This feature snoops ARP packets to populate the ARP flood suppression table with local and remote MAC addresses. If an ARP request has a matching entry, the VTEP replies to the request on behalf of the VM. If no match is found, the VTEP floods the request to both local and remote sites.

Examples

# Enable ARP flood suppression for VSI vsi1.

<Sysname> system-view

[Sysname] vsi vsi1

[Sysname-vsi-vsi1] arp suppression enable

Related commands

display arp suppression vsi

reset arp suppression vsi

arp suppression mode

Use arp suppression mode to set the ARP flood suppression mode.

Use undo arp suppression mode to restore the default.

Syntax

arp suppression mode { proxy-reply | unicast-forward } [ mismatch-discard ]

undo arp suppression mode

Default

If ARP flood suppression is enabled, the default ARP flood suppression mode is proxy reply. In proxy reply mode, the device broadcasts the ARP requests that are not targeted at the device and do not match any ARP flood suppression entries.

Views

VSI view

Predefined user roles

network-admin

Parameters

proxy-reply: Specifies proxy reply mode. If an ARP request is not targeted at the device and matches an ARP flood suppression entry, the device replies to the ARP request on behalf of the target IP address. The ARP reply carries the following information:

· Sender IP address—Target IP address in the ARP request.

· Sender MAC address—MAC address in the matching ARP flood suppression entry.

· Source MAC address—MAC address in the matching ARP flood suppression entry.

unicast-forward: Specifies unicast forwarding mode. If an ARP request is not targeted at the device and matches an ARP flood suppression entry, the device acts as follows:

1. Replaces the target MAC address and destination MAC address in the ARP request with the MAC address in the entry.

2. Unicasts the ARP request.

mismatch-discard: Specifies mismatch discarding mode. In this mode, the device discards an ARP request that is not targeted at the device and does not match any ARP flood suppression entry. If you do not specify this keyword, the device will broadcast such an ARP request.

Usage guidelines

The device does not forward ARP requests in proxy reply mode, which decreases system resource consumption. Unicast forwarding mode reduces the ARP entry learning errors caused by the delay in refreshing ARP flood suppression entries at the expense of high system resource usage.

Examples

# Enable ARP flood suppression and set its mode to unicast forwarding on VSI vsi1.

<Sysname> system-view

[Sysname] vsi vsi1

[Sysname-vsi-vsi1] arp suppression enable

[Sysname-vsi-vsi1] arp suppression mode unicast-forward

Related commands

arp suppression enable

description

Use description to configure a description for a VSI.

Use undo description to restore the default.

Syntax

description text

undo description

Default

A VSI does not have a description.

Views

VSI view

Predefined user roles

network-admin

Parameters

text: Specifies a description, a case-sensitive string of 1 to 80 characters.

Examples

# Configure a description for VSI vpn1.

<Sysname> system-view

[Sysname] vsi vpn1

[Sysname-vsi-vpn1] description vsi for vpn1

Related commands

display l2vpn vsi

display arp suppression vsi

Use display arp suppression vsi to display ARP flood suppression entries.

Syntax

display arp suppression vsi [ name vsi-name ] [ slot slot-number ] [ count ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

name vsi-name: Specifies a VSI by its name, a case-sensitive string of 1 to 31 characters. If you do not specify a VSI, this command displays entries for all VSIs.

slot slot-number: Specifies a card by its slot number. If you do not specify a card, this command displays entries on the active MPU.

count: Displays the number of ARP flood suppression entries that match the command.

Examples

# Display ARP flood suppression entries.

<Sysname> display arp suppression vsi

IP address MAC address VSI name Link ID Aging(min)

1.1.1.2 000f-e201-0101 vsi1 0x70000 14

1.1.1.3 000f-e201-0202 vsi1 0x80000 18

1.1.1.4 000f-e201-0203 vsi2 0x90000 10

# Display the number of ARP flood suppression entries.

<Sysname> display arp suppression vsi count

Total entries: 3

Table 1 Command output

Field	Description
Link ID	Link ID that uniquely identifies an AC or a VXLAN tunnel on a VSI.
Aging	Remaining lifetime (in minutes) of the ARP flood suppression entry. When the timer expires, the entry is deleted.

Related commands

arp suppression enable

reset arp suppression vsi

display ipv6 nd suppression vsi

Use display ipv6 nd suppression vsi to display ND flood suppression entries.

Syntax

display ipv6 nd suppression vsi [ name vsi-name ] [ slot slot-number ] [ count ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

name vsi-name: Specifies a VSI by its name, a case-sensitive string of 1 to 31 characters. If you do not specify a VSI, this command displays entries for all VSIs.

slot slot-number: Specifies a card by its slot number. If you do not specify a card, this command displays entries on the active MPU.

count: Displays the number of ND flood suppression entries that match the command.

Examples

# Display ND flood suppression entries.

<Sysname> display ipv6 nd suppression vsi

IPv6 address MAC address VSI name Link ID Aging (min)

1000::2 000f-e201-0101 vsi1 0x70000 5

1000::3 000f-e201-0202 vsi1 0x80000 5

1000::4 000f-e201-0203 vsi2 0x90000 5

# Display the number of ND flood suppression entries.

<Sysname> display ipv6 nd suppression vsi count

Total entries: 3

Table 2 Command output

Field	Description
Link ID	Link ID that uniquely identifies an AC or a VXLAN tunnel on a VSI.
Aging (min)	Remaining lifetime (in minutes) of the ND flood suppression entry. When the timer expires, the entry is deleted.

Related commands

ipv6 nd suppression enable

reset ipv6 nd suppression vsi

display l2vpn m-lag arp

Use display l2vpn m-lag arp to display L2VPN ARP entries on an M-LAG member device.

Syntax

display l2vpn m-lag arp [ local | remote ] [ count | { public-instance | vpn-instance vpn-instance-name } [ count | ip-address ] ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

local: Specifies locally learned L2VPN ARP entries.

remote: Specifies M-LAG-synchronized L2VPN ARP entries.

count: Displays the number of L2VPN ARP entries. If you do not specify this keyword, the command displays detailed information about L2VPN ARP entries.

public-instance: Specifies the public instance.

vpn-instance vpn-instance-name: Specifies an MPLS L3VPN instance by its name, a case-sensitive string of 1 to 31 characters.

ip-address: Specifies an IPv4 address. If you do not specify an IPv4 address, this command displays all L2VPN ARP entries that match the specified criteria.

Usage guidelines

If you do not specify the local or remote keyword, this command displays both locally learned and M-LAG-synchronized L2VPN ARP entries.

If you do not specify the public-instance keyword or the vpn-instance vpn-instance-name option, this command displays L2VPN ARP entries for the public instance and all VPN instances.

Examples

# Display all L2VPN ARP entries on the local M-LAG member device.

<Sysname> display l2vpn m-lag arp

Flags: D – Dynamic L - Local R – Remote S – Static I - Invalid

G - Gateway V - MLAG Virtual

VPN instance: vpn1 Interface: Vsi-interface1

IP address MAC address VSI index Link ID Flags

10.1.1.1 0003-0003-0003 0 0x1 DL

10.1.1.11 0001-0001-0001 0 0x1 DL

10.1.1.12 0001-0001-0011 0 0x2 M-LAG

10.1.1.13 0001-0001-0021 0 0x2 M-LAG

10.1.1.101 0001-0011-0101 0 0x1 SL

10.1.1.102 0001-0011-0102 0 0x1 SL

Public instance Interface: Vsi-interface2

IP address MAC address VSI index Link ID Flags

11.1.1.1 0033-0033-0033 0 0x1 DL

11.1.1.11 0011-0011-0011 0 0x1 DL

# Display the total number of L2VPN ARP entries on the local M-LAG member device.

<Sysname> display l2vpn m-lag arp count

Total number of entries: 8

Table 3 Command output

Field	Description
Interface	VSI interface.
Link ID	Link ID that uniquely identifies an AC or a VXLAN tunnel on a VSI.
Flags	ARP entry type: · D—The entry is a valid dynamically learned entry. · L—The entry is a valid local entry. · R—The entry is a valid M-LAG-synchronized entry. · S—The entry is a valid static entry. · I—The entry is invalid. Possible reasons: ¡ The VSI has been administratively shut down by using the shutdown command. ¡ The outgoing tunnel interface does not exist. · G—The entry is for a gateway. · V—The entry is for the M-LAG virtual IPv4 address of a gateway interface.

display l2vpn m-lag arp suppression

Use display l2vpn m-lag arp suppression to display L2VPN ARP flood suppression entries on an M-LAG member device.

Syntax

display l2vpn m-lag arp suppression [ local | remote ] [ count | vsi vsi-name [ count | ip-address ] ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

local: Specifies L2VPN ARP flood suppression entries that are learned locally.

remote: Specifies L2VPN ARP flood suppression entries that are synchronized by M-LAG.

count: Displays the number of L2VPN ARP flood suppression entries. If you do not specify this keyword, the command displays detailed information about L2VPN ARP flood suppression entries.

vsi vsi-name: Specifies a VSI name, a case-sensitive string of 1 to 31 characters. If you do not specify a VSI, this command displays L2VPN ARP flood suppression entries for all VSIs.

ip-address: Specifies an IPv4 address. If you do not specify an IPv4 address, this command displays all L2VPN ARP flood suppression entries that match the specified criteria.

Usage guidelines

If you do not specify the local or remote keyword, this command displays both locally learned and M-LAG-synchronized L2VPN ARP flood suppression entries.

Examples

# Display all L2VPN ARP flood suppression entries on the local M-LAG member device.

<Sysname> display l2vpn m-lag arp suppression

Flags: D - Dynamic L – Local R – Remote S - Static I – Invalid

VSI name: vpna

IP address MAC address Link ID Flags

10.1.1.12 0002-0002-0002 0x1 DL

10.1.1.13 0002-0002-0002 0x2 RI

10.1.1.101 0001-0011-0101 0x2 SR

# Display the total number of L2VPN ARP flood suppression entries on the local M-LAG member device.

<Sysname> display l2vpn m-lag arp suppression count

Total number of entries: 3

Table 4 Command output

Field	Description
Link ID	Link ID that uniquely identifies an AC or a VXLAN tunnel on a VSI.
Flags	ARP flood suppression entry type: · D—The entry is a valid dynamically learned entry. · L—The entry is a valid local entry. · R—The entry is a valid M-LAG-synchronized entry. · S—The entry is a valid static entry. · I—The entry is invalid. Possible reasons: ¡ The VSI has been administratively shut down by using the shutdown command. ¡ The outgoing tunnel interface does not exist.

Field

Description

Link ID

Link ID that uniquely identifies an AC or a VXLAN tunnel on a VSI.

Flags

ARP flood suppression entry type:

· D—The entry is a valid dynamically learned entry.

· L—The entry is a valid local entry.

· R—The entry is a valid M-LAG-synchronized entry.

· S—The entry is a valid static entry.

· I—The entry is invalid. Possible reasons:

¡ The VSI has been administratively shut down by using the shutdown command.

¡ The outgoing tunnel interface does not exist.

display l2vpn m-lag mac-address

Use display l2vpn m-lag mac-address to display L2VPN MAC address entries on an M-LAG member device.

Syntax

display l2vpn m-lag mac-address [ local | remote ] [ count | vsi vsi-name [ count | mac-address ] ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

local: Specifies L2VPN MAC address entries that are learned locally.

remote: Specifies L2VPN MAC address entries that are synchronized by M-LAG.

count: Displays the number of L2VPN MAC address entries. If you do not specify this keyword, the command displays detailed information about L2VPN MAC address entries.

vsi vsi-name: Specifies a VSI name, a case-sensitive string of 1 to 31 characters. If you do not specify a VSI, this command displays L2VPN MAC address entries for all VSIs.

mac-address: Specifies a MAC address. The MAC address is in the format of H-H-H. You can omit the consecutive zeros at the beginning of each segment. For example, you can enter f-e2-1 for 000f-00e2-0001. If you do not specify a MAC address, this command displays all L2VPN MAC address entries that match the specified criteria.

Usage guidelines

If you do not specify the local or remote keyword, this command displays both locally learned and M-LAG-synchronized L2VPN MAC address entries.

Examples

# Display all L2VPN MAC address entries on the local M-LAG member device.

<Sysname> display l2vpn m-lag mac-address

Flags: D – Dynamic L - Local R – Remote S – Static A - MAC-authentication

VSI name: bbb

MAC address Link ID Interface Flags

0000-0000-000a 0x1 BAGG10 DL

0000-0000-0009 0x1 Tunnel1 DL

# Display the total number of L2VPN MAC address entries on the local M-LAG member device.

<Sysname> display l2vpn m-lag mac-address count

Total number of entries: 2

Table 5 Command output

Field	Description
Link ID	Link ID that uniquely identifies an AC or a VXLAN tunnel on a VSI.
Interface	Outgoing interface.
Flags	MAC address entry type: · D—The entry is a valid dynamically learned entry. · L—The entry is a valid local entry. · R—The entry is a valid M-LAG-synchronized entry. · S—The entry is a valid static entry. · A—The entry is learned by MAC authentication.

display l2vpn m-lag nd

Use display l2vpn m-lag nd to display L2VPN ND entries on an M-LAG member device.

Syntax

display l2vpn m-lag nd [ local | remote ] [ count | { public-instance | vpn-instance vpn-instance-name } [ ipv6-address | count ] ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

local: Specifies locally learned L2VPN ND entries.

remote: Specifies M-LAG-synchronized L2VPN ND entries.

count: Displays the number of L2VPN ND entries. If you do not specify this keyword, the command displays detailed information about L2VPN ND entries.

public-instance: Specifies the public instance.

vpn-instance vpn-instance-name: Specifies an MPLS L3VPN instance by its name, a case-sensitive string of 1 to 31 characters.

ipv6-address: Specifies an IPv6 address. If you do not specify an IPv6 address, this command displays all L2VPN ND entries that match the specified criteria.

Usage guidelines

If you do not specify the local or remote keyword, this command displays both locally learned and M-LAG-synchronized L2VPN ND entries.

If you do not specify the public-instance keyword or the vpn-instance vpn-instance-name option, this command displays L2VPN ND entries for the public instance and all VPN instances.

Examples

# Display all L2VPN ND entries on the local M-LAG member device.

<Sysname> display l2vpn m-lag nd

Flags: D - Dynamic L – Local R – Remote S - Static I - Invalid

G - Gateway V - MLAG Virtual

VPN instance: vpna Interface: Vsi-interface1

IPv6 address : 20::2

MAC address : 0001-0001-0001 Flags : DL

VSI index : 0 Link ID : 0x1

# Display the total number of L2VPN ND entries on the local M-LAG member device.

<Sysname> display l2vpn m-lag nd count

Total number of entries: 1

Table 6 Command output

Field	Description
Interface	VSI interface.
Flags	ND entry type: · D—The entry is a valid dynamically learned entry. · L—The entry is a valid local entry. · R—The entry is a valid M-LAG-synchronized entry. · S—The entry is a valid static entry. · I—The entry is invalid. Possible reasons: ¡ The VSI has been administratively shut down by using the shutdown command. ¡ The outgoing tunnel interface does not exist. · G—The entry is for a gateway. · V—The entry is for the M-LAG virtual IPv6 address of a gateway interface.
Link ID	Link ID that uniquely identifies an AC or a VXLAN tunnel on a VSI.

display l2vpn m-lag nd suppression

Use display l2vpn m-lag nd suppression to display L2VPN ND flood suppression entries on an M-LAG member device.

Syntax

display l2vpn m-lag nd suppression [ local | remote ] [ count | vsi vsi-name [ ipv6-address | count ] ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

local: Specifies L2VPN ND flood suppression entries that are learned locally.

remote: Specifies L2VPN ND flood suppression entries that are synchronized by M-LAG.

count: Displays the number of L2VPN ND flood suppression entries. If you do not specify this keyword, the command displays detailed information about L2VPN ND flood suppression entries.

vsi vsi-name: Specifies a VSI name, a case-sensitive string of 1 to 31 characters. If you do not specify a VSI, this command displays L2VPN ND flood suppression entries for all VSIs.

ipv6-address: Specifies an IPv6 address. If you do not specify an IPv6 address, this command displays all L2VPN ND flood suppression entries that match the specified criteria.

Usage guidelines

If you do not specify the local or remote keyword, this command displays both locally learned and M-LAG-synchronized L2VPN ND flood suppression entries.

Examples

# Display all L2VPN ND flood suppression entries on the local M-LAG member device.

[Sysname]display l2vpn m-lag nd suppression

Flags: D - Dynamic L – Local R – Remote S - Static I - Invalid

VSI name: vpna

IPv6 address MAC address Link ID Flags

11::8 72cb-ce9b-0a06 0x1 DL

11::9 0001-0001-0001 0x2 SR

# Display the total number of L2VPN ND flood suppression entries on the local M-LAG member device.

<Sysname> display l2vpn m-lag nd suppression count

Total number of entries: 2

Table 7 Command output

Field	Description
Link ID	Link ID that uniquely identifies an AC or a VXLAN tunnel on a VSI.
Flags	ND flood suppression entry type: · D—The entry is a valid dynamically learned entry. · L—The entry is a valid local entry. · R—The entry is a valid M-LAG-synchronized entry. · S—The entry is a valid static entry. · I—The entry is invalid. Possible reasons: ¡ The VSI has been administratively shut down by using the shutdown command. ¡ The outgoing tunnel interface does not exist.

Field

Description

Link ID

Link ID that uniquely identifies an AC or a VXLAN tunnel on a VSI.

Flags

ND flood suppression entry type:

· D—The entry is a valid dynamically learned entry.

· L—The entry is a valid local entry.

· R—The entry is a valid M-LAG-synchronized entry.

· S—The entry is a valid static entry.

· I—The entry is invalid. Possible reasons:

¡ The VSI has been administratively shut down by using the shutdown command.

¡ The outgoing tunnel interface does not exist.

display l2vpn forwarding ac

Use display l2vpn forwarding ac to display L2VPN AC forwarding information.

Syntax

display l2vpn forwarding ac [ vsi vsi-name ] [ slot slot-number ] [ verbose ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

vsi vsi-name: Displays L2VPN forwarding information for a VSI. The vsi-name argument specifies the VSI name, a case-sensitive string of 1 to 31 characters. If you do not specify a VSI, this command displays L2VPN forwarding information for all VSIs.

slot slot-number: Specifies a card by its slot number. If you do not specify a card, this command displays L2VPN forwarding information for the active MPU.

verbose: Displays detailed information. If you do not specify this keyword, the command displays brief information.

Examples

# Display brief AC forwarding information for all VSIs.

<Sysname> display l2vpn forwarding ac

Total number of VSIs: 1

Total number of ACs: 1 up, 0 down

AC VSI Name Link ID State

BAGG1 srv1 1 0x1 Up

Table 8 Command output

Field	Description
Total number of VSIs	Total number of VSIs, including VSIs that are not bound to any ACs.
Total number of ACs	Total number of attachment circuits (ACs) and the number of ACs in each state (up or down).
AC	AC type, Layer 2 interface and Ethernet service instance.
Link ID	Link ID of the AC in the VSI.
State	Ethernet service instance state: · Up. · Down.

# Display detailed AC forwarding information for all VSIs.

<Sysname> display l2vpn forwarding ac verbose

VSI Name: vpls2

Interface: HGE1/0/3 Service Instance: 4

Link ID : 1

State : UP

Access Mode : VLAN

Encapsulation: s-vid 10

Type : Manual

Table 9 Command output

Field	Description
Service Instance	Ethernet service instance ID.
Link ID	Link ID of the AC in the VSI.
Access Mode	AC access mode: · VLAN. · Ethernet.
State	AC state.
Encapsulation	Frame match criterion of the Ethernet service instance.
Type	Type and traffic match mode of the Ethernet service instance: · Dynamic (M-LAG)—Dynamic Ethernet service instance created on the peer link, in VLAN-based traffic match mode. · Manual—Static Ethernet service instance in VLAN-based traffic match mode.

display l2vpn mac-address

Use display l2vpn mac-address to display MAC address entries for VSIs.

Syntax

display l2vpn mac-address [ vsi vsi-name ] [ dynamic ] [ count | verbose ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

vsi vsi-name: Specifies a VSI name, a case-sensitive string of 1 to 31 characters. If you do not specify a VSI, this command displays MAC address entries for all VSIs.

dynamic: Specifies dynamic MAC address entries learned in the data plane. If you do not specify this keyword, the command displays all MAC address entries, including:

· Dynamic remote- and local-MAC entries.

· Remote-MAC entries advertised through BGP EVPN.

· Manually added static remote- and local-MAC entries.

· Remote-MAC entries issued through OpenFlow.

count: Displays the number of MAC address entries.

verbose: Displays detailed information about MAC address entries.

Usage guidelines

If you do not specify the count or verbose keyword, this command displays brief information about MAC address entries.

Examples

# Display brief information about MAC address entries for all VSIs.

<Sysname> display l2vpn mac-address

MAC Address State VSI Name Link ID/Name Aging

0000-0000-000b Static vpn1 Tunnel10 NotAging

0000-0000-000c Dynamic vpn1 Tunnel60 Aging

0000-0000-000d Dynamic vpn1 Tunnel99 Aging

--- 3 mac address(es) found ---

# Display the total number of MAC address entries in all VSIs.

<Sysname> display l2vpn mac-address count

3 mac address(es) found

Table 10 Command output

Field	Description
State	Entry state: · Dynamic—Local- or remote-MAC entry dynamically learned in the data plane. · Static—Static local- and remote-MAC entry. · EVPN—Remote-MAC entry advertised through BGP EVPN. · OpenFlow—Remote-MAC entry issued by a remote controller through OpenFlow.
Link ID/Name	For a local MAC address, this field displays the name of the interface that hosts the Ethernet service instance for the MAC address. For a remote MAC address, this field displays the tunnel interface name.
Aging	Entry aging state: · Aging. · NotAging.

# Display detailed information about MAC address entries for all VSIs.

<Sysname> display l2vpn mac-address verbose

MAC Address : 0000-0000-000b

VSI Name : vpn1

VXLAN ID : 123

Interface : HGE1/0/1

Link ID : 1

State : Dynamic

Aging : Aging

Table 11 Command output

Field	Description
Interface	For a local MAC address, this field displays the name of the interface that hosts the Ethernet service instance for the MAC address. For a remote MAC address, this field displays the tunnel interface name.
Link ID	Link ID that uniquely identifies an AC or a VXLAN tunnel on a VSI.
State	Entry state: · Dynamic—Local- or remote-MAC entry dynamically learned in the data plane. · Static—Static local- or remote-MAC entry. · EVPN—Remote-MAC entry advertised through BGP EVPN. · OpenFlow—Remote-MAC entry issued by a remote controller through OpenFlow.
Aging	Entry aging state: · Aging. · NotAging.

Related commands

reset l2vpn mac-address

display l2vpn service-instance

Use display l2vpn service-instance to display information about Ethernet service instances.

Syntax

display l2vpn service-instance [ interface interface-type interface-number [ service-instance instance-id ] ] [ verbose ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

interface interface-type interface-number: Specifies a Layer 2 Ethernet interface or Layer 2 aggregate interface by its interface type and number. If you do not specify an interface, this command displays Ethernet service instance information for all Layer 2 Ethernet interfaces and Layer 2 aggregate interfaces.

service-instance instance-id: Specifies an Ethernet service instance by its ID in the range of 1 to 4096. If you do not specify an Ethernet service instance, this command displays information about all Ethernet service instances on the specified Layer 2 Ethernet interface or Layer 2 aggregate interface.

verbose: Displays detailed information about Ethernet service instances. If you do not specify this keyword, the command displays brief information about Ethernet service instances.

Examples

# Display brief information about all Ethernet service instances.

<Sysname> display l2vpn service-instance

Total number of service-instances: 1, 0 up, 1 down

Total number of ACs: 1, 0 up, 1 down

Interface SrvID Owner LinkID State Type

BAGG1 1 1 1 Down VSI

Table 12 Command output

Field	Description
Total number of ACs	Total number of attachment circuits (ACs) and the number of ACs in each state (up or down).
Interface	Name of a Layer 2 Ethernet interface or Layer 2 aggregate interface.
SrvID	Ethernet service instance ID.
Owner	VSI name. This field is empty if an Ethernet service instance is not mapped to any VSI.
LinkID	Ethernet service instance's link ID on the VSI.
State	Ethernet service instance state: · Up. · Down.
Type	L2VPN type of the Ethernet service instance: · VSI. · VPWS.

# Display detailed information about all Ethernet service instances on HundredGigE 1/0/1.

<Sysname> display l2vpn service-instance interface hundredgige 1/0/1 verbose

Interface: HGE1/0/1

Service Instance: 1

Type : Manual

Encapsulation : s-vid 16

VSI Name : vsi10

Link ID : 1

State : Up

Statistics : Enabled

Input Statistics:

Octets :0

Packets :0

Errors : 0

Discards: 0

Output Statistics:

Octets :0

Packets :0

Errors : 0

Discards: 0

Table 13 Command output

Field	Description
Interface	Name of a Layer 2 Ethernet interface or Layer 2 aggregate interface.
Service Instance	Ethernet service instance ID.
Type	Type and traffic match mode of the Ethernet service instance: · Dynamic (M-LAG)—Dynamic Ethernet service instance created on the peer link, in VLAN-based traffic match mode. · Manual—Static Ethernet service instance in VLAN-based traffic match mode.
Encapsulation	Frame match criterion of the Ethernet service instance. If the Ethernet service instance does not contain a match criterion, the command does not display this field.
Link ID	Ethernet service instance's link ID on the VSI.
State	Ethernet service instance state: · Up. · Down.
Statistics	Packet statistics state: · Enabled—The packet statistics feature is enabled for the Ethernet service instance. · Disabled—The packet statistics feature is disabled for the Ethernet service instance.
Input statistics	Incoming traffic statistics: · Octets—Number of incoming bytes. · Packets—Number of incoming packets. · Errors—Number of error packets. · Discards—Number of discarded packets.
Output statistics	Outgoing traffic statistics: · Octets—Number of outgoing bytes. · Packets—Number of outgoing packets. · Errors—Number of error packets. · Discards—Number of discarded packets.

Related commands

service-instance

display l2vpn vsi

Use display l2vpn vsi to display information about VSIs.

Syntax

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

name vsi-name: Specifies a VSI by its name, a case-sensitive string of 1 to 31 characters.

evpn-srv6: Specifies VSIs of EVPN VPLS over SRv6.

evpn-vpls: Specifies VSIs of EVPN VPLS.

evpn-vxlan: Specifies VSIs of EVPN VXLAN.

vxlan: Specifies VSIs of VXLAN.

count: Displays VSI state statistics.

verbose: Displays detailed information about VSIs. If you do not specify this keyword, the command displays brief information about VSIs.

Usage guidelines

If you do not specify a VSI or network type, this command displays information about all VSIs.

Examples

# Display brief information about all VSIs.

<Sysname> display l2vpn vsi

Total number of VSIs: 2, 1 up, 1 down, 0 admin down

VSI Name VSI Index MTU State

vpls1 0 1500 Up

vpls2 1 1500 Down

# Display state statistics about all VSIs.

<Sysname> display l2vpn vsi count

Total number of VSIs: 1, 1 up, 0 down, 0 admin down

Table 14 Command output

Field	Description
State	VSI state: · Up—The VSI is up. · Down—The VSI is down. · Admin down—The VSI has been manually shut down by using the shutdown command.

Field

Description

State

VSI state:

· Up—The VSI is up.

· Down—The VSI is down.

· Admin down—The VSI has been manually shut down by using the shutdown command.

# Display detailed information about all VSIs of EVPN VXLAN.

<Sysname> display l2vpn vsi evpn-vxlan verbose

VSI Name: vpna

VSI Index : 0

VSI Description : vsi for vxlan10

VSI State : Up

MTU : -

Diffserv Mode : -

Bandwidth : Unlimited

Broadcast Restrain : Unlimited

Multicast Restrain : Unlimited

Unknown Unicast Restrain: Unlimited

MAC Learning : Enabled

MAC Table Limit : -

MAC Learning rate : -

Drop Unknown : -

PW Redundancy Mode : Slave

Flooding : Enabled

ESI : 0000.0000.0000.0000.0000

Redundancy Mode : All-active

Statistics : Enabled

Input statistics :

Octets : 0

Packets : 0

Errors : 0

Discards : 0

Output statistics:

Octets : 0

Packets : 0

Errors : 0

Discards : 0

Input Rate :

Bytes per second : 0

Packets per second : 0

Output Rate :

Bytes per second : 0

Packets per second : 0

Gateway Interface : VSI-interface 100

VXLAN ID : 10

EVPN Encapsulation : VXLAN

Tunnels:

Tunnel Name Link ID State Type Flood proxy

Tunnel1 0x5000001 Up Manual Disabled

Tunnel2 0x5000002 Up Manual Disabled

ACs:

AC Link ID State Type

BAGG1 srv1 0x1 Down Manual

Statistics: Disabled

Table 15 Command output

Field	Description
VSI Description	Description of the VSI. If the VSI does not have a description, the command does not display this field.
VSI State	VSI state: · Up—The VSI is up. · Down—The VSI is down. · Administratively down—The VSI has been manually shut down by using the shutdown command.
MTU	MTU on the VSI.
Bandwidth	Bandwidth limit in kbps. If no bandwidth limit is set for the VSI, Unlimited is displayed.
Broadcast Restrain	Broadcast restraint bandwidth (in kbps). If the broadcast restraint bandwidth is not set, Unlimited is displayed.
Multicast Restrain	Multicast restraint bandwidth (in kbps). If the multicast restraint bandwidth is not set, Unlimited is displayed.
Unknown Unicast Restrain	Unknown unicast restraint bandwidth (in kbps). If the unknown unicast restraint bandwidth is not set, Unlimited is displayed.
MAC Learning	State of the MAC learning feature.
MAC Table Limit	This field is not supported in the current software version. Maximum number of MAC address entries on the VSI.
MAC Learning rate	This field is not supported in the current software version. MAC address entry learning rate of the VSI.
Drop Unknown	This field is not supported in the current software version. Action on source MAC-unknown frames received after the maximum number of MAC entries is reached.
PW Redundancy Mode	PW redundancy operation mode: · Slave—Master/slave mode and the local PE operates as the slave node. · Master—Master/slave mode and the local PE operates as the master node. · Independent—Independent mode.
DSCP	DSCP value of outgoing VXLAN packets.
Service Class	Service class value of outgoing VXLAN packets.
Flooding	State of the VSI's flooding feature: · Enabled—Flooding is enabled on the VSI. · Disabled—Flooding is disabled on the VSI.
ESI	ESI assigned to the VSI.
Redundancy Mode	ES redundancy mode for the VSI: · A—All-active mode. · S—Single-active mode.
Statistics	Packet statistics state: · Enabled—The packet statistics feature is enabled for the VSI. · Disabled—The packet statistics feature is disabled for the VSI.
Input statistics	Incoming traffic statistics: · Octets—Number of incoming bytes. · Packets—Number of incoming packets. · Errors—Number of error packets. · Discards—Number of discarded packets.
Output statistics	Outgoing traffic statistics: · Octets—Number of outgoing bytes. · Packets—Number of outgoing packets. · Errors—Number of error packets. · Discards—Number of discarded packets.
Input Rate	Incoming traffic rate for the VSI, in bps and pps.
Output Rate	Outgoing traffic rate for the VSI, in bps and pps.
Gateway Interface	VSI interface name.
EVPN Encapsulation	EVPN encapsulation type. In the current software version, only the VXLAN encapsulation is supported.
State	Tunnel state: · Up—The tunnel is operating correctly. · Down—The tunnel interface is down.
Type	Tunnel assignment method: · Auto—The tunnel was automatically assigned to the VXLAN by EVPN. · Manual—The tunnel was manually assigned to the VXLAN.
Flood proxy	This field is not supported in the current software version. Flood proxy state.
ACs	ACs that are bound to the VSI.
Link ID	AC's link ID on the VSI.
State	AC state: · Up. · Down.
Type	Type and traffic match mode of the Ethernet service instance: · Dynamic (M-LAG)—Dynamic Ethernet service instance created on the peer link, in VLAN-based traffic match mode. · Manual—Static Ethernet service instance in VLAN-based traffic match mode.
Statistics	Whether to enable the AC statistics feature: · Enabled. · Disabled.

display statistic mode

Use display statistic mode to display the current packet statistic collection mode.

Syntax

display statistic mode

Views

Any view

Predefined user roles

network-admin

network-operator

Examples

# Display the current packet statistic collection mode.

<Sysname> display statistic mode

The packet statistic mode is vsi.

Related commands

statistic mode

display vxlan tunnel

Use display vxlan tunnel to display VXLAN tunnel information for VXLANs.

Syntax

display vxlan tunnel [ vxlan-id vxlan-id ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

vxlan-id: Specifies a VXLAN ID in the range of 0 to 16777215. If you do not specify a VXLAN, this command displays VXLAN tunnel information for all VXLANs.

Examples

# Display VXLAN tunnel information for all VXLANs.

<Sysname> display vxlan tunnel

Total number of VXLANs: 1

VXLAN ID: 10, VSI name: vpna, Total tunnels: 2 (2 up, 0 down, 0 defect, 0 blocked)

Tunnel name Link ID State Type Flood proxy

Tunnel1 0x5000001 Up Manual Disabled

Tunnel2 0x5000002 Up Manual Disabled

# Display VXLAN tunnel information for VXLAN 10.

<Sysname> display vxlan tunnel vxlan-id 10

VXLAN ID: 10, VSI name: vpna, Total tunnels: 2 (2 up, 0 down, 0 defect, 0 blocked)

Tunnel name Link ID State Type Flood proxy

Tunnel1 0x5000001 Up Manual Disabled

Tunnel2 0x5000002 Up Manual Disabled

Table 16 Command output

Field	Description
Link ID	Tunnel's link ID in the VXLAN.
State	Tunnel state: · Up—The tunnel is operating correctly. · Down—The tunnel interface is down.
Type	Tunnel assignment method: · Auto—The tunnel was automatically assigned to the VXLAN by EVPN. · Manual—The tunnel was manually assigned to the VXLAN.
Flood proxy	This field is not supported in the current software version. Flood proxy state.

Related commands

tunnel

vxlan

encapsulation

Use encapsulation to configure a frame match criterion for an Ethernet service instance.

Use undo encapsulation to restore the default.

Syntax

encapsulation s-vid vlan-id-list [ only-tagged ]

encapsulation s-vid vlan-id-list c-vid vlan-id-list

encapsulation { default | untagged }

undo encapsulation [ s-vid vlan-id-list ]

Default

An Ethernet service instance does not contain a frame match criterion.

Views

Ethernet service instance view

Predefined user roles

network-admin

Parameters

s-vid: Matches frames that are tagged with the specified outer 802.1Q VLAN IDs.

c-vid: Matches frames that are tagged with the specified inner 802.1Q VLAN IDs.

vlan-id: Specifies an 802.1Q VLAN ID in the range of 1 to 4094.

vlan-id-list: Specifies a space-separated list of up to eight VLAN items. Each item specifies a VLAN ID or a range of VLAN IDs in the format of vlan-id1 to vlan-id2. The value range for VLAN IDs is 1 to 4094. To specify inner VLAN IDs, you can specify only one VLAN item.

only-tagged: Matches tagged frames. If the outer 802.1Q VLAN is not the PVID, the matching result does not differ, whether or not you specify the only-tagged keyword. If the outer 802.1Q VLAN is the PVID, the matching result depends on whether or not the only-tagged keyword is specified.

· To match only PVID-tagged frames, specify the only-tagged keyword.

· To match both untagged frames and PVID-tagged frames, do not specify the only-tagged keyword.

default: Matches frames that do not match any other Ethernet service instance on the interface. On an interface, you can configure this criterion only in one Ethernet service instance. The Ethernet service instance matches any frames if it is the only instance on the interface.

untagged: Matches any frames that do not have an 802.1Q VLAN tag.

Usage guidelines

For packets to be normally forwarded, make sure the interface where an Ethernet service instance resides permits the matching inner and outer VLANs of the Ethernet service instance.

If multiple Ethernet service instances on an interface match both outer VLAN IDs and inner VLAN IDs (s-vid and c-vid), the following rules apply:

· If Ethernet service instances are configured to match different outer VLAN IDs (s-vid), they can match the same or overlapping inner VLAN IDs (c-vid).

· If Ethernet service instances match the same outer VLAN IDs (s-vid), they cannot match the same or overlapping inner VLAN IDs (c-vid).

In the following cases, you can execute the encapsulation command multiple times to modify the frame match criterion of an Ethernet service instance:

· If the encapsulation s-vid vlan-id-list c-vid vlan-id-list command has been executed, you can execute the encapsulation s-vid vlan-id-list c-vid vlan-id-list command multiple times to add the matching outer VLAN IDs. All the specified outer VLAN IDs take effect. Make sure the c-vid vlan-id-list option is the same as that in the current criterion.

· If the encapsulation s-vid vlan-id-list command has been executed, you can execute the encapsulation s-vid vlan-id-list command multiple times to add the matching outer VLAN IDs. All the specified outer VLAN IDs take effect.

To remove match criteria, follow these restrictions and guidelines:

· If the current match criterion is encapsulation s-vid vlan-id-list, you can execute the undo encapsulation s-vid vlan-id-list command to remove some or all the matching outer VLAN IDs.

· If the current match criterion is encapsulation s-vid vlan-id-list c-vid vlan-id-list, you can execute the undo encapsulation s-vid vlan-id-list command to remove some of the matching outer VLAN IDs, but you cannot delete all the matching outer VLAN IDs.

In other cases, to change the match criterion, first execute the undo encapsulation command to remove the original criterion.

When you remove the match criterion in an Ethernet service instance, the mapping between the service instance and the VSI is removed automatically.

Examples

# Configure Ethernet service instance 1 on HundredGigE 1/0/1 to match frames that have an outer 802.1Q VLAN ID of 111.

<Sysname> system-view

[Sysname] interface hundredgige 1/0/1

[Sysname-HundredGigE1/0/1] service-instance 1

[Sysname-HundredGigE1/0/1-srv1] encapsulation s-vid 111

Related commands

display l2vpn service-instance

flooding disable

Use flooding disable to disable flooding for a VSI.

Use undo flooding disable to enable flooding for a VSI.

Syntax

flooding disable { all | { broadcast | unknown-multicast | unknown-unicast } * } [ dci ]

undo flooding disable

Default

Flooding is enabled for a VSI.

Views

VSI view

Predefined user roles

network-admin

Parameters

all: Specifies broadcast, unknown unicast, and unknown multicast traffic.

broadcast: Specifies broadcast traffic.

unknown-multicast: Specifies unknown multicast traffic.

unknown-unicast: Specifies unknown unicast traffic.

dci: Disables flooding only to VXLAN-DCI tunnel interfaces. If you do not specify this keyword, the command disables flooding to both VXLAN tunnel interfaces and VXLAN-DCI tunnel interfaces.

Usage guidelines

By default, the device floods broadcast, unknown unicast, and unknown multicast frames received from the local site to the following interfaces in the frame's VXLAN:

· All site-facing interfaces except for the incoming interface.

· All VXLAN tunnel interfaces.

When receiving broadcast, unknown unicast, and unknown multicast frames on VXLAN tunnel interfaces, the device floods the frames to all site-facing interfaces in the frames' VXLAN.

To confine a kind of flood traffic, use this command to disable flooding for that kind of flood traffic on the VSI bound to the VXLAN.

You cannot specify the unknown-multicast or unknown-unicast keyword alone. If you specify one of the keywords, you must also specify the other.

If VXLAN-DCI is configured, flood traffic is also sent out of VXLAN-DCI tunnel interfaces. To confine flood traffic to the site-facing interfaces and VXLAN tunnels within a data center, you can specify the dci keyword to disable flooding only to VXLAN-DCI tunnel interfaces.

The all-direction keyword disables flooding traffic received from an AC or VXLAN tunnel interface to any other ACs and VXLAN tunnel interfaces of the same VSI. If VXLAN-DCI is configured, this keyword also disables flooding between VXLAN tunnel interfaces and VXLAN-DCI tunnel interfaces.

Examples

# Disable flooding of local broadcast traffic to remote sites for VSI vsi1.

<Sysname> system-view

[Sysname] vsi vsi1

[Sysname-vsi-vsi1] flooding disable broadcast

ipv6 nd suppression enable

Use ipv6 nd suppression enable to enable ND flood suppression.

Use undo ipv6 nd suppression enable to disable ND flood suppression.

Syntax

ipv6 nd suppression enable [ no-broadcast ]

undo ipv6 nd suppression enable

Default

ND flood suppression is disabled.

Views

VSI view

Predefined user roles

network-admin

Parameters

no-broadcast: Disables flooding the ND requests that do not match any ND flood suppression entries.

Usage guidelines

ND flood suppression reduces ND request multicasts by enabling the VTEP to reply to ND requests on behalf of user terminals.

This feature snoops ND packets to populate the ND flood suppression table with local and remote MAC addresses. If an ND request has a matching entry, the VTEP replies to the request on behalf of the user terminal. If no match is found, the VTEP floods the request to both local and remote sites.

Examples

# Enable ND flood suppression for VSI vsi1.

<Sysname> system-view

[Sysname] vsi vsi1

[Sysname-vsi-vsi1] ipv6 nd suppression enable

Related commands

display ipv6 nd suppression vsi

reset ipv6 nd suppression vsi

ipv6 nd suppression mode

Use ipv6 nd suppression mode to set the ND flood suppression mode.

Use undo ipv6 nd suppression mode to restore the default.

Syntax

ipv6 nd suppression mode { proxy-reply | unicast-forward } [ mismatch-discard ]

undo ipv6 nd suppression mode

Default

If ND flood suppression is enabled, the default ND flood suppression mode is proxy reply. In proxy reply mode, the device broadcasts the NS packets that are not targeted at the device and do not match any ND flood suppression entries.

Views

VSI view

Predefined user roles

network-admin

Parameters

proxy-reply: Specifies proxy reply mode. If an NS packet is not targeted at the device and matches an ND flood suppression entry, the device replies to the NS packet on behalf of the target IP address. The replied NA packet carries the following information:

· Sender IP address—Target IP address in the NS packet.

· Source MAC address—MAC address in the matching ND flood suppression entry.

unicast-forward: Specifies unicast forwarding mode. If an NS packet is not targeted at the device and matches an ND flood suppression entry, the device acts as follows:

1. Replaces the destination MAC address in the NS packet with the MAC address in the entry.

2. Unicasts the NS packet.

mismatch-discard: Specifies mismatch discarding mode. In this mode, the device discards an NS packet that is not targeted at the device and does not match any ND flood suppression entry. If you do not specify this keyword, the device will broadcast such an NS packet.

Usage guidelines

The device does not forward NS packets in proxy reply mode, which decreases system resource consumption. Unicast forwarding mode reduces the ND entry learning errors caused by the delay in refreshing ND flood suppression entries at the expense of high system resource usage.

Examples

# Enable ND flood suppression and set its mode to unicast forwarding on VSI vsi1.

<Sysname> system-view

[Sysname] vsi vsi1

[Sysname-vsi-vsi1] ipv6 nd suppression enable

[Sysname-vsi-vsi1] nd suppression mode unicast-forward

Related commands

ipv6 nd suppression enable

l2vpn m-lag peer-link ac-match-rule vxlan-mapping

Use l2vpn m-lag peer-link ac-match-rule vxlan-mapping to enable the device to create frame match criteria based on VXLAN IDs for the dynamic ACs on the direct peer link.

Use undo l2vpn m-lag peer-link ac-match-rule vxlan-mapping to restore the default.

Syntax

l2vpn m-lag peer-link ac-match-rule vxlan-mapping

undo l2vpn m-lag peer-link ac-match-rule vxlan-mapping

Default

On an M-LAG system that uses a direct peer link, dynamic ACs on the peer link use frame match criteria that are identical to those of site-facing ACs.

Views

System view

Predefined user roles

network-admin

Usage guidelines

By default, if an M-LAG system uses a direct peer link, each M-LAG member device creates a dynamic AC on the peer link when an AC is configured on a site-facing interface. The dynamic AC and the site-facing AC have the same frame match criteria and VSI mapping. If two site-facing ACs on different interfaces have the same frame match criteria but different VSI mappings, the dynamic ACs created for the site-facing ACs will conflict with each other. To prevent this issue, enable the M-LAG member devices to create frame match criteria based on VXLAN IDs for the dynamic ACs on the peer link.

With this command configured, an M-LAG member device creates dynamic ACs on the peer link and maps them to the VSIs of VXLANs after the VXLANs are created. The matching VLAN IDs in frame match criteria are calculated for the dynamic ACs according to the following rules:

· Outer VLAN ID = VXLAN ID / 4094 + 1.

· Inner VLAN ID = VXLAN ID / 4094 + 1.

· If the calculated outer VLAN ID of a dynamic AC is the PVID of the peer-link interface, the device uses the calculated inner VLAN ID as the outer VLAN ID. The device does not add a matching inner VLAN ID to the frame match criterion of the dynamic AC.

After you execute this command, do not create VXLANs with IDs larger than 16000000.

Examples

# Enable the device to create frame match criteria based on VXLAN IDs for the dynamic ACs on the direct peer link.

<Sysname> system-view

[Sysname] l2vpn m-lag peer-link ac-match-rule vxlan-mapping

l2vpn enable

Use l2vpn enable to enable L2VPN.

Use undo l2vpn enable to disable L2VPN.

Syntax

l2vpn enable

undo l2vpn enable

Default

L2VPN is disabled.

Views

System view

Predefined user roles

network-admin

Usage guidelines

You must enable L2VPN before you can configure L2VPN settings.

Examples

# Enable L2VPN.

<Sysname> system-view

[Sysname] l2vpn enable

l2vpn statistics interval

Use l2vpn statistics interval to set the L2VPN statistics collection interval.

Use undo l2vpn statistics interval to restore the default.

Syntax

l2vpn statistics interval interval

undo l2vpn statistics interval

Default

The L2VPN statistics collection interval is 15 minutes.

Views

System view

Predefined user roles

network-admin

Parameters

interval: Sets the L2VPN statistics collection interval in seconds, in the range of 30 to 65535.

Examples

# Set the L2VPN statistics collection interval to 30 seconds.

<Sysname> system-view

[Sysname] l2vpn statistics interval 30

mac-address static vsi

Use mac-address static vsi to add a static MAC address entry for a VXLAN VSI.

Use undo mac-address static vsi to remove a static MAC address entry for a VXLAN VSI.

Syntax

mac-address static mac-address { interface interface-type interface-number service-instance instance-id | interface tunnel tunnel-number } vsi vsi-name

undo mac-address static [ mac-address ] [ interface interface-type interface-number service-instance instance-id | interface tunnel tunnel-number ] vsi vsi-name

Default

VXLAN VSIs do not have static MAC address entries.

Views

System view

Predefined user roles

network-admin

Parameters

mac-address: Specifies a MAC address in H-H-H format. Do not specify a multicast MAC address or an all-zeros MAC address. You can omit the consecutive zeros at the beginning of each segment. For example, you can enter f-e2-1 for 000f-00e2-0001.

interface interface-type interface-number service-instance instance-id: Specifies an AC. The interface-type interface-number argument specifies the interface by its type and number. The instance-id argument specifies the Ethernet service instance by its ID in the range of 1 to 4096. This option applies to local MAC addresses.

interface tunnel tunnel-number: Specifies a VXLAN or VXLAN-DCI tunnel interface by its tunnel interface number. The tunnel interface must already exist. This option applies to remote MAC addresses.

vsi vsi-name: Specifies a VSI name, a case-sensitive string of 1 to 31 characters.

Usage guidelines

A local MAC address is the MAC address of a VM in the local site. Local MAC entries include manually added entries and dynamically learned entries.

A remote MAC address is the MAC address of a VM in a remote site. Remote MAC entries include manually added MAC entries, dynamically learned MAC entries, and MAC entries advertised through BGP EVPN.

When you add a local MAC address entry, make sure the specified Ethernet service instance has been mapped to the VSI. When you add a remote MAC address entry, make sure the VSI's VXLAN has been specified on the VXLAN or VXLAN-DCI tunnel.

Do not configure static remote-MAC entries for tunnels that are automatically established by using EVPN.

· EVPN re-establishes tunnels if the transport-facing interface goes down and then comes up. If you have configured static remote-MAC entries, the entries are deleted when the tunnels are re-established.

· EVPN re-establishes tunnels if you perform configuration rollback. If the tunnel IDs change during tunnel re-establishment, configuration rollback fails, and static remote-MAC entries on the tunnels cannot be restored.

The undo mac-address static vsi vsi-name command removes all static MAC address entries for a VSI.

Examples

# Add MAC address 000f-e201-0101 to VSI vsi1. Specify Tunnel-interface 1 as the outgoing interface.

<Sysname> system-view

[Sysname] mac-address static 000f-e201-0101 interface tunnel 1 vsi vsi1

# Add MAC address 000f-e201-0102 of Ethernet service instance 1 to VSI vsi1. Specify HundredGigE 1/0/1 as the outgoing interface.

<Sysname> system-view

[Sysname] mac-address static 000f-e201-0102 interface hundredgige 1/0/1 service-instance 1 vsi vsi1

Related commands

vxlan tunnel mac-learning disable

ping vxlan

Use ping vxlan to ping a VXLAN tunnel destination.

Syntax

ping vxlan [ -a inner-src-address | -c count | -m interval | -r reply-mode | -t timeout | -tos tos-value ] * vxlan-id vxlan-id tunnel-source source-address tunnel-destination dest-address [ destination-udpport dest-port ] [ vxlan-source-address vxlan-source-address ] [ load-balance { vxlan-source-udpport vxlan-source-udpport [ end-vxlan-src-udpport ] | source-address lb-src-address destination-address lb-dest-address protocol { udp | lb-protocol-id } source-port lb-src-port destination-port lb-dest-port source-mac lb-source-mac destination-mac lb-destination-mac } ]

Views

Any view

Predefined user roles

network-admin

Parameters

-a inner-src-address: Specifies the source IP address in the inner IP header of VXLAN echo requests. If you do not specify this option, the primary IP address of the outgoing interface is used as the source IP address in the inner IP header of VXLAN echo requests. Make sure the tunnel destination device can reach this source IP address. For example, you can specify the tunnel source address as the source IP address in the inner IP header of VXLAN echo requests.

-c count: Specifies the number of VXLAN echo requests to send, in the range of 1 to 4294967295. The default value is 5.

-m interval: Specifies the interval for sending VXLAN echo requests, in milliseconds. The value range for the interval argument 1 to 10000, and the default is 200 milliseconds.

-r reply-mode: Sets the reply mode used by the receiver to reply to VXLAN echo requests. The value of the reply-mode argument can be 1, 2, or 3.

· 1—Do not reply.

· 2—Look up the IP forwarding table for the destination IP address.

· 3—Perform VXLAN encapsulation.

-t timeout: Specifies the timeout time for receiving VXLAN echo replies, in milliseconds. The value range for the timeout argument is 0 to 65535, and the default is 2000 milliseconds.

-tos tos-value: Specifies the ToS value in the outer IP header of VXLAN echo requests. The value range for the tos-value argument is 0 to 255, and the default is 0.

vxlan-id vxlan-id: Specifies a VXLAN ID in the range of 0 to 16777215.

tunnel-source source-address: Specifies a VXLAN tunnel source IPv4 address.

tunnel-destination dest-address: Specifies a VXLAN tunnel destination IPv4 address.

destination-udpport dest-port: Specifies the destination UDP port number in the inner header of VXLAN echo requests. The value range for the dest-port argument is 1 to 65535, and the default is 50001. Specify this parameter if a specific port number is required to be used as the inner destination UDP port number.

vxlan-source-address vxlan-source-address: Specifies the source IPv4 address in the outer IP header of VXLAN echo requests. If you do not specify this option, the source IPv4 address is the address specified with the tunnel-source source-address parameter. On an M-LAG member device, specify the source IPv4 address as the local VTEP IP address.

load-balance: Configures load balancing parameters. If you do not specify this keyword, the command tests only one of the multiple paths to the VXLAN tunnel destination.

vxlan-source-udpport vxlan-source-udpport end-vxlan-src-udpport: Specifies a source UDP port range for VXLAN echo requests. The value range for UDP port numbers is 49152 to 65535. The default start UDP port number is 4789. If you do not specify an end UDP port number, the end UDP port number is the start UDP port number.

source-address lb-src-address: Specifies the source IPv4 address used for load balancing calculation.

destination-address lb-dest-address: Specifies the destination IPv4 address used for load balancing calculation.

protocol: Specifies the protocol used for load balancing calculation.

udp: Specifies UDP.

lb-protocol-id: Specifies a protocol number in the range of 1 to 255.

source-port lb-src-port: Specifies a source port number used for load balancing calculation, in the range of 1 to 65535.

destination-port lb-dest-port: Specifies a destination port number used for load balancing calculation, in the range of 1 to 65535.

source-mac lb-source-mac: Specifies a source MAC address used for load balancing calculation.

destination-mac lb-destination-mac: Specifies a destination MAC address used for load balancing calculation.

Usage guidelines

Use this command to test the connectivity of a VXLAN tunnel in a VXLAN or EVPN VXLAN network when the tunnel has traffic loss or interruption issues.

Before you execute this command for a VXLAN tunnel, you must enable overlay OAM on the tunnel destination device by using the overlay oam enable command.

The VTEP can distribute VXLAN echo requests among multiple paths to the destination based on the source UDP port. When a VXLAN tunnel has multiple paths on the transport network, you can configure load sharing parameters to ensure accuracy of the test result. You can use one of the following methods to configure source UDP ports for VXLAN echo requests:

· Specify a source UDP port range. The device will send VXLAN echo requests sourced from each UDP port in the UDP port range. You need to execute the ping vxlan command only once.

· Specify load balancing parameters such as source and destination MAC addresses, source and destination IP addresses, and protocol for the VTEP to calculate a source UDP port number. You need to execute the ping vxlan command multiple times to test connectivity of all paths.

The load balancing parameters change only the source UDP port number of VXLAN echo requests. Other fields of the requests will not be changed.

If you specify the vxlan-source-udpport vxlan-source-udpport [ end-vxlan-src-udpport ] parameters, the number of VXLAN echo requests sourced from each UDP port in the UDP port range is determined by the -c count parameter.

Examples

# Test connectivity of VXLAN 1 that is sourced from 11.11.11.11 and destined for 22.22.22.22.

<Sysname> ping vxlan vxlan-id 1 tunnel-source 11.11.11.11 tunnel-destination 22.22.22.22

Ping VXLAN: VXLAN ID 1 source 11.11.11.11 destination 22.22.22.22:

Press CTRL+C to break.

40 bytes from 30.0.0.2: sequence=1 time=6 ms

40 bytes from 30.0.0.2: sequence=2 time=4 ms

40 bytes from 30.0.0.2: sequence=3 time=3 ms

40 bytes from 30.0.0.2: sequence=4 time=3 ms

40 bytes from 30.0.0.2: sequence=5 time=2 ms

--- Ping statistics for VXLAN 1 source 11.11.11.11 destination 22.22.22.22 ---

5 packets transmitted, 5 packets received, 0.0% packet loss

Round-trip min/avg/max = 2/3/6 ms

Table 17 Command output

Field	Description
Press CTRL+C to break	Press escape key Ctrl+C to abort the ping operation.
40 bytes from 30.0.0.2: sequence=1 time=6 ms	Received VXLAN echo replies from a device. If no echo reply is received within the timeout period, no information is displayed. · bytes—Number of bytes in the VXLAN echo reply. · sequence—Packet sequence number used to determine whether a packet is lost, disordered, or repeated. · time—Response time.
Return code	Return code: · 0—No return code. · 1—Echo request error. · 2—The VXLAN does not exist. · 3—The VXLAN does not have up tunnels. The number in parentheses is a sub code fixed at 0.
Ping statistics for VXLAN 1 source 11.11.11.11 destination 22.22.22.22	Statistics about the data received and sent in the ping operation.
packets transmitted	Number of sent VXLAN echo requests.
packets received	Number of received VXLAN echo replies.
packet loss	Percentage of unacknowledged requests to the total requests sent.
Round-trip min/avg/max	Minimum/average/maximum deviation response time, in milliseconds.

Related commands

overlay oam enable

tracert vxlan

reserved vxlan

Use reserved vxlan to specify a reserved VXLAN.

Use undo reserved vxlan to restore the default.

Syntax

reserved vxlan vxlan-id

undo reserved vxlan

Default

No VXLAN has been reserved.

Views

System view

Predefined user roles

network-admin

Parameters

vxlan-id: Specifies a VXLAN ID in the range of 0 to 16777215.

Usage guidelines

You can specify only one reserved VXLAN on the VTEP. The reserved VXLAN cannot be the VXLAN created on any VSI.

The reserved VXLAN ID cannot be the same as the remote VXLAN ID specified by using the mapping vni command.

Examples

# Specify VXLAN 10000 as the reserved VXLAN.

<Sysname> system-view

[Sysname] reserved vxlan 10000

Related commands

mapping vni (EVPN Command Reference)

reset arp suppression vsi

Use reset arp suppression vsi to clear ARP flood suppression entries on VSIs.

Syntax

reset arp suppression vsi [ name vsi-name ]

Views

User view

Predefined user roles

network-admin

Parameters

name vsi-name: Specifies a VSI by its name, a case-sensitive string of 1 to 31 characters. If you do not specify a VSI, this command clears ARP flood suppression entries on all VSIs.

Examples

# Clear ARP flood suppression entries on all VSIs.

<Sysname> reset arp suppression vsi

This command will delete all entries. Continue? [Y/N]:y

Related commands

arp suppression enable

display arp suppression vsi

reset ipv6 nd suppression vsi

Use reset ipv6 nd suppression vsi to clear ND flood suppression entries on VSIs.

Syntax

reset ipv6 nd suppression vsi [ name vsi-name ]

Views

User view

Predefined user roles

network-admin

Parameters

name vsi-name: Specifies a VSI by its name, a case-sensitive string of 1 to 31 characters. If you do not specify a VSI, this command clears ND flood suppression entries on all VSIs.

Examples

# Clear ND flood suppression entries on all VSIs.

<Sysname> reset ipv6 nd suppression vsi

This command will delete all entries. Continue? [Y/N]:y

Related commands

display ipv6 nd suppression vsi

ipv6 nd suppression enable

reset l2vpn mac-address

Use reset l2vpn mac-address to clear dynamic MAC address entries on VSIs.

Syntax

reset l2vpn mac-address [ vsi vsi-name ]

Views

User view

Predefined user roles

network-admin

Parameters

vsi vsi-name: Specifies a VSI by its name, a case-sensitive string of 1 to 31 characters. If you do not specify a VSI, this command clears all dynamic MAC address entries on all VSIs.

Usage guidelines

Use this command when the number of dynamic MAC address entries reaches the limit or the device learns incorrect MAC addresses.

Examples

# Clear the dynamic MAC address entries on VSI vpn1.

<Sysname> reset l2vpn mac-address vsi vpn1

Related commands

display l2vpn mac-address vsi

reset l2vpn statistics ac

Use reset l2vpn statistics ac to clear packet statistics on ACs.

Syntax

reset l2vpn statistics ac [ interface interface-type interface-number service-instance instance-id ]

Views

User view

Predefined user roles

network-admin

Parameters

interface interface-type interface-number: Specifies an interface by its type and number.

service-instance instance-id: Specifies an Ethernet service instance ID in the range of 1 to 4096.

Usage guidelines

If you do not specify any parameters, this command clears packet statistics on all ACs.

Examples

# Clear packet statistics for Ethernet service instance 1 on HundredGigE 1/0/1.

<Sysname> reset l2vpn statistics ac interface hundredgige 1/0/1 service-instance 1

Related commands

display l2vpn service-instance verbose

statistics enable (Ethernet service instance view)

reset l2vpn statistics vsi

Use reset l2vpn statistics vsi to clear packet statistics on VSIs.

Syntax

reset l2vpn statistics vsi [ name vsi-name ]

Views

User view

Predefined user roles

network-admin

Parameters

name vsi-name: Specifies a VSI by its name, a case-sensitive string of 1 to 31 characters. If you do not specify a VSI, this command clears packet statistics on all VSIs.

Examples

# Clear packet statistics on all VSIs.

<Sysname> reset l2vpn statistics vsi

Related commands

statistics enable (VSI view)

rewrite inbound tag

Use rewrite inbound tag to configure the VLAN tag processing rule for incoming traffic.

Use undo rewrite inbound tag to restore the default.

Syntax

rewrite inbound tag { nest s-vid vlan-id [ c-vid vlan-id ] | remark { 1-to-1 s-vid vlan-id | 2-to-1 { c-vid vlan-id | s-vid vlan-id } | { 1-to-2 | 2-to-2 } s-vid vlan-id c-vid vlan-id } | strip s-vid [ c-vid ] } [ symmetric ]

undo rewrite inbound tag

Default

VLAN tags of incoming traffic are not processed.

Views

Ethernet service instance view

Predefined user roles

network-admin

Parameters

nest: Adds VLAN tags.

c-vid: Specifies an inner VLAN tag.

s-vid: Specifies an outer VLAN tag.

vlan-id: Specifies a VLAN ID in the range of 1 to 4094.

remark: Maps VLAN tags.

1-to-1: Performs one-to-one mapping to replace one VLAN tag of packets with the specified VLAN tag.

2-to-1: Performs two-to-one mapping to replace the outer and inner VLAN tags of double tagged packets with the specified VLAN tag.

1-to-2: Performs one-to-two mapping to replace the VLAN tag of single tagged packets with the specified outer and inner VLAN tags.

2-to-2: Performs two-to-two mapping to replace the outer and inner VLAN tags of double tagged packets with the specified outer and inner VLAN tags.

strip: Removes VLAN tags.

symmetric: Applies the reverse VLAN tag processing rule to outgoing traffic.

Usage guidelines

To modify the VLAN tag processing rule for incoming traffic, you must first delete the existing rule by using the undo rewrite inbound tag command.

After you execute this command, you must set the access mod to Ethernet when mapping Ethernet service instances to VSIs.

When you use this command, follow these restrictions:

· The rewrite inbound tag nest s-vid vlan-id c-vid vlan-id command does not take effect on tagged packets.

· The rewrite inbound tag nest s-vid vlan-id command does not take effect on double tagged packets.

· You cannot both specify the symmetric keyword in this command and configure the rewrite outbound tag command.

Examples

# Configure Ethernet service instance 1 on HundredGigE 1/0/1 to replace outer VLAN tag 10 with outer VLAN tag 100 for incoming traffic.

<Sysname> system-view

[Sysname] interface hundredgige 1/0/1

[Sysname-HundredGigE1/0/1] service-instance 1

[Sysname-HundredGigE1/0/1-srv1] encapsulation s-vid 10

[Sysname-HundredGigE1/0/1-srv1] rewrite inbound tag remark 1-to-1 s-vid 100

rewrite outbound tag

Use rewrite outbound tag to configure the VLAN tag processing rule for outgoing traffic.

Use undo rewrite outbound tag to restore the default.

Syntax

rewrite outbound tag { nest s-vid vlan-id [ c-vid vlan-id ] | remark { 1-to-1 s-vid vlan-id | 2-to-1 { c-vid vlan-id | s-vid vlan-id } | { 1-to-2 | 2-to-2 } s-vid vlan-id c-vid vlan-id } | strip s-vid [ c-vid ] }

undo rewrite outbound tag

Default

VLAN tags of outgoing traffic are not processed.

Views

Ethernet service instance view

Predefined user roles

network-admin

Parameters

nest: Adds VLAN tags.

c-vid: Specifies an inner VLAN tag.

s-vid: Specifies an outer VLAN tag.

vlan-id: Specifies a VLAN ID in the range of 1 to 4094.

remark: Maps VLAN tags.

1-to-1: Performs one-to-one mapping to replace one VLAN tag of packets with the specified VLAN tag.

2-to-1: Performs two-to-one mapping to replace the outer and inner VLAN tags of double tagged packets with the specified VLAN tag.

1-to-2: Performs one-to-two mapping to replace the VLAN tag of single tagged packets with the specified outer and inner VLAN tags.

2-to-2: Performs two-to-two mapping to replace the outer and inner VLAN tags of double tagged packets with the specified outer and inner VLAN tags.

strip: Removes VLAN tags.

Usage guidelines

To modify the VLAN tag processing rule for outgoing traffic, you must first delete the existing rule by using the undo rewrite outbound tag command.

After you execute this command, you must set the access mod to Ethernet when mapping Ethernet service instances to VSIs.

When you use this command, follow these restrictions:

· The rewrite outbound tag nest s-vid vlan-id c-vid vlan-id command does not take effect on tagged packets.

· The rewrite outbound tag nest s-vid vlan-id command does not take effect on double tagged packets.

· You cannot both configure this command and specify the symmetric keyword in the rewrite inbound tag command.

Examples

# Configure Ethernet service instance 1 on HundredGigE 1/0/1 to replace outer VLAN tag 10 with outer VLAN tag 100 for incoming traffic and to remove the outer VLAN tags for outgoing traffic.

<Sysname> system-view

[Sysname] interface hundredgige 1/0/1

[Sysname-HundredGigE1/0/1] service-instance 1

[Sysname-HundredGigE1/0/1-srv1] encapsulation s-vid 10

[Sysname-HundredGigE1/0/1-srv1] rewrite inbound tag remark 1-to-1 s-vid 100

[Sysname-HundredGigE1/0/1-srv1] rewrite outbound tag strip s-vid

selective-flooding mac-address

Use selective-flooding mac-address to enable selective flood for a MAC address.

Use undo selective-flooding mac-address to disable selective flood for a MAC address.

Syntax

selective-flooding mac-address mac-address

undo selective-flooding mac-address mac-address

Default

Selective flood is disabled for all MAC addresses.

Views

VSI view

Predefined user roles

network-admin

Parameters

mac-address: Specifies a MAC address. The MAC address cannot be all Fs.

Usage guidelines

This command excludes a remote unicast or multicast MAC address from the remote flood suppression done by using the flooding disable command. The VTEP will flood the frames destined for the specified MAC address to remote sites when floods are confined to the local site.

Examples

# Enable selective flood for 000f-e201-0101 on VSI vsi1.

<Sysname> system-view

[Sysname] vsi vsi1

[Sysname-vsi-vsi1] selective-flooding mac-address 000f-e201-0101

Related commands

flooding disable (VSI view)

service-instance

Use service-instance to create an Ethernet service instance and enter its view, or enter the view of an existing Ethernet service instance.

Use undo service-instance to delete an Ethernet service instance.

Syntax

service-instance instance-id

undo service-instance instance-id

Default

No Ethernet service instances exist.

Views

Layer 2 aggregate interface view

Layer 2 Ethernet interface view

Predefined user roles

network-admin

Parameters

instance-id: Specifies an Ethernet service instance ID in the range of 1 to 4096.

Examples

# On Layer 2 Ethernet interface HundredGigE 1/0/1, create Ethernet service instance 1 and enter Ethernet service instance view.

<Sysname> system-view

[Sysname] interface hundredgige 1/0/1

[Sysname-HundredGigE1/0/1] service-instance 1

[Sysname-HundredGigE1/0/1-srv1]

Related commands

display l2vpn service-instance

shutdown

Use shutdown to shut down a VSI.

Use undo shutdown to bring up a VSI.

Syntax

shutdown

undo shutdown

Default

VSIs are up.

Views

VSI view

Predefined user roles

network-admin

Usage guidelines

Use this command to temporarily disable a VSI to provide Layer 2 switching services. The shutdown action does not change settings on the VSI. You can continue to configure the VSI. After you bring up the VSI again, the VSI provides services based on the latest settings.

Examples

# Shut down VSI vpn1.

<Sysname> system-view

[Sysname] vsi vpn1

[Sysname-vsi-vpn1] shutdown

Related commands

display l2vpn vsi

statistic mode

Use statistic mode to set the packet statistic collection mode.

Use undo statistic mode to restore the default.

Syntax

statistic mode { ac | vsi }

undo statistic mode

Default

The default packet statistic collection mode is VSI.

Views

System view

Predefined user roles

network-admin

Parameters

ac: Specifies the AC mode.

vsi: Specifies the VSI mode.

Usage guidelines

To enable packet statistics for an Ethernet service instance, set the packet statistic collection mode to AC and execute the statistics enable command in Ethernet service instance view.

To enable packet statistics for a VSI and its associated VSI interface, set the packet statistic collection mode to VSI and execute the statistics enable command in VSI view.

If you execute this command multiple times, the most recent configuration takes effect.

Examples

# Set the packet statistic collection mode to VSI.

<Sysname> system-view

[Sysname] statistic mode vsi

Do you want to change the packet statistic mode? [Y/N]:y

Related commands

display statistic mode

statistics enable (Ethernet service instance view)

Use statistics enable to enable packet statistics for an Ethernet service instance.

Use undo statistics enable to disable packet statistics for an Ethernet service instance.

Syntax

statistics enable

undo statistics enable

Default

The packet statistics feature is disabled for an Ethernet service instance.

Views

Ethernet service instance view

Predefined user roles

network-admin

Usage guidelines

For this command to take effect, you must configure a frame match criterion for the Ethernet service instance and map it to a VSI. If you modify the frame match criterion or VSI mapping, packet statistics of the instance is cleared.

Examples

# Enable packet statistics for Ethernet service instance 200 on HundredGigE 1/0/1.

<Sysname> system-view

[Sysname] interface hundredgige 1/0/1

[Sysname-HundredGigE1/0/1] service-instance 200

[Sysname-HundredGigE1/0/1-srv200] statistics enable

Related command

display l2vpn service-instance verbose

reset l2vpn statistics ac

statistics enable (VSI view)

Use statistics enable to enable packet statistics for a VSI.

Use undo statistics enable to disable packet statistics for a VSI.

Syntax

statistics enable

undo statistics enable

Default

The packet statistics feature is disabled for a VSI.

Views

VSI view

Predefined user roles

network-admin

Examples

# Enable packet statistics for VSI vsi1.

<Sysname> system-view

[Sysname] vsi vsi1

[Sysname-vsi-vsi1] statistics enable

Related commands

display l2vpn vsi verbose

reset l2vpn statistics vsi

tracert vxlan

Use tracert vxlan to trace the path to a VXLAN tunnel destination.

Syntax

tracert vxlan [ -a inner-src-address | -h ttl-value | -r reply-mode | -t timeout ] * vxlan-id vxlan-id tunnel-source source-address tunnel-destination dest-address [ destination-udpport dest-port ] [ vxlan-source-address vxlan-source-address ] [ load-balance { vxlan-source-udpport vxlan-source-udpport | source-address lb-src-address destination-address lb-dest-address protocol { udp | lb-protocol-id } source-port lb-src-port destination-port lb-dest-port source-mac lb-source-mac destination-mac lb-destination-mac } ]

Views

Any view

Predefined user roles

network-admin

Parameters

-h ttl-value: Specifies the maximum TTL value in the outer IP header of VXLAN echo requests. The value range for the ttl-value argument is 1 to 255, and the default is 30.