track track-entry-number&<1-15>: Specifies a space-separated list of up to 15 track entry numbers in the range of 1 to 1024. The AC is up only if a minimum of one associated track entry is in positive state.

Usage guidelines

After you execute this command, packets received from the mapped Layer 3 interface or Ethernet service instance are forwarded to the PW or another AC bound to the cross-connect.

To configure this command for an Ethernet service instance, you must first use the encapsulation command to configure a frame match criterion for the Ethernet service instance.

The access mode determines how the PE treats the VLAN tag in Ethernet frames received from the AC. It also determines how the PE forwards Ethernet frames out of the AC.

· VLAN access mode—Ethernet frames received from the AC must carry a VLAN tag in the Ethernet header. The VLAN tag is called a P-tag, which is assigned by the service provider. Ethernet frames sent out of the AC must also carry the P-tag.

· Ethernet access mode—If Ethernet frames from the AC have a VLAN tag in the header, the VLAN tag is called a U-tag, and the PE ignores it. Ethernet frames sent out of the AC do not carry the P-tag.

Examples

# Map HundredGigE 1/0/1 to cross-connect aaa in cross-connect group vpna.

[Sysname] xconnect-group vpna

[Sysname-xcg-vpna] connection aaa

[Sysname-xcg-vpna-aaa] ac interface hundredgige 1/0/1

# Map Ethernet service instance 200 that matches traffic of VLAN 200 on HundredGigE 1/0/1 to cross-connect actopw in cross-connect group vpn1.

<Sysname> system-view

[Sysname] interface hundredgige 1/0/1

[Sysname-HundredGigE1/0/1] service-instance 200

[Sysname-HundredGigE1/0/1-srv200] encapsulation s-vid 200

[Sysname-HundredGigE1/0/1-srv200] quit

[Sysname-HundredGigE1/0/1] quit

[Sysname] xconnect-group vpn1

[Sysname-xcg-vpn1] connection actopw

[Sysname-xcg-vpn1-actopw] ac interface hundredgige 1/0/1 service-instance 200

Related commands

connection (MPLS Command Reference)

display l2vpn interface (MPLS Command Reference)

display l2vpn service-instance (MPLS Command Reference)

encapsulation (MPLS Command Reference)

pw-type (MPLS Command Reference)

address-family evpn (public instance view)

Use address-family evpn to enter public instance EVPN view.

Use undo address-family evpn to delete all settings in public instance EVPN view.

Syntax

address-family evpn

undo address-family evpn

Views

Public instance view

Predefined user roles

network-admin

Usage guidelines

You can configure EVPN settings such as route targets in public instance EVPN view.

Examples

# Enter public instance EVPN view.

<Sysname> system-view

[Sysname] ip public-instance

[Sysname-public-instance] address-family evpn

[Sysname-public-instance-evpn]

address-family evpn (VPN instance view)

Use address-family evpn to enter VPN instance EVPN view.

Use undo address-family evpn to delete all settings in VPN instance EVPN view.

Syntax

address-family evpn

undo address-family evpn

Views

VPN instance view

Predefined user roles

network-admin

Usage guidelines

You can configure EVPN settings such as route targets and routing policies in VPN instance EVPN view.

Examples

# Enter EVPN view of VPN instance tenant.

<Sysname> system-view

[Sysname] ip vpn-instance tenant

[Sysname-vpn-instance-tenant] address-family evpn

[Sysname-vpn-evpn-tenant]

address-family ipv4 (public instance view)

Use address-family ipv4 to enter public instance IPv4 address family view.

Use undo address-family ipv4 to delete all settings in public instance IPv4 address family view.

Syntax

address-family ipv4

undo address-family ipv4

Views

Public instance view

Predefined user roles

network-admin

Examples

# Enter public instance IPv4 address family view.

<Sysname> system-view

[Sysname] ip public-instance

[Sysname-public-instance] address-family ipv4

[Sysname-public-instance-ipv4]

address-family l2vpn evpn

Use address-family l2vpn evpn to create the BGP EVPN address family and enter its view, or enter the view of the existing BGP EVPN address family.

Use undo address-family l2vpn evpn to delete the BGP EVPN address family and all settings in BGP EVPN address family view.

Syntax

address-family l2vpn evpn

undo address-family l2vpn evpn

Default

The BGP EVPN address family does not exist.

Views

BGP instance view

Predefined user roles

network-admin

Usage guidelines

Configuration made in BGP EVPN address family view takes effect only on routes and peers of the BGP EVPN address family that are on the public network.

Examples

# Create the BGP EVPN address family and enter its view.

<Sysname> system-view

[Sysname] bgp 100

[Sysname-bgp-default] address-family l2vpn evpn

[Sysname-bgp-default-evpn]

advertise l2vpn evpn

Use advertise l2vpn evpn to enable BGP EVPN route advertisement to the local site.

Use undo advertise l2vpn evpn to disable BGP EVPN route advertisement to the local site.

Syntax

advertise l2vpn evpn

undo advertise l2vpn evpn

Default

BGP EVPN route advertisement to the local site is enabled.

Views

BGP-VPN IPv4 unicast address family view

Predefined user roles

network-admin

Usage guidelines

This command enables the device to advertise private BGP EVPN routes to the local site after the device adds the routes to the routing table of a VPN instance.

Examples

# Enable BGP EVPN route advertisement to the local site for VPN instance vpn1.

<Sysname> system-view

[Sysname] bgp 100

[Sysname-bgp-default] ip vpn-instance vpn1

[Sysname-bgp-default-vpn1] address-family ipv4

[Sysname-bgp-default-ipv4-vpn1] advertise l2vpn evpn

arp mac-learning disable

Use arp mac-learning disable to disable an EVPN instance from learning MAC addresses from ARP information.

Use undo arp mac-learning disable to restore the default.

Syntax

arp mac-learning disable

undo arp mac-learning disable

Default

An EVPN instance learns MAC addresses from ARP information.

Views

EVPN instance view

VSI EVPN instance view

Predefined user roles

network-admin

Usage guidelines

The MAC information and ARP information advertised by a remote VTEP or PE overlap. To avoid duplication, use this command to disable the learning of MAC addresses from ARP information. EVPN will learn remote MAC addresses only from the MAC information advertised from remote sites.

Examples

# Disable an EVPN instance from learning MAC addresses from ARP information.

<Sysname> system-view

[Sysname] vsi aaa

[Sysname-vsi-aaa] evpn encapsulation vxlan

[Sysname-vsi-aaa-evpn-vxlan] arp mac-learning disable

arp proxy-send enable

Use arp proxy-send enable to enable ARP request proxy.

Use undo arp proxy-send enable to disable ARP request proxy.

Syntax

arp proxy-send enable

undo arp proxy-send enable

Default

ARP request proxy is disabled on VSI interfaces.

Views

VSI interface view

Predefined user roles

network-admin

Usage guidelines

ARP request proxy allows a VSI interface to send an ARP request sourced from itself when the VTEP forwards an ARP request. This feature helps resolve certain communication issues.

In an EVPN VXLAN network, VM 1 and VM 2 are attached to VTEP 1 and VTEP 2, respectively, and the VMs are in the same subnet. The gateway interfaces of VM 1 and VM 2 are VSI-interface 1 on VTEP 1 and VSI-interface 2 on VTEP 2, respectively. The following conditions exist on the VTEPs:

· The VTEPs have established BGP EVPN neighbor relationships.

· EVPN is disabled from learning MAC addresses from ARP information.

· MAC address advertisement is disabled, and advertised MAC addresses are withdrawn.

· Remote-MAC address learning is disabled.

· Local proxy ARP is enabled on the VSI interfaces.

· The VSI interfaces use different IP addresses and MAC addresses.

In this network, when VM 1 attempts to communicate with VM 2, the following procedure occurs:

1. VM 1 sends an ARP request.

2. VTEP 1 learns the MAC address of VM 1 from the ARP request, replies to VM 1 on behalf of VM 2, and sends an ARP request to obtain the MAC address of VM 2.

3. VTEP 2 forwards the ARP request, and VM 2 replies to VTEP 1.

4. VTEP 2 forwards the ARP reply sent by VM 2 without learning the MAC address of VM 2 because EVPN is disabled from learning MAC addresses from ARP information.

5. VTEP 1 does not learn the MAC address of VM 2 because remote-MAC address learning is disabled.

As a result, VM 1 fails to communicate with VM 2.

For VM 1 to communicate with VM 2, enable ARP request proxy on VSI-interface 2 of VTEP 2. When receiving the ARP request sent by VTEP 1, VTEP 2 forwards it and sends an ARP request sourced from VSI-interface 2 simultaneously, and VM 2 replies to both ARP requests. Then, VTEP 2 learns the MAC address of VM 2 from the ARP reply destined from VSI-interface 2 and advertises the MAC address to VTEP 1 through BGP EVPN routes. In this way, VTEP 1 obtains the MAC address of VM 2, and VM 1 and VM 2 can communicate.

Examples

# Enable ARP request proxy on VSI-interface 100.

<Sysname> system-view

[Sysname] interface vsi-interface 100

[Sysname-vsi-interface100] arp proxy-send enable

Related commands

local-proxy-arp enable (Layer 3—IP Services Command Reference)

arp-advertising disable

Use arp-advertising disable to disable ARP information advertisement for an EVPN instance.

Use undo arp-advertising disable to restore the default.

Syntax

arp-advertising disable

undo arp-advertising disable

Default

ARP information advertisement is enabled for an EVPN instance.

Views

EVPN instance view

VSI EVPN instance view

Predefined user roles

network-admin

Usage guidelines

In an EVPN VXLAN or EVPN VPLS network with distributed gateways, you can disable ARP information advertisement for a VXLAN or VPLS network to save resources if all its user terminals use the same EVPN gateway device. The EVPN instance of the VXLAN or VPLS network will stop advertising ARP information through MAC/IP advertisement routes and withdraw advertised ARP information. When ARP information advertisement is disabled, user terminals in other VXLANs or VPLS networks still can communicate with that VXLAN through IP prefix advertisement routes.

Examples

# Disable ARP information advertisement for an EVPN instance of EVPN VXLAN.

<Sysname> system-view

[Sysname] vsi aaa

[Sysname-vsi-aaa] evpn encapsulation vxlan

[Sysname-vsi-aaa-evpn-vxlan] arp-advertising disable

# Disable ARP information advertisement for an EVPN instance of EVPN VPLS.

<Sysname> system-view

[Sysname] vsi aaa

[Sysname-vsi-aaa] evpn encapsulation mpls

[Sysname-vsi-aaa-evpn-mpls] arp-advertising disable

bestroute ipv6-nexthop

Use bestroute ipv6-nexthop to enable BGP to prefer routes with an IPv6 next hop during optimal route selection.

Use undo bestroute ipv6-nexthop to restore the default.

Syntax

bestroute ipv6-nexthop

undo bestroute ipv6-nexthop

Default

BGP prefers routes with an IPv4 next hop during optimal route selection.

Views

BGP EVPN address family view

Predefined user roles

network-admin

Usage guidelines

Execute this command for the VXLAN packets in an EVPN network to be forwarded through IPv6 routes when both IPv4 and IPv6 routes exist.

Examples

# In BGP EVPN address family view, enable BGP to prefer routes with an IPv6 next hop during optimal route selection.

<Sysname> system-view

[Sysname] bgp 100

[Sysname-bgp-default] address-family l2vpn evpn

[Sysname-bgp-default-evpn] bestroute ipv6-nexthop

display bgp l2vpn evpn

Use display bgp l2vpn evpn to display BGP EVPN routes.

Syntax

display bgp [ instance instance-name ] l2vpn evpn [ peer { ipv4-address | ipv6-address } { advertised-routes | received-routes } [ statistics ] | [ route-distinguisher route-distinguisher | route-type { auto-discovery | es | igmp-js | igmp-ls | imet | ip-prefix | mac-ip | smet } ] * [ { evpn-route route-length | evpn-prefix } [ advertise-info | as-path | cluster-list | community | ext-community ] | ipv4-address | ipv6-address | mac-address ] | statistics ]

display bgp [ instance instance-name ] l2vpn evpn [ route-distinguisher route-distinguisher ] [ statistics ] community [ community-number&<1-32> | aa:nn&<1-32> ] [ internet | no-advertise | no-export | no-export-subconfed ] [ whole-match ]

display bgp [ instance instance-name ] l2vpn evpn [ route-distinguisher route-distinguisher ] [ statistics ] community-list { basic-community-list-number | comm-list-name | adv-community-list-number } [ whole-match ]

display bgp [ instance instance-name ] l2vpn evpn [ route-distinguisher route-distinguisher ] [ statistics ] ext-community [ bandwidth link-bandwidth-value | rt route-target | soo site-of-origin | color color ]&<1-32> [ whole-match ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

instance instance-name: Specifies a BGP instance by its name, a case-sensitive string of 1 to 31 characters. If you do not specify this option, the command displays BGP EVPN routes for the default BGP instance.

peer { ipv4-address | ipv6-address }: Specifies a peer by its IPv4 address or IPv6 address.

advertised-routes: Specifies the routes advertised to the specified peer.

received-routes: Specifies the routes received from the specified peer.

statistics: Displays BGP EVPN route statistics.

route-distinguisher route-distinguisher: Specifies a route distinguisher (RD), a string of 3 to 21 characters. The RD can use one of the following formats:

· 16-bit AS number:32-bit user-defined number. For example, 101:3.

· 32-bit IP address:16-bit user-defined number. For example, 192.168.122.15:1.

· 32-bit AS number:16-bit user-defined number. For example, 65536:1. The AS number must be equal to or greater than 65536.

route-type: Specifies a route type.

auto-discovery: Specifies Ethernet auto-discovery routes.

es: Specifies Ethernet segment (ES) routes.

igmp-ls: Specifies IGMP leave synch routes.

igmp-js: Specifies IGMP join synch routes.

imet: Specifies inclusive multicast Ethernet tag (IMET) routes.

ip-prefix: Specifies IP prefix advertisement routes.

mac-ip: Specifies MAC/IP advertisement routes.

smet: Specifies selective multicast Ethernet tag (SMET) routes.

evpn-route: Specifies a BGP EVPN route, a case-insensitive string of 1 to 512 characters.

route-length: Specifies the route length in bits, in the range of 0 to 65535.

evpn-prefix: Specifies a BGP EVPN route in the format of evpn-route/route-length, a case-insensitive string of 1 to 512 characters.

advertise-info: Displays advertisement information for BGP EVPN routes.

as-path: Specifies the AS path attribute.

cluster-list: Specifies the cluster list attribute.

community: Specifies the community attribute.

ext-community: Specifies the extended community attribute.

ipv4-address: Specifies an IPv4 address.

ipv6-address: Specifies an IPv6 address.

mac-address: Specifies a MAC address in MAC/IP advertisement routes. If you specify the route-type keyword, to use this argument, you must also specify the mac-ip keyword.

community-number&<1-32>: Specifies a community sequence number. The value range for the community-number argument is 1 to 4294967295. &<1-32> indicates that a maximum of 32 numbers can be specified.

aa:nn&<1-32>: Specifies a community number. Both aa and nn are in the range of 0 to 65535. &<1-32> indicates that a maximum of 32 numbers can be specified.

internet: Specifies the INTERNET community attribute. Routes with this attribute can be advertised to all BGP peers. By default, all routes have this attribute.

no-advertise: Specifies the NO_ADVERTISE community attribute. Routes with this attribute cannot be advertised to any BGP peers.

no-export: Specifies the NO_EXPORT community attribute. Routes with this attribute cannot be advertised outside the local AS or confederation, but can be advertised to other sub-ASs in the confederation.

no-export-subconfed: Specifies the NO_EXPORT_SUBCONFED community attribute. Routes with this attribute cannot be advertised outside the local AS or to other sub-ASs in the confederation.

whole-match: Displays BGP EVPN routes that exactly match the specified community list, community numbers, or extended community attribute. If you do not specify this keyword, the command displays BGP EVPN routes that include the specified community list, community numbers, or extended community attribute.

community-list: Specifies a community list to match BGP EVPN unicast routes.

basic-community-list-number: Specifies a basic community list by its number in the range of 1 to 99.

comm-list-name: Specifies a community list by its name, a case-sensitive string of 1 to 63 characters.

adv-community-list-number: Specifies an advanced community list by its number in the range of 100 to 199.

bandwidth link-bandwidth-value: Specifies the link bandwidth extended community attribute, a string of 3 to 16 characters. This attribute is in the format of 16-bit AS number:32-bit self-defined number, 100:3 for example. The value range is 0 to 65535 for an AS number and 0 to 4294967295 for a self-defined number.

color color: Specifies the color extended community attribute, a string of 4 to 13 characters. This attribute is in the format of binary Color-Only flag:decimal color value, 10:3 for example. The value range is 00 to 11 for the Color-Only flag and 0 to 4294967295 for the color value.

rt route-target: Specifies a route target, a string of 3 to 24 characters.

soo site-of-origin: Specifies the Site of Origin (SoO) extended community attribute, a string of 3 to 24 characters.

A route target or SoO attribute has the following forms:

· 16-bit AS number:32-bit self-defined number. For example, 101:3. The value range is 0 to 65535 for an AS number and 0 to 4294967295 for a self-defined number.

· 32-bit IP address:16-bit self-defined number. For example, 192.168.122.15:1. The value range is 0 to 65535 for a self-defined number.

· 32-bit AS number:16-bit self-defined number. For example, 70000:3. The value range is 65536 to 4294967295 for an AS number and 0 to 65535 for a self-defined number.

· 32-bit IP address/IPv4 address mask length:16-bit user-defined number. For example, 192.168.122.15/24:1.

· 32-bit AS number in dotted format:16-bit user-defined number. For example, 65535.65535:1.

&<1-32>: Specifies a maximum of 32 items.

Usage guidelines

If you do not specify any parameter, this command displays brief information about all BGP EVPN routes.

This command displays BGP EVPN routes that carry any community attribute and the whole-match keyword does not take effect if you do not specify the following parameters:

· community-number

· aa:nn

· internet

· no-advertise

· no-export

· no-export-subconfed

This command displays BGP EVPN routes that carry any extended community attribute and the whole-match keyword does not take effect if you do not specify the following parameters:

· bandwidth

· color

· rt

· soo

Examples

# Display brief information about all BGP EVPN routes.

<Sysname> display bgp l2vpn evpn

BGP local router ID is 1.1.1.9

Status codes: * - valid, > - best, d - dampened, h - history,

s - suppressed, S - stale, i - internal, e - external

a – additional-path

Origin: i - IGP, e - EGP, ? - incomplete

Total number of routes from all PEs: 6

Route distinguisher: 100:1

Total number of routes: 3

Network NextHop MED LocPrf PrefVal Path/Ogn

* > [2][0][48][00aa.00bb.00cc][4][0.0.0.0]/136

10.1.1.2 0 32768 ?

* e 10.1.1.1 0 0 65410?

* > [3][300][16][::ffff:1.1.1.1]/176

127.0.0.1 0 32768 ?

Route distinguisher: 200:1

Total number of routes: 2

Network NextHop MED LocPrf PrefVal Path/Ogn

* >i [2][0][48][00aa.00cc.00dd][4][1.1.1.1]/136

3.3.3.9 0 100 0 ?

* >i [3][300][16][::ffff:2.2.2.2]/176

3.3.3.9 0 100 0 65420?

Route distinguisher of public instance: 1:15

Total number of routes: 1

Network NextHop MED LocPrf PrefVal Path/Ogn

* >e [2][0][48][0011.0022.0033][32][11.22.33.55]/136

30.30.1.2 0 0 100i

# Display all BGP EVPN routes that carry community attributes.

<Sysname> display bgp l2vpn evpn community

BGP local router ID is 1.1.1.9

Status codes: * - valid, > - best, d - dampened, h - history,

s - suppressed, S - stale, i - internal, e - external

a – additional-path

Origin: i - IGP, e - EGP, ? - incomplete

Total number of routes from all PEs: 6

Route distinguisher: 100:1

Total number of routes: 3

Network NextHop MED LocPrf PrefVal Path/Ogn Community

* > [2][0][48][00aa.00bb.00cc][4][0.0.0.0]/136

10.1.1.2 0 32768 ? <1:2>

* e 10.1.1.1 0 0 65410? <2:3>

* > [3][300][16][::ffff:1.1.1.1]/176

127.0.0.1 0 32768 ? <3:4>

# Display all BGP EVPN routes that carry extended community attributes.

<Sysname> display bgp l2vpn evpn ext-community

BGP local router ID is 1.1.1.9

Status codes: * - valid, > - best, d - dampened, h - history,

s - suppressed, S - stale, i - internal, e - external

a – additional-path

Origin: i - IGP, e - EGP, ? - incomplete

Total number of routes from all PEs: 6

Route distinguisher: 100:1

Total number of routes: 3

Network NextHop MED LocPrf PrefVal Path/Ogn Ext-Community

* > [2][0][48][00aa.00bb.00cc][4][0.0.0.0]/136

10.1.1.2 0 32768 ? <RT 1:2>

* e 10.1.1.1 0 0 65410? <RT 2:3>

* > [3][300][16][::ffff:1.1.1.1]/176

127.0.0.1 0 32768 ? <RT 3:4>

Table 1 Command output

Field	Description
Status codes	Route status codes: · * - valid—Valid route. · > - best—Optimal route. · d - dampened—Dampened route. · h - history—History route. · i - internal—Internal route. · e - external—External route. · s - suppressed—Suppressed route. · S - stale—Stale route. · a - additional-path—Add-Path optimal route.
Origin	Origin of the route: · i – IGP—Originated in the AS. The origin of routes advertised by using the network command is IGP. · e – EGP—Learned through EGP. · ? – incomplete—Unknown origin. The origin of routes redistributed from IGP protocols is incomplete.
Network	BGP EVPN route/route length. For example, in the entry [2][0][48][1485-247c-0506][32][10.1.2.20]/136, [2][0][48][1485-247c-0506][32][10.1.2.20] is the route, and 136 is the route length in bytes. BGP EVPN routes are as follows: · [1][ESI][EthernetTagID] ¡ 1—Ethernet auto-discovery route. ¡ ESI—Ethernet segment identifier (ESI). ¡ EthernetTagID—Ethernet tag ID. · [2][EthernetTagID][MACLength][MAC][IPAddressLength][IPAddress] ¡ 2—MAC/IP advertisement route. ¡ EthernetTagID—Ethernet tag ID. ¡ MACLength—MAC address length. ¡ MAC—MAC address. ¡ IPAddressLength—IP address length. ¡ IPAddress—IP address. · [3][EthernetTagID][IPAddressLength][IPAddress] ¡ 3—IMET route. ¡ IPAddressLength—IP address length. ¡ IPAddress—IP address of the originating router. · [4][ESI][IPAddressLength][IPAddress] ¡ 4—ES route. ¡ ESI—ESI. ¡ IPAddressLength—IP address length. ¡ IPAddress—IP address of the originating router. · [5][EthernetTagID][IPAddressLength][IPAddress] ¡ 5—IP prefix advertisement route. ¡ EthernetTagID—Ethernet tag ID. ¡ IPAddressLength—IP address length. ¡ IPAddress—IP address of the originating router. · [6][EthernetTagID][Source Len][Source IP][Group Len][Group IP][Originator Len][Originator IP] ¡ 6—Selective multicast Ethernet tag route. ¡ EthernetTagID—Ethernet tag ID. ¡ Source Len—Length of the multicast source address. This field displays 0 if the multicast source is any (, G). ¡ Source IP—Source IP address of IGMP membership reports. This field is not displayed if the multicast source is any (, G). ¡ Group Len—Length of the multicast group address. ¡ Group IP—Multicast group address of IGMP membership reports. ¡ Originator Len—Length of the originating router's IP address. ¡ Originator IP—IP address of the originating router. · [7][ESI][EthernetTagID][Source Len][Source IP][Group Len][Group IP][Originator Len][Originator IP] ¡ 7—IGMP join synch route. ¡ ESI—ESI. ¡ EthernetTagID—Ethernet tag ID. ¡ Source Len—Length of the multicast source address. This field displays 0 if the multicast source is any (, G). ¡ Source IP—Source IP address of IGMP membership reports. This field is not displayed if the multicast source is any (, G). ¡ Group Len—Length of the multicast group address. ¡ Group IP—Multicast group address of IGMP membership reports. ¡ Originator Len—Length of the originating router's IP address. ¡ Originator IP—IP address of the originating router. · [8][ESI][EthernetTagID] [Source Len][Source IP][Group Len][Group IP][Originator Len][Originator IP][ [LeaveGroup Synchronization] ¡ 8—IGMP leave synch route. ¡ ESI—ESI. ¡ EthernetTagID—Ethernet tag ID. ¡ Source Len—Length of the multicast source address. This field displays 0 if the multicast source is any (, G). ¡ Source IP—Source IP address of IGMP membership reports. This field is not displayed if the multicast source is any (, G). ¡ Group Len—Length of the multicast group address. ¡ Group IP—Multicast group address of IGMP membership reports. ¡ Originator Len—Length of the originating router's IP address. ¡ Originator IP—IP address of the originating router. ¡ LeaveGroup Synchronization—Leave group synchronization sequence number.
NextHop	Next hop IP address.
MED	Multi-Exit Discriminator (MED) attribute.
LocPrf	Local precedence.
PrefVal	Preferred value.
Path/Ogn	AS_PATH and ORIGIN attributes of the route.
Community	Community attribute.
Ext-Community	Extended community attribute.

# Display detailed information about BGP EVPN route [1][00:01:02:03:04:05:06:07:08:09][5]/120 with RD 1.1.1.1:100.

<Sysname> display bgp l2vpn evpn route-distinguisher 1.1.1.1:100 [1][00:01:02:03:04:05:06:07:08:09][5] 120

BGP local router ID: 172.16.250.133

Local AS number: 100

Route distinguisher: 1.1.1.1:100

Total number of routes: 1

Paths: 1 available, 1 best

BGP routing table information of [1][00:01:02:03:04:05:06:07:08:09][5]/120:

From : 10.1.1.2 (192.168.56.17)

Rely nexthop : 10.1.1.2

Original nexthop: 10.1.1.2

OutLabel : 0

Ext-Community : <RT: 1:2>, <Encapsulation Type: VXLAN >, <ESI Label: Flag 0,

Label 1>

RxPathID : 0x0

TxPathID : 0x0

AS-path : 200

Origin : igp

Attribute value : MED 0, pref-val 0

State : valid, external, best

IP precedence : N/A

QoS local ID : N/A

Traffic index : N/A

EVPN route type : Ethernet auto-discovery route

ESI : 00:01:02:03:04:05:06:07:08:09

Ethernet tag ID : 5

MPLS label : 10

Table 2 Command output

Field	Description
Paths	Number of routes: · available—Number of valid routes. · best—Number of optimal routes.
From	IP address of the BGP peer that advertised the route.
Rely nexthop	Next hop after route recursion. If no next hop is found, this field displays not resolved.
Original nexthop	Original next hop of the route. If the route was obtained from a BGP update message, the original next hop is the next hop IP address in the message.
OutLabel	Outgoing label of the route.
Ext-Community	Extended community attributes: · RT. · Encapsulation Type. · ESI Label.
RxPathID	Add-Path ID value of the received route. This field is not supported by the BGP EVPN address family.
TxPathID	Add-Path ID value of the sent route. This field is not supported by the BGP EVPN address family.
AS-path	AS_PATH attribute of the route. This attribute records the ASs the route has passed and avoids routing loops.
Origin	Origin of the route: · igp—Originated in the AS. The origin of routes advertised by using the network command is IGP. · egp—Learned through EGP. · incomplete—Unknown origin. The origin of routes redistributed from IGP protocols is incomplete.
Attribute value	Attributes of the route: · MED—MED value for the destination network. · localpref—Local preference value. · pref-val—Preferred value. · pre—Route preference value.
State	Current state of the route: · valid. · internal. · external. · local. · synchronize. · best. · localredist—EVPN route redistributed from a local VPN instance or the public instance. · reoriginated.
IP precedence	IP precedence in the range of 0 to 7. N/A indicates that the IP precedence is invalid.
QoS local ID	QoS local ID in the range of 1 to 4095. N/A indicates that the QoS local ID is invalid.
Traffic index	Traffic index in the range of 1 to 64. N/A indicates that the traffic index is invalid.
MPLS label	MPLS label. The current software version does not support this field.

# Display detailed information about BGP EVPN route [2][5][48][0001-0203-0405][32][4.5.5.5]/136 with RD 1.1.1.1:100.

<Sysname> display bgp l2vpn evpn route-distinguisher 1.1.1.1:100 [2][5][48][0001-0203-0405][32][5.5.5.5] 136

BGP local router ID: 172.16.250.133

Local AS number: 100

Route distinguisher: 1.1.1.1:100

Total number of routes: 1

Paths: 1 available, 1 best

BGP routing table information of [2][5][48][0001-0203-0405][32][5.5.5.5]/136:

From : 10.1.1.2 (192.168.56.17)

Rely nexthop : 10.1.1.2

Original nexthop: 10.1.1.2

OutLabel : 0

Ext-Community : <RT: 1:2>, <RT: 1:3>, <RT: 1:4>, <RT: 1:5>, <RT: 1:6>, <RT: 1:7

>, <Encapsulation Type: VXLAN>, <Router's Mac: 0006-0708-0910

>, <MAC Mobility: Flag 0, SeqNum 2>, <Default GateWay>

RxPathID : 0x0

TxPathID : 0x0

AS-path : 200

Origin : igp

Attribute value : MED 0, pref-val 0

State : valid, external, best

IP precedence : N/A

QoS local ID : N/A

Traffic index : N/A

EVPN route type : MAC/IP advertisement route

ESI : 00:01:02:03:04:05:06:07:08:09

Ethernet tag ID : 5

MAC address : 0001-0203-0405

IP address : 5.5.5.5/32

MPLS label1 : 10

MPLS label2 : 0

Re-origination : Enable

Route distinguisher: 2.2.2.2:100

Total number of routes: 1

Paths: 1 available, 1 best

BGP routing table information of [2][5][48][0001-0203-0405][32][5.5.5.5]/136:

From : 10.1.1.2 (192.168.56.17)

Rely nexthop : 10.1.1.2

Original nexthop: 10.1.1.2

OutLabel : 0

Ext-Community : <RT: 1:2>, <RT: 1:3>, <RT: 1:4>, <RT: 1:5>, <RT: 1:6>, <RT: 1:7

>, <Encapsulation Type: VXLAN>, <Router's Mac: 0006-0708-0910

>, <MAC Mobility: Flag 0, SeqNum 2>, <Default GateWay>

RxPathID : 0x0

TxPathID : 0x0

AS-path : 200

Origin : igp

Attribute value : MED 0, pref-val 0

State : valid, external, best, reoriginated, remoteredist

IP precedence : N/A

QoS local ID : N/A

Traffic index : N/A

EVPN route type : MAC/IP advertisement route

ESI : 0001.0203.0405.0607.0809

Ethernet tag ID : 5

MAC address : 0001-0203-0405

IP address : 5.5.5.5/32

MPLS label1 : 200

MPLS label2 : 300

Table 3 Command output

Field	Description
Ext-Community	Extended community attributes: · RT. · Encapsulation Type. · Router's Mac. · MAC Mobility—MAC mobility. ¡ Flag—Indicates whether the MAC address can move. A value of 1 indicates that the MAC address cannot move, and a value of 0 indicates that the MAC address can move. ¡ SeqNum—Identifies the most recent move of the MAC address. · Default GateWay—Route for the default gateway.
State	Current state of the route: · valid. · internal. · external. · local. · synchronize. · best. · reoriginated. · remoteredist—MAC/IP advertisement route generated based on a remote route.
MPLS label1	VXLAN ID used for Layer 2 forwarding.
MPLS label2	L3 VXLAN ID used for Layer 3 forwarding.
Re-origination	State of route reorigination: · Enable. · Disable.

# Display detailed information about BGP EVPN route [3][0][32][5.5.5.5]/80 with RD 1.1.1.1:100.

<Sysname> display bgp l2vpn evpn route-distinguisher 1.1.1.1:100 [3][0][32][4.5.5.5] 80

BGP local router ID: 172.16.250.133

Local AS number: 100

Route distinguisher: 1.1.1.1:100

Total number of routes: 1

Paths: 1 available, 1 best

BGP routing table information of [3][0][32][4.5.5.5]/80:

From : 10.1.1.2 (192.168.56.17)

Rely nexthop : 10.1.1.2

Original nexthop: 10.1.1.2

OutLabel : 0

Ext-Community : <RT: 1:2>, <Encapsulation Type: VXLAN>

RxPathID : 0x0

TxPathID : 0x0

AS-path : 200

Origin : igp

Attribute value : MED 0,pref-val 0

State : valid, external, best

IP precedence : N/A

QoS local ID : N/A

Traffic index : N/A

EVPN route type : Inclusive multicast Ethernet tag route

Ethernet tag ID : 0

Origin address : 5.5.5.5/32

Table 4 Command output

Field	Description
Ext-Community	Extended community attributes: · RT. · Encapsulation Type.
Origin address	IP address of the originating router.

Field

Description

Ext-Community

Extended community attributes:

· RT.

· Encapsulation Type.

Origin address

IP address of the originating router.

# Display detailed information about BGP EVPN route [4][00:00:00:00:00:00:00:00:00:0a][32][4.5.5.5]/128 with RD 1.1.1.1:100.

<Sysname> display bgp l2vpn evpn route-distinguisher 1.1.1.1:100 [4][00:00:00:00:00:00:00:00:00:0a][32][4.5.5.5] 128

BGP local router ID: 172.16.250.133

Local AS number: 100

Route distinguisher: 1.1.1.1:100

Total number of routes: 1

Paths: 1 available, 1 best

BGP routing table information of [4][00:00:00:00:00:00:00:00:00:0a][32] [4.5.5

.5]/128:

From : 10.1.1.2 (192.168.56.17)

Rely nexthop : 10.1.1.2

Original nexthop: 10.1.1.2

OutLabel : 0

Ext-Community : <RT: 1:2>, <Encapsulation Type: VXLAN>, <ES-Import RT: 1:1>

RxPathID : 0x0

TxPathID : 0x0

AS-path : 200

Origin : igp

Attribute value : MED 0,pref-val 0

State : valid, external, best

IP precedence : N/A

QoS local ID : N/A

Traffic index : N/A

EVPN route type : Ethernet segment route

ESI : 00:00:00:00:00:00:00:00:00:0a

Origin address : 4.5.5.5/32

Table 5 Command output

Field	Description
Ext-Community	Extended community attributes: · RT. · Encapsulation Type. · ES-Import RT.
Origin address	IP address of the originating router.

Field

Description

Ext-Community

Extended community attributes:

· RT.

· Encapsulation Type.

· ES-Import RT.

Origin address

IP address of the originating router.

# Display detailed information about BGP EVPN route [5][10][32][4.5.5.5]/80 with RD 1.1.1.1:100.

<Sysname> display bgp l2vpn evpn route-distinguisher 1.1.1.1:100 [5][10][32][4.5.5.5] 80

BGP local router ID: 172.16.250.133

Local AS number: 100

Route distinguisher: 1.1.1.1:100

Total number of routes: 1

Paths: 1 available, 1 best

BGP routing table information of [5][10][32][4.5.5.5]/80:

From : 10.1.1.2 (192.168.56.17)

Rely nexthop : 10.1.1.2

Original nexthop: 10.1.1.2

OutLabel : 0

Ext-Community : <RT: 1:2>, <Encapsulation Type: VXLAN>, <Router's Mac:

0006-0708-0910>, <Priority-Color: (1:10:10)>

RxPathID : 0x0

TxPathID : 0x0

AS-path : 200

Origin : igp

Attribute value : MED 0,pref-val 0

State : valid, external, best

IP precedence : N/A

QoS local ID : N/A

Traffic index : N/A

EVPN route type : IP prefix advertisement route

ESI : 00:00:00:00:00:00:00:00:00:0a

Ethernet tag ID : 10

IP address : 4.5.5.5/32

Gateway address : 0.0.0.0

MPLS Label : 1

Table 6 Command output

Field	Description
Ext-Community	Extended community attributes: · RT. · Encapsulation Type. · Router's Mac. · Priority-Color.
IP address	IP address and prefix length.
MPLS Label	L3 VXLAN ID used for Layer 3 forwarding.

# Display detailed information about BGP EVPN route [6][0][32][10.1.1.1][32][224.224.224.224][32][192.168.3.1]/160 with RD 1.1.1.1:100.

<Sysname> display bgp l2vpn evpn route-distinguisher 1.1.1.1:100 [6][0][32][10.1.1.1][32][224.224.224.224][32][192.168.3.1] 160

BGP local router ID: 172.16.250.133

Local AS number: 100

Route distinguisher: 1.1.1.1:100

Total number of routes: 1

Paths: 1 available, 1 best

BGP routing table information of [6][0][32][10.1.1.1][32][224.224.224.224][32][192.168.3.1]/160:

From : 10.1.1.2

Rely nexthop : 10.1.1.2

Original nexthop: 10.1.1.2

OutLabel : NULL

Ext-Community : <RT: 1:2>, <Encapsulation Type: VXLAN>,

RxPathID : 0x0

TxPathID : 0x0

AS-path : 200

Origin : igp

Attribute value : MED 0,pref-val 0

State : valid, external, best

IP precedence : N/A

QoS local ID : N/A

Traffic index : N/A

EVPN route type : Selective multicast Ethernet tag route

Ethernet tag ID : 0

Source length : 32

Source address : 10.1.1.1

Group length : 32

Group address : 224.224.224.224

Origin address : 192.168.3.1

IGMP flags : v3, include

Table 7 Command output

Field	Description
Ext-Community	Extended community attributes: · RT. · Encapsulation Type.
Source length	Length of the multicast source address.
Source address	Multicast source address.
Group length	Length of the multicast group address.
Group address	Multicast group address.
Origin address	IP address of the originating router.

# Display detailed information about BGP EVPN route [7][00:00:00:00:00:00:00:00:00][0][32][10.1.1.1][32][224.224.224.224][32][192.168.3.1]/240 with RD 1.1.1.1:100.

<Sysname> display bgp l2vpn evpn route-distinguisher 1.1.1.1:100 [7][0000.0000.0000.0000.0000][0][32][10.1.1.1][16][224.224.224.224][32][192.168.3.1] 240

BGP local router ID: 172.16.250.133

Local AS number: 100

Route distinguisher: 1.1.1.1:100

Total number of routes: 1

Paths: 1 available, 1 best

BGP routing table information of [7][0000.0000.0000.0000.0000][0][32][10.1.1.1][32][224.224.224.224][32][192.168.3.1]/240:

From : 10.1.1.2

Rely nexthop : 10.1.1.2

Original nexthop: 10.1.1.2

OutLabel : NULL

Ext-Community : <RT: 1:2>, <Encapsulation Type: VXLAN>, < ESI-RT: 0:0>

RxPathID : 0x0

TxPathID : 0x0

AS-path : 200

Origin : igp

Attribute value : MED 0,pref-val 0

State : valid, external, best

IP precedence : N/A

QoS local ID : N/A

Traffic index : N/A

EVPN route type : IGMP join synch route

ESI : 0000.0000.0000.0000.0000

Ethernet tag ID : 0

Source length : 32

Source address : 10.1.1.1

Group length : 32

Group address : 224.224.224.224

Origin address : 192.168.3.1

IGMP flags : v3, include

Table 8 Command output

Field	Description
Ext-Community	Extended community attributes: · RT. · Encapsulation Type. · EVI-RT—Route target associated with EVI.
Source length	Length of the multicast source address.
Source address	Multicast source address.
Group length	Length of the multicast group address.
Group address	Multicast group address.
Origin address	IP address of the originating router.

# Display detailed information about BGP EVPN route [8][ 00:00:00:00:00:00:00:00:00][0][32][10.1.1.1][32][224.224.224.224][32][192.168.3.1][0]/272 with RD 1.1.1.1:100.

<Sysname> display bgp l2vpn evpn route-distinguisher 1.1.1.1:100 [8][0000.0000.0000.0000.0000][0][32][10.1.1.1][32][224.224.224.224][32][192.168.3.1][0] 272

BGP local router ID: 172.16.250.133

Local AS number: 100

Route distinguisher: 1.1.1.1:100

Total number of routes: 1

Paths: 1 available, 1 best

BGP routing table information of [8][0000.0000.0000.0000.0000] [0][32][10.1.1.1][32][224.224.224.224][32][192.168.3.1][0]/272:

From : 10.1.1.2

Rely nexthop : 10.1.1.2

Original nexthop: 10.1.1.2

OutLabel : NULL

Ext-Community : <RT: 1:2>, <Encapsulation Type: VXLAN>, < ESI-RT: 1:200>

RxPathID : 0x0

TxPathID : 0x0

AS-path : 200

Origin : igp

Attribute value : MED 0,pref-val 0

State : valid, external, best

IP precedence : N/A

QoS local ID : N/A

Traffic index : N/A

EVPN route type : IGMP leave synch route

ESI : 0000.0000.0000.0000.0000

Ethernet tag ID : 0

Source length : 32

Source address : 10.1.1.1

Group length : 32

Group address : 224.224.224.224

Origin address : 192.168.3.1

Leave group sync: 0

Max ResponseTime: 2500ms

Max ResponseCode: 25

IGMP flags : v3, include

Table 9 Command output

Field	Description
Ext-Community	Extended community attributes: · RT. · Encapsulation Type. · ESI-RT—Route target associated with the ESI.
Source length	Length of the multicast source address.
Source address	Multicast source address.
Group length	Length of the multicast group address.
Group address	Multicast group address.
Origin address	IP address of the originating router.
Leave group sync	Leave group synchronization sequence number.
Max ResponseTime	Maximum response time in milliseconds.
Max ResponseCode	Maximum response time in the received packet, in deciseconds.

‌

# Display detailed information about BGP EVPN route [4][00:00:00:00:00:00:00:00:00:0a][32][4.5.5.5]/128 with RD 1.1.1.1:100.

<Sysname> display bgp l2vpn evpn route-distinguisher 1.1.1.1:100 [4][00:00:00:00:00:00:00:00:00:0a] [32][4.5.5.5] 128 advertise-info

BGP local router ID: 172.16.250.133

Local AS number: 100

Route distinguisher: 1.1.1.1:100

Total number of routes: 1

Paths: 1 best

BGP routing table information of [4][00:00:00:00:00:00:00:00:00:0a][32][4.5.5.5]/128:

Advertised to peers (1 in total):

10.2.1.2

Table 10 Command output

Field	Description
Paths	Number of optimal routes.
Advertised to peers (1 in total)	Peers to whom the route has been advertised and the number of the peers.

# Display community attribute information about BGP EVPN route [4][00:00:00:00:00:00:00:00:00:0a][32][4.5.5.5]/128 with RD 1.1.1.1:100.

<Sysname> display bgp l2vpn evpn route-distinguisher 1.1.1.1:100 [4][00:00:00:00:00:00:00:00:00:0a][32][4.5.5.5] 128 community

BGP local router ID: 1.1.1.9

Local AS number: 100

Route distinguisher: 1.1.1.1:100

Total number of routes: 1

Paths: 1 available, 1 best

BGP routing table information of [4][00:00:00:00:00:00:00:00:00:0a][32][4.5.5.5]/128:

Community: no-export

# Display extended community attribute information about BGP EVPN route [4][00:00:00:00:00:00:00:00:00:0a][32][4.5.5.5]/128 with RD 1.1.1.1:100.

<Sysname> display bgp l2vpn evpn route-distinguisher 1.1.1.1:100 [4][00:00:00:00:00:00:00:00:00:0a][32][4.5.5.5] 128 ext-community

BGP local router ID: 1.1.1.9

Local AS number: 100

Route distinguisher: 1.1.1.1:100

Total number of routes: 1

Paths: 1 available, 1 best

BGP routing table information of [4][00:00:00:00:00:00:00:00:00:0a][32][4.5.5.5]/128:

Ext-Community: <RT 1:1>

# Display the AS path attribute of BGP EVPN route [4][00:00:00:00:00:00:00:00:00:0a][32][4.5.5.5]/128 with RD 1.1.1.1:100.

<Sysname> display bgp l2vpn evpn route-distinguisher 1.1.1.1:100 [4][00:00:00:00:00:00:00:00:00:0a][32][4.5.5.5] 128 as-path

BGP local router ID: 1.1.1.9

Local AS number: 100

Route distinguisher: 1.1.1.1:100

Total number of routes: 1

Paths: 1 available, 1 best

BGP routing table information of [4][00:00:00:00:00:00:00:00:00:0a][32][4.5.5.5]/128:

As-path: 80

# Display the cluster ID list attribute of BGP EVPN route [4][00:00:00:00:00:00:00:00:00:0a][32][4.5.5.5]/128 with RD 1.1.1.1:100.

<Sysname> display bgp l2vpn evpn route-distinguisher 1.1.1.1:100 [4][00:00:00:00:00:00:00:00:00:0a][32][4.5.5.5] 128 cluster-list

BGP local router ID: 1.1.1.9

Local AS number: 100

Route distinguisher: 1.1.1.1:100

Total number of routes: 1

Paths: 1 available, 1 best

BGP routing table information of [4][00:00:00:00:00:00:00:00:00:0a][32][4.5.5.5]/128:

Cluster list: 80

Table 11 Command output

Field	Description
Paths	Numbers of available routes and optimal routes.
Community	Community attribute.
Ext-Community	Extended community attribute.
As-path	AS path attribute.
Cluster-list	Cluster ID list attribute.

# Display statistics about the BGP EVPN routes with community attributes.

<Sysname> display bgp l2vpn evpn statistics community

Total number of routes from all PEs: 1

Route distinguisher: 100:1(vpn1)

Total number of routes: 4

display bgp l2vpn evpn inlabel

Use display bgp l2vpn evpn inlabel to display incoming labels for IP prefix advertisement routes.

Syntax

display bgp [ instance instance-name ] l2vpn evpn inlabel

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

instance instance-name: Specifies a BGP instance by its name, a case-sensitive string of 1 to 31 characters. If you do not specify this option, the command displays route information for the default BGP instance.

Usage guidelines

Use this command to display the private network labels that the local PE assigns to IP prefix advertisement routes.

Examples

# Display incoming labels for IP prefix advertisement routes.

<Sysname> display bgp l2vpn evpn inlabel

BGP local router ID is 1.1.1.1

Status codes: * - valid, > - best, d - dampened, h - history

s - suppressed, S - stale, i - internal, e - external

a - additional-path

Origin: i - IGP, e - EGP, ? – incomplete

Total number of routes from all PEs: 1

Route distinguisher: 100:2

Total number of routes: 1

Network NextHop OutLabel InLabel

* >e [5][0][24][192.168.1.0]/80

192.168.1.10 NULL 1151

Table 12 Command output

Field	Description
Status codes	Route status codes: · * - valid—Valid route. · > - best—Optimal route. · d - dampened—Dampened route. · h - history—History route. · i - internal—Internal route. · e - external—External route. · s - suppressed—Suppressed route. · S - Stale—Stale route. · a - additional-path—Add-Path optimal route.
Origin	Origin of the route: · i – IGP—Originated in the AS. The origin of routes advertised by using the network command is IGP. · e – EGP—Learned through EGP. · ? – incomplete—Unknown origin. The origin of routes redistributed from IGP protocols is incomplete.
Network	BGP EVPN route in the format of [5][EthernetTagID][IPAddressLength][IPAddress]: · 5—IP prefix advertisement route. · EthernetTagID—Ethernet tag ID. · IPAddressLength—IP address length. · IPAddress—IP address of the originating router.
OutLabel	Outgoing label, which is the private network label assigned by the peer PE. If the peer PE assigns a null label, this field displays NULL.
InLabel	Incoming label, which is the private network label assigned by the local PE.

Related commands

evpn mpls routing-enable

peer advertise encap-type mpls

display evpn auto-discovery

Use display evpn auto-discovery to display information about peers that are automatically discovered through BGP.

Syntax

display evpn auto-discovery { { imet [ mpls | vxlan ] | mac-ip [ mpls | srv6 | vxlan ] } [ peer peer-address] [ vsi vsi-name ] | macip-prefix [ nexthop next-hop ] [ count ] }

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

imet: Specifies peers discovered through IMET routes.

mac-ip: Specifies MAC/IP advertisement routes.

mpls: Specifies the EVPN VPLS network.

srv6: Specifies the EVPN VPLS over SRv6 network. For more information about EVPN VPLS over SRv6, see Segment Routing Configuration Guide.

vxlan: Specifies the EVPN VXLAN network.

peer peer-address: Specifies a peer by its IP address. If you do not specify this option, the command displays information about all automatically discovered peers.

vsi vsi-name: Specifies a VSI by its name, a case-sensitive string of 1 to 31 characters. If you do not specify this option, the command displays peer information for all VSIs.

macip-prefix: Specifies peers discovered through MAC/IP advertisement routes and IP prefix advertisement routes.

nexthop next-hop: Specifies a next hop. If you do not specify this option, the command displays peer information for all next hops.

count: Displays the number of peers. If you do not specify this keyword, the command displays detailed peer information.

Usage guidelines

If you do not specify a network type, this command displays peer information for all network types.

Examples

# Display information about peers discovered through IMET routes for EVPN VXLAN.

<Sysname> display evpn auto-discovery imet vxlan

Total number of automatically discovered peers: 2

VSI name: vpna

EVPN instance: -

RD PE_address Tunnel_address Tunnel mode VXLAN ID

1:10 2.2.2.2 2.2.2.2 VXLAN 10

2:100 3.3.3.3 3.3.3.3 VXLAN 10

# Display information about peers discovered through IMET routes for EVPN VPLS.

<Sysname> display evpn auto-discovery imet mpls

Total number of automatically discovered peers: 1

VSI name: vpna

EVPN instance: -

RD PE_address In/Out label Tunnel mode

1:1 1.1.1.1 1151/1151 PW

# Display information about peers discovered through IMET routes for EVPN VPLS over SRv6.

<Sysname> display evpn auto-discovery imet srv6

Total number of automatically discovered peers: 1

VSI name: vpnc

EVPN instance: -

RD : 1:1 Tunnel mode : SRv6

PE_address : 1::1

In SID : 100::10::0

Out SID : 200::20::0

Table 13 Command output

Field	Description
EVPN instance	EVPN instance name. If the EVPN instance is created on a VSI, this field displays a hyphen (-).
PE_address	Identifier of the remote VTEP on the VSI.
Tunnel_address	Tunnel destination IP address.
Tunnel mode	Tunnel mode: · VXLAN. · VXLAN-DCI. · PW. · SRv6.
In/Out label	Incoming and outgoing labels for the PW. If the labels are invalid, this field displays a hyphen (-).
In SID	Incoming SID.
Out SID	Outgoing SID.

# Display information about IPv4 peers discovered through MAC/IP advertisement routes for EVPN VXLAN.

<Sysname> display evpn auto-discovery mac-ip vxlan

Total number of automatically discovered peers: 1

VSI name: vpna

EVPN instance: -

Destination IP Source IP VXLAN ID Tunnel mode Tunnel name

6.6.6.6 1.1.1.9 100 VXLAN Tunnel1

# Display information about IPv4 peers discovered through MAC/IP advertisement routes for EVPN VPLS.

<Sysname> display evpn auto-discovery mac-ip mpls

Total number of automatically discovered peers: 1

VSI name: vpnb

EVPN instance: -

Destination IP In/Out label Tunnel Mode

7.7.7.7 1420/1419 PW

# Display information about IPv4 peers discovered through MAC/IP advertisement routes for EVPN VPLS over SRv6.

<Sysname> display evpn auto-discovery mac-ip srv6

VSI name: vpnb

EVPN instance: -

RD : 1:1 Tunnel mode : SRv6

Destination IP : 1::1

In SID : 100::10::0

Out SID : 200::20::0

Table 14 Command output

Field	Description
EVPN instance	EVPN instance name. If the EVPN instance is created on a VSI, this field displays a hyphen (-).
Tunnel mode	Tunnel mode: · VXLAN. · PW. · SRv6.
In/Out label	Incoming and outgoing labels for the PW. If the labels are invalid, this field displays a hyphen (-).
In SID	Incoming SID.
Out SID	Outgoing SID.

# Display information about peers discovered through MAC/IP advertisement routes and IP prefix advertisement routes.

<Sysname> display evpn auto-discovery macip-prefix

Destination IP Source IP L3VNI Tunnel mode Outgoing interface

1.1.1.1 3.3.3.3 200 VXLAN Vsi-interface3

2.2.2.2 3.3.3.3 200 VXLAN Vsi-interface3

# Display the total number of peers discovered through MAC/IP advertisement routes and IP prefix advertisement routes.

<Sysname> display evpn auto-discovery macip-prefix count

Total number of entries: 2

Table 15 Command output

Field	Description
Destination IP	Tunnel destination IP address.
Source IP	Tunnel source IP address.
L3VNI	L3 VXLAN ID used for Layer 3 forwarding.
Tunnel mode	Tunnel mode: · VXLAN. · VXLAN-DCI.
Outgoing interface	VSI interface associated with the L3 VXLAN ID.

display evpn m-lag synchronized-mac

Use display evpn m-lag synchronized-mac to display M-LAG-synchronized MAC address entries.

Syntax

display evpn m-lag synchronized-mac [ vsi vsi-name ] [ count ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

vsi vsi-name: Specifies a VSI name, a case-sensitive string of 1 to 31 characters. If you do not specify a VSI, this command displays MAC address entries for all VSIs.

count: Displays the number of MAC address entries that match the command. If you do not specify this keyword, the command displays detailed information about MAC address entries.

Usage guidelines

To ensure VM reachability information consistency in an M-LAG system, M-LAG member devices synchronize MAC address entries and ARP packets with each other through a peer link. This command displays the synchronized MAC address entries from an M-LAG peer.

Examples

# Display all M-LAG-synchronized MAC address entries.

<Sysname> display evpn m-lag synchronized-mac

VSI name: bbb

MAC address Link ID Interface

0000-0000-000a 1 BAGG10

0000-0000-0009 0 Tunnel1

# Display the total number of M-LAG-synchronized MAC address entries.

<Sysname> display evpn m-lag synchronized-mac count

Total number of entries: 2

Table 16 Command output

Field	Description
Link ID	AC's or VXLAN tunnel's link ID on a VSI.
Interface	Outgoing interface name.

display evpn df-election

Use display evpn df-election to display DF election information.

Syntax

display evpn df-election [ vsi vsi-name | xconnect-group group-name ] [ esi esi-id ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

vsi vsi-name: Specifies a VSI by its name, a case-sensitive string of 1 to 31 characters.

xconnect-group group-name: Specifies a cross-connect group by its name, a case-sensitive string of 1 to 31 characters.

esi esi-id: Specifies an ES by its ESI in XXXX.XXXX.XXXX.XXXX.XXXX format. Each X represents a hexadecimal digit. The ESI must begin with 00 and cannot be all zeros. If you do not specify this option, the command displays information about all ESs.

Usage guidelines

If you do not specify a VSI or cross-connect group, this command displays DF election information about all VSIs and cross-connect groups.

Examples

# Display DF election information about all VSIs and cross-connect groups.

<Sysname> display evpn df-election

Status codes : * - invalid

VSI name: 1

ESI : 0021.1001.1001.1001.1002

Interface : HundredGigE1/0/1

Service instance ID : 1000

Link ID : 1

Ethernet tag ID : 12

DF state : DF

FSM : DF_DONE

Number of member devices : 2

Originating IP DF state Algorithm Preference Capability

100.100.100.100 DF Preference 65535 DP

100.100.100.200 BDF Preference 200 DP

ESI : 0002.0002.0002.0002.0002

Interface : HundredGigE1/0/2

Link ID : 0

Ethernet tag ID : 0

DF state : -

FSM : DF_CALC

Number of member devices : 2

Originating IP DF state Algorithm Preference Capability

1.1.1.1 - Preference 32767 -

2.2.2.2 - Preference 32767 -

Xconnect-group name : 1

Connection name : 1

ESI : 0001.0001.0001.0001.0001

Interface : HundredGigE1/0/3

Link ID : 1

Ethernet tag ID : 0

DF state : -

FSM : DF_CALC

Number of member devices : 1

Originating IP DF state Algorithm Preference Capability

2.2.2.2 - Preference 32767 -

Table 17 Command output

Field	Description
Status codes	Status code for a device in DF election. An asterisk (*) indicates that a device cannot participate in DF election.
Link ID	The AC's link ID on the VSI.
DF state	DF election result: · BDF—The device is a BDF. · DF—The device is the DF. If DF election has not finished, this field displays a hyphen (-).
FSM	State of the finite state machine for DF election: · INIT—Initializing. · DF_WAIT—The DF election delay has not timed out. · DF_CALC—DF election is in progress. · DF_DONE—DF election has finished.
Originating IP	IP address of the member device that participates in DF election.
DF state	DF election result: · BDF—The member device is a BDF. · DF—The member device is the DF. If DF election has not finished, this field displays a hyphen (-).
Algorithm	Algorithm used in DF election: · modulus—VLAN tag-based algorithm. · Preference—Preference-based algorithm.
Preference	DF election preference.
Capability	Supported DF election capabilities. DP represents non-revertive mode. If no capability is supported, this field displays a hyphen (-).

display evpn es

Use display evpn es to display EVPN ES information.

Syntax

display evpn es { local [ count | [ vsi vsi-name | xconnect-group group-name ] [ esi esi-id ] [ verbose ] ] | remote [ vsi vsi-name | xconnect-group group-name ] [ esi esi-id ] [ nexthop next-hop ] [ verbose ] }

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

local: Specifies local ES information.

count: Displays the number of local ESs.

vsi vsi-name: Specifies a VSI by its name, a case-sensitive string of 1 to 31 characters. If you do not specify this option, the command displays ES information about all VSIs.

xconnect-group group-name: Specifies a cross-connect group by its name, a case-sensitive string of 1 to 31 characters. If you do not specify a cross-connect group, this command displays EVPN local or remote ES information about all cross-connect groups.

verbose: Displays detailed ES information. If you do not specify this keyword, the command displays brief ES information.

remote: Specifies remote ES information.

nexthop next-hop: Specifies a next hop. If you do not specify this option, the command displays ES information received from all next hops.

Examples

# Display the number of local ESs.

<Sysname> display evpn es local count

Total number of ES entries: 1

# Display brief information about local ESs of VSI vpna for EVPN VPLS.

<Sysname> display evpn es local vsi vpna

Redundacy mode: A – All-active, S – Single-active

VSI name : vpna

EVPN instance: -

VSI ESI Tag ID DF address Mode State ESI label

0001.0002.0002.0002.0002 0 1.1.1.1 A Up 1000

ESI Tag ID DF address Mode State ESI label

0001.0002.0002.0002.0002 0 1.1.1.1 A Up 1000

0001.0002.0003.0004.0005 0 1.1.1.1 A Up 1001

0003.0003.0003.0003.0003 2 2.2.2.2 A Up 1002

# Display brief information about local ESs of VSI vpna for EVPN VPLS over SRv6.

<Sysname> display evpn es local vsi vpna

Redundancy mode: A – All-active, S – Single-active

VSI name : vpna

ESI : 0001.0001.0001.0001.0001

Tag ID : 0

DF address : 1.1.1.1

Mode : A

State : Down

Argument : ::1

# Display brief information about local ESs of cross-connect group vpna for EVPN VPWS.

<Sysname> display evpn es local xconnect-group vpna

Redundancy mode: A – All-active, S – Single-active

Xconnect group name: vpna

ESI Tag ID DF address Mode State ESI label

0001.0002.0002.0002.0002 0 1.1.1.1 A Up -

0001.0002.0003.0004.0005 0 1.1.1.1 A Up -

0003.0003.0003.0003.0003 2 2.2.2.2 A Up -

# Display brief information about local ESs of cross-connect group vpna for EVPN VPLS over SRv6.

<Sysname> display evpn es local xconnect-group vpna

Redundancy mode: A – All-active, S – Single-active

Xconnect-group name : vpna

ESI : 0001.0001.0001.0001.0001

Tag ID : 0

DF address : 1.1.1.1

Mode : A

State : Up

Argument : -

Table 18 Command output

Field	Description
Xconnect group name	Cross-connect group name.
Tag ID	Ethernet tag ID.
DF address	Router ID of the VTEP or PE elected as the DF.
Mode	Redundancy mode of the ES: · A—All-active mode. · S—Single-active mode.
State	State of the ES: · Up. · Down.
ESI label	ESI label. For EVPN VPWS and EVPN VXLAN, this field is invalid and displays a hyphen (-).
Argument	Argument that identifies a leaf AC. E-tree isolates traffic among leaf ACs based on arguments in an EVPN VPLS over SRv6 network. This field displays a hyphen (-) if no argument exists.

# Display detailed information about local ESs of all VSIs.

<Sysname> display evpn es local verbose

VSI name : v1

EVPN instance: -

VSI ESI : 0001.0001.0001.0001.0003

Redundancy mode : All-active

ES state : Up

AD-delay remaining time : 10

ESI : 0003.0003.0003.0003.0003

Interface : HundredGigE1/0/1

Redundancy mode : All-active

State : Up

AD-delay remaining time : 10

ACs :

Link ID Service instance ID Tag ID DF address ESI label

0 1 1 1.1.1.1 1001

1 3 3 3.3.3.3 1002

2 10 10 2.2.2.2 1003

VSI name : v2

EVPN instance: -

ESI : 0004.0004.0004.0004.0004

Interface : -

Redundancy mode : All-active

State : Up

AD-delay remaining time : 10

UPWs :

Link ID Tag ID DF address ESI label

0 1 1.1.1.1 1004

VSI name : vpna

EVPN instance: -

ESI : 0001.0002.0002.0002.0002

Interface : HundredGigE1/0/2

Redundancy mode : All-active

State : Up

AD-delay remaining time : 10

ACs :

Link ID Service instance ID Tag ID DF address ESI label

1 - 0 1.1.1.1 -

VSI name : vpnb

EVPN instance: -

ESI : 0001.0001.0001.0001.0001

Interface : HGE1/0/3

Redundancy mode : All-active

State : Down

ACs :

Link ID : 0

Service instance ID : -

Tag ID : 0

DF address : 1.1.1.1

Argument : ::1

Xconnect group name : vpna

Connection name : aa

ESI : 0003.0003.0003.0003.0003

AC : HGE1/0/5 srv1

Redundancy mode : All-active

State : Up

Link ID : 0

Tag ID : 10

DF address : 1.1.1.1

Xconnect group name : vpnd

Connection name : dd

ESI : 0006.0006.0006.0006.0006

Redundancy mode : All-active

State : Up

UPW Link ID : 0

Tag ID : 10

DF address : 1.1.1.1

Table 19 Command output

Field	Description
VSI ESI	ESI assigned to the VSI.
Xconnect group name	Cross-connect group name.
Connection name	Cross-connect name.
AC	AC name. This field displays a Layer 3 interface name or a Layer 2 interface name and an Ethernet service instance name.
Redundancy mode	Redundancy mode of the ES: · A—All-active mode. · S—Single-active mode.
ES state	ES state of the VSI: · Up. · Down. A hyphen (-) indicates that no ESI is manually assigned.
State	State of the interface or UPW: · Up. · Down. If the ES is not manually assigned an ESI, a hyphen (-) is displayed.
AD-delay remaining time	Remaining time of the advertisement delay timer for Ethernet auto-discovery routes, in seconds.
ACs	The VSI's ACs on the ES.
UPWs	The VSI's UPWs on the ES.
Link ID	The AC's link ID on the VSI.
Service instance ID	Ethernet service instance ID.
Tag ID	Ethernet tag ID.
DF address	Router ID of the VTEP or PE elected as the DF. If the device is not the DF of an AC, a hyphen (-) is displayed.
ESI label	ESI label. For EVPN VPWS and EVPN VXLAN, this field is invalid and displays a hyphen (-).
Argument	Argument that identifies a leaf AC. E-tree isolates traffic among leaf ACs based on arguments in an EVPN VPLS over SRv6 network. This field displays a hyphen (-) if no argument exists.
UPW link ID	The UPW's link ID on the VSI.

# Display information about remote ESs of all VSIs.

<Sysname> display evpn es remote

Control Flags: P - Primary, B - Backup, C - Control word

VSI name : vpna

ESI : 0001.0000.0000.0000.0001

Ethernet segment routes :

1.1.1.1

3.3.3.3

A-D per ES routes :

Peer IP Remote Redundancy mode

1.1.1.1 All-active

3.3.3.3 All-active

A-D per EVI routes :

Tag ID Peer IP

0 1.1.1.1

0 3.3.3.3

ESI : 0001.0002.0003.0004.0005

Ethernet segment routes :

1.1.1.1

A-D per ES routes :

Peer IP Remote Redundancy mode

1.1.1.1 All-active

A-D per EVI routes :

Tag ID Peer IP

0 1.1.1.1

Xconnect group name : a

ESI : 0001.0000.0000.0000.0001

Ethernet segment routes :

123.123.123.123

3.3.3.3

A-D per ES routes :

Peer IP Remote Redundancy mode

123.123.123.123 All-active

3.3.3.3 All-active

A-D per EVI routes :

Tag ID Peer IP Control Flags

2 3.3.3.3 P

4 123.123.123.123 PC

# Display detailed information about remote ESs.

<Sysname> display evpn es remote

Control Flags: P - Primary, B - Backup, C - Control word

VSI name : vpna

ESI : 0001.0001.0001.0001.0001

A-D per ES routes :

Peer IP : 2::2

Remote Redundancy mode: All-active

Argument : ::1

A-D per EVI routes :

Tag ID : 1

Peer IP : 2::2

Xconnect group name : vpna

ESI : 0001.0001.0001.0001.0001

Ethernet segment routes :

2::2

A-D per ES routes :

Peer IP : 2::2

Remote Redundancy mode: All-active

A-D per EVI routes :

Tag ID : 1

Control Flags : P

Peer IP : 2::2

# Display remote ES information received from next hop 3.3.3.3 for VSI vpna.

<Sysname> display evpn es remote vsi vpna nexthop 3.3.3.3

VSI name : vpna

ESI : 0001.0000.0000.0000.0001

Redundancy mode : All-active

Ethernet segment routes :

3.3.3.3

A-D per ES routes :

3.3.3.3

A-D per EVI routes :

Tag ID Peer IP

0 3.3.3.3

Table 20 Command output

Field	Description
Xconnect group name	Cross-connect group name.
Argument	Argument that identifies a leaf AC. E-tree isolates traffic among leaf ACs based on arguments in an EVPN VPLS over SRv6 network. This field displays a hyphen (-) if no argument exists.
Ethernet segment routes	Ethernet segment routes for the ES.
A-D per Ethernet segment routes	A-D per Ethernet segment routes for the ES.
A-D per EVI routes	A-D per EVI routes for the ES.
Tag ID	Ethernet tag ID.
Peer IP	IP address of the remote peer.
Remote Redundancy mode	Redundancy mode of the remote ES: · All-active. · Single-active.
Control Flags	Layer 2 attributes control flags of the remote route: · P—Primary flag. · B—Backup flag. · C—Control word flag.

display evpn instance

Use display evpn instance to display EVPN instance information.

Syntax

display evpn instance [ name instance-name | vsi vsi-name | xconnect-group group-name ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

name instance-name: Specifies an EVPN instance by its name, a case-sensitive string of 1 to 31 characters.

vsi vsi-name: Specifies a VSI by its name, a case-sensitive string of 1 to 31 characters.

xconnect-group group-name: Specifies a cross-connect group by its name, a case-sensitive string of 1 to 31 characters.

Usage guidelines

If you do not specify any parameters, this command displays information about all EVPN instances.

Examples

# Display information about all EVPN instances.

<Sysname> display evpn instance

Total number of EVPN instances: 3

EVPN instance : abc

Route distinguisher : -

Export VPN targets : -

Import VPN targets : -

MAC advertisement : Enabled

ARP advertisement : Enabled

ARP-based MAC learning : Enabled

ND-based MAC learning : Enabled

Local fast-reroute : Inherit

Tunnel policy : -

PW class : -

Dt2uLocatorName : -

Dt2ulLocatorName : -

Dt2mLocatorName : -

E-Tree : Disabled

Best-Effort : Disabled

Traffic-Engineering : Disabled

Import routing policy : -

Export routing policy : -

VSI binding list:

VSI name Tag ID

vpna 3

vpnb 5

EVPN instance : - (created on vsi abc)

Encapsulation : VXLAN

Route distinguisher : -

Export VPN targets : -

Import VPN targets : -

MAC advertisement : Enabled

ARP advertisement : Enabled

ARP-based MAC learning : Enabled

ND-based MAC learning : Enabled

VXLAN ID : -

EVPN instance : - (created on vsi aaa)

Encapsulation : MPLS

Route distinguisher : -

Export VPN targets : -

Import VPN targets : -

MAC advertisement : Enabled

ARP advertisement : Enabled

ARP-based MAC learning : Enabled

ND-based MAC learning : Enabled

MPLS label : -

IMET MPLS label : -

Tunnel policy : -

PW class : -

Control Word : Disabled

E-Tree : Disabled

PW type : VLAN

Sequencing : -

Flow label : -

Import routing policy : -

Export routing policy : -

Default color : -

EVPN instance : - (created on Xconnect-group xcga)

Encapsulation : MPLS

Route distinguisher : -

Export VPN targets : -

Import VPN targets : -

Import Route Policy : -

Export Route Policy : -

Table 21 Command output

Field	Description
EVPN instance	EVPN instance name in one of the following formats: · instance-name—Name of an EVPN instance created in system view. · - (created on VSI vsi-name)—Name of an EVPN instance created on a VSI. · - (created on Xconnect-group xconnect-group-name)—Name of an EVPN instance created on a cross-connect group.
Encapsulation	EVPN encapsulation type: · VXLAN. · MPLS. · SRv6.
MAC advertisement	Status of MAC address advertisement: · Enabled. · Disabled.
ARP advertisement	Status of ARP advertisement: · Enabled. · Disabled.
ARP-based MAC learning	Whether EVPN learns MAC addresses from ARP information: · Enabled. · Disabled.
ND-based MAC learning	Whether EVPN learns MAC addresses from ND information: · Enabled. · Disabled.
Local fast-reroute	State of local FRR on the EVPN instance: · Enabled. · Disabled. · Inherit—Local FRR is not configured in EVPN instance view. The EVPN instance uses the local FRR setting configured in system view.
Tunnel policy	Tunnel policy used by the EVPN instance.
PW class	PW class used by the EVPN instance.
Control word	Status of the control word feature: · Enabled. · Disabled.
E-Tree	Status of EVPN E-tree: · Enabled. · Disabled.
PW type	PW type: · Ethernet. · VLAN.
Sequencing	Sequencing on the PW. The value is Both. A hyphen (-) in this field indicates that sequencing is disabled on the PW.
Flow label	Flow label capability: · Both—Flow label sending and receiving capabilities. · Send—Flow label sending capability. · Recv—Flow label receiving capability. This field displays a hyphen (-) if the flow label feature is disabled.
Dt2u SID	SRv6 SID used for unicast forwarding in the EVPN VPLS over SRv6 network. The values in parentheses are the length of each segment in the SID, which are the locator length, dynamic opcode length, static opcode length, and argument length in sequence. The total length of those segments is 128.
Dt2ul SID	SRv6 SID used for unicast forwarding over the bypass tunnel at the multihomed EVPN VPLS over SRv6 site. The values in parentheses are the length of each segment in the SID, which are the locator length, dynamic opcode length, static opcode length, and argument length in sequence. The total length of those segments is 128.
Dt2m SID	SRv6 SID used for multicast forwarding in the EVPN VPLS over SRv6 network. The values in parentheses are the length of each segment in the SID, which are the locator length, dynamic opcode length, static opcode length, and argument length in sequence. The total length of those segments is 128.
Dt2uLocatorName	Locator name used for requesting the DT2U SID. If dynamic SID assignment is disabled, this field displays auto-sid-disable.
Dt2ulLocatorName	Locator name used for requesting the DT2UL SID. If dynamic SID assignment is disabled, this field displays auto-sid-disable.
Dt2mLocatorName	Locator name used for requesting the DT2M SID. If dynamic SID assignment is disabled, this field displays auto-sid-disable.
Best-Effort	Whether SID-route-recursion is enabled: · Enabled. · Disabled.
Import routing policy	Importing routing policy used by the EVPN instance. If the EVPN instance does not have an import routing policy, this field displays a hyphen (-). This field is available only when the encapsulation type is MPLS or SRv6.
Export routing policy	Exporting routing policy used by the EVPN instance. If the EVPN instance does not have an export routing policy, this field displays a hyphen (-). This field is available only when the encapsulation type is MPLS or SRv6.
VSI binding list	VSIs bound to the EVPN instance.

Related commands

evpn encapsulation

vsi

display evpn ipv6 auto-discovery

Use display evpn ipv6 auto-discovery to display information about IPv6 peers that are automatically discovered through BGP.

Syntax

display evpn ipv6 auto-discovery { { imet | mac-ip } [ srv6 | vxlan ] [ peer ipv6-address ] [ vsi vsi-name ] | macip-prefix [ nexthop next-hop ] [ count ] }

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

imet: Specifies IPv6 peers discovered through IMET routes.

mac-ip: Specifies IPv6 peers discovered through MAC/IP advertisement routes.

srv6: Specifies the EVPN VPLS over SRv6 network. For more information about EVPN VPLS over SRv6, see Segment Routing Configuration Guide.

vxlan: Specifies the EVPN VXLAN network.

peer ipv6-address: Specifies a peer by its IPv6 address. If you do not specify this option, the command displays information about all automatically discovered IPv6 peers.

vsi vsi-name: Specifies a VSI by its name, a case-sensitive string of 1 to 31 characters. If you do not specify this option, the command displays IPv6 peer information for all VSIs.

macip-prefix: Specifies IPv6 peers discovered through MAC/IP advertisement routes that carry L3 VXLAN IDs or IP prefix advertisement routes that carry L3 VXLAN IDs.

nexthop next-hop: Specifies a next hop. If you do not specify this option, the command displays IPv6 peer information for all next hops.

count: Displays the number of IPv6 peers. If you do not specify this keyword, the command displays detailed IPv6 peer information.

Examples

# Display information about IPv6 peers discovered through IMET routes for EVPN VXLAN.

<Sysname> display evpn ipv6 auto-discovery imet

Total number of automatically discovered peers: 2

VSI name: vpna

EVPN instance : -

RD : 1:10

PE address : 11::8

Tunnel address : 11::8

Tunnel mode : VXLAN

VXLAN ID : 10

RD : 2:100

PE address : 12::8

Tunnel address : 12::8

Tunnel mode : VXLAN

VXLAN ID : 10

# Display information about IPv6 peers discovered through IMET routes for EVPN VPLS over SRv6.

<Sysname> display evpn ipv6 auto-discovery imet srv6

Total number of automatically discovered peers: 1

VSI name: vpnc

RD : 1:1 Tunnel mode : SRv6

PE_address : 3::3

In SID : 111::1

Out SID : 333::1

Table 22 Command output

Field	Description
EVPN instance	EVPN instance name. If no EVPN instance is created on the VSI, this field displays a hyphen (-).
PE address	Identifier of the remote VTEP on the VSI.
Tunnel address	Tunnel destination IP address.
Tunnel mode	Tunnel mode: · VXLAN. · VXLAN-DCI. · SRv6.
In SID	Incoming SID of the SRv6 tunnel.
Out SID	Outgoing SID of the SRv6 tunnel.

# Display information about IPv6 peers discovered through MAC/IP advertisement routes that do not carry L3 VXLAN IDs for EVPN VXLAN.

<Sysname> display evpn ipv6 auto-discovery mac-ip

Total number of automatically discovered peers: 1

VSI name: vpna

Destination IP : 6:6::6:8

Source IP : 1:1::1:7

VXLAN ID : 100

Tunnel mode : VXLAN

Tunnel name : Tunnel1

# Display information about IPv6 peers discovered through MAC/IP advertisement routes that do not carry L3 VXLAN IDs for EVPN VPLS over SRv6.

<Sysname> display evpn ipv6 auto-discovery mac-ip srv6

Total number of automatically discovered peers: 1

VSI name: vpnc

Destination IP : 1::1

Tunnel mode : SRv6

In SID : 100::10::0

Out SID : 200::20::0

Table 23 Command output

Field	Description
Destination IP	Tunnel destination IP address.
Source IP	Tunnel source IP address.
Tunnel mode	Tunnel mode: · VXLAN. · SRv6.
In SID	Incoming SID of the SRv6 tunnel.
Out SID	Outgoing SID of the SRv6 tunnel.

# Display information about IPv6 peers discovered through MAC/IP advertisement routes that carry L3 VXLAN IDs or IP prefix advertisement routes that carry L3 VXLAN IDs.

<Sysname> display evpn ipv6 auto-discovery macip-prefix

Destination IP : 6:6::6:8

Source IP : 1:1::1:7

L3VNI : 100

Tunnel mode : VXLAN

OutInterface : Vsi-interface3

# Display the total number of IPv6 peers discovered through MAC/IP advertisement routes that carry L3 VXLAN IDs or IP prefix advertisement routes that carry L3 VXLAN IDs.

<Sysname> display evpn ipv6 auto-discovery macip-prefix count

Total number of entries: 1

Table 24 Command output

Field	Description
Destination IP	Tunnel destination IP address.
Source IP	Tunnel source IP address.
L3VNI	L3 VXLAN ID used for Layer 3 forwarding.
Tunnel mode	Tunnel mode: · VXLAN. · VXLAN-DCI.
OutInterface	VSI interface associated with the L3 VXLAN ID.

display evpn route arp

Use display evpn route arp to display EVPN ARP entries.

Syntax

display evpn route arp [ local | remote ] [ public-instance | vpn-instance vpn-instance-name ] [ ip ipv4-address ] [ count ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

local: Specifies local ARP entries.

remote: Specifies remote ARP entries.

public-instance: Specifies the public instance.

vpn-instance vpn-instance-name: Specifies an MPLS L3VPN instance by its name, a case-sensitive string of 1 to 31 characters.

ip ipv4-address: Specifies an IPv4 address in dotted decimal notation. If you do not specify this option, the command displays all ARP entries that match the criteria you specify.

count: Displays the number of ARP entries. If you do not specify this keyword, the command displays detailed information about ARP entries.

Usage guidelines

If you do not specify the local or remote keyword, this command displays both local and remote EVPN ARP entries.

If you do not specify the public-instance keyword or the vpn-instance vpn-instance-name option, this command displays EVPN ARP entries for the public instance and all VPN instances.

Examples

# Display all EVPN ARP entries.

<Sysname> display evpn route arp

Flags: D - Dynamic B - BGP L - Local active

G - Gateway S - Static M - Mapping I - Invalid

E - Multihoming ES sync F - Leaf

VPN instance: vpn1 Interface: Vsi-interface1

IP address MAC address Router MAC VSI index Flags

10.1.1.1 0003-0003-0003 a0ce-7e40-0400 0 GL

10.1.1.11 0001-0001-0001 a0ce-7e40-0400 0 DL

10.1.1.12 0001-0001-0011 a0ce-7e41-0401 0 B

10.1.1.13 0001-0001-0021 a0ce-7e42-0402 0 B

Public instance Interface: Vsi-interface2

IP address MAC address Router MAC VSI index Flags

11.1.1.1 0033-0033-0033 a0ce-7e40-0400 0 GL

11.1.1.11 0011-0011-0011 a0ce-7e40-0400 0 DL

# Display the total number of EVPN ARP entries.

<Sysname> display evpn route arp count

Total number of entries: 6

Table 25 Command output

Field	Description
Interface	VSI interface.
Router MAC	Router MAC address of the device. A hyphen (-) is displayed for an SRv6 network with distributed gateways.
Flags	ARP entry type: · D—The entry is dynamically learned. · B—The entry is learned from BGP EVPN routes. · L—The local entry is active. If this flag is not set and the B flag is set, the entry learned from BGP EVPN routes is active. · G—The entry for the gateway is active. · S—The static entry is active. · M—The entry from a remote VXLAN mapped to a local VXLAN is active. · I—The entry is invalid. Possible reasons: ¡ The VSI has been administratively shut down by using the shutdown command. ¡ The outgoing tunnel interface does not exist. · E—The entry is synchronized between devices at a multihomed site. · F—The entry is from a leaf AC of EVPN E-tree.

display evpn route arp suppression

Use display evpn route arp suppression to display EVPN ARP flood suppression entries.

Syntax

display evpn route arp suppression [ mpls | srv6 | vxlan ] [ local | remote ] [ vsi vsi-name ] [ ip ipv4-address ] [ count ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

mpls: Specifies the EVPN VPLS network.

srv6: Specifies the EVPN VPLS over SRv6 network. For more information about EVPN VPLS over SRv6, see Segment Routing Configuration Guide.

vxlan: Specifies the EVPN VXLAN network.

local: Specifies local ARP flood suppression entries.

remote: Specifies remote ARP flood suppression entries.

vsi vsi-name: Specifies a VSI by its name, a case-sensitive string of 1 to 31 characters. If you do not specify this option, the command displays ARP flood suppression entries for all VSIs.

ip ipv4-address: Specifies an IPv4 address in dotted decimal notation. If you do not specify this option, the command displays all ARP flood suppression entries that match the criteria you specify.

count: Displays the number of ARP flood suppression entries. If you do not specify this keyword, the command displays detailed information about ARP flood suppression entries.

Usage guidelines

If you do not specify a network type, this command displays EVPN ARP flood suppression entries for all network types. If you do not specify the local or remote keyword, this command displays both local and remote EVPN ARP flood suppression entries.

Examples

# Display all EVPN ARP flood suppression entries.

<Sysname> display evpn route arp suppression

Flags: D - Dynamic B - BGP L - Local active

G - Gateway S - Static M - Mapping I - Invalid

E - Multihoming ES sync F - Leaf

VSI name: vpna

EVPN instance: -

IP address MAC address Flags Encap

10.1.1.12 0002-0002-0002 B VXLAN

10.1.1.13 0002-0002-0002 BI VXLAN

10.1.1.101 0001-0011-0101 BS VXLAN

10.1.1.102 0001-0011-0102 DL VXLAN

# Display the total number of ARP flood suppression entries.

<Sysname> display evpn route arp suppression count

Total number of entries: 1

Table 26 Command output

Field	Description
EVPN instance	EVPN instance name. If the EVPN instance is created on a VSI, this field displays a hyphen (-).
Flags	ARP flood suppression entry type: · D—The entry is dynamically learned. · B—The entry is learned from BGP EVPN routes. · L—The local entry is active. If this flag is not set and the B flag is set, the entry learned from BGP EVPN routes is active. · G—The entry for the gateway is active. · S—The static entry is active. · M—The entry from a remote VXLAN mapped to a local VXLAN is active. · I—The entry is invalid. Reasons: ¡ The VSI has been administratively shut down by using the shutdown command. ¡ The outgoing tunnel interface does not exist. · E—The entry is synchronized between devices at a multihomed site. · F—The entry is from a leaf AC of EVPN E-tree.
Encap	Packet encapsulation type: · MPLS. · VXLAN.

display evpn route arp-mobility

Use display evpn route arp-mobility to display EVPN ARP mobility information.

Syntax

display evpn route arp-mobility [ public-instance | vpn-instance vpn-instance-name ] [ ip ip-address ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

public-instance: Specifies the public instance.

vpn-instance vpn-instance-name: Specifies an MPLS L3VPN instance by its name, a case-sensitive string of 1 to 31 characters.

ip ip-address: Specifies an IPv4 address in dotted decimal notation. If you do not specify an IP address, this command displays ARP mobility information about all IP addresses of the public instance or MPLS L3VPN instance.

Usage guidelines

If you do not specify any parameters, this command displays ARP mobility information about the public instance and all VPN instances.

Examples

# Display EVPN ARP mobility information about the public instance and all VPN instances.

<Sysname> display evpn route arp-mobility

Flags: S - Suppressed, N - Not suppressed

Suppression threshold: 5

Detection cycle : 180s

Suppression time : Permanent

VPN instance : vpn1

Interface : Vsi-interface1

IP address Move count Moved from Flags Suppressed at

192.168.156.120 5 HGE1/0/1 S 17:24:33 2018/04/01

192.168.56.20 - - N -

Public instance

Interface : Vsi-interface2

IP address Move count Moved from Flags Suppressed at

192.168.156.120 5 HGE1/0/2 S 17:24:33 2018/04/01

192.168.56.20 5 2.2.2.2 S 17:24:33 2018/04/01

Table 27 Command output

Field	Description
Suppression threshold	ARP mobility suppression threshold, which is the number of ARP moves from the local site to a remote site.
Detection cycle	ARP mobility detection cycle in seconds.
Suppression time	Suppression time in seconds. If this field displays Permanent, ARP moves are suppressed permanently.
Move count	Number of ARP moves from the interface to other interfaces.
Moved from	Source interface or source VTEP/PE IP address for the ARP move.
Flags	Whether the ARP move was suppressed: · S—Suppressed. · N—Not suppressed.
Suppressed at	Time when the ARP move was suppressed.

Related commands

evpn route arp-mobility suppression

display evpn route mac

Use display evpn route mac to display EVPN MAC address entries.

Syntax

display evpn route mac [ mpls | srv6 | vxlan ] [ local | remote ] [ vsi vsi-name ] [ mac-address mac-address ] [ count ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

mpls: Specifies the EVPN VPLS network.

srv6: Specifies the EVPN VPLS over SRv6 network. For more information about EVPN VPLS over SRv6, see Segment Routing Configuration Guide.

vxlan: Specifies the EVPN VXLAN network.

local: Specifies local MAC address entries.

remote: Specifies remote MAC address entries.

vsi vsi-name: Specifies a VSI by its name, a case-sensitive string of 1 to 31 characters. If you do not specify this option, the command displays MAC address entries for all VSIs.

mac-address mac-address: Specifies a MAC address in the format of H-H-H. You can omit the consecutive zeros at the beginning of each segment. For example, you can enter f-e2-1 for 000f-00e2-0001. If you do not specify a MAC address, this command displays all MAC address entries that match the criteria you specify.

count: Displays the number of MAC address entries. If you do not specify this keyword, the command displays detailed information about MAC address entries.

Usage guidelines

If you do not specify a network type, this command displays EVPN MAC address entries for all network types. If you do not specify the local or remote keyword, this command displays both local and remote EVPN MAC address entries.

Examples

# Display all EVPN MAC address entries for EVPN VXLAN.

<Sysname> display evpn route mac

Flags: D - Dynamic B - BGP L - Local active

G - Gateway S - Static M - Mapping I - Invalid

E - Multihoming ES sync F - Leaf

VSI name: bbb

EVPN instance: -

MAC address Link ID/Name Flags Encap Next hop

0000-0000-000a 1 DL VXLAN -

0000-0000-0009 Tunnel1 B VXLAN 2.2.2.2

0001-2000-4000 - BI VXLAN 3.3.3.3

# Display all EVPN MAC address entries for EVPN VPLS over SRv6.

<Sysname> display evpn route mac srv6

Flags: D - Dynamic B - BGP L - Local active

G - Gateway S - Static M - Mapping I - Invalid

E - Multihoming ES sync F - Leaf

VSI name: vpnb

EVPN instance: -

MAC address : 68ba-0573-0606

Link ID/Name : 0x0

Flags : DL

Encap : SRv6

Next hop : -

Type : TE

Color : -

Delete delay : 110s

SID : 1::2

MAC address : 68ba-0b4f-0706

Link ID/Name : 0x9000000

Flags : B

Encap : SRv6

Next hop : 2::2

Type : TE

Color : -

Delete delay : 110s

SID : 1::3

# Display the total number of EVPN MAC address entries.

<Sysname> display evpn route mac count

Total number of entries: 2

Table 28 Command output

Field	Description
EVPN instance	EVPN instance name. If the EVPN instance is created on a VSI, this field displays a hyphen (-).
Link ID/Name	For a local MAC address, this field displays the AC's link ID on the VSI. For a remote MAC address, this field displays the tunnel interface name.
Flags	MAC address entry type: · D—The entry is dynamically learned. · B—The entry is learned from BGP EVPN routes. · L—The local entry is active. If this flag is not set and the B flag is set, the entry learned from BGP EVPN routes is active. · G—The entry for the gateway is active. · S—The static entry is active. · M—The entry from a remote VXLAN mapped to a local VXLAN is active. · I—The entry is invalid. Reasons: ¡ The VSI has been administratively shut down by using the shutdown command. ¡ The outgoing tunnel interface does not exist. · E—The entry is synchronized between devices at a multihomed site. · F—The entry is from a leaf AC of EVPN E-tree.
Encap	Packet encapsulation type: · MPLS. · VXLAN. · SRv6.
Next hop	IP address of the remote VTEP. If the MAC address entry is a local entry, a hyphen (-) is displayed.
Type	Outgoing interface type: · BE—SRv6 best-effort tunnel. · TE—SRv6 TE policy tunnel.
Color	Color attribute of the MAC address entry. If the MAC address entry does not have this attribute, a hyphen (-) is displayed. This field is available only when the encapsulation type is SRv6.
Delete delay	Delay time in seconds for deleting MAC address entries after receiving a MAC/IP advertisement route withdrawal message. If this delay is not set, this field displays a hyphen (-).
SID	SRv6 SID assigned to the MAC address.

display evpn route mac-mobility

Use display evpn route mac-mobility to display EVPN MAC mobility information.

Syntax

display evpn route mac-mobility [ vsi vsi-name ] [ mac-address mac-address ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

vsi vsi-name: Specifies a VSI by its name, a case-sensitive string of 1 to 31 characters. If you do not specify a VSI, this command displays MAC mobility information about all VSIs.

mac-address mac-address: Specifies a MAC address in the format of H-H-H. You can omit the consecutive zeros at the beginning of each segment. For example, you can enter f-e2-1 for 000f-00e2-0001. If you do not specify a MAC address, this command displays MAC mobility information about all MAC addresses in the specified VSI or all VSIs.

Usage guidelines

If you do not specify any parameters, this command displays IPv4 EVPN MAC mobility information about all VSIs.

Examples

# Display IPv4 EVPN MAC mobility information about all VSIs.

<Sysname> display evpn route mac-mobility

Flags: S - Suppressed, N - Not suppressed

Suppression threshold: 5

Detection cycle : 180s

Suppression time : Permanent

VSI name : vsia

EVPN instance : -

MAC address Move count Moved from Flags Suppressed at

1000-0000-0000 10 HGE1/0/1 S 15:30:30 2018/03/30

1000-0000-0001 - - N -

VSI name : vsib

EVPN instance : -

MAC address Move count Moved from Flags Suppressed at

1000-0000-0003 2 HGE1/0/2 N -

1000-0000-0005 10 5.5.5.5 S 17:24:33 2018/04/01

Table 29 Command output

Field	Description
Suppression threshold	MAC mobility suppression threshold, which is the number of MAC moves from the local site to a remote site.
Detection cycle	MAC mobility detection cycle in seconds.
Suppression time	Suppression time in seconds. If this field displays Permanent, MAC moves are suppressed permanently.
EVPN instance	EVPN instance name. If the EVPN instance is created on a VSI, this field displays a hyphen (-). This field is supported only by EVPN VXLAN.
Move count	Number of MAC moves from the interface to other interfaces.
Moved from	Source interface or source VTEP/PE IP address for the MAC move.
Flags	Whether the MAC move was suppressed: · S—Suppressed. · N—Not suppressed.
Suppressed at	Time when the MAC move was suppressed.

Related commands

evpn route mac-mobility suppression

display evpn route nd

Use display evpn route nd to display EVPN ND entries.

Syntax

display evpn route nd [ local | remote ] [ public-instance | vpn-instance vpn-instance-name ] [ ipv6 ipv6-address ] [ count ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

local: Specifies local ND entries.

remote: Specifies remote ND entries.

public-instance: Specifies the public instance.

vpn-instance vpn-instance-name: Specifies an MPLS L3VPN instance by its name, a case-sensitive string of 1 to 31 characters.

ipv6 ipv6-address: Specifies an IPv6 address. If you do not specify this option, the command displays all ND entries that match the criteria you specify.

count: Displays the number of ND entries. If you do not specify this keyword, the command displays detailed information about ND entries.

Usage guidelines

If you do not specify the local or remote keyword, this command displays both local and remote EVPN ND entries.

If you do not specify the public-instance keyword or the vpn-instance vpn-instance-name option, this command displays EVPN ND entries for the public instance and all VPN instances.

Examples

# Display all EVPN ND entries.

<Sysname> display evpn route nd

Flags: D - Dynamic B - BGP L - Local active

G - Gateway S - Static M - Mapping I - Invalid

VPN instance: vpn1 Interface: Vsi-interface1

IPv6 address : AD80:0300:1000:0050:0200:0300:0100:0012

MAC address : 0001-0001-0001 Router MAC : a0ce-7e40-0400

VSI index : 0 Flags : GL

IPv6 address : AD10:0300:1000:0020:0200:0300:0100:0022

MAC address : 0001-0001-0002 Router MAC : a0ce-7e40-0411

VSI index : 0 Flags : GL

Public instance Interface: Vsi-interface1

IPv6 address : BC80:0300:1000:0050:0200:0300:0100:0033

MAC address : 0002-0002-0001 Router MAC : a0ce-7e40-0422

VSI index : 0 Flags : GL

IPv6 address : BC10:0300:1000:0020:0200:0300:0100:0034

MAC address : 0002-0002-0002 Router MAC : a0ce-7e40-0433

VSI index : 0 Flags : GL

# Display the total number of EVPN ND entries.

<Sysname>display evpn route nd count

Total number of entries: 2

Table 30 Command output

Field	Description
Interface	VSI interface.
Flags	ND entry type: · D—The entry is dynamically learned. · B—The entry is learned from BGP EVPN routes. · L—The local entry is active. If this flag is not set and the B flag is set, the entry learned from BGP EVPN routes is active. · G—The entry for the gateway is active. · S—The static entry is active. · M—The entry from a remote VXLAN mapped to a local VXLAN is active. · I—The entry is invalid. Reasons: ¡ The VSI has been administratively shut down by using the shutdown command. ¡ The outgoing tunnel interface does not exist. · I—The entry is invalid. Reasons: ¡ The VSI has been administratively shut down by using the shutdown command. ¡ The outgoing tunnel interface does not exist. · E—The entry is synchronized between devices at a multihomed site. · F—The entry is from a leaf AC of EVPN E-tree.

Field

Description

Interface

VSI interface.

Flags

ND entry type:

· D—The entry is dynamically learned.

· B—The entry is learned from BGP EVPN routes.

· L—The local entry is active. If this flag is not set and the B flag is set, the entry learned from BGP EVPN routes is active.

· G—The entry for the gateway is active.

· S—The static entry is active.

· M—The entry from a remote VXLAN mapped to a local VXLAN is active.

· I—The entry is invalid. Reasons:

¡ The VSI has been administratively shut down by using the shutdown command.

¡ The outgoing tunnel interface does not exist.

· I—The entry is invalid. Reasons:

¡ The VSI has been administratively shut down by using the shutdown command.

¡ The outgoing tunnel interface does not exist.

· E—The entry is synchronized between devices at a multihomed site.

· F—The entry is from a leaf AC of EVPN E-tree.

display evpn route nd suppression

Use display evpn route nd suppression to display EVPN ND flood suppression entries.

Syntax

display evpn route nd suppression [ local | remote ] [ vsi vsi-name ] [ ipv6 ipv6-address ] [ count ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

local: Specifies local ND flood suppression entries.

remote: Specifies remote ND flood suppression entries.

vsi vsi-name: Specifies a VSI by its name, a case-sensitive string of 1 to 31 characters. If you do not specify this option, the command displays ND flood suppression entries for all VSIs.

ipv6 ipv6-address: Specifies an IPv6 address. If you do not specify this option, the command displays all ND flood suppression entries that match the criteria you specify.

count: Displays the number of ND flood suppression entries. If you do not specify this keyword, the command displays detailed information about ND flood suppression entries.

Usage guidelines

If you do not specify the local or remote keyword, this command displays both local and remote EVPN ND flood suppression entries.

Examples

# Display all EVPN ND flood suppression entries.

<Sysname> display evpn route nd suppression

Flags: D - Dynamic B - BGP L - Local active

G - Gateway S - Static M - Mapping I - Invalid

VSI name: vpna

IPv6 address MAC address Flags Encap

11::8 72cb-ce9b-0a06 DL VXLAN

11::9 0001-0001-0001 B VXLAN

# Display the total number of ND flood suppression entries.

<Sysname> display evpn route nd suppression count

Total number of entries: 2

Table 31 Command output

Field	Description
Flags	ARP flood suppression entry type: · D—The entry is dynamically learned. · B—The entry is learned from BGP EVPN routes. · L—The local entry is active. If this flag is not set and the B flag is set, the entry learned from BGP EVPN routes is active. · G—The entry for the gateway is active. · S—The static entry is active. · M—The entry from a remote VXLAN mapped to a local VXLAN is active. · I—The entry is invalid. Possible reasons: ¡ The VSI has been administratively shut down by using the shutdown command. ¡ The outgoing tunnel interface does not exist. · E—The entry is synchronized between devices at a multihomed site. · F—The entry is from a leaf AC of EVPN E-tree.
Encap	Packet encapsulation type: · MPLS. · VXLAN.

Field

Description

Flags

ARP flood suppression entry type:

· D—The entry is dynamically learned.

· B—The entry is learned from BGP EVPN routes.

· L—The local entry is active. If this flag is not set and the B flag is set, the entry learned from BGP EVPN routes is active.

· G—The entry for the gateway is active.

· S—The static entry is active.

· M—The entry from a remote VXLAN mapped to a local VXLAN is active.

· I—The entry is invalid. Possible reasons:

¡ The VSI has been administratively shut down by using the shutdown command.

¡ The outgoing tunnel interface does not exist.

· E—The entry is synchronized between devices at a multihomed site.

· F—The entry is from a leaf AC of EVPN E-tree.

Encap

Packet encapsulation type:

· MPLS.

· VXLAN.

display evpn route xconnect-group

Use display evpn route xconnect-group to display EVPN information about cross-connects.

Syntax

display evpn route xconnect-group [ name group-name [ connection connection-name ] ] [ count ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

name group-name: Specifies a cross-connect group by its name, a case-sensitive string of 1 to 31 characters. If you do not specify a cross-connect group, this command displays EVPN information about all cross-connect groups.

connection connection-name: Specifies a cross-connect by its name, a case-sensitive string of 1 to 20 characters excluding hyphens (-). If you do not specify a cross-connect, this command displays EVPN information about all cross-connects in the specified cross-connect group.

count: Displays the number of EVPN cross-connects. If you do not specify this keyword, the command displays detailed EVPN information.

Usage guidelines

If you do not specify any parameters, this command displays detailed EVPN information about all cross-connects.

Examples

# Display detailed EVPN information about all cross-connects.

<Sysname> display evpn route xconnect-group

Ctrl Flags: P - Primary, B - Backup, C - Control word

Xconnect group name: aa

Connection name: aaa

ESI : 0001.0002.0002.0002.0002

Local service ID : 16777215

Remote service ID : 16777214

Control word : Enabled

In label : 502

Local MTU : 1500

AC state : Up

PW type : VLAN

Nexthop ESI Out label Flags MTU State

192.123.123.123 0001.0002.0002.0002.0001 1299 PC 1500 Up

192.1.1.1 0001.0002.0002.0002.0001 1026 B 1500 Down

Connection name: aab

ESI : 0000.0000.0000.0000.0000

Local service ID : 1

Remote service ID : 2

Control word : Disabled

In label : 323

Local MTU : 1500

AC state : Up

PW type : VLAN

Nexthop ESI Out label Flags MTU State

192.1.1.1 0002.0002.0002.0002.0001 1234 P 1500 Up

192.2.1.2 0002.0002.0002.0002.0001 603 P 1500 Up

Connection name: aac

ESI : 0000.0000.0000.0000.0000

Local service ID : 3

Remote service ID : 4

Control word : Enabled

In label : -

Local MTU : 1500

AC state : Up

PW type : Ethernet

Nexthop ESI Out label Flags MTU State

192.1.1.3 0000.0000.0000.0000.0000 555 P 1500 Idle

Xconnect group name: vpna

Connection name: pw1

Encapsulation : SRv6

ESI : 0000.0000.0000.0000.0000

Local service ID : 1

Remote service ID : 2

In SID[DX2] : 100::1

In SID[DX2L] : -

Local MTU : 1500

AC State : Up

SRv6 Tunnel:

Next Hop : 2::2

ESI : 0000.0000.0000.0000.0000

Out SID : 200::1

Flags : P

MTU : 1500

State : Up

# Display the total number of EVPN cross-connects.

<Sysname> display evpn route xconnect-group count

Total number of entries: 2

Table 32 Command output

Field	Description
Xconnect group name	Cross-connect group name.
Connection name	Cross-connect name.
Encapsulation	EVPN encapsulation type: · VXLAN. · MPLS. · SRv6.
In label	PW incoming label.
Local MTU	Local MTU in bytes.
AC state	AC state: · Up. · Down. This field displays a hyphen (-) if no AC is configured.
PW type	PW data encapsulation type: · Ethernet. · VLAN.
Nexthop	Remote PE address.
Out label	PW outgoing label.
Flags	PW attribute flags: · P—The received route has the primary flag. A primary PW needs to be set up. · B—The received route has the backup flag. A backup PW needs to be set up. · C—The received route has the control word flag, which indicates that control word is enabled on the peer. For the EVPN PWs to come up, you must enable control word on the local device.
MTU	MTU in the received route, in bytes.
State	EVPN PW state: · Up. · Down. · Idle—The incoming or outgoing label is not available.
In SID[DX2]	Incoming End.DX2 SID.
In SID[DX2L]	Incoming End.DX2L SID.
Out SID	Outgoing SID.

display evpn routing-table

Use display evpn routing-table to display EVPN routing table information.

Syntax

display evpn routing-table [ ipv6 ] { public-instance | vpn-instance vpn-instance-name } [ count ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

ipv6: Specifies IPv6 information. If you do not specify this keyword, the command displays IPv4 information.

public-instance: Specifies the public instance.

vpn-instance vpn-instance-name: Specifies an MPLS L3VPN instance by its name, a case-sensitive string of 1 to 31 characters.

count: Displays the number of entries in the routing table. If you do not specify this keyword, the command displays detailed information about the routing table.

Examples

# Display the EVPN IPv4 routing table for VPN instance vpn1 of an EVPN network with distributed gateways.

<Sysname> display evpn routing-table vpn-instance vpn1

Flags: E - with valid ESI A – A-D ready L - Local ES exists

VPN instance name: vpn1 Local L3VNI: 7

IP address Nexthop Outgoing interface NibID Flags

10.1.1.11 1.1.1.1 Vsi-interface3 0x18000000 -

10.1.1.12 2.2.2.2 Vsi-interface3 0x18000001 -

# Display the EVPN IPv4 routing table for VPN instance vpnb of an SRv6 network with distributed gateways.

<Sysname> display evpn routing-table vpn-instance vpnb

Flags: E - with valid ESI A – A-D ready L - Local ES exists

VPN instance: vpnb

Local SID : BC10:0300:1000:0020:0200:0300:0100:0034

IP address : 10.0.0.2

Nexthop : BC10:0300:1000:0020:0200:0300:0100:0035

NibID : 0x18000000

Flags : EA

Remote SID : BC10:0300:1000:0020:0200:0300:0100:0034

# Display the EVPN IPv4 routing table for the public instance of an EVPN network with distributed gateways.

<Sysname> display evpn routing-table public-instance

Flags: E - with valid ESI A – A-D ready L - Local ES exists

Public instance Local L3VNI: 3900

IP address Nexthop Outgoing interface NibID Flags

10.1.1.11 1.1.1.1 Vsi-interface3 0x18000000 -

10.1.1.12 2.2.2.2 Vsi-interface3 0x18000001 -

# Display the number of EVPN route entries in the IPv4 routing table for VPN instance vpn1.

<Sysname> display evpn routing-table vpn-instance vpn1 count

Total number of entries: 2

# Display the EVPN IPv6 routing table for VPN instance vpna in an EVPN network with distributed gateways deployed.

<Sysname> display evpn routing-table ipv6 vpn-instance vpna

Flags: E - with valid ESI A – A-D ready L - Local ES exists

VPN instance: vpna Local L3VNI: 7

IPv6 address : BC10:0300:1000:0020:0200:0300:0100:0034

Outgoing interface : Vsi-interface3

Next hop : 1.1.1.1

NibID : 0x18000000

Flags : E

IPv6 address : BC10:0300:1000:0020:0200:0300:0100:0035

Outgoing interface : Vsi-interface3

Next hop : 2.2.2.2

NibID : 0x18000001

Flags : E

Table 33 Command output

Field	Description
Local L3VNI	L3 VXLAN ID associated with the VPN instance or the public instance.
NibID	Next hop ID.
Local SID	SID of the local SRv6 distributed gateway.
Remote SID	SID of a remote SRv6 distributed gateway.
Flags	Flags of the route: · E—The route carries a valid ESI. · A—An Ethernet auto-discovery route has been received. The ECMP routes to the next hop are ready to be issued. · L—A local active ESI exists. The remote route is not issued.

display l2vpn forwarding evpn

Use display l2vpn forwarding evpn to display forwarding information of EVPN VPLS/VPWS and EVPN VPLS/VPWS over SRv6.

Syntax

display l2vpn forwarding evpn [ vsi [ name vsi-name ] [ verbose ] ] slot slot-number

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

vsi: Specifies VSI forwarding information. If you do not specify this keyword, the command displays both VSI and cross-connect forwarding information about EVPN.

name vsi-name: Specifies a VSI by its name, a case-sensitive string of 1 to 31 characters. If you do not specify this option, the command displays forwarding information about all VSIs.

verbose: Displays detailed forwarding information. If you do not specify this keyword, the command displays brief forwarding information.

slot slot-number: Specifies a card by its slot number.

Examples

# Display brief forwarding information about all VSIs of EVPN VPLS on slot 1.

<Sysname> display l2vpn forwarding evpn vsi slot 1

Total number of VSIs: 2

VSI name VSI index

vpls1 0

# Display detailed forwarding information about all VSIs of EVPN VPLS on slot 1.

<Sysname> display l2vpn forwarding evpn vsi verbose slot 1

VSI name: vpls1

VSI index : 0

Encapsulation : MPLS

MPLS label : 1150

IMET MPLS label : 1149

Control word : enabled

PW type : Ethernet

Sequencing : Both

Flow label : Both

Table 34 Command output

Field	Description
Encapsulation	EVPN encapsulation type: · MPLS. · SRv6.
MPLS label	MPLS label in MAC/IP advertisement routes.
IMET MPLS label	MPLS label in IMET routes.
Control word	Status of the control word feature: · enabled. · disabled.
PW type	PW type: · Ethernet. · VLAN.
Sequencing	Sequencing on the PW. The value is Both. A hyphen (-) in this field indicates that sequencing is disabled on the PW.
Flow label	Flow label capability: · Both—Flow label sending and receiving capabilities. · Send—Flow label sending capability. · Recv—Flow label receiving capability. This field displays a hyphen (-) if the flow label feature is disabled.
Dt2u SID	SRv6 SID used for unicast forwarding.
Dt2ul SID	SRv6 SID used for unicast forwarding over the bypass tunnel at the multihomed site.
Dt2m SID	SRv6 SID used for multicast forwarding.

Related commands

evpn encapsulation

vsi

display l2vpn forwarding evpn split-horizon

Use display l2vpn forwarding evpn split-horizon to display site-facing interfaces excluded from traffic forwarding by split horizon.

Syntax

display l2vpn forwarding evpn split-horizon { ac interface interface-type interface-number | ac interface interface-type interface-number service-instance instance-id | tunnel tunnel-number } slot slot-number

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

ac interface interface-type interface-number: Specifies a Layer 3 interface by its type and number. These parameters apply to EVPN VPLS.

ac interface interface-type interface-number service-instance instance-id: Specifies an Ethernet service instance on a Layer 2 interface. The interface-type interface-number argument specifies the interface by its type and number. The instance-id argument specifies the Ethernet service instance by its ID in the range of 1 to 4096. These parameters apply to EVPN VPLS.

tunnel tunnel-number: Specifies a VXLAN tunnel interface number. The VXLAN tunnel interface must exist. If you do not specify this option, the command displays all site-facing interfaces excluded from traffic forwarding by split horizon. This option applies to EVPN VXLAN.

slot slot-number: Specifies a card by its slot number.

Examples

# Display site-facing interfaces excluded from traffic forwarding for Tunnel 0.

<Sysname> display l2vpn forwarding evpn split-horizon tunnel 0

Tunnel name: 0

Total number of filtered interfaces: 2

Filtered interfaces:

HGE1/0/1

HGE1/0/2

# For EVPN VPLS, display site-facing interfaces excluded from traffic forwarding for AC HundredGigE 1/0/1.

<Sysname> display l2vpn forwarding evpn split-horizon ac interface hundredgige 1/0/1

Interface name : HundredGigE1/0/1

AC link ID : 0

Service instance ID : 100

PW count : 2

VSI name PW link ID ESI label

vpna 8 775128

vpna 9 775128

# For EVPN VPLS over SRv6, display site-facing interfaces excluded from traffic forwarding for AC HundredGigE 1/0/1.

<Sysname> display l2vpn forwarding evpn split-horizon ac interface hundredgige 1/0/1

Interface name : HundredGigE1/0/1

AC link ID : 0

Service instance ID : 100

SRv6 tunnel count : 2

VSI name SRv6 link ID Argument

vpna 0x8 ::1

vpna 0x9 ::1

Table 35 Command output

Field	Description
Tunnel name	VXLAN tunnel interface name.
Argument	Argument that identifies a leaf AC. E-Tree isolates traffic among leaf ACs based on arguments in an EVPN VPLS over SRv6 network. This field displays a hyphen (-) if no argument exists.
Filtered interfaces	Site-facing interfaces that do not forward the flood traffic received from the VXLAN tunnel.

esi

Use esi to assign an ESI to an interface or UPW.

Use undo esi to restore the default.

Syntax

esi esi-id

undo esi

Default

No ESI is assigned to an interface or UPW.

Views

Interface view

Cross-connect PW view

Predefined user roles

network-admin

Parameters

esi-id: Specifies an ES by its ESI in XXXX.XXXX.XXXX.XXXX.XXXX format. Each X represents a hexadecimal digit. The ESI must begin with 00 and cannot be all zeros.

Usage guidelines

An ESI uniquely identifies an ES. The links on interfaces, UPWs, or VSIs with the same ESI belong to the same ES. Traffic of the ES can be distributed among the links for load sharing.

You can assign ESIs to a main interface and its subinterfaces.

· If you assign an ESI to a subinterface, the subinterface-specific ESI and ES configuration take precedence over those configured on the main interface. The ES configuration includes the following:

¡ evpn redundancy-mode.

¡ evpn df-election algorithm.

¡ evpn df-election preference.

¡ evpn df-election preference non-revertive.

¡ evpn timer es-delay.

· If you do not assign an ESI to a subinterface, it inherits the ESI and redundancy mode (if configured) of the main interface. In this scenario, the redundancy mode configured on the subinterface does not take effect.

You can assign an ESI to a VSI LDP PW or VSI static PW only if you do not specify the no-split-horizon or dci keyword when executing the peer command for the PW.

To modify the ESI of an interface, UPW, or VSI, first use the undo esi command to delete the original ESI.

Examples

# Assign ESI 0000.0001.0002.0003.0004 to HundredGigE 1/0/1.

<Sysname> system-view

[Sysname] interface hundredgige 1/0/1

[Sysname-HundredGigE1/0/1] esi 0000.0001.0002.0003.0004

Related commands

peer (MPLS Command Reference)

evpn m-lag group

Use evpn m-lag group to enable EVPN M-LAG and specify the virtual VTEP address.

Use undo evpn m-lag group to restore the default.

Syntax

evpn m-lag group { virtual-vtep-ipv4 | virtual-vtep-ipv6 }

undo evpn m-lag group

Default

EVPN M-LAG is disabled.

Views

System view

Predefined user roles

network-admin

Parameters

virtual-vtep-ipv4: Specifies the virtual IPv4 VTEP address.

virtual-vtep-ipv6: Specifies the virtual IPv6 VTEP address.

Usage guidelines

EVPN M-LAG virtualizes two VTEPs or EDs into one M-LAG system to avoid single points of failure. The VTEPs or EDs use a virtual VTEP address to establish VXLAN or VXLAN-DCI tunnels to remote devices.

For the device to re-establish VXLAN tunnels, you must execute the address-family l2vpn evpn command in BGP instance view after you enable or disable EVPN M-LAG.

To modify the virtual VTEP address, you must first delete the original virtual VTEP address.

EVPN M-LAG is mutually exclusive with EVPN-DCI dual-homing. Do not use the evpn edge group and evpn m-lag group commands together.

The evpn m-lag group and evpn m-lag local commands must specify three IPv4 or IPv6 addresses. Mixed use of IPv4 and IPv6 addresses is not allowed.

Examples

# Enable EVPN M-LAG and specify the virtual VTEP address as 1.1.1.1.

<Sysname> system-view

[Sysname] evpn m-lag group 1.1.1.1

evpn m-lag local

Use evpn m-lag local to specify the IP addresses of the VTEPs in an M-LAG system.

Use undo evpn m-lag local to restore the default.

Syntax

evpn m-lag local { local-ipv4-address remote remote-ipv4-address | local-ipv6-address remote remote-ipv6-address }

undo evpn m-lag local

Default

The IP addresses of the VTEPs in an M-LAG system are not specified.

Views

System view

Predefined user roles

network-admin

Parameters

local-ipv4-address: Specifies the IPv4 address of the local VTEP.

local-ipv6-address: Specifies the IPv6 address of the local VTEP.

remote remote-ip: Specifies the IP address of the peer VTEP.

remote-ipv4-address: Specifies the IPv4 address of the peer VTEP.

remote-ipv6-address: Specifies the IPv6 address of the peer VTEP.

Usage guidelines

An AC that is attached to only one of the VTEPs in an M-LAG system is called a single-armed AC. After you configure this command, each VTEP in an M-LAG system changes the next hop of the routes for single-armed ACs to its local VTEP IP address when advertising the routes. This ensures that the traffic of a single-armed AC is forwarded to its attached VTEP. When a VTEP receives BGP EVPN routes from the peer VTEP IP address specified by using this command, it does not set up a VXLAN tunnel to the peer VTEP.

You must execute this command if single-armed ACs are attached to an M-LAG system that uses a direct peer link. You do not need to execute this command on an M-LAG system that uses a tunnel peer link. In such an M-LAG system, a VTEP uses the source IP address of the peer link as the next hop of routes for single-armed ACs to ensure correct traffic forwarding.

When you execute this command, make sure the IP address of the local VTEP belongs to a local interface. Make sure the local VTEP IP address and peer VTEP IP address are reversed on the VTEPs in an M-LAG system.

Do not use this command on EDs.

The evpn m-lag group and evpn m-lag local commands must specify three IPv4 or IPv6 addresses. Mixed use of IPv4 and IPv6 addresses is not allowed.

Examples

# Specify the IP addresses of the local and peer VTEPs in the M-LAG system as 2.2.2.2 and 3.3.3.3, respectively.

<Sysname> system-view

[Sysname] evpn m-lag local 2.2.2.2 remote 3.3.3.3

evpn encapsulation

Use evpn encapsulation to create an EVPN instance and enter its view, or enter the view of an existing EVPN instance.

Use undo evpn encapsulation to restore the default.

Syntax

In VSI view:

evpn encapsulation [ mpls | vxlan ]

undo evpn encapsulation

In cross-connect group view:

evpn encapsulation mpls

undo evpn encapsulation

Default

No EVPN instance exists.

Views

VSI view

Cross-connect group view

Predefined user roles

network-admin

Parameters

mpls: Specifies MPLS encapsulation.

vxlan: Specifies VXLAN encapsulation.

Usage guidelines

Before you can configure EVPN settings, you must create an EVPN instance.

This command is mutually exclusive with the evpn encapsulation binding instance command on a VSI.

Examples

# Create a VSI EVPN instance and enter its view.

<Sysname> system-view

[Sysname] vsi aaa

[Sysname-vsi-aaa] evpn encapsulation vxlan

[Sysname-vsi-aaa-evpn-vxlan]

evpn encapsulation binding instance

Use evpn encapsulation binding instance to bind a VSI to an EVPN instance.

Use undo evpn encapsulation binding to restore the default.

Syntax

evpn encapsulation { mpls | srv6 } binding instance instance-name [ vsi-tag tag-id ]

undo evpn encapsulation { mpls | srv6 } binding

evpn encapsulation vxlan binding instance instance-name [ vsi-tag { tag-id | auto-vxlan } ]

undo evpn encapsulation vxlan binding

Views

VSI view

Default

A VSI is not bound to any EVPN instance.

Predefined user roles

network-admin

Parameters

mpls: Specifies MPLS encapsulation.

srv6: Specifies SRv6 encapsulation.

vxlan: Specifies VXLAN encapsulation.

instance-name: Specifies an EVPN instance by its name, a case-sensitive string of 1 to 31 characters.

vsi-tag: Specifies a VSI tag ID. An EVPN instance uses tag IDs to identify VSIs when it is bound to multiple VSIs. If you do not specify a tag ID, the tag ID 0 is assigned to the VSI.

tag-id: Specifies a tag ID. For VXLAN encapsulation, the value range for this argument is 1 to 16777215. For MPLS and SRv6 encapsulation, the value range for this argument is 1 to 4094.

auto-vxlan: Automatically generates a tag ID based on the VXLAN ID of the VSI.

Usage guidelines

This command is applicable only to EVPN VXLAN, EVPN VPLS, and EVPN VPLS over SRv6.

You can bind a VSI to one or two EVPN instances. If you bind two EVP instances to a VSI, make sure one EVPN instance uses MPLS or SRv6 encapsulation and the other uses VXLAN encapsulation.

This command is mutually exclusive with the evpn encapsulation command. You cannot use them together on the same VSI.

Examples

# Bind VSI vpna to EVPN instance evpna.

<Sysname> system-view

[Sysname] vsi vpna

[Sysname -vsi-vpna] evpn encapsulation vxlan binding instance evpna vsi-tag auto-vxlan

Related commands

evpn encapsulation

evpn instance

evpn global-mac

Use evpn global-mac to configure the EVPN global MAC address.

Use undo evpn global-mac to restore the default.

Syntax

evpn global-mac mac-address

undo evpn global-mac

Default

No EVPN global MAC address is configured.

Views

System view

Predefined user roles

network-admin

Parameters

mac-address: Specifies a MAC address in H-H-H format. Do not specify a multicast MAC address, broadcast MAC address, or all-zeros MAC address.

Usage guidelines

The EVPN global MAC address is used only by VSI interfaces associated with an L3 VXLAN ID.

For a VSI interface associated with an L3 VXLAN ID, the MAC address assigned to it by using the mac-address command takes precedence over the EVPN global MAC address.

Do not use a reserved MAC address as the EVPN global MAC address.

Examples

# Configure the EVPN global MAC address as 0001-0001-0001.

<Sysname> system-view

[Sysname] evpn global-mac 1-1-1

evpn df-election algorithm (interface view)

Use evpn df-election algorithm to configure the DF election algorithm on an interface.

Use undo evpn df-election algorithm to restore the default.

Syntax

evpn df-election algorithm algorithm

undo evpn df-election algorithm

Default

The DF election algorithm specified in system view takes effect.

Views

Interface view

Predefined user roles

network-admin

Parameters

Algorithm: Specifies a DF election algorithm. The value of this argument can only be preference, which represents the preference-based algorithm.

Usage guidelines

At a multihomed EVPN network site, you can modify the DF election algorithm with this command to control the DF election result.

You can configure the DF election algorithm in system view and in interface view. The global DF election algorithm takes effect on all ESs, and the interface-specific DF election algorithm takes effect only on the ESs on an interface. The interface-specific DF election algorithm takes precedence over the global DF election algorithm.

Examples

# Configure HundredGigE 1/0/1 to use the preference-based algorithm for DF election.

<Sysname> system-view

[Sysname] interface hundredgige 1/0/1

[Sysname-HundredGigE1/0/1] evpn df-election algorithm preference

Related commands

evpn df-election algorithm (system view)

evpn df-election preference

evpn df-election algorithm (system view)

Use evpn df-election algorithm to configure the DF election algorithm globally.

Use undo evpn df-election algorithm to restore the default.

Syntax

evpn df-election algorithm algorithm

undo evpn df-election algorithm

Default

The VLAN tag-based algorithm is used for DF election.

Views

System view

Predefined user roles

network-admin

Parameters

Algorithm: Specifies a DF election algorithm. The value of this argument can only be preference, which represents the preference-based algorithm.

Usage guidelines

At a multihomed EVPN network site, you can modify the DF election algorithm with this command to control the DF election result.

Examples

# Configure the global DF election algorithm as the preference-based algorithm.

<Sysname> system-view

[Sysname] evpn df-election algorithm preference

Related commands

evpn df-election algorithm (interface view)

evpn df-election preference

Use evpn df-election preference to set the DF election preference.

Use undo evpn df-election preference to restore the default.

Syntax

evpn df-election preference preference

undo evpn df-election preference

Default

The DF election preference is 32767.

Views

Interface view

Predefined user roles

network-admin

Parameters

Preference: Sets the DF election preference in the range of 0 to 65535. The larger the value, the higher the preference.

Usage guidelines

Use this command to set the preference used in preference-based DF election. The device with higher preference will be elected as the DF.

This command takes effect after the evpn df-election algorithm preference command is executed in interface view or system view.

Examples

# Set the DF election preference to 100.

<Sysname> system-view

[Sysname] interface hundredgige 1/0/1

[Sysname-HundredGigE1/0/1] evpn df-election preference 100

Related commands

evpn df-election algorithm (interface view)

evpn df-election algorithm (system view)

evpn df-election preference non-revertive

Use evpn df-election preference non-revertive to enable non-revertive mode for preference-based DF election.

Use undo evpn df-election preference non-revertive to disable non-revertive mode for preference-based DF election.

Syntax

evpn df-election preference non-revertive

undo evpn df-election preference non-revertive

Default

Non-revertive mode is disabled for preference-based DF election.

Views

Interface view

Predefined user roles

network-admin

Usage guidelines

Preference-based DF election selects the device with the highest preference as the DF. The BDF takes over the DF role if one of the following events occurs:

· The DF fails.

· The site-facing link on the DF fails.

· The DF election preference of the BDF is set to be higher than that of the DF.

When the original DF or its site-facing link recovers, or its preference is set to be higher than that of the new DF, the original DF will take over the DF role. To avoid undesired traffic loss, you can disable reversion to the original DF by enabling non-revertive mode for preference-based DF election.

This command takes effect after the evpn df-election algorithm preference command is executed in interface view or system view.

Examples

# Enable non-revertive mode for preference-based DF election.

<Sysname> system-view

[Sysname] interface hundredgige 1/0/1

[Sysname-HundredGigE1/0/1] evpn df-election preference non-revertive

Related commands

evpn df-election algorithm (interface view)

evpn df-election algorithm (system view)

evpn frr local (cross-connect group EVPN instance view)

Use evpn frr local enable to enable local fast reroute (FRR) on an EVPN instance.

Use evpn frr local disable to disable local FRR on an EVPN instance and delete the existing bypass PW.

undo evpn frr local to restore the default.

Syntax

evpn frr local { disable | enable }

undo evpn frr local

Default

An EVPN instance uses the global local FRR configuration of EVPN VPWS.

Views

Cross-connect group EVPN instance view

Predefined user roles

network-admin

Usage guidelines

Local FRR enables two PEs at a multihomed EVPN VPWS network site to set up a bypass PW between them. This feature helps reduce the traffic loss caused by AC failure.

At a multihomed EVPN VPWS network site, CE 1 is dualhomed to PE 1 and PE 2, and PE 1 is the DF. When the AC on PE 1 fails, PE 1 advertises the local unreachable event to PE 2 and remote PEs for the remote PEs to switch traffic to the PWs to PE 2. In this situation, PE 1 drops the packets that the remote PEs send before they are notified of the local unreachable event. To resolve this issue, enable local FRR on PE 1 and PE 2. When receiving packets from the remote PEs after its AC fails, PE 1 forwards the packets to PE 2 over the bypass PW to prevent traffic loss.

On an EVPN instance, EVPN instance-specific local FRR configuration takes precedence over global local FRR configuration.

Examples

# Enable local FRR on the EVPN instance of cross-connect group aa.

<Sysname> system-view

[Sysname] xconnect-group aa

[Sysname-xcg-1] evpn encapsulation mpls

[Sysname-xcg-1-evpn-mpls] evpn frr local enable

Related commands

evpn multihoming vpws-frr local

evpn frr local (EVPN instance view and VSI EVPN instance view)

Use evpn frr local enable to enable local FRR on an EVPN instance.

Use evpn frr local disable to disable local FRR on an EVPN instance.

Use undo evpn frr local to restore the default.

Syntax

evpn frr local { disable | enable }

undo evpn frr local

Default

An EVPN instance uses the global local FRR configuration of EVPN VPLS.

Views

EVPN instance view

VSI EVPN instance view

Predefined user roles

network-admin

Usage guidelines

Local FRR enables two PEs at a multihomed EVPN VPLS network site to set up a PW between them. This feature helps reduce the traffic loss caused by AC failure.

At a multihomed EVPN VPLS network site, CE 1 is dualhomed to PE 1 and PE 2, and PE 1 is the DF. When the AC on PE 1 fails, PE 1 deletes the corresponding MAC address entries and advertises the local unreachable event to PE 2 and remote PEs. Then, the remote PEs will switch traffic to the tunnels to PE 2. In this situation, PE 1 drops the packets that the remote PEs send before they are notified of the local unreachable event as the AC's MAC address entries have been deleted. To resolve this issue, enable local FRR on PE 1. If an AC fails, PE 1 changes the outgoing interface of the AC's MAC address entries to the index of the PW between PE 1 and PE 2. When receiving packets from remote PEs after its AC fails, PE 1 forwards the packets to PE 2 over the PW to prevent traffic loss.

On an EVPN instance, EVPN instance-specific local FRR configuration takes precedence over global local FRR configuration.

Examples

# Enable local FRR on the EVPN instance of VSI vpna.

<Sysname> system-view

[Sysname] vsi vpna

[Sysname-vsi-vpna] evpn encapsulation mpls

[Sysname-vsi-vpna-evpn-mpls] evpn frr local enable

Related commands

evpn multihoming vpls-frr local

evpn frr remote

Use evpn frr remote enable to enable remote FRR on an EVPN instance.

Use evpn frr remote disable to disable remote FRR on an EVPN instance and delete existing backup PWs.

Use undo evpn frr remote to restore the default.

Syntax

evpn frr remote [ disable | enable ]

undo evpn frr remote

Default

An EVPN instance uses the global remote FRR configuration of EVPN VPWS.

Views

Cross-connect group EVPN instance view

Predefined user roles

network-admin

Usage guidelines

Remote FRR enables two PEs on an EVPN VPWS or EVPN VPWS over SRv6 network to set up a primary PW and a backup PW between them to ensure high availability. The PEs use the primary PW to forward traffic as long as it is available. When the primary PW fails, the PEs switch traffic to the backup PW.

Remote FRR is supported by EVPN instances that use MPLS encapsulation or SRv6 encapsulation.

On an EVPN instance, EVPN instance-specific remote FRR configuration takes precedence over global remote FRR configuration.

Examples

# Enable remote FRR on the EVPN instance of cross-connect group xcga.

<Sysname> system-view

[Sysname] xconnect-group xcga

[Sysname-xcg-xcga] evpn encapsulation mpls

[Sysname-xcg-xcga-evpn-mpls] evpn frr remote enable

Related commands

evpn vpws-frr remote

evpn instance

Use evpn instance to create an EVPN instance and enter its view, or enter the view of an existing EVPN instance.

Use undo evpn instance to delete an EVPN instance.

Syntax

evpn instance instance-name

undo evpn instance instance-name

Views

System view

Default

No EVPN instance exists.

Predefined user roles

network-admin

Parameters

instance-name: Specifies an EVPN instance name, a case-sensitive string of 1 to 31 characters.

Usage guidelines

You must create an EVPN instance before you can configure EVPN on it.

You can bind an EVPN instance created in system view to multiple VSIs to simplify configuration.

Examples

# Create EVPN instance evpn1 and enter its view.

<Sysname> system-view

[Sysname] evpn instance evpn1

[Sysname-evpn-instance-evpn1]

evpn irb asymmetric

Use evpn irb asymmetric to enable asymmetric IRB for EVPN VXLAN.

Use undo evpn irb asymmetric to restore the default.

Syntax

evpn irb asymmetric [ route-policy route-policy-name ]

undo evpn irb asymmetric

Default

Symmetric IRB is enabled for EVPN VXLAN.

Views

System view

Predefined user roles

network-admin

Parameters

route-policy route-policy-name: Specifies a routing policy by its name, a case-sensitive string of 1 to 63 characters. The device will perform asymmetric IRB forwarding for the traffic that matches the routing policy. If you do not specify a routing policy or the specified routing policy does not exist, the device performs asymmetric IRB forwarding for all traffic.

Usage guidelines

Use this command to set the IRB mode for EVPN VXLAN.

Examples

# Enable asymmetric IRB for EVPN VXLAN.

<Sysname> system-view

[Sysname] evpn irb asymmetric

evpn local-service-id remote-service-id

Use evpn local-service-id remote-service-id to create an EVPN PW.

Use undo evpn local-service-id remote-service-id to delete an EVPN PW.

Syntax

evpn local-service-id local-service-id remote-service-id remote-service-id [ tunnel-policy tunnel-policy-name ] [ pw-class class-name ]

undo evpn local-service-id local-service-id remote-service-id remote-service-id

Default

No EVPN PWs exist.

Views

Cross-connect view

Predefined user roles

network-admin

Parameters

local-service-id: Specifies a local service ID in the range of 1 to 16777215.

remote-service-id: Specifies a remote service ID in the range of 1 to 16777215.

tunnel-policy tunnel-policy-name: Specifies a tunnel policy by its name, a case-sensitive string of 1 to 19 characters. If you do not specify a tunnel policy, the PW uses the default tunnel policy.

pw-class class-name: Specifies a PW class by its name, a case-sensitive string of 1 to 19 characters. You can specify a PW class to configure the PW data encapsulation type and control word for the PW. If you do not specify a PW class, the PW data encapsulation type is determined by the link type of the interface. The control word feature is not supported for PW data encapsulation types that do not require using control word.

Usage guidelines

You can use the evpn local-service-id remote-service-id command to concatenate two EVPN PWs on the same cross-connect.

To modify an EVPN PW, first use the undo evpn local-service-id remote-service-id command to delete the original EVPN PW.

If you set up an EVPN PW with a redundant PE at the local site, the device uses the BFD configuration in the PW class specified in the evpn local-service-id remote-service-id command.

· If the EVPN PW is a primary EVPN PW, the device establishes a dynamic BFD session for the EVPN PW.

· If the EVPN PW is a backup or ECMP EVPN PW, the device does not establish a dynamic BFD session for the EVPN PW.

Examples

# Create an EVPN PW, and specify tunnel policy aaa and PW class bbb for it.

<Sysname> system-view

[Sysname] xconnect-group aaa

[Sysname-xcg-aaa] connection ac2pw

[Sysname-xcg-aaa-ac2pw] evpn local-service-id 2 remote-service-id 4 tunnel-policy aaa pw-class bbb

evpn mac-ip advertise distributed-gateway

Use evpn mac-ip advertise distributed-gateway to enable the device to advertise ARP information for the distributed EVPN gateway interfaces through MAC/IP advertisement routes.

Use undo evpn mac-ip advertise distributed-gateway to disable the device from advertising ARP information for the distributed EVPN gateway interfaces through MAC/IP advertisement routes.

Syntax

evpn mac-ip advertise distributed-gateway

undo evpn mac-ip advertise distributed-gateway

Default

By default, the device does not advertise ARP information for the distributed EVPN gateway interfaces through MAC/IP advertisement routes.

Views

System view

Predefined user roles

network-admin

Usage guidelines

If a distributed EVPN gateway has downstream VTEPs attached, the gateway advertises ARP information for gateway interfaces through IP prefix advertisement routes. Because the VTEPs do not have gateway configuration, they cannot learn the ARP information for the gateway interfaces or forward traffic to the gateway. For the VTEPs to learn ARP information for the gateway interfaces, enable the distributed EVPN gateway to advertise ARP information for the gateway interfaces through MAC/IP advertisement routes.

Examples

# Enable the device to advertise ARP information for the distributed EVPN gateway interfaces through MAC/IP advertisement routes.

<Sysname> system-view

[Sysname] evpn mac-ip advertise distributed-gateway

evpn mpls routing-enable

Use evpn mpls routing-enable to enable EVPN to advertise the routes of a VPN instance.

Use undo evpn mpls routing-enable to disable EVPN from advertising the routes of a VPN instance.

Syntax

evpn mpls routing-enable

undo evpn mpls routing-enable

Default

EVPN does not advertise the routes of VPN instances.

Views

VPN instance IPv4 address family view

VPN instance IPv6 address family view

Predefined user roles

network-admin

Usage guidelines

This command enables devices to exchange the routes of a VPN instance by using IP prefix advertisement routes with MPLS encapsulation. After you execute this command for a VPN instance, the device advertises the routes of the VPN instance through IP prefix advertisement routes. When receiving IP prefix advertisement routes with MPLS encapsulation, the device adds the routes that belong to the VPN instance to the routing table.

For EVPN to add MPLS encapsulation to IP prefix advertisement routes, you must execute the peer advertise encap-type mpls command in BGP EVPN address family view.

Examples

# Enable EVPN to advertise the IPv4 routes of VPN instance vpna.

<Sysname> system-view

[Sysname] ip vpn-instance vpna

[Sysname-vpn-instance-vpna] address-family ipv4

[Sysname-vpn-ipv4-vpna] evpn mpls routing-enable

Related commands

peer advertise encap-type mpls

evpn multihoming advertise disable

Use evpn multihoming advertise disable to disable advertisement of EVPN multihoming routes and withdraw the EVPN multihoming routes that have been advertised to remote sites.

Use undo evpn multihoming advertise disable to restore the default.

Syntax

evpn multihoming advertise disable

undo evpn multihoming advertise disable

Default

The device advertises EVPN multihoming routes.

Views

System view

Predefined user roles

network-admin

Usage guidelines

EVPN multihoming routes include Ethernet auto-discovery routes and Ethernet segment routes.

In a multihomed EVPN network, execute this command on a redundant VTEP or PE before you reboot it. This operation allows other VTEPs or PEs to refresh their EVPN routing table to prevent traffic interruption caused by the reboot.

Examples

# Disable advertisement of EVPN multihoming routes and withdraw the EVPN multihoming routes that have been advertised to remote sites.

<Sysname> system-view

[Sysname] evpn multihoming advertise disable

evpn multihoming advertise ignore-ethernet-tag

Use evpn multihoming advertise ignore-ethernet-tag to enable the device to ignore the Ethernet tag when advertising Ethernet auto-discovery routes and MAC/IP advertisement routes.

Use undo evpn multihoming advertise ignore-ethernet-tag to restore the default.

Syntax

evpn multihoming advertise ignore-ethernet-tag

undo evpn multihoming advertise ignore-ethernet-tag

Default

By default, the device advertises Ethernet auto-discovery routes and MAC/IP advertisement routes that carry Ethernet tags.

Views

System view

Predefined user roles

network-admin

Usage guidelines

Use this command on the redundant PEs at a dualhomed site.

This command enables the device to do the following:

· Withdraw the Ethernet auto-discovery routes and MAC/IP advertisement routes that have been advertised.

· Set the Ethernet tag to 0 for the Ethernet auto-discovery routes and MAC/IP advertisement routes and re-advertise them.

After you configure ESIs for ACs on the redundant edge devices at a dualhomed site, the edge devices advertise Ethernet auto-discovery routes and MAC/IP advertisement routes that carry Ethernet tags. If the remote peers are unable to identify Ethernet tags, you must execute this command on the redundant edge devices to enable communication with the peers.

When you use this command, follow these restrictions and guidelines:

· After you assign an ESI to a Layer 2 Ethernet or aggregate interface, you must map the Ethernet service instances created on the interface to different VSIs. If two interfaces use the same ESI, you must map the Ethernet service instances created on them to different VSIs.

· After you assign an ESI to a Layer 3 main interface, its subinterfaces inherit the ESI if they do not have one. In addition, you must map two subinterfaces to different VSIs if the subinterfaces have the same ESI.

Examples

# Enable the device to ignore the Ethernet tag when advertising Ethernet auto-discovery routes and MAC/IP advertisement routes.

<Sysname> system-view

[Sysname] evpn multihoming advertise ignore-ethernet-tag

Related commands

esi

evpn multihoming re-originated mac

Use evpn multihoming re-originated mac to enable the device to generate MAC address entries for received MAC/IP advertisement routes.

Use undo evpn multihoming re-originated mac to restore the default.

Syntax

evpn multihoming re-originated mac

undo evpn multihoming re-originated mac

Default

The device does not generate MAC address entries for received MAC/IP advertisement routes.

Views

System view

Predefined user roles

network-admin

Usage guidelines

This command helps reduce the traffic loss caused by AC failure at a dualhomed EVPN VPLS network site.

At a multihomed EVPN VPLS network site, CE 1 is dualhomed to PE 1 and PE 2 through an aggregate link or smart trunk, and PE 3 is at a remote site. PE 1 forwards all traffic sent from CE 1 to the remote site, and PE 3 forwards the traffic that the remote site sends to CE 1 to both PE 1 and PE 2. When the AC on PE 1 fails, PE 1 withdraws the MAC/IP advertisement routes advertised to PE 2 and PE 3. In this situation, PE 3 does not have MAC address entries for CE 1 until PE 2 learns MAC address entries for CE 1 and advertises them to PE 3. As a result, traffic interruption occurs.

To resolve this issue, execute the evpn multihoming re-originated mac command on PE 2. When receiving the MAC/IP advertisement routes advertised by PE 1, PE 2 generates MAC address entries for the routes and advertises the entries to PE 3. PE 3 can use those MAC address entries to forward traffic to CE 1 when the AC on PE 1 fails.

You must enable local FRR for EVPN VPLS before you execute this command.

Examples

# Enable the device to generate MAC address entries for received MAC/IP advertisement routes.

<Sysname> system-view

[Sysname] evpn multihoming re-originated mac

Related commands

evpn frr local (VSI EVPN instance view)

evpn multihoming vpls-frr local

evpn multihoming timer df-delay

Use evpn multihoming timer df-delay to set the DF election delay.

Use undo evpn multihoming timer df-delay to restore the default.

Syntax

evpn multihoming timer df-delay delay-value

undo evpn multihoming timer df-delay

Default

The DF election delay is 3 seconds.

Views

System view

Predefined user roles

network-admin

Parameters

delay-value: Specifies the DF election delay, in the range of 1 to 1200 seconds.

Usage guidelines

DF election delay defines the minimum interval allowed between two DF elections.

The DF election can be triggered by site-facing interface status changes, redundant VTEP or PE membership changes, and interface ESI changes. To prevent frequent DF elections from degrading network performance, set the DF election delay.

To fast elect a DF and avoid traffic interruption upon DF failure, set the DF election delay to 0 seconds.

Examples

# Set the DF election delay to 5 seconds.

<Sysname> system-view

[Sysname] evpn multihoming timer df-delay 5

evpn multihoming vpls-frr local

Use evpn multihoming vpls-frr local to enable local FRR globally for EVPN VPLS.

Use undo evpn multihoming vpls-frr local to disable local FRR globally for EVPN VPLS.

Syntax

evpn multihoming vpls-frr local

undo evpn multihoming vpls-frr local

Default

Local FRR is disabled globally for EVPN VPLS.

Views

System view

Predefined user roles

network-admin

Usage guidelines

Local FRR enables two PEs at a multihomed EVPN VPLS network site to set up a PW between them. This feature helps reduce the traffic loss caused by AC failure.

On an EVPN instance, EVPN instance-specific local FRR configuration takes precedence over global local FRR configuration.

If you have executed the evpn frr local command on an EVPN instance, the undo evpn multihoming vpls-frr local command does not disable local FRR on the EVPN instance.

Examples

# Enable local FRR globally for EVPN VPLS.

<Sysname> system-view

[Sysname] evpn multihoming vpls-frr local

Related commands

evpn frr local (VSI EVPN instance view)

evpn multihoming vpws-frr local

Use evpn multihoming vpws-frr local to enable local FRR globally for EVPN VPWS.

Use undo evpn multihoming vpws-frr local to disable local FRR globally for EVPN VPWS and delete existing bypass PWs.

Syntax

evpn multihoming vpws-frr local

undo evpn multihoming vpws-frr local

Default

Local FRR is disabled globally for EVPN VPWS.

Views

System view

Predefined user roles

network-admin

Usage guidelines

Local FRR enables two PEs at a multihomed EVPN VPWS network site to set up a bypass PW between them. This feature helps reduce the traffic loss caused by AC failure.

On an EVPN instance, EVPN instance-specific local FRR configuration takes precedence over global local FRR configuration.

If you have executed the evpn frr local enable command on an EVPN instance, the undo evpn multihoming vpws-frr local command does not delete the bypass PW of the EVPN instance.

Examples

# Enable local FRR globally for EVPN VPWS.

<Sysname> system-view

[Sysname] evpn multihoming vpws-frr local

Related commands

evpn frr local (cross-connect group EVPN instance view)

evpn redundancy-mode

Use evpn redundancy-mode to set the redundancy mode on an interface or UPW.

Use undo evpn redundancy-mode to restore the default.

Syntax

evpn redundancy-mode { all-active | single-active }

undo evpn redundancy-mode

Default

The all-active redundancy mode is used.

Views

Interface view

Cross-connect PW view

Predefined user roles

network-admin

Parameters

single-active: Specifies the single-active mode.

all-active: Specifies the all-active mode.

Usage guidelines

This command is supported only by a multihomed EVPN VPWS, EVPN VPLS, EVPN VPWS over SRv6, or EVPN VPLS over SRv6 network. A multihomed EVPN VXLAN network supports only the all-active mode.

The redundant PEs at a dualhomed site each establish an EVPN PW or SRv6 PW to a remote PE. To use one PW as a backup of the other PW, use the single-active mode. To distribute traffic across the PWs for load sharing, use the all-active mode.

Examples

# Set the redundancy mode to single-active on HundredGigE 1/0/1.

<Sysname> system-view

[Sysname] interface hundredgige 1/0/1

[Sysname-HundredGigE1/0/1] evpn redundancy-mode single-active

# Set the redundancy mode to single-active on cross-connect PW 34.

<Sysname> system-view

[Sysname] xconnect-group 1

[Sysname-xcg-1] connection 1

[Sysname-xcg-1-1] peer 1.1.1.1 pw-id 34

[Sysname-xcg-1-1-1.1.1.1-34] evpn redundancy-mode single-active

Related commands

esi

peer (MPLS Command Reference)

evpn route arp-mobility suppression

Use evpn route arp-mobility suppression to enable ARP mobility event suppression.

Use undo evpn route arp-mobility suppression to disable ARP mobility event suppression.

Syntax

evpn route arp-mobility suppression [ detect-cycle detect-time | detect-threshold move-times | suppression-time [ suppression-time | permanent ] ] *

undo evpn route arp-mobility suppression

Default

ARP mobility event suppression is disabled.

Views

System view

Predefined user roles

network-admin

Parameters

detect-cycle detect-time: Sets the ARP mobility detection cycle in seconds, in the range of 60 to 900. The default value is 180 seconds.

detect-threshold move-times: Sets the ARP mobility suppression threshold, in the range of 3 to 10. The default is 5. This threshold is the number of ARP moves from the local site to remote sites.

suppression-time: Sets the ARP mobility suppression time. A suppressed ARP entry cannot move until the ARP mobility suppression time expires. If you do not set this parameter, the default setting permanent applies.

suppression-time: Specifies the ARP mobility suppression time in seconds, in the range of 120 to 3600 seconds.

permanent: Suppresses ARP moves permanently.

Usage guidelines

On an EVPN VXLAN network, misconfiguration of IP addresses might cause two sites to contain the same IP address. In this condition, VTEPs at the two sites constantly synchronize and update EVPN ARP entries and determine that ARP mobility events occur. As a result, an inter-site loop might occur, and the bandwidth is occupied by ARP entry synchronization traffic. To eliminate loops and suppress those ARP mobility events, enable ARP mobility event suppression on the VTEPs.

The ARP mobility event suppression feature allows an IP address to move at most the specified number of times (ARP mobility suppression threshold) out of a site within an ARP mobility detection cycle. If the suppression threshold has been reached for an IP address within a detection cycle, the VTEP at the site suppresses the subsequent move after the IP address moves back to the site. In addition, the VTEP learns ARP information for the IP address but does not advertise the ARP information.

After you execute the undo evpn route arp-mobility suppression command or when the ARP mobility suppression time expires, a VTEP acts as follows:

· Advertises ARP information immediately for the suppressed ARP entries that have not aged out.

· Relearns ARP information for the suppressed ARP entries that have aged out and advertises the ARP information.

ARP mobility event suppression takes effect only on an EVPN VXLAN network configured with distributed VXLAN IP gateways.

Examples

# Enable ARP mobility event suppression.

<Sysname> system-view

[Sysname] evpn route arp-mobility suppression

Related commands

display evpn route arp-mobility

evpn route gateway-mac unmovable

Use evpn route gateway-mac unmovable to set the static flag for the MAC addresses of centralized gateway interfaces.

Use undo evpn route gateway-mac unmovable to restore the default.

Syntax

evpn route gateway-mac unmovable

undo evpn route gateway-mac unmovable

Default

The static flag is not set for the MAC addresses of centralized gateway interfaces.

Views

System view

Predefined user roles

network-admin

Usage guidelines

In a network with a centralized EVPN gateway deployed, a VTEP considers a MAC address move occurs if an endpoint uses a MAC address identical to that of a centralized gateway interface. As a result, the VTEP overwrites the MAC address entry created for the centralized gateway interface with that created for the endpoint, and errors will occur in traffic forwarding.

To resolve this issue, set the static flag for the MAC addresses of centralized gateway interfaces on the centralized EVPN gateway. When advertising those MAC addresses through MAC/IP advertisement routes, the centralized EVPN gateway will set the static flag bit to 1 in the MAC mobility extended community. If an endpoint accesses the network with a MAC address identical to that of a centralized gateway interface, the endpoint's MAC address entry will not overwrite the entry for the centralized gateway interface.

Examples

# Set the static flag for the MAC addresses of centralized gateway interfaces.

<Sysname> system-view

[Sysname] evpn route gateway-mac unmovable

evpn route mac-mobility suppression

Use evpn route mac-mobility suppression to enable MAC mobility event suppression.

Use undo evpn route mac-mobility suppression to disable MAC mobility event suppression.

Syntax

evpn route mac-mobility suppression [ detect-cycle detect-time | detect-threshold move-times | suppression-time [ suppression-time | permanent ] ] *

undo evpn route mac-mobility suppression

Default

MAC mobility event suppression is disabled.

Views

System view

Predefined user roles

network-admin

Parameters

detect-cycle detect-time: Sets the MAC mobility detection cycle in seconds, in the range of 60 to 900. The default value is 180 seconds.

detect-threshold move-times: Sets the MAC mobility suppression threshold, in the range of 3 to 10. The default is 5. This threshold is the number of MAC moves from the local site to remote sites.

suppression-time: Sets the MAC mobility suppression time. A suppressed MAC entry cannot move until the MAC mobility suppression time expires. If you do not set this parameter, the default setting permanent applies.

suppression-time: Specifies the MAC mobility suppression time in seconds, in the range of 120 to 3600 seconds.

permanent: Suppresses MAC moves permanently.

Usage guidelines

On an EVPN VXLAN or EVPN VPLS network, misconfiguration of MAC addresses might cause two sites to contain the same MAC address. In this condition, VTEPs or PEs at the two sites constantly synchronize and update EVPN MAC entries and determine that MAC mobility events occur. As a result, an inter-site loop might occur, and the bandwidth is occupied by MAC entry synchronization traffic. To eliminate loops and suppress those MAC mobility events, enable MAC mobility event suppression on the VTEPs or PEs.

The MAC mobility event suppression feature allows a MAC address to move at most the specified number of times (MAC mobility suppression threshold) out of a site within an MAC mobility detection cycle. If the suppression threshold has been reached for a MAC address within a detection cycle, the VTEP or PE at the site suppresses the subsequent move after the MAC address moves back to the site. In addition, the VTEP or PE learns the MAC address but does not advertise it.

After you execute the undo evpn route mac-mobility suppression command or when the MAC mobility suppression time expires, a VTEP or PE acts as follows:

· Advertises MAC address entries immediately for the suppressed MAC address entries that have not aged out.

· Relearns the MAC addresses for the suppressed MAC address entries that have aged out and advertises the MAC address entries.

Examples

# Enable MAC mobility event suppression.

<Sysname> system-view

[Sysname] evpn route mac-mobility suppression

Related commands

display evpn route mac-mobility

evpn span-segment disable

Use evpn span-segment disable to disable a VSI interface from learning ARP or ND information that does not belong to its subnet from MAC/IP advertisement routes.

Use undo evpn span-segment disable to restore the default.

Syntax

evpn span-segment { arp-learning | nd-learning } disable

undo evpn span-segment { arp-learning | nd-learning } disable

Default

On a centralized EVPN gateway, a VSI interface can learn the ARP or ND information that does not belong to its subnet from MAC/IP advertisement routes.

Views

VSI interface view

Predefined user roles

network-admin

Parameters

arp-learning: Disables ARP learning.

nd-learning: Disables ND learning.

Usage guidelines

On an EVPN VXLAN network deployed with a centralized EVPN gateway, VM 1 and VM 2 belong to the same VXLAN in subnet 10.1.1.0/24. The gateway interface is VSI-interface 1 and the gateway is connected to external Layer 3 network 10.1.2.0/24. The VTEP to which VM 2 is attached is configured with ARP or ND flood suppression. The IP address of VM 2 is mistakenly configured as an IP address in subnet 10.1.2.0/24 (for example, 10.1.2.2). In this situation, the VTEP connected to VM 2 advertises MAC/IP advertisement routes that contain ARP or ND information to the gateway. The IP address and MAC address in the routes are the IP address and MAC address of VM 2, respectively. The gateway learns the ARP or ND information and issues the information to the forwarding table. When VM 1 visits 10.1.2.2 in the external network, the gateway will forward the traffic to VM 2. As a result, VM 1 cannot visit 10.1.2.2.

To resolve the above issue, perform this task on the VSI interface to disable the VSI interface from learning ARP or ND information across subnets from MAC/IP advertisement routes.

Examples

# Disable a VSI-interface 1 from learning ARP or ND information that does not belong to its subnet from MAC/IP advertisement routes.

<Sysname> system-view

[Sysname] interface vsi-interface 1

[Sysname-Vsi-interface1] evpn span-segment arp-learning disable

evpn timer ad-delay

Use evpn timer ad-delay to set the advertisement delay timer for Ethernet auto-discovery routes.

Use undo evpn timer ad-delay to delete the advertisement delay setting for Ethernet auto-discovery routes.

Syntax

evpn timer ad-delay delay-time

undo evpn timer ad-delay

Default

Advertisement of Ethernet auto-discovery routes is not delayed.

Views

Interface view

Predefined user roles

network-admin

Parameters

delay-time: Specifies a delay value in the range of 3 to 1200 seconds.

Usage guidelines

The advertisement delay timer for Ethernet auto-discovery routes helps reduce the traffic loss caused by a PE reboot at a multihomed EVPN VPLS network site.

At a multihomed EVPN VPLS network site, CE 1 is dualhomed to PE 1 and PE 2 through an aggregate link or smart trunk, and PE 3 is at a remote site. PE 1 forwards all traffic sent from CE 1 to the remote site, and PE 3 forwards the traffic that the remote site sends to CE 1 to both PE 1 and PE 2. When PE 1 reboots, it advertises Ethernet auto-discovery routes that carry next hop information to PE 3. If PE 3 has not received the MAC/IP advertisement routes advertised by PE 2 when receiving the Ethernet auto-discovery routes, it will forward traffic to both PE 1 and PE 2. In this situation, PE 1 does not have MAC address entries for CE 1 and drops the traffic.

To resolve this issue, set the advertisement delay timer for Ethernet auto-discovery routes on the CE-facing interface of PE 1. This timer allows PE 3 to receive the MAC/IP advertisement routes advertised by PE 2 before the Ethernet auto-discovery routes advertised by PE 1 and update its MAC address table timely.

Examples

# On HundredGig E1/0/1, set the advertisement delay timer for Ethernet auto-discovery routes to 300 seconds.

<Sysname> system-view

[Sysname] interface hundredgige 1/0/1

[Sysname-HundredGigE1/0/1] evpn timer ad-delay 300

evpn timer es-delay

Use evpn timer es-delay to set the advertisement delay timer for Ethernet segment routes.

Use undo evpn timer es-delay to delete the advertisement delay setting for Ethernet segment routes.

Syntax

evpn timer es-delay delay-time

undo evpn timer es-delay

Default

Advertisement of Ethernet segment routes is not delayed.

Views

Interface view

Predefined user roles

network-admin

Parameters

delay-time: Specifies a delay value in the range of 3 to 1200 seconds.

Usage guidelines

Use this command in combination with the evpn track peer command.

The evpn track peer command excludes unavailable edge devices from DF election at a multihomed site. After an edge device recovers from failure and brings up its CE-facing interface, it starts the advertisement delay timer for Ethernet segment routes and checks the status of the BGP peer specified in this command. If the BGP peer comes up before the timer expires, the edge device advertises Ethernet segment routes to the peer. If the BGP peer is still down when the timer expires, the edge device does not advertise Ethernet segment routes to the peer. The edge devices then perform DF election based on the Ethernet segment routes they have received.

Examples

# On HundredGigE 1/0/1, set the advertisement delay timer for Ethernet segment routes to 300 seconds.

<Sysname> system-view

[Sysname] interface hundredgige 1/0/1

[Sysname-HundredGigE1/0/1] evpn timer es-delay 300

Related commands

evpn track peer

evpn track bfd

Use evpn track bfd to enable the device to monitor the status of a static BFD session on an AC-side interface for fast DF/BDF switchover.

Use undo evpn track bfd to restore the default.

Syntax

evpn track bfd session-name

undo evpn track bfd

Default

The device does not monitor the status of static BFD sessions.

Views

Layer 3 Ethernet interface view

Layer 3 aggregate interface view

FlexE logical interface view

Predefined user roles

network-admin

Parameters

session-name: Specifies a static BFD session name, a case-sensitive string of 1 to 15 characters.

Usage guidelines

Use this command on a BDF for fast DF/BDF switchover.

At a multihomed site of an EVPN VPWS network, a BDF cannot take over the DF role immediately when an AC on a DF fails, and traffic loss will occur as a result. To resolve this issue, set up a static BFD session between the DF and BDF. You must configure the static BFD session to monitor the status of the local AC on the DF and enable the BDF to monitor the status of the session. When the AC on the DF fails, the static BFD session goes down, and the BDF can fast take over the DF role to reduce traffic loss.

To modify the static BFD session monitored on an interface, first use the undo evpn track bfd command to remove the existing static BFD session configuration.

Examples

# Enable the device to monitor the status of static BFD session abc on HundredGigE 1/0/1 for fast DF/BDF switchover.

<Sysname> system-view

[Sysname] interface hundredgige 1/0/1

[Sysname-HundredGigE1/0/1] evpn track bfd abc

Related commands

bfd static (High Availability Command Reference)

evpn track peer

Use evpn track peer to enable the device to monitor the BGP peer status of another local edge device.

Use undo evpn track peer to restore the default.

Syntax

evpn track peer { peer-ipv4-address | peer-ipv6-address }

undo evpn track peer

Default

At a multihomed site, the device does not monitor the BGP peer status of the other edge devices.

Views

Interface view

Predefined user roles

network-admin

Parameters

peer-ipv4-address: Specifies a VTEP or PE by its IPv4 address.

peer-ipv6-address: Specifies a VTEP or PE by its IPv6 address.

Usage guidelines

Use this command on the CE-facing interfaces of the edge devices multihomed to a site to prevent device reboots from causing inter-site forwarding failure.

This command excludes unavailable edge devices from DF election at a multihomed site. After an edge device recovers from failure and brings up its CE-facing interface, it starts the advertisement delay timer for Ethernet segment routes and checks the status of the BGP peer specified in this command. If the BGP peer comes up before the timer expires, the edge device advertises Ethernet segment routes to the peer. If the BGP peer is still down when the timer expires, the edge device does not advertise Ethernet segment routes to the peer. The edge devices then perform DF election based on the Ethernet segment routes they have received.

Examples

# On HundredGigE 1/0/1, enable the device to monitor the BGP peer at 1.1.1.1.

<Sysname> system-view

[Sysname] interface hundredgige 1/0/1

[Sysname-HundredGigE1/0/1] evpn track peer 1.1.1.1

Related commands

evpn timer es-delay

evpn vpws-frr remote

Use evpn vpws-frr remote to enable remote FRR globally for EVPN VPWS.

Use undo evpn vpws-frr remote to disable remote FRR globally for EVPN VPWS and delete the existing backup PWs.

Syntax

evpn vpws-frr remote

undo evpn vpws-frr remote

Default

Remote FRR is disabled globally for EVPN VPWS.

Views

System view

Predefined user roles

network-admin

Usage guidelines

Remote FRR enables two PEs on an EVPN VPWS network to set up a primary PW and a backup PW between them to ensure high availability. The PEs use the primary PW to forward traffic as long as it is available. When the primary PW fails, the PEs switch traffic to the backup PW.

On an EVPN instance, EVPN instance-specific remote FRR configuration takes precedence over global remote FRR configuration.

If you have executed the evpn frr remote enable command on an EVPN instance, the undo evpn vpws-frr remote command does not delete the backup PWs of the EVPN instance.

Examples

# Enable remote FRR globally for EVPN VPWS.

<Sysname> system-view

[Sysname] evpn vpws-frr remote

Related commands

evpn frr remote

export route-policy

Use export route-policy to apply an export routing policy to EVPN.

Use undo export route-policy to restore the default.

Syntax

export route-policy route-policy

undo export route-policy

Default

No export routing policy is applied to EVPN.

Views

EVPN instance view

VSI EVPN instance view

Cross-connect group EVPN instance view

VPN instance EVPN view

Predefined user roles

network-admin

Parameters

route-policy: Specifies a routing policy by its name, a case-sensitive string of 1 to 63 characters.

Usage guidelines

You can specify an export routing policy to filter BGP EVPN routes advertised by an EVPN instance or VPN instance or modify their route attributes.

If you execute this command multiple times in the same view, the most recent configuration takes effect.

EVPN can use an export routing policy specified in EVPN instance view, VSI EVPN instance view, cross-connect group EVPN instance view, VPN instance view, or VPN instance EVPN view.

Export routing policy configuration in EVPN instance view, VSI EVPN instance view, or cross-connect group EVPN instance view is used for Layer 2 forwarding.

Export routing policy configuration in VPN instance view or VPN instance EVPN view is used for Layer 3 forwarding. An export routing policy configured in VPN instance EVPN view takes precedence over that configured in VPN instance view.

Examples

# Apply export routing policy poly-1 to EVPN on VPN instance vpn1.

<Sysname> system-view

[Sysname] ip vpn-instance vpn1

[Sysname-vpn-instance-vpn1] address-family evpn

[Sysname-vpn-evpn-vpn1] export route-policy poly-1

Related commands

route-policy (Layer 3—IP Routing Command Reference)

ignore-ac-state

Use ignore-ac-state enable to enable a VSI or cross-connect to ignore the state of ACs.

Use ignore-ac-state disable to disable a VSI or cross-connect from ignoring the state of ACs.

Use undo ignore-ac-state to restore the default.

Syntax

ignore-ac-state { enable | disable }

undo ignore-ac-state

Default

A VSI or cross-connect uses the global AC state ignore configuration.

Views

VSI view

Cross-connect View

Predefined user roles

network-admin

Usage guidelines

This command helps reduce the traffic loss caused by AC failure at a multihomed EVPN VPLS, EVPN VPWS, EVPN VPLS over SRv6, or EVPN VPWS over SRv6 network site that uses single-active redundancy mode.

At a multihomed EVPN network site that uses single-active redundancy mode, CE 1 is dualhomed to PE 1 and PE 2 through a smart trunk. PE 1 is the primary PE, and PE 2 is the secondary PE. When the AC on PE 1 fails, PE 1 and PE 2 act as follows:

· PE 1 withdraws advertised Ethernet auto-discovery routes.

· PE 2 brings up its AC and advertises Ethernet auto-discovery routes to remote PEs.

The remote PEs switch traffic to the paths to PE 2 only after receiving the Ethernet auto-discovery routes advertised by PE 2, and traffic loss occurs during path switchover. To resolve this issue, enable VSIs or cross-connects to ignore the state of ACs on PE 2. This feature allows PE 2 to advertise Ethernet auto-discovery routes to remote PEs regardless of the state of ACs and speeds up path switchover when the AC on PE 1 fails.

On a VSI or cross-connect, VSI-specific or cross-connect-specific AC state ignore configuration takes precedence over global AC state ignore configuration.

Use the ignore-ac-state enable command together with the evpn multihoming re-originated mac command.

Examples

# Enable VSI vpna to ignore the state of ACs.

<Sysname> system-view

[Sysname] vsi vpna

[Sysname-vsi-vpna] ignore-ac-state enable

# Enable cross-connect ac2pw in cross-connect group aaa to ignore the state of ACs.

<Sysname> system-view

[Sysname] xconnect-group aaa

[Sysname-xcg-aaa] connection ac2pw

[Sysname-xcg-aaa-ac2pw] ignore-ac-state enable

Related commands

l2vpn ignore-ac-state

igp-metric inherit

Use igp-metric inherit to set the metric of a BGP EVPN route added to a VPN instance's routing table to the metric of the IGP route pointing to the next hop in the original BGP EVPN route.

Use undo igp-metric inherit to restore the default.

Syntax

igp-metric inherit

undo igp-metric inherit

Default

The device sets the metric to 0 when adding BGP EVPN routes a VPN instance's routing table.

Views

BGP EVPN address family view

Predefined user roles

network-admin

Usage guidelines

After you execute this command, the device sets the metric of a BGP EVPN route added to a VPN instance's routing table to the metric of the IGP route pointing to the next hop in the original BGP EVPN route.

Examples

# Set the metric of a BGP EVPN route added to a VPN instance's routing table to the metric of the IGP route pointing to the next hop in the original BGP EVPN route.

<Sysname> system-view

[Sysname] bgp 100

[Sysname-bgp-default] address-family l2vpn evpn

[Sysname-bgp-default-evpn] igp-metric inherit

import evpn mac-ip

Use import evpn mac-ip to enable the device to redistribute received MAC/IP advertisement routes that contain ARP or ND information into a BGP unicast routing table and advertise the routes.

Use undo import evpn mac-ip to restore the default.

Syntax

import evpn mac-ip

undo import evpn mac-ip

Default

For EVPN VXLAN, received MAC/IP advertisement routes (carrying VXLAN IDs) that contain ARP or ND information are not redistributed into any BGP unicast routing table.

For SRv6, received MAC/IP advertisement routes (carrying SIDs) that contain ARP or ND information are redistributed into BGP unicast routing tables, but the routes are not advertised.

Views

BGP IPv4 unicast address family view

BGP IPv6 unicast address family view

BGP-VPN IPv4 unicast address family view

BGP-VPN IPv6 unicast address family view

Predefined user roles

network-admin

Usage guidelines

This command enables the device to redistribute received MAC/IP advertisement routes that contain ARP or ND information into a BGP unicast routing table.

· If you use this command in BGP IPv4 or IPv6 unicast address family view, the device will redistribute the routes into the BGP IPv4 or IPv6 unicast routing table. In addition, the device will advertise the routes to the local site.

· If you use this command in BGP-VPN IPv4 or IPv6 unicast address family view, the device will redistribute the routes into the BGP-VPN IPv4 or IPv6 unicast routing table of the corresponding VPN instance. To advertise the routes to the local site, you must configure the advertise l2vpn evpn command.

Examples

# Redistribute received MAC/IP advertisement routes into the BGP-VPN IPv4 unicast routing table of VPN instance vpna and advertise the routes.

<Sysname> system-view

[Sysname] bgp 100

[Sysname-bgp-default] ip vpn-instance vpna

[Sysname-bgp-default-vpna] address-family ipv4

[Sysname-bgp-default-ipv4-vpna] import evpn mac-ip

Related commands

advertise l2vpn evpn

import route-policy

Use import route-policy to apply an import routing policy to EVPN.

Use undo import route-policy to restore the default.

Syntax

import route-policy route-policy

undo import route-policy

Default

No import routing policy is applied to EVPN. A VPN instance accepts a route when the export route targets of the route match local import route targets.

Views

EVPN instance view

VSI EVPN instance view

Cross-connect group EVPN instance view

VPN instance EVPN view

Predefined user roles

network-admin

Parameters

route-policy: Specifies a routing policy by its name, a case-sensitive string of 1 to 63 characters.

Usage guidelines

You can specify an import routing policy to filter BGP EVPN routes received by an EVPN instance or VPN instance or modify their route attributes.

If you execute this command multiple times in the same view, the most recent configuration takes effect.

EVPN can use an import routing policy specified in EVPN instance view, VSI EVPN instance view, cross-connect group EVPN instance view, VPN instance view, or VPN instance EVPN view.

Import routing policy configuration in EVPN instance view, VSI EVPN instance view, or cross-connect group EVPN instance view is used for Layer 2 forwarding.

Import routing policy configuration in VPN instance view or VPN instance EVPN view is used for Layer 3 forwarding. An import routing policy configured in VPN instance EVPN view takes precedence over that configured in VPN instance view.

Examples

# Apply import routing policy poly-1 to EVPN on VPN instance vpn1.

<Sysname> system-view

[Sysname] ip vpn-instance vpn1

[Sysname-vpn-instance-vpn1] address-family evpn

[Sysname-vpn-evpn-vpn1] import route-policy poly-1

Related commands

route-policy (Layer 3—IP Routing Command Reference)

ip forwarding-conversational-learning

Use ip forwarding-conversational-learning to enable conversational learning for host route FIB entries.

Use undo ip forwarding-conversational-learning to disable conversational learning for host route FIB entries.

Syntax

ip forwarding-conversational-learning [ aging aging-time ]

undo ip forwarding-conversational-learning

Default

Conversational learning is disabled for host route FIB entries.

Views

System view

Predefined user roles

network-admin

Parameters

aging aging-time: Specifies an aging timer in minutes for host route FIB entries, in the range of 60 to 1440. The default value is 60.

Usage guidelines

Use this command only on an EVPN network.

By default, the device issues a host route FIB entry to the hardware after the entry is generated. This feature enables the device to issue a host route FIB entry to the hardware only when the entry is required for packet forwarding. This feature saves hardware resources on the device.

Set an appropriate aging timer for host route FIB entries according to your network. A much longer or shorter aging timer will degrade the device performance.

· If the aging timer is too long, the device will save many outdated host route FIB entries and fail to accommodate the most recent network changes. These entries cannot be used for correct packet forwarding and exhaust FIB resources.

· If the aging timer is too short, the device will delete the valid host route FIB entries that can still be effective for packet forwarding. As a result, FIB entry flapping will occur, and the device performance will be affected.

Examples

# Enable conversational learning for host route FIB entries.

<Sysname> system-view

[Sysname] ip forwarding-conversational-learning

ip public-instance

Use ip public-instance to create the public instance and enter its view, or enter the view of the existing public instance.

Use undo ip public-instance to delete the public instance.

Syntax

ip public-instance

undo ip public-instance

Default

The public instance does not exist.

Views

System view

Predefined user roles

network-admin

Usage guidelines

A distributed EVPN gateway uses the public instance to perform Layer 3 forwarding for the public network and to enable communication between private and public networks. The public instance is similar to a VPN instance. A distributed EVPN gateway processes traffic of the public instance in the same way it does for a VPN instance.

Examples

# Create the public instance and enter its view.

<Sysname> system-view

[Sysname] ip public-instance

[Sysname-public-instance]

l2vpn m-lag peer-link ac-match-rule vxlan-mapping

Use l2vpn m-lag peer-link ac-match-rule vxlan-mapping to enable the device to create frame match criteria based on VXLAN IDs for the dynamic ACs on the direct peer link.

Use undo l2vpn m-lag peer-link ac-match-rule vxlan-mapping to restore the default.

Syntax

l2vpn m-lag peer-link ac-match-rule vxlan-mapping

undo l2vpn m-lag peer-link ac-match-rule vxlan-mapping

Default

On an M-LAG system that uses a direct peer link, dynamic ACs on the peer link use frame match criteria that are identical to those of site-facing ACs.

Views

System view

Predefined user roles

network-admin

Usage guidelines

By default, if an M-LAG system uses a direct peer link, each M-LAG member device creates a dynamic AC on the peer link when an AC is configured on a site-facing interface. The dynamic AC and the site-facing AC have the same frame match criteria and VSI mapping. If two site-facing ACs on different interfaces have the same frame match criteria but different VSI mappings, the dynamic ACs created for the site-facing ACs will conflict with each other. To prevent this issue, enable the M-LAG member devices to create frame match criteria based on VXLAN IDs for the dynamic ACs on the peer link.

With this command configured, an M-LAG member device creates dynamic ACs on the peer link and maps them to the VSIs of VXLANs after the VXLANs are created. The matching VLAN IDs in frame match criteria are calculated for the dynamic ACs according to the following rules:

· Outer VLAN ID = VXLAN ID / 4094 + 1.

· Inner VLAN ID = VXLAN ID % 4094 + 1.

· If the calculated outer VLAN ID of a dynamic AC is the PVID of the peer-link interface, the device uses the calculated inner VLAN ID as the outer VLAN ID. The device does not add a matching inner VLAN ID to the frame match criterion of the dynamic AC.

After you execute this command, do not create VXLANs with IDs larger than 16000000.

This command deletes existing dynamic ACs from peer-link interfaces and takes effect on all VXLANs.

Examples

# Enable the device to create frame match criteria based on VXLAN IDs for the dynamic ACs on the Ethernet aggregate link peer link.

<Sysname> system-view

[Sysname] l2vpn m-lag peer-link ac-match-rule vxlan-mapping

l2vpn m-lag peer-link tunnel

Use l2vpn m-lag peer-link tunnel to enable an M-LAG member device to automatically set up a VXLAN tunnel with the peer M-LAG member device.

Use undo l2vpn m-lag peer-link tunnel to disable an M-LAG member device from automatically setting up a VXLAN tunnel with the peer M-LAG member device.

Syntax

l2vpn m-lag peer-link tunnel { source source-ipv4 destination destination-ipv4 | source source-ipv6 destination destination-ipv6 }

undo l2vpn m-lag peer-link tunnel

Default

The M-LAG member devices in an M-LAG system do not set up a VXLAN tunnel between them.

Views

System view

Predefined user roles

network-admin

Parameters

source source-ipv4 destination destination-ipv4: Specifies source and destination IPv4 addresses for the automatically established VXLAN tunnel.

source source-ipv6 destination destination-ipv6: Specifies source and destination IPv6 addresses for the automatically established VXLAN tunnel.

Usage guidelines

This command applies to an M-LAG system that uses a direct peer link.

By default, the dynamic ACs created on the peer link use frame match criteria and VSI mappings identical to those of the site-facing ACs. If you configure the same frame match criterion for the site-facing ACs of different VSIs, the dynamic ACs created for the site-facing ACs will conflict with each other. To resolve this issue, use this command to enable the M-LAG member devices to automatically set up a VXLAN tunnel between them.

After you execute this command, the M-LAG member devices no longer create dynamic ACs on the peer link. Instead, they set up a VXLAN tunnel and assign it to all VXLANs. The VXLAN tunnel and the peer link transmit different types of traffic.

· The VXLAN tunnel is used to forward data traffic. When a site-facing AC on one M-LAG member device fails, the device forwards the remote packets destined for the AC to the other M-LAG member device over the VXLAN tunnel. The remote packets are encapsulated with the VXLAN ID of the failed site-facing AC. When the other M-LAG member device receives the packets, it decapsulates them and forwards them in the VXLAN where they belong.

· The peer link is used to exchange M-LAG protocol packets and synchronize MAC and ARP entries.

The l2vpn m-lag peer-link tunnel and l2vpn m-lag peer-link ac-match-rule vxlan-mapping commands are mutually exclusive. Do not use them together.

If you use this command on an M-LAG system that uses a VXLAN tunnel as the peer link, the M-LAG member devices do not assign the automatically established VXLAN tunnel to VXLANs and thus cannot use it to forward traffic.

To change the tunnel source and destination addresses, first execute the undo l2vpn m-lag peer-link tunnel command to delete the existing VXLAN tunnel.

Examples

# Enable the device to set up a VXLAN tunnel with its M-LAG peer. Specify the source and destination IPv4 addresses of the VXLAN tunnel as 1.1.1.1 and 2.2.2.2, respectively.

<Sysname> system-view

[Sysname] l2vpn m-lag peer-link tunnel source 1.1.1.1 destination 2.2.2.2

l2vpn ignore-ac-state

Use l2vpn ignore-ac-state to enable ignoring the state of ACs globally.

Use undo l2vpn ignore-ac-state to disable ignoring the state of ACs globally.

Syntax

l2vpn ignore-ac-state [ evpn-vpls | evpn-vpws ]

undo l2vpn ignore-ac-state

Default

The device does not ignore the state of ACs.

Views

System view

Predefined user roles

network-admin

Parameters

evpn-vpls: Configures VSIs to ignore the state of ACs.

evpn-vpws: Configures cross-connects to ignore the state of ACs.

Usage guidelines

This command helps reduce the traffic loss caused by AC failure at a multihomed EVPN VPLS, EVPN VPWS, EVPN VPLS over SRv6, or EVPN VPWS over SRv6 network site that uses single-active redundancy mode.

· PE 1 withdraws advertised Ethernet auto-discovery routes.

· PE 2 brings up its AC and advertises Ethernet auto-discovery routes to remote PEs.

On a VSI or cross-connect, VSI-specific or cross-connect-specific AC state ignore configuration takes precedence over global AC state ignore configuration.

If you do not specify the evpn-vpls or evpn-vpws keyword, this command enables both VSIs and cross-connects to ignore the state of ACs.

If you specify the evpn-vpls or evpn-vpws keyword, you cannot repeat the l2vpn ignore-ac-state command to modify the existing global AC state ignore configuration. To modify the configuration, first execute the undo l2vpn ignore-ac-state command to remove the existing configuration.

Use the l2vpn ignore-ac-state command together with the evpn multihoming re-originated mac command.

Examples

# Enable ignoring the state of ACs globally.

<Sysname> system-view

[Sysname] l2vpn ignore-ac-state

Related commands

ignore-ac-state

l3-vni

Use l3-vni to configure an L3 VXLAN ID for a VSI interface or for the public instance.

Use undo l3-vni to remove the L3 VXLAN ID for a VSI interface or for the public instance.

Syntax

l3-vni vxlan-id

undo l3-vni

Default

No L3 VXLAN ID is configured for a VSI interface or for the public instance.

Views

VSI interface view

Public instance view

Predefined user roles

network-admin

Parameters

vxlan-id: Specifies a VXLAN ID in the range of 0 to 16777215.

Usage guidelines

On distributed EVPN gateways, you must configure L3 VXLAN IDs for the gateways to differentiate traffic of different VPN instances.

To forward Layer 3 traffic of a VPN instance, you must assign an L3 VXLAN ID to the VSI interface of the VPN instance. To forward Layer 3 traffic of the public network, you must assign the same L3 VXLAN ID to the public instance and the VSI interface of the public instance.

To modify the L3 VXLAN ID for the public instance, you must first delete the original L3 VXLAN ID.

The L3 VXLAN ID specified by using this command cannot be the same as any VXLAN ID specified by using the mapping vni command.

Examples

# Configure the L3 VXLAN ID as 1000 for VSI-interface 100.

<Sysname> system-view

[Sysname] interface vsi-interface 100

[Sysname-Vsi-interface100] l3-vni 1000

mac-advertising disable

Use mac-advertising disable to disable MAC address advertisement and withdraw advertised MAC addresses.

Use undo mac-advertising disable to restore the default.

Syntax

mac-advertising disable

undo mac-advertising disable

Default

MAC address advertisement is enabled.

Views

EVPN instance view

VSI EVPN instance view

Predefined user roles

network-admin

Usage guidelines

The MAC information and ARP information advertised by the VTEP or PE overlap. To avoid duplication, use this command to disable MAC address advertisement and withdraw the MAC addresses advertised to remote VTEPs or PEs.

Examples

# Disable MAC address advertisement and withdraw advertised MAC addresses for an EVPN instance.

<Sysname> system-view

[Sysname] vsi aaa

[Sysname-vsi-aaa] evpn encapsulation vxlan

[Sysname-vsi-aaa-evpn-vxlan] mac-advertising disable

nd mac-learning disable

Use nd mac-learning disable to disable a VSI EVPN instance from learning MAC addresses from ND information.

Use undo nd mac-learning disable to restore the default.

Syntax

nd mac-learning disable

undo nd mac-learning disable

Default

A VSI EVPN instance learns MAC addresses from ND information.

Views

EVPN instance view

VSI EVPN instance view

Predefined user roles

network-admin

Usage guidelines

The MAC information and ND information advertised by a remote VTEP or PE overlap. To avoid duplication, use this command to disable the learning of MAC addresses from ND information. EVPN will learn remote MAC addresses only from the MAC information advertised from remote sites.

Examples

# Disable a VSI EVPN instance from learning MAC addresses from ND information.

<Sysname> system-view

[Sysname] vsi aaa

[Sysname-vsi-aaa] evpn encapsulation vxlan

[Sysname-vsi-aaa-evpn-vxlan] nd mac-learning disable

overlay oam enable

Use overlay oam enable to enable overlay OAM.

Use undo overlay oam enable to disable overlay OAM.

Syntax

overlay oam enable

undo overlay oam enable

Default

Overlay OAM is disabled.

Views

System view

Predefined user roles

network-admin

Usage guidelines

You must enable overlay OAM on the tunnel destination device for a VXLAN tunnel before you can use the ping vxlan or tracert vxlan command to test reachability of the VXLAN tunnel on the tunnel source device. To specify the -r 3 parameter in the ping vxlan or tracert vxlan command on the tunnel source device, you must also enable overlay OAM on the tunnel source device.

Examples

# Enable overlay OAM.

<Sysname> system-view

[Sysname] overlay oam enable

Related commands

ping vxlan

tracert vxlan

peer advertise encap-type mpls

Use peer advertise encap-type mpls to enable MPLS encapsulation for the BGP EVPN routes advertised to a peer or peer group.

Use undo peer advertise encap-type mpls to disable MPLS encapsulation for the BGP EVPN routes advertised to a peer or peer group.

Syntax

peer { group name | ipv4-address [ mask-length ] | ipv6-address [ prefix-length ] } advertise encap-type mpls

undo peer { group name | ipv4-address [ mask-length ] | ipv6-address [ prefix-length ] } advertise encap-type mpls

Default

BGP EVPN routes use VXLAN encapsulation.

Views

BGP EVPN address family view

Predefined user roles

network-admin

Parameters

group-name: Specifies a peer group by its name, a case-sensitive string of 1 to 47 characters. The peer group must exist.

ipv4-address: Specifies a peer by its IPv4 address. the peer must exist.

mask-length: Specifies a mask length in the range of 0 to 32. To specify a subnet, you must specify both the ipv4-address and mask-length arguments.

ipv6-address: Specifies a peer by its IPv6 address. The peer must exist.

prefix-length: Specifies a prefix length in the range of 0 to 128. To specify a subnet, you must specify both the ipv6-address and prefix-length arguments.

Usage guidelines

Use this command to enable the device to advertise BGP EVPN routes with MPLS encapsulation over an EVPN VPLS, EVPN VPWS, or EVPN L3VPN network.

Execute this command on the edge nodes of an EVPN L3VPN network and RRs. On the edge nodes, you must use this command together with the evpn mpls routing-enable command.

Examples

# Enable MPLS encapsulation for the BGP EVPN routes advertised to peer 1.1.1.1.

<Sysname> system-view

[Sysname] bgp 100

[Sysname-bgp-default] address-family l2vpn evpn

[Sysname-bgp-default-evpn] peer 1.1.1.1 advertise encap-type mpls

Related commands

evpn mpls routing-enable

peer advertise vpn-reoriginate ibgp (BGP EVPN address family view)

Use peer advertise vpn-reoriginate ibgp to enable advertising the IP prefix advertisement routes reoriginated for a VPN instance to an IBGP peer or peer group.

Use undo peer advertise vpn-reoriginate ibgp to restore the default.

Syntax

peer { group-name | ipv4-address [ mask-length ] | ipv6-address [ prefix-length ] } advertise vpn-reoriginate ibgp

undo { group-name | ipv4-address [ mask-length ] | ipv6-address [ prefix-length ] } peer advertise vpn-reoriginate ibgp

Default

The device does not advertise the IP prefix advertisement routes reoriginated for a VPN instance to IBGP peers or peer groups.

Views

BGP EVPN address family view

Predefined user roles

network-admin

Parameters

group-name: Specifies a peer group by its name, a case-sensitive string of 1 to 47 characters. The peer group must exist.

ipv4-address: Specifies a peer by its IPv4 address. The peer must exist.

mask-length: Specifies a mask length in the range of 0 to 32. To specify a subnet, you must specify both the ipv4-address and mask-length arguments.

ipv6-address: Specifies a peer by its IPv6 address. The peer must exist.

prefix-length: Specifies a prefix length in the range of 0 to 128. To specify a subnet, you must specify both the ipv6-address and prefix-length arguments.

Usage guidelines

For this command to take effect, you must also execute the advertise route-reoriginate command.

This command enables the device to advertise the IP prefix advertisement routes reoriginated for VPN instances to IBGP peers after the advertise route-reoriginate command is executed for the VPN instances.

Examples

# Enable advertising the IP prefix advertisement routes reoriginated for VPN instances to IBGP peer 1.1.1.1.

<Sysname> system-view

[Sysname] bgp 100

[Sysname-bgp-default] address-family l2vpn evpn

[Sysname-bgp-default-evpn] peer 1.1.1.1 advertise vpn-reoriginate ibgp

Related commands

advertise route-reoriginate (MPLS Command Reference)

peer default-gateway no-advertise

Use peer default-gateway no-advertise to remove the default-gateway extended community attribute from the EVPN gateway routes advertised to a peer or peer group.

Use undo peer default-gateway no-advertise to restore the default.

Syntax

peer { group-name | ipv4-address [ mask-length ] | ipv6-address [ prefix-length ] } default-gateway no-advertise

undo peer { group-name | ipv4-address [ mask-length ] | ipv6-address [ prefix-length ] } default-gateway no-advertise

Default

EVPN gateway routes advertised to peers and peer groups contain the default-gateway extended community attribute.

Views

BGP EVPN address family view

Predefined user roles

network-admin

Parameters

group-name: Specifies a peer group by its name, a case-sensitive string of 1 to 47 characters. The peer group must exist.

ipv4-address: Specifies a peer by its IPv4 address. The peer must exist.

mask-length: Specifies a mask length in the range of 0 to 32. To specify a subnet, you must specify both the ipv4-address and mask-length arguments.

ipv6-address: Specifies a peer by its IPv6 address. The peer must exist.

prefix-length: Specifies a prefix length in the range of 0 to 128. To specify a subnet, you must specify both the ipv6-address and prefix-length arguments.

Usage guidelines

An EVPN gateway route is the route for the IP address of a VSI interface on an EVPN gateway. By default, the EVPN gateway routes advertised by an EVPN gateway contain the default-gateway extended community attribute. The EVPN gateway routes with that attribute cannot be used as ECMP routes. You can use this command to remove the default-gateway extended community attribute from EVPN gateway routes for the routes to be used for load sharing.

Examples

# Remove the default-gateway extended community attribute from the EVPN gateway routes advertised to peer 1.1.1.1.

<Sysname> system-view

[Sysname] bgp 100

[Sysname-bgp-default] address-family l2vpn evpn

[Sysname-bgp-default-evpn] peer 1.1.1.1 default-gateway no-advertise

peer re-originated

Use peer re-originated to enable the device to reoriginate BGP EVPN routes based on the BGP EVPN routes received from a peer or peer group.

Use undo peer re-originated to disable the device from reoriginating BGP EVPN routes based on the BGP EVPN routes received from a peer or peer group.

Syntax

peer { group-name | ipv4-address [ mask-length ] | ipv6-address [ prefix-length ] } re-originated [ ] [ replace-rt ]

peer { group-name | ipv4-address [ mask-length ] | ipv6-address [ prefix-length ] } re-originated [ ip-prefix ] [ replace-rt | replace-sid ] *

peer { group-name | ipv4-address [ mask-length ] } re-originated [ s-pmsi | smet ] [ replace-rt ]

undo peer { group-name | ipv4-address [ mask-length ] | ipv6-address [ prefix-length ] } re-originated []

undo peer { group-name | ipv4-address [ mask-length ] } re-originated [ s-pmsi | smet ]

Default

The device does not reoriginate BGP EVPN routes based on received BGP EVPN routes.

Views

BGP EVPN address family view

Predefined user roles

network-admin

Parameters

group-name: Specifies a peer group by its name, a case-sensitive string of 1 to 47 characters. The peer group must exist.

ipv4-address: Specifies a peer by its IPv4 address. The peer must exist.

mask-length: Specifies a mask length in the range of 0 to 32. To specify a subnet, you must specify both the ipv4-address and mask-length arguments.

ipv6-address: Specifies a peer by its IPv6 address. The peer must exist.

prefix-length: Specifies a prefix length in the range of 0 to 128. To specify a subnet, you must specify both the ipv6-address and prefix-length arguments.

imet: Specifies IMET routes.

ip-prefix: Specifies IP prefix advertisement routes.

s-pmsi: Specifies S-PMSI routes.

smet: Specifies SMET routes.

replace-rt: Performs the following actions on IP prefix advertisement routes that match the route targets of a local VPN instance:

· Replaces the L3 VXLAN ID, RD, and route targets of the IP prefix advertisement routes with those of the matching local VPN instance.

· Adds MPLS labels or SRv6 SIDs to the routes, or requests SRv6 SIDs for the routes from the matching local VPN instance.

If you do not specify this keyword, only the L3 VXLAN ID and RD will be replaced, MPLS labels or SRv6 SIDs will be added, or SRv6 SIDs will be requested for the routes from the matching local VPN instance.

replace-sid: Deletes SRv6 SIDs from the received BGP EVPN routes that match the route targets of a local VPN instance, and requests SRv6 SIDs for the routes from the matching local VPN instance. If you do not specify this keyword, the SRv6 SIDs of received BGP EVPN routes will not be modified.

Usage guidelines

Application scenarios and operating mechanism for EVPN

In an EVPN-DCI network, use this command to hide the L3 VXLAN IDs of data centers or enable communication between data centers that use different L3 VXLAN IDs.

After you execute this command on an ED, the ED performs the following operations after receiving BGP EVPN routes from a VTEP or remote ED:

1. Matches the route targets of the routes with the import route targets of local VPN instances.

2. Replaces the L3 VXLAN ID and RD of the routes with those of the matching local VPN instance.

3. Advertises the routes to a VTEP or remote ED.

Application scenarios and operating mechanism for SRv6

In a network with inter-AS SRv6 VPN deployed in multiple ASs, you can specify the replace-sid keyword to disable inter-AS advertisement of locator network routes for security purposes. SRv6 forwarding path setup between PEs of different ASs will not be affected.

Restrictions and guidelines

After you execute this command, an ED advertises only reoriginated BGP EVPN routes. The original BGP EVPN routes are not advertised.

If the RD of a received BGP EVPN route is identical to the RD of the matching local VPN instance, an ED does not replace the L3 VXLAN ID of the route or reoriginate the route. As a result, the ED does not advertise the route. As a best practice, assign unique RDs to VPN instances on different EVPN gateways and EDs when you use this command.

If you do not specify a route type, this command applies to IP prefix advertisement routes.

Examples

# Replace the L3 VXLAN ID and RD of the BGP EVPN routes received from peer 1.1.1.1.

<Sysname> system-view

[Sysname] bgp 100

[Sysname-bgp-default] address-family l2vpn evpn

[Sysname-bgp-default-evpn] peer 1.1.1.1 re-originated ip-prefix

Related commands

peer advertise original-route

peer suppress re-originated

peer suppress original-route

Use peer suppress original-route to suppress advertisement of original BGP EVPN routes to a peer or peer group and withdraw advertised original BGP EVPN routes.

Use undo suppress original-route to disable suppression of original BGP EVPN route advertisement to a peer or peer group.

Syntax

peer { group-name | ipv4-address [ mask-length ] | ipv6-address [ prefix-length ] } suppress original-route { auto-discovery | es | imet }

undo peer { group-name | ipv4-address [ mask-length ] | ipv6-address [ prefix-length ] } suppress original-route { auto-discovery | es | imet }

Default

The device advertises original BGP EVPN routes to peers and peer groups.

Views

BGP EVPN address family view

Predefined user roles

network-admin

Parameters

group-name: Specifies a peer group by its name, a case-sensitive string of 1 to 47 characters. The peer group must exist.

ipv4-address: Specifies a peer by its IPv4 address. The peer must exist.

mask-length: Specifies a mask length in the range of 0 to 32. To specify all dynamic peers in a subnet, you must specify both the ipv4-address and mask-length arguments.

ipv6-address: Specifies a peer by its IPv6 address. The peer must exist.

prefix-length: Specifies a prefix length in the range of 0 to 128. To specify all dynamic peers in a subnet, you must specify both the ipv6-address and prefix-length arguments.

auto-discovery: Specifies original Ethernet auto-discovery routes.

es: Specifies original ES routes.

imet: Specifies original IMET routes.

Usage guidelines

When an EVPN VXLAN network and an EVPN VPLS network are interconnected, an intermediate gateway receives both original and reoriginated Ethernet auto-discovery, ES, and IMET routes from remote gateways. That gateway will forward all these routes to local VTEPs. To prevent the original routes from occupying bandwidth resources, use the peer suppress original-route command on that gateway to suppress advertisement of the original routes and withdraw advertised original routes.

Examples

# In BGP EVPN address family view, suppress advertisement of original Ethernet auto-discovery routes to the peer at 1.1.1.1.

<Sysname> system-view

[Sysname] bgp 100

[Sysname-bgp-default] address-family l2vpn evpn

[Sysname-bgp-default-evpn] peer 1.1.1.1 suppress original-route auto-discovery

ping evpn vpws

Use ping evpn vpws to test the connectivity of a PW in an EVPN VPWS network.

Syntax

Views

Any view

Predefined user roles

network-admin

Parameters

xconnect-group group-name: Specifies a cross-connect group by its name, a case-sensitive string of 1 to 31 characters. The name cannot contain hyphens (-).

local-service-id: Specifies a local service ID in the range of 1 to 16777215.

remote-service-id: Specifies a remote service ID in the range of 1 to 16777215.

-a source-ip: Specifies the source IP address of MPLS echo requests. If you do not specify a source IP address, the MPLS LSR ID of the device is used as the source IP address of MPLS echo requests.

-c count: Specifies the number of MPLS echo requests to be sent. The value range for the count argument is 1 to 4294967295, and the default value is 5. If network quality is poor, increase this parameter to evaluate network quality based on the packet loss ratio as a best practice.

-exp exp-value: Specifies the EXP value of MPLS echo requests. The value range for the exp-value argument is 0 to 7, and the default value is 0.

-m interval: Specifies the interval for sending MPLS echo requests, in milliseconds. The value range for the interval argument is 1 to 10000, and the default value is 2000. If network quality is poor, set this parameter to be larger than 2000 milliseconds.

-r reply-mode: Specifies the reply mode used by the receiver to reply to MPLS echo requests. The value for the reply-mode argument can be 2 or 4, and the default value is 2.

· 2—Reply with UDP packets.

· 4—Reply with VCCV packets.

-s packet-size: Specifies the length of MPLS echo requests, in bytes. The value range for the packet-size argument is 80 to 8100, and the default value is 100. The specified packet length does not include the IP header and UDP header length.

-t time-out: Specifies the timeout time of MPLS echo replies, in milliseconds. The value range for the time-out argument is 0 to 65535, and the default value is 2000. If the device does not receive an MPLS echo reply within the timeout time after sending an MPLS echo request, it determines the MPLS echo reply times out.

Usage guidelines

You can use this command to test connectivity of the PWs to remote PEs when traffic loss or interruption occurs in an EVPN VPWS network.

Make sure the specified PW has referenced a PW class for which the VCCV CC type is configured by using the vccv cc command.

Examples

# Test the connectivity of the PW whose local service ID is 2 and remote service ID is 1 for cross-connect group xcga.

<Sysname> ping evpn vpws xconnect-group xcga 2 1

EVPN VPWS PING FEC: Local Evpn Vpws Id = 1, Remote Evpn Vpws Id = 2 : 100 data bytes.

Press CTRL+C to break

Reply from 100.1.1.1: bytes=100 Sequence=1 time=11 ms

Reply from 100.1.1.1: bytes=100 Sequence=2 time=15 ms

Reply from 100.1.1.1: bytes=100 Sequence=3 time=11 ms

Reply from 100.1.1.1: bytes=100 Sequence=4 time=15 ms

Reply from 100.1.1.1: bytes=100 Sequence=5 time=11 ms

-- FEC: Local CeId = 1, Remote CeId = 5 ping statistics ---

5 packet(s) transmitted

5 packet(s) received

0.00% packet loss

round-trip min/avg/max = 11/13/15 ms

Table 36 Command output

Field	Description
Reply from 100.1.1.1: bytes=100 Sequence=1 time=11 ms	Received MPLS echo replies from a device. If no echo reply is received within the timeout period, Request time out is displayed. · bytes—Number of bytes in the MPLS echo reply. · sequence—Packet sequence number used to determine whether a packet is lost, disordered, or repeated. · time—Response time.
packet(s) transmitted	Number of sent MPLS echo requests.
packet(s) received	Number of received MPLS echo replies.
% packet loss	Percentage of unacknowledged requests to the total requests sent.
round-trip min/avg/max	Minimum/average/maximum deviation response time, in milliseconds.

ping evpn vsi

Use ping evpn vsi to test the reachability of a remote PE in an EVPN VPLS network.

Syntax

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

vsi vsi-name: Specifies a VSI name, a case-sensitive string of 1 to 31 characters.

mac mac-address: Specifies a VM attached to a remote PE by its MAC address in H-H-H format. Do not specify a broadcast MAC address, multicast MAC address, or all-zeros MAC address.

-a source-ip: Specifies the source IP address of EVPN MAC echo requests. If you do not specify a source IP address, the primary IP address of the traffic outgoing interface is used as the source IP address of EVPN MAC echo requests.

-c count: Specifies the number of EVPN MAC echo requests to be sent. The value range for the count argument is 1 to 4294967295, and the default value is 5.

-exp exp-value: Specifies the EXP value of EVPN MAC echo requests. The value range for the exp-value argument is 0 to 7, and the default value is 0.

-h ttl-value: Specifies the TTL value of EVPN MAC echo requests. The value range for the ttl-value argument is 1 to 255, and the default value is 255.

-m wait-time: Specifies the interval for sending EVPN MAC echo requests, in milliseconds. The value range for the wait-time argument is 1 to 10000, and the default value is 200.

-r reply-mode: Specifies the reply mode used by the receiver to reply to EVPN MAC echo requests. The value of the reply-mode argument can be 1 or 2, and the default value is 2. The value 1 represents no reply, and the value 2 represents replying with UDP packets.

-rtos tos-value: Specifies the ToS value in the IP header of EVPN MAC echo replies. The value range for the tos-value argument is 0 to 7, and the default value is 6.

-s packet-size: Specifies the length of EVPN MAC echo requests, in bytes. The value range for the packet-size argument is 81 to 1200, and the default value is 100. The specified packet length does not include the IP header and UDP header length.

-t time-out: Specifies the timeout time of EVPN MAC echo replies, in milliseconds. The value range for the time-out argument is 0 to 65535, and the default value is 2000. If the device does not receive an EVPN MAC echo reply within the timeout time after sending an EVPN MAC echo request, it determines the EVPN MAC echo reply times out.

-v: Displays detailed reply information. If you do not specify this keyword, the command displays brief reply information.

Usage guidelines

You can use this command to detect connectivity of the PWs to remote PEs when traffic loss or interruption occurs in an EVPN VPLS network.

After you execute this command, the device sends EVPN MAC echo requests encapsulated with the PW labels of the corresponding VSI to the specified destination. When receiving these requests, the remote PE looks up the routing table and replies to the source IP address of the requests with EVPN MAC echo replies. Then, the device outputs traffic statistics based on the EVPN MAC echo replies it receives.

Examples

# Ping the remote VM with MAC address 2-2-2 in an EVPN VPLS network.

<System> ping evpn vsi vpna mac 2-2-2

Ping remote PE with MAC 0002-0002-0002: 100 data bytes.

Press CTRL_C to break.

100 bytes from 50.1.1.12: Sequence=1 time=1 ms

100 bytes from 50.1.1.12: Sequence=2 time=2 ms

100 bytes from 50.1.1.12: Sequence=3 time=1 ms

100 bytes from 50.1.1.12: Sequence=4 time=2 ms

100 bytes from 50.1.1.12: Sequence=5 time=1 ms

--- Ping statistics for mac 0002-0002-0002 ---

5 packets transmitted, 5 packets received, 0.0% packet loss

Round-trip min/avg/max = 1/1/2 ms

policy vpn-target

Use policy vpn-target to enable route target filtering for BGP EVPN routes.

Use undo policy vpn-target to disable route target filtering for BGP EVPN routes.

Syntax

policy vpn-target

undo policy vpn-target

Default

Route target filtering is enabled for BGP EVPN routes.

Views

BGP EVPN address family view

Predefined user roles

network-admin

Usage guidelines

When route target filtering is enabled for BGP EVPN routes, the EVPN routing table accepts only BGP EVPN routes of which the export route targets match the local import route targets. If the device must save all BGP EVPN routes, use the undo policy vpn-target command to disable route target filtering for BGP EVPN routes.

Examples

# Disable route target filtering for BGP EVPN routes.

<Sysname> system-view

[Sysname] bgp 100

[Sysname-bgp-default] address-family l2vpn evpn

[Sysname-bgp-default-evpn] undo policy vpn-target

pw-class

Use pw-class to specify a PW class for a VSI EVPN instance.

Use undo pw-class to restore the default.

Syntax

pw-class class-name

undo pw-class

Default

No PW class is specified for a VSI EVPN instance.

Views

EVPN instance view

VSI EVPN instance view

Predefined user roles

network-admin

Parameters

class-name: Specifies a PW class by its name, a case-sensitive string of 1 to 19 characters.

Usage guidelines

This command is supported whether a VSI EVPN instance uses MPLS encapsulation or SRv6 encapsulation.

The specified PW class will be used to establish all PWs on the VSI EVPN instance.

In EVPN instance view, the specified PW class takes effect on all VSIs associated with the EVPN instance.

If you execute this command multiple times, the most recent configuration takes effect.

Examples

# Specify PW class pw100 for the EVPN instance that uses MPLS encapsulation on VSI vpna.

<Sysname> system-view

[Sysname] vsi vpna

[Sysname-vsi-vpna] evpn encapsulation mpls

[Sysname-vsi-vpna-evpn-mpls] pw-class pw100

# Specify PW class pw100 for the EVPN instance that uses SRv6 encapsulation on VSI vpna.

<Sysname> system-view

[Sysname] vsi vpna

[Sysname-vsi-vpna] evpn encapsulation srv6

[Sysname-vsi-vpna-evpn-srv6] pw-class pw100

reset evpn route arp-mobility suppression

Use reset evpn route arp-mobility suppression to cancel ARP mobility event suppression.

Syntax

reset evpn route arp-mobility suppression [ public-instance | vpn-instance vpn-instance-name [ ip ip-address ] ]

Views

User view

Predefined user roles

network-admin

Parameters

public-instance: Specifies the public instance.

vpn-instance vpn-instance-name: Specifies an MPLS L3VPN instance by its name, a case-sensitive string of 1 to 31 characters.

ip ip-address: Specifies an IPv4 address in dotted decimal notation. If you do not specify an IPv4 address, this command cancels the suppression done on all ARP entries of the public instance or specified MPLS L3VPN instance.

Usage guidelines

Use this command to cancel the ARP mobility event suppression done on IPv4 addresses. After you cancel suppression for an IPv4 address, the IPv4 address can move between sites, and the device advertises ARP information for the IPv4 address. The device still suppresses the IPv4 address if the suppression criteria are met.

If you do not specify the public instance or an MPLS L3VPN instance, this command cancels ARP mobility event suppression for the public instance and all MPLS L3VPN instances.

Examples

# Cancel the ARP mobility event suppression done on 1.1.1.1 of VPN instance vpna.

<Sysname> reset evpn route arp-mobility suppression vpn-instance vpna ip 1.1.1.1

Related commands

display evpn route arp-mobility

reset evpn route mac-mobility suppression

Use reset evpn route mac-mobility suppression to cancel MAC mobility event suppression.

Syntax

reset evpn route mac-mobility suppression [ vsi vsi-name [ mac mac-address ] ]

Views

User view

Predefined user roles

network-admin

Parameters

vsi vsi-name: Specifies a VSI by its name, a case-sensitive string of 1 to 31 characters. If you do not specify this option, the command cancels suppression on MAC addresses for all VSIs.

mac mac-address: Specifies a MAC address in the format of H-H-H. You can omit the consecutive zeros at the beginning of each segment. For example, you can enter f-e2-1 for 000f-00e2-0001. If you do not specify a MAC address, this command cancels suppression all MAC addresses of the specified VSI.

Usage guidelines

Use this command to cancel the MAC mobility event suppression done on MAC addresses. After you cancel suppression for a MAC address, the MAC address can move between sites, and the device advertises the MAC address entry. The device still suppresses the MAC address if the suppression criteria are met.

Examples

# Cancel the MAC mobility event suppression done on 1-1-1 of VSI vpna.

<Sysname> reset evpn route mac-mobility suppression vsi vpna mac 1-1-1

Related commands

display evpn route mac-mobility

reset evpn route nd-mobility suppression

Use reset evpn route nd-mobility suppression to cancel ND mobility event suppression.

Syntax

reset evpn route nd-mobility suppression [ public-instance | vpn-instance vpn-instance-name [ ipv6 ipv6-address ] ]

Views

User view

Predefined user roles

network-admin

Parameters

public-instance: Specifies the public instance.

vpn-instance vpn-instance-name: Specifies an MPLS L3VPN instance by its name, a case-sensitive string of 1 to 31 characters.

ipv6 ipv6-address: Specifies an IPv6 address. If you do not specify an IPv6 address, this command cancels suppression on all ND entries of the public instance or specified MPLS L3VPN instance.

Usage guidelines

Use this command to cancel the ND mobility event suppression done on IPv6 addresses. After you cancel suppression for an IPv6 address, the IPv6 address can move between sites, and the device advertises ND information for the IPv6 address. The device still suppresses the IPv6 address if the suppression criteria are met.

If you do not specify the public instance or an MPLS L3VPN instance, this command cancels ND mobility event suppression for the public instance and all MPLS L3VPN instances.

Examples

# Cancel the ND mobility event suppression done on 1::1 of VPN instance vpna.

<Sysname> reset evpn route nd-mobility suppression vpn-instance vpna ip 1::1

Related commands

display evpn route nd-mobility

route-distinguisher

Use route-distinguisher to configure an RD for an EVPN instance or public instance.

Use undo route-distinguisher to restore the default.

Syntax

In public instance view, cross-connect group EVPN instance view, EVPN instance view, or VSI EVPN instance (non-VXLAN encapsulation) view:

route-distinguisher route-distinguisher

undo route-distinguisher

In VSI EVPN instance (VXLAN encapsulation) view:

route-distinguisher { route-distinguisher | auto }

undo route-distinguisher

Default

No RD is configured for an EVPN instance or public instance.

Views

EVPN instance view

VSI EVPN instance view

Cross-connect group EVPN instance view

Public instance

Predefined user roles

network-admin

Parameters

route-distinguisher: Specifies an RD, a string of 3 to 21 characters. The RD cannot be all zeros and can use one of the following formats:

· 16-bit AS number:32-bit user-defined number. For example, 101:3.

· 32-bit IP address:16-bit user-defined number. For example, 192.168.122.15:1.

· 32-bit AS number:16-bit user-defined number. For example, 65536:1. The AS number must be equal to or greater than 65536.

auto: Automatically generates an RD in the N:VXLAN ID format. The initial value of N is 1. If N:VXLAN ID is already in use, the system increases the value of N by 1 until the RD is available.

Usage guidelines

EVPN uses MP-BGP to advertise BGP EVPN routes for automatic VTEP discovery, MAC reachability information advertisement, and host route advertisement. MP-BGP uses the RD to differentiate BGP EVPN routes of different EVPN instances.

To modify the RD, first execute the undo route-distinguisher command to remove the original RD.

Examples

# Configure 22:1 as the RD of an EVPN instance.

<Sysname> system-view

[Sysname] vsi aaa

[Sysname-vsi-aaa] evpn encapsulation vxlan

[Sysname-vsi-aaa-evpn-vxlan] route-distinguisher 22:1

rr-filter

Use rr-filter to create a route reflector (RR) reflection policy.

Use undo rr-filter to restore the default.

Syntax

rr-filter { ext-comm-list-number | ext-comm-list-name }

undo rr-filter

Default

An RR does not filter reflected BGP EVPN routes.

Views

BGP EVPN address family view

Predefined user roles

network-admin

Parameters

ext-comm-list-number: Specifies an extended community attribute list by its number in the range of 1 to 65535.

ext-comm-list-name: Specifies an extended community attribute list by its name, a case-sensitive string of 1 to 63 characters.

Usage guidelines

This command enables an RR to reflect only received BGP EVPN routes that match the attributes in the specified extended community attribute list.

If a cluster contains multiple RRs, you can configure different reflection policies on the RRs for load sharing among the RRs.

For more information about the extended community attribute list, see Layer 3—IP Routing Configuration Guide.

Examples

# Configure a reflection policy for the device to reflect BGP EVPN routes that match extended community attribute list 10.

<Sysname> system-view

[Sysname] bgp 100

[Sysname-bgp-default] address-family l2vpn evpn

[Sysname-bgp-default-evpn] rr-filter 10

Related commands

ip extcommunity-list (Layer 3—IP Routing Command Reference)

tracert evpn vpws

Use tracert evpn vpws to trace the route from the source PE to the destination PE for a PW in an EVPN VPWS network.

Syntax

Views

Any view

Predefined user roles

network-admin

Parameters

xconnect-group group-name: Specifies a cross-connect group by its name, a case-sensitive string of 1 to 31 characters. The name cannot contain hyphens (-).

local-service-id: Specifies a local service ID in the range of 1 to 16777215.

remote-service-id: Specifies a remote service ID in the range of 1 to 16777215.

-a source-ip: Specifies the source IP address of MPLS echo requests. If you do not specify a source IP address, the MPLS LSR ID of the device is used as the source IP address of MPLS echo requests.

-exp exp-value: Specifies the EXP value of MPLS echo requests. The value range for the exp-value argument is 0 to 7, and the default value is 0.

-h ttl-value: Specifies the maximum TTL value in the MPLS echo requests. The value range for the ttl-value argument is 1 to 255, and the default is 255.

-r reply-mode: Specifies the reply mode used by the receiver to reply to MPLS echo requests. The value for the reply-mode argument can be 2 or 4, and the default value is 2.

· 2—Reply with UDP packets.

· 4—Reply with VCCV packets.

ddmap: Encapsulates the Downstream Detailed Mapping (DDMAP) TLV in MPLS echo reply and MPLS echo request packets. If you do not specify this keyword, Downstream Mapping TLV (DSMAP) will be encapsulated in these packets. DDMAP TLV and DSMAP TLV carry the downstream information of the current node, including the next hop address and outgoing label. When you perform MPLS tracert operations, the device will verify the next hop address and outgoing label in the DDMAP TLV and DSMAP TLV. If both the address and label are correct, the device sends a normal MPLS echo reply to the ingress node. If the address or label is incorrect, the device sends an MPLS echo reply with an error code to the ingress node.

full-lsp-path: Displays the full LSP path between the local PE and the remote PE. If you do not specify this keyword, the command displays only the path information returned by the egress node.

Usage guidelines

Use this command to locate failed nodes on the path for a PW that has traffic loss or interruption issues in an EVPN VPWS network.

Make sure the specified PW has referenced a PW class for which the VCCV CC type is configured by using the vccv cc command.

Examples

# Trace the route for the PW whose local service ID is 100 and remote service ID is 200 for cross-connect group xcga.

<Sysname> tracert evpn vpws xconnect-group xcga 100 200

Trace route to a remote PE through a PW with local service ID 100 and remote

service ID 200 in cross-connect group 4.

TTL Replier Time Type Downstream

0 Ingress 42.1.1.2/[3 1892]

1 Request time out

2 41.1.1.1 4 ms Egress

Table 37 Command output

Field	Description
TTL	Number of hops.
Replier	Address of the node that replied to the request.
Time	Packet round-trip delay in milliseconds.
Type	Node type: · Ingress. · Transit. · Egress.
Downstream	Address of the next hop and the outgoing label.
ReturnCode	Return code. The number in parentheses represents a return subcode.
Request time out	No MPLS echo reply is received within the timeout period.

‌

tracert evpn vsi

Use tracert evpn vsi to trace the route from the source PE to the destination PE for a PW in an EVPN VPLS network.

Syntax

Views

Any view

Predefined user roles

network-admin

Parameters

vsi vsi-name: Specifies a VSI by its name, a case-sensitive string of 1 to 31 characters.

mac mac-address: Specifies a host attached to a remote PE by its MAC address in H-H-H format. Do not specify a broadcast MAC address, multicast MAC address, or all-zero MAC address.

-a source-ip: Specifies the source IP address of MPLS echo requests. If you do not specify a source IP address, the primary IP address of the traffic outgoing interface is used as the source IP address of MPLS echo requests.

-exp exp-value: Specifies the EXP value of MPLS echo requests. The value range for the exp-value argument is 0 to 7, and the default value is 0.

-h ttl-value: Specifies the maximum TTL value in the MPLS echo requests. The value range for the ttl-value argument is 1 to 255, and the default value is 255.

-r reply-mode: Specifies the reply mode used by the receiver to reply to MPLS echo requests. The value for the reply-mode argument is 1 or 2, and the default value is 2.

· 1—Do no reply.

· 2—Reply with UDP packets.

-rtos tos-value: Specifies the ToS value in the IP header of MPLS echo replies. The value range for the tos-value argument is 0 to 7, and the default value is 6.

Usage guidelines

Use this command to locate failed nodes on the path for a PW that has traffic loss or interruption issues in an EVPN VPLS network. The process of a tracert operation is as follows:

1. The PW source PE sends MPLS echo requests that contain the PW labels of the PW to the PW destination PE based on the destination MAC address and VSI you specify. The TTL in the IP header of the requests is set to 1.

2. The first hop on the path responds to the PW source PE with a TTL-expired ICMP error message.

3. The PW source PE sends MPLS echo requests with the TTL set to 2 if the PE receives the TTL-expired ICMP error message or has not received any packets within the timeout period.

4. The second hop responds with a TTL-expired ICMP error message.

5. This process continues until an MPLS echo request reaches the PW destination PE or the maximum TTL value is reached. If an MPLS echo request reaches the PW destination PE, the PW destination PE sends an MPLS echo reply to the PW source PE.

6. The PW source PE outputs packet statistics and the test result based on the received ICMP error messages and on whether an MPLS echo reply is received.

Examples

# In an EVPN VPLS network, trace the route for the PW whose remote PE is attached to a host with MAC address 1-1-1 in VSi vpna.

<Sysname> tracert evpn vsi vpna mac 1-1-1

Trace route to a remote PE in VSI vpna by reaching remote-MAC 0001-0001-0001.

Press CTRL+C to break.

TTL Replier Time Type

0 Ingress

1 11.1.1.2 1 ms Transit

2 12.1.1.1 1 ms Egress

Table 38 Command output

Field	Description
TTL	Number of hops.
Replier	Address of the node that replied to the request.
Time	Packet round-trip delay in milliseconds.
Type	Node type: · Ingress. · Transit. · Egress.
Request time out	No MPLS echo reply is received within the timeout period.

‌

tunnel-policy

Use tunnel-policy to specify a tunnel policy for a VSI EVPN instance.

Use undo tunnel-policy to restore the default.

Syntax

tunnel-policy tunnel-policy-name

undo tunnel-policy

Default

No tunnel policy is specified for a VSI EVPN instance.

Views

EVPN instance view

VSI EVPN instance view

Predefined user roles

network-admin

Parameters

tunnel-policy-name: Specifies a tunnel policy by its name, a case-sensitive string of 1 to 19 characters.

Usage guidelines

The PWs of the VSI EVPN instance use the specified tunnel policy to select public tunnels.

In EVPN instance view, the specified tunnel policy takes effect on all VSIs associated with the EVPN instance.

If you do not specify a tunnel policy or specify a nonexistent tunnel policy, the default tunnel policy applies. The default tunnel policy selects only one public tunnel for a PW in this order: LSP tunnel, GRE tunnel, CRLSP tunnel, and SRLSP tunnel.

If you execute this command multiple times, the most recent configuration takes effect.

Examples

# Specify tunnel policy policy1 for the EVPN instance on VSI aa.

<Sysname> system-view

[Sysname] vsi aa

[Sysname-vsi-aa] evpn encapsulation mpls

[Sysname-vsi-aa-evpn-mpls] tunnel-policy policy1

vpn-route cross multipath

Use vpn-route cross multipath to enable ECMP VPN route redistribution.

Use undo vpn-route cross multipath to disable ECMP VPN route redistribution.

Syntax

vpn-route cross multipath

undo vpn-route cross multipath

Default

ECMP VPN route redistribution is disabled. If multiple routes have the same prefix and RD, BGP only imports the optimal route into the EVPN routing table.

Views

BGP EVPN address family view

Predefined user roles

network-admin

Usage guidelines

ECMP VPN route redistribution enables BGP to import all routes that have the same prefix and RD into the EVPN routing table.

Examples

# Enable ECMP VPN route redistribution.

<Sysname> system-view

[Sysname] bgp 100

[Sysname-bgp-default] address-family l2vpn evpn

[Sysname-bgp-default-evpn] vpn-route cross multipath

vpn-target

Use vpn-target to configure route targets for EVPN.

Use undo vpn-target to delete route targets for EVPN.

Syntax

In VSI EVPN instance view (VXLAN encapsulation):

vpn-target { vpn-target&<1-8> | auto } [ both | export-extcommunity | import-extcommunity ]

undo vpn-target { vpn-target&<1-8> | auto | all } [ both | export-extcommunity | import-extcommunity ]

VPN instance EVPN view, public instance view, public instance IPv4 address family view, public instance EVPN view, cross-connect group EVPN instance view, VSI EVPN instance view (non-VXLAN encapsulation), or EVPN instance view:

vpn-target vpn-target&<1-8> [ both | export-extcommunity | import-extcommunity ]

undo vpn-target { all | vpn-target&<1-8> [ both | export-extcommunity | import-extcommunity ] }

Default

EVPN does not have route targets.

Views

EVPN instance view

VSI EVPN instance view

Cross-connect group EVPN instance view

VPN instance EVPN view

Public instance view

Public instance EVPN view

Public instance IPv4 address family view

Predefined user roles

network-admin

Parameters

vpn-target&<1-8>: Specifies a space-separated list of up to eight route targets. Each route target is a string of 3 to 21 characters in one of the following formats:

· 16-bit AS number:32-bit user-defined number. For example, 101:3.

· 32-bit IP address:16-bit user-defined number. For example, 192.168.122.15:1.

· 32-bit AS number:16-bit user-defined number. For example, 65536:1. The AS number must be equal to or greater than 65536.

auto: Automatically generates a route target in the format of BGP AS number:VXLAN ID.

both: Uses the specified route targets as both import and export targets. If you do not specify the both, export-extcommunity, or import-extcommunity keyword, the both keyword applies.

export-extcommunity: Uses the specified route targets as export targets.

import-extcommunity: Uses the specified route targets as import targets.

all: Specifies all route targets.

Usage guidelines

EVPN uses MP-BGP to advertise BGP EVPN routes for automatic VTEP discovery, MAC reachability information advertisement, and host route advertisement. MP-BGP uses route targets to control the advertisement and acceptance of BGP EVPN routes.

A VTEP sets the export targets for BGP EVPN routes before advertising the routes to remote VTEPs. The VTEP checks the export targets of BGP EVPN routes from remote VTEPs and imports only BGP EVPN routes of which the export targets match the local import targets.

If you execute this command multiple times, all configured route targets take effect.

Examples

# Configure import route targets 10:1, 100:1, and 1000:1 for an EVPN instance.

<Sysname> system-view

[Sysname] vsi aaa

[Sysname-vsi-aaa] evpn encapsulation vxlan

[Sysname-vsi-aaa-evpn-vxlan] vpn-target 10:1 100:1 1000:1 import-extcommunity

12-EVPN Command Reference

Basic EVPN commands

address-family evpn (VPN instance view)

display evpn m-lag synchronized-mac

display evpn instance

display evpn ipv6 auto-discovery

evpn encapsulation

evpn global-mac

evpn df-election algorithm (interface view)

evpn frr local (cross-connect group EVPN instance view)

evpn mac-ip advertise distributed-gateway

peer advertise vpn-reoriginate ibgp (BGP EVPN address family view)

peer default-gateway no-advertise

Application scenarios and operating mechanism for EVPN

Application scenarios and operating mechanism for SRv6

Restrictions and guidelines

ping evpn vsi

rr-filter

Intelligent Terminal Products

Product Support Services

Technical Service Solutions

Resource Center

Policy

Online Help

Become a Partner

Partner Policy & Program

Global Learning

Partner Sales Resources

Service Business

News & Events

Contact Us