

-----------------------------------------------------------------------------

Flow created at Direction

Src IP Dst IP Src Port Dst Port

Interface VNI Block Id Block Timestamp

Receive Packets Receive Bytes

-----------------------------------------------------------------------------

01/22/2019 09:08:15 inbound

1.1.1.2 2.2.2.1 1000 2000

GE1/0/1 N/A 10 100000000

5000 6000000

Table 4 Command output

Field	Description
Direction	UDP flow direction.
Src IP	Source IP address of the UDP flow.
Dst IP	Destination IP address of the UDP flow.
Src Port	Source port of the UDP flow.
Dst Port	Destination port of the UDP flow.
Interface	Ingress interface of the UDP flow.
VNI	VXLAN ID of the inner UDP packet encapsulated by VXLAN.
Receive Packets	Number of UDP packets within this block collected from the ingress interface of the UDP flow.
Receive Bytes	Bytes of UDP packets within this block collected from the ingress interface of the UDP flow.

display netanalysis udp statistics

Use display netanalysis udp statistics to display UDP traffic statistics.

Syntax

display netanalysis udp statistics

Views

Any view

Predefined user roles

network-admin

network-operator

mdc-admin

mdc-operator

Examples

# Display UDP traffic statistics.

<Sysname> display netanalysis udp statistics

Last statistics resetting time: Never

--------------------------------------------------------------------------------

Received packets: 2833088

--------------------------------------------------------------------------------

Type

Active Aged Created Reported

(Flows) (Flows) (Flows) (Flows)

--------------------------------------------------------------------------------

UDP

4 0 2 20

--------------------------------------------------------------------------------

Table 5 Command output

Field	Description
Last statistics resetting time	Most recent time at which the UDP traffic statistics were cleared.
Type	Flow type. Only UDP is supported.
Active (Flows)	Number of active flows.
Aged (Flows)	Number of aged flows.
Created (Flows)	Number of created flows.
Reported (Flows)	Number of flows sent to the analyzer.

Related commands

reset netanalysis udp statistics

netanalysis udp identification block

Use netanalysis udp identification block to specify the number of blocks for segment analysis of UDP traffic.

Use undo netanalysis udp identification block to restore the default.

Syntax

netanalysis udp identification block block-number

undo netanalysis udp identification block

Default

The number of blocks for segment analysis of UDP traffic is 256.

Views

System view

Predefined user roles

network-admin

mdc-admin

Parameters

block-number: Specifies the number of blocks. Options include 4, 8, 16, 32, 64, 128, and 256.

Usage guidelines

NetAnalysis for UDP traffic performs analysis on UDP flows based on the Block granularity. Each UDP flow contains multiple UDP packets. With each packet sent, the Identification field increases by 1. The field value determines the UDP packet sequence number.

In a UDP flow, UDP packets have sequence numbers ranging from 0 to 65535. By segmenting the sequence numbers of UDP packets, a UDP flow can be divided into multiple blocks. For example, setting the number of blocks to 128 means dividing a UDP flow into 128 blocks, with UDP packets numbered 0 to 511 belonging to the first block.

The NAP creates a flow table for the received UDP block and analyzes all UDP packets contained in the block.

Examples

# Set the number of blocks for segment analysis of UDP traffic to 64.

<Sysname> system-view

[Sysname] netanalysis udp identification block 64

netanalysis udp statistics

Use netanalysis udp statistics to enable UDP traffic statistics collection.

Use undo netanalysis udp statistics to disable UDP traffic statistics collection.

Syntax

netanalysis udp statistics [ vxlan { single-tagged | untagged } ] acl name acl-name inbound

undo netanalysis udp statistics inbound

Default

UDP traffic statistics collection is disabled.

Views

System view

Predefined user roles

network-admin

mdc-admin

Parameters

vxlan:: Performs statistics collection on packets that match the VXLAN inner layer information. If you do not specify this keyword, the command does not collect statistics on packets that match the VXLAN inner layer information.

single-tagged: Performs statistics collection on packets that carry only one VLAN tag.

untagged: Performs statistics collection on untagged packets.

acl name acl-name: Specifies the name of the advanced ACL. The acl-name argument represents the name of the advanced ACL, a case-insensitive string of 1 to 63 characters that must start with a letter. To avoid confusion, the ACL name cannot be all.

inbound: Performs statistics collection on incoming UDP traffic.

Usage guidelines

Perform this task to enable NetAnalysis to analyze UDP traffic and send the analysis results to the NAP. You can use an ACL to match the UDP traffic of interest. The deny or permit action in the ACL does not take effect. NetAnalysis supports the following rules of advanced ACLs:

· Rule 1—Matches the UDP protocol and destination IPv4 address.

· Rule 2—Matches the UDP protocol and source IPv4 address.

· Rule 3—Matches the UDP protocol and source and destination IPv4 addresses.

· Rule 4—Matches the UDP protocol, source and destination IPv4 addresses, and UDP destination ports.

When you specify an ACL, follow these restrictions and guidelines:

· If the specified ACL does not exist or does not contain any rules, the system does not perform NetAnalysis statistics collection on UDP traffic received on the specified ingress interface.

· The ACL rules do not support using a VPN instance, and the rules apply to both public network packets and VPN packets.

For more information about ACL, see ACL and QoS Configuration Guide.

NetAnalysis statistics collection does not support RoCEv2 packets with a destination UDP port number of 4791.

If you execute this command multiple times, the most recent configuration takes effect.

Examples

# Enable UDP traffic analysis on packets matching the specified ACL in the inbound direction.

<Sysname> system-view

[Sysname] netanalysis udp statistics acl name abc inbound

netanalysis udp timeout inactive

Use netanalysis udp timeout inactive to set the aging timer for inactive UDP flow.

Use undo netanalysis udp timeout inactive to restore the default.

Syntax

netanalysis udp timeout inactive seconds

undo netanalysis udp timeout inactive

Default

The aging timer for inactive UDP flow is 30 seconds.

Views

System view

Predefined user roles

network-admin

mdc-admin

Parameters

seconds: Specifies the aging time in the range of 5 to 500 seconds.

Usage guidelines

With NetAnalysis statistics collection enabled for UDP traffic, the device must also send the UDP flow table containing the statistical results to the specified NDA to complete further processing and visualization of the flow information.

When an inactive UDP flow ages out, the device outputs the related traffic statistics to the NDA, deletes these traffic statistics from the UDP cache, and deletes the related flow entries.

Examples

# Set the aging timer for inactive UDP flow to 10 seconds.

<Sysname> system-view

[Sysname] netanalysis udp timeout inactive 10

reset netanalysis udp statistics

Use reset netanalysis udp statistics to clear UDP traffic statistics.

Syntax

reset netanalysis udp statistics

Views

User view

Predefined user roles

network-admin

mdc-admin

Usage guidelines

When diagnosing and locating faults in the UDP flow analysis function, it is necessary to specifically count the UDP flow information over a certain period of time. In this case, you can use this command to first clear the history statistics.

Executing this command clears all historical UDP flow statistical information in the NetAnalysis function, and the cleared information cannot be recovered. Use this feature with caution.

Examples

# Clear UDP traffic statistics.

<Sysname> reset netanalysis udp statistics

Related commands

display netanalysis udp statistics

NetAnalysis unified flow commands

netanalysis unified-flow

Use netanalysis unified-flow to enable unified flow analytics and enter unified flow analytics view, or enter the existing unified flow analytics view.

Use undo netanalysis unified-flow to disable unified flow analytics.

Syntax

netanalysis unified-flow

undo netanalysis unified-flow

Default

Unified flow analytics is disabled.

Views

System view

Predefined user roles

network-admin

mdc-admin

Usage guidelines

Application scenarios

Unified flow analytics is a network-wide traffic monitoring and analysis technology. It helps users quickly detect and accurately locate network issues, which improves network O&M efficiency. You can enable this feature to perform in-depth analysis on TCP, UDP, and VXLAN traffic.

Operating mechanism

Enabled with this feature, the device performs NetAnalysis statistical analysis on incoming TCP, UDP, and VXLAN traffic. It creates a flow table and collects traffic statistics based on the 5-tuple information of traffic, and sends the statistics to the NAP for further processing. Then, the NAP analyzes the data flow forwarding paths, identifies TCP anomalies, and analyzes forwarding packet loss. This helps users comprehensively understand the data flows in the network.

Examples

# Enable unified flow analytics and enter unified flow analytics view.

<Sysname> system-view

[Sysname] netanalysis unified-flow

[Sysname-netanalysis-unified-flow]

13-Network Management and Monitoring Command Reference

NetAnalysis commands

Application scenarios

Operating mechanism

Restrictions and guidelines

Application scenarios

Operating mechanism

Restrictions and guidelines

Application scenarios

Operating mechanism

Intelligent Terminal Products

Product Support Services

Technical Service Solutions

Resource Center

Policy

Online Help

Become a Partner

Partner Policy & Program

Global Learning

Partner Sales Resources

Service Business

News & Events

Contact Us