H3C SecPath F50X0-D Series Installation manual

H3C SecPath F50X0-D[F5000-AK]
Firewall Series
Comware 7 VXLAN Command Reference
New H3C Technologies Co., Ltd.
http://www.h3c.com
Software version: F9620
Document version: 6W401-20200901

Copyright © 2020, New H3C Technologies Co., Ltd. and its licensors
All rights reserved
No part of this manual may be reproduced or transmitted in any form or by any means without prior written
consent of New H3C Technologies Co., Ltd.
Trademarks
Except for the trademarks of New H3C Technologies Co., Ltd., any trademarks that may be mentioned in this
document are the property of their respective owners.
Notice
The information in this document is subject to change without notice. All contents in this document, including
statements, information, and recommendations, are believed to be accurate, but they are presented without
warranty of any kind, express or implied. H3C shall not be liable for technical or editorial errors or omissions
contained herein.

Preface
•
This command reference describes configuration commands for VXLAN.
•
CLI.
•
RBAC, device login, and device access control.
•
Management of the device, file systems, configuration files, and licenses.
•
FTP and TFTP.
•
Tcl and Python.
•
ISSU and common software upgrade.
This preface includes the following topics about the documentation:
•
Audience.
•
Conventions.
•
Documentation feedback.
Audience
This documentation is intended for:
•
Network planners.
•
Field technical support and servicing engineers.
•
Network administrators.
Conventions
The following information describes the conventions used in the documentation.
Command conventions
Convention
Description
Boldface Bold text represents commands and keywords that you enter literally as shown.
Italic Italic text represents arguments that you replace with actual values.
[ ] Square brackets enclose syntax choices (keywords or arguments) that are optional.
{ x | y | ... }
Braces enclose a set of required syntax choices separated by vertical bars, from which
you select one.
[ x | y | ... ]
Square brackets enclose a set of optional syntax choices separated by vertical bars,
from which you select one or none.
{ x | y | ... } *
Asterisk marked braces enclose a set of required syntax choices separated by vertical
bars, from which you select a minimum of one.
[ x | y | ... ] *
Asterisk marked square brackets enclose optional syntax choices separated by vertical
bars, from which you select one choice, multiple choices, or none.
&<1-n> The argument or keyword and argument combination before the ampersand (&) sign
can be entered 1 to n times.
# A line that starts with a pound (#) sign is comments.

GUI conventions
Convention
Description
Boldface Window names, button names, field names, and menu items are in Boldface. For
example, the New User window opens; click OK.
> Multi-level menus are separated by angle brackets. For example, File > Create >
Folder.
Symbols
Convention
Description
WARNING! An alert that calls attention to important information that if not understood or followed
can result in personal injury.
CAUTION:
An alert that calls attention to important information that if not understood or followed
can result in data loss, data corruption, or damage to hardware or software.
IMPORTANT:
An alert that calls attention to essential information.
NOTE:
An alert that contains additional or supplementary information.
TIP:
An alert that provides helpful information.
Network topology icons
Convention
Description
Represents a generic network device, such as a router, switch, or firewall.
Represents a routing-capable device, such as a router or Layer 3 switch.
Represents a generic switch, such as a Layer 2 or Layer 3 switch, or a router that
supports Layer 2 forwarding and other Layer 2 features.
Represents an access controller, a unified wired-WLAN module, or the access
controller engine on a unified wired-WLAN switch.
Represents an access point.
Represents a wireless terminator unit.
Represents a wireless terminator.
Represents a mesh access point.
Represents omnidirectional signals.
Represents directional signals.
Represents a security product, such as a firewall, UTM, multiservice security
gateway, or load balancing device.
T
T
T
T

Convention
Description
Represents a security module, such as a firewall, load balancing, NetStream, SSL
VPN, IPS, or ACG module.
Examples provided in this document
Examples in this document might use devices that differ from your device in hardware model,
configuration, or software version. It is normal that the port numbers, sample output, screenshots,
and other information in the examples differ from what you have on your device.
Documentation feedback
You can e-mail your comments about product documentation to [e-mail].
We appreciate your comments.

i
Contents
VXLAN commands ························································································1
Basic VXLAN commands···································································································································1
description··················································································································································1
display l2vpn interface································································································································1
display l2vpn mac-address·························································································································3
display l2vpn vsi·········································································································································4
display vxlan tunnel····································································································································7
flooding disable··········································································································································8
l2vpn enable···············································································································································9
mac-address static vsi································································································································9
mtu···························································································································································10
reserved vxlan··········································································································································11
reset l2vpn mac-address··························································································································12
selective-flooding mac-address················································································································12
shutdown··················································································································································13
tunnel ·······················································································································································13
tunnel global source-address···················································································································14
vsi·····························································································································································15
vxlan·························································································································································16
vxlan fast-forwarding enable····················································································································16
vxlan invalid-udp-checksum discard ········································································································17
vxlan local-mac report······························································································································17
vxlan tunnel mac-learning disable············································································································18
vxlan udp-port ··········································································································································19
xconnect vsi ·············································································································································19
VXLAN IP gateway commands························································································································20
arp distributed-gateway dynamic-entry synchronize················································································20
bandwidth·················································································································································21
default ······················································································································································21
description················································································································································22
display interface vsi-interface···················································································································23
distributed-gateway local··························································································································26
gateway subnet········································································································································27
gateway vsi-interface ·······························································································································28
interface vsi-interface·······························································································································28
mac-address ············································································································································29
mtu···························································································································································29
reset counters interface vsi-interface·······································································································30
shutdown··················································································································································31
vtep group member local··························································································································31
vtep group member remote······················································································································32
vxlan tunnel arp-learning disable ·············································································································32

1
VXLAN commands
Basic VXLAN commands
description
Use description to configure a description for a VSI.
Use undo description to restore the default.
Syntax
description text
undo description
Default
A VSI does not have a description.
Views
VSI view
Predefined user roles
network-admin
context-admin
Parameters
text: Specifies a description, a case-sensitive string of 1 to 80 characters.
Examples
# Configure a description for VSI vpn1.
<Sysname> system-view
[Sysname] vsi vpn1
[Sysname-vsi-vpn1] description vsi for vpn1
Related commands
display l2vpn vsi
display l2vpn interface
Use display l2vpn interface to display L2VPN information for Layer 3 interfaces that are
mapped to VSIs.
Syntax
display l2vpn interface [vsi vsi-name |interface-type interface-number ]
[verbose ]
Views
Any view
Predefined user roles
network-admin

2
network-operator
context-admin
context-operator
Parameters
vsi vsi-name: Specifies a VSI name, a case-sensitive string of 1 to 31 characters.
interface-type interface-number: Specifies an interface by its type and number.
verbose: Displays detailed information about Layer 3 interfaces. If you do not specifythis keyword,
the command displays brief information about Layer 3 interfaces.
Usage guidelines
If you do not specify any parameters, this command displays brief L2VPN information for all Layer 3
interfaces that are mapped to VSIs.
Examples
# Display brief L2VPN information for all Layer 3 interfaces that are mapped to VSIs.
<Sysname> display l2vpn interface
Total number of interfaces: 2, 1 up, 1 down
Interface Owner Link ID State Type
GE1/2/5/1 vxlan3 1 Up VSI
GE1/2/5/2 vxlan4 2 Down VSI
Table 1 Command output
Field
Description
Interface Layer 3 interface name.
Owner VSI name.
Link ID The interface's link ID on the VSI.
State Physical state of the interface:
•Up—The interface is physically up.
•Down—The interface is physically down.
Type L2VPN type of the interface. This field displays VSI for the VXLAN feature.
# Display detailed L2VPN information for all Layer 3 interfaces that are mapped to VSIs.
<Sysname> display l2vpn interface verbose
Interface: GE1/2/5/1
Owner : vsi1
Link ID : 0
State : Up
Type : VSI
Interface: GE1/2/5/2
Owner : vsi2
Link ID : 0
State : Down
Type : VSI

3
Table 2 Command output
Field
Description
Interface Layer 3 interface name.
Owner VSI name.
Link ID The interface's link ID on the VSI.
State Physical state of the interface:
•Up—The interface is physically up.
•Down—The interface is physically down.
Type L2VPN type of the interface. This field displays VSI for the VXLAN feature.
display l2vpn mac-address
Use display l2vpn mac-address to display MAC address entries for VSIs.
Syntax
display l2vpn mac-address [vsi vsi-name ][dynamic ][count ]
Views
Any view
Predefined user roles
network-admin
network-operator
context-admin
context-operator
Parameters
vsi vsi-name: Specifies a VSI name, a case-sensitive string of 1 to 31 characters. If you do not
specify a VSI, this command displays MAC address entries for all VSIs.
dynamic: Specifies dynamic MAC address entries learned in the data plane. If you do not specify
this keyword, the command displays all MAC address entries, including:
•
Dynamic remote- and local-MAC entries.
•
Manually added static remote-MAC entries.
VXLAN does not support static local-MAC entries.
count: Displays the number of MAC address entries. If you do not specify this keyword, the
command displays detailed information about MAC address entries.
Examples
# Display MAC address entries for all VSIs.
<Sysname> display l2vpn mac-address
MAC Address State VSI Name Link ID/Name Aging
0000-0000-000b Static vpn1 Tunnel10 NotAging
0000-0000-000c Dynamic vpn1 Tunnel60 Aging
0000-0000-000d Dynamic vpn1 Tunnel99 Aging
--- 3 mac address(es) found ---
# Display the total number of MAC address entries in all VSIs.

4
<Sysname> display l2vpn mac-address count
3 mac address(es) found
Table 3 Command output
Field
Description
State Entry state:
•Dynamic—Local- or remote-MAC entry dynamically learned in the data plane.
•Static—Static remote-MAC entry.
Link ID/Name For a local MAC address, this field displays the AC's link ID on the VSI.
For a remote MAC address, this field displays the tunnel interface name.
Aging Entry aging state:
•Aging.
•
NotAging
.
Related commands
reset l2vpn mac-address
display l2vpn vsi
Use display l2vpn vsi to display information about VSIs.
Syntax
display l2vpn vsi [name vsi-name ][verbose ]
Views
Any view
Predefined user roles
network-admin
network-operator
context-admin
context-operator
Parameters
name vsi-name: Specifies a VSI by its name, a case-sensitive string of 1 to 31 characters. If you
do not specify a VSI, this command displays information about all VSIs.
verbose: Displays detailed information about VSIs. If you do not specify this keyword, the
command displays brief information about VSIs.
Examples
# Display brief information about all VSIs.
<Sysname> display l2vpn vsi
Total number of VSIs: 1, 1 up, 0 down, 0 admin down
VSI Name VSI Index MTU State
vpna 0 1500 Up

5
Table 4 Command output
Field
Description
MTU MTU on the VSI.
State
VSI state:
•Up—The VSI is up.
•Down—The VSI is down.
•Admin down—The VSI has been manually shut down by using the
shutdown
command.
# Display detailed information about all VSIs.
<Sysname> display l2vpn vsi verbose
VSI Name: vpna
VSI Index : 0
VSI State : Up
MTU : 1500
Bandwidth : -
Broadcast Restrain : -
Multicast Restrain : -
Unknown Unicast Restrain: -
MAC Learning : Enabled
MAC Table Limit : -
Drop Unknown : -
PW Redundancy : Slave
Flooding : Enabled
Service Class : -
Gateway Interface : VSI-interface 100
VXLAN ID : 10
Tunnels:
Tunnel Name Link ID State Type Flood Proxy Split horizon
Tunnel1 0x5000001 Up Manual Disabled Enabled
Tunnel2 0x5000002 Up Manual Disabled Enabled
ACs:
AC Link ID State
GE1/2/5/1 0 Up
Table 5 Command output
Field
Description
VSI Description Description of the VSI. If the VSI doesnot have a description,the command does
not display this field.
VSI State
VSI state:
•Up—The VSI is up.
•Down—The VSI is down.
•Administratively down—The VSI has been manually shut down by using
the
shutdown
command.
MTU MTU on the VSI.
Bandwidth This field is not supported in the current software version.
Maximum bandwidth (in kbps) for known unicast traffic on the VSI.

6
Field
Description
Broadcast Restrain This field is not supported in the current software version.
Broadcast restraint bandwidth (in kbps).
Multicast Restrain This field is not supported in the current software version.
Multicast restraint bandwidth (in kbps).
Unknown Unicast
Restrain This field is not supported in the current software version.
Unknown unicast restraint bandwidth (in kbps).
MAC Learning State of the MAC learning feature.
MAC Table Limit Maximum number of MAC address entries on the VSI.
Drop Unknown Action on source MAC-unknown frames received after the maximum number of
MAC entries is reached.
PW Redundancy
PW redundancy mode:
•Slave—Master/slave mode and the local PE operates as the slave node.
•Master—Master/slave mode and the local PE operates as the master node.
This field is not supported by a VXLAN network.
Flooding
State of the VSI's flooding feature:
•Enabled—Flooding is enabled on the VSI. The VTEP floods unknown
unicast frames to both local and remote sites.
•Disabled—Flooding is disabled on the VSI. The VTEP floods unknown
unicast frames only to local sites.
Gateway Interface VSI interface name.
State
Tunnel state:
•Up—The tunnel is operating correctly.
•Blocked—The tunnel is a backup tunnel. Its tunnel interface is up, but the
tunnel is blocked because the primary tunnel is operating correctly.
•Defect—The tunnel interface is up, but BFD cannot detect the remote
VTEP. This state is not supported in the current software version.
•Down—The tunnel interface is down.
Type Tunnel assignment method:
Manual—The tunnel was manually assigned to the VXLAN.
Flood Proxy
Flood proxy state:
•Enabled—Flood proxy is enabled. The VTEP sends broadcast, multicast,
and unknown unicast traffic to a flood proxy server through the tunnel. The
flood proxy server replicates and forwards flood traffic to remote VTEPs.
•Disabled—Flood proxy is disabled.
Split horizon
State of split horizon:
•Enabled—Splithorizon is enabled on the VXLANtunnel. The VXLAN tunnel
does not forward the traffic that is received on other VXLAN tunnels.
•Disabled—Split horizon is disabled on the VXLAN tunnel. The VXLAN
tunnel forwards the traffic that is received on other VXLAN tunnels.
ACs ACs that are bound to the VSI.
Link ID AC's link ID on the VSI.
State AC state:
•Up.
•Down.

7
display vxlan tunnel
Use display vxlan tunnel to display VXLAN tunnel information for VXLANs.
Syntax
display vxlan tunnel [vxlan-id vxlan-id [tunnel tunnel-number ] ]
Views
Any view
Predefined user roles
network-admin
network-operator
context-admin
context-operator
Parameters
vxlan-id: Specifies a VXLAN ID in the range of 0 to 16777215. If you do not specify a VXLAN, this
command displays VXLAN tunnel information for all VXLANs.
tunnel tunnel-number: Specifies a VXLAN tunnel. The tunnel-number argument
represents the tunnel interface number. The value range for the tunnel-number argument is 0 to
65534. If you do not specify a VXLAN tunnel, this command displays information about all VXLAN
tunnels associated with the specified VXLAN.
Examples
# Display VXLAN tunnel information for all VXLANs.
<Sysname> display vxlan tunnel
Total number of VXLANs: 1
VXLAN ID: 10, VSI name: vpna, Total tunnels: 3 (3 up, 0 down, 0 defect, 0 blocked)
Tunnel name Link ID State Type Flood proxy Split horizon
Tunnel1 0x5000001 Up Manual Disabled Enabled
Tunnel2 0x5000002 Up Manual Disabled Enabled
# Display VXLAN tunnel information for VXLAN 10.
<Sysname> display vxlan tunnel vxlan-id 10
VXLAN ID: 10, VSI name: vpna, Total tunnels: 3 (3 up, 0 down, 0 defect, 0 blocked)
Tunnel name Link ID State Type Flood proxy Split horizon
Tunnel1 0x5000001 Up Manual Disabled Enabled
Tunnel2 0x5000002 Up Manual Disabled Enabled
# Display information about VXLAN tunnel 0 for VXLAN 10.
<Sysname> display vxlan tunnel vxlan-id 10 tunnel 0
Interface: Tunnel0
Link ID : 0x5000000
State : Up
Type : Manual
Flood Proxy : Disabled
Split horizon : Enabled

8
Table 6 Command output
Field
Description
Link ID Tunnel's link ID in the VXLAN.
State
Tunnel state:
•Up—The tunnel is operating correctly.
•Blocked—
The tunnel isa backup tunnel.Its tunnelinterface is up, but the tunnel
is blocked because the primary tunnel is operating correctly.
•Defect—The tunnel interface is up, but BFD cannot detect the remote VTEP.
This state is not supported in the current software version.
•Down—The tunnel interface is down.
Type Tunnel assignment method:
Manual—The tunnel was manually assigned to the VXLAN.
Flood proxy
Flood proxy state:
•Enabled—Flood proxy is enabled. The VTEP sends broadcast, multicast, and
unknown unicast traffic to a flood proxy server through the tunnel. The flood
proxy server replicates and forwards flood traffic to remote VTEPs.
•Disabled—Flood proxy is disabled.
Split horizon
State of split horizon:
•Enabled—Split horizon is enabled on the VXLAN tunnel. The VXLAN tunnel
does not forward the traffic that is received on other VXLAN tunnels.
•Disabled—Split horizon is disabled on the VXLAN tunnel. The VXLAN tunnel
forwards the traffic that is received on other VXLAN tunnels.
Related commands
tunnel
vxlan
flooding disable
Use flooding disable to disable flooding for a VSI.
Use undo flooding disable to enable flooding for a VSI.
Syntax
flooding disable
undo flooding disable
Default
Flooding is enabled for a VSI.
Views
VSI view
Predefined user roles
network-admin
context-admin
Usage guidelines
By default, the device floods unknown unicast frames received from the local site to the following
interfaces in the frame's VXLAN:
•
All site-facing interfaces except for the incoming interface.

9
•
All VXLAN tunnel interfaces.
To confine unknown unicast traffic to the site-facing interfaces, use this command to disable flooding
for the VSI bound to the VXLAN. The VSI will not flood unknown unicast frames to VXLAN tunnel
interfaces.
Examples
# Disable flooding for VSI vsi1.
<Sysname> system-view
[Sysname] vsi vsi1
[Sysname-vsi-vsi1] flooding disable
l2vpn enable
Use l2vpn enable to enable L2VPN.
Use undo l2vpn enable to disable L2VPN.
Syntax
l2vpn enable
undo l2vpn enable
Default
L2VPN is disabled.
Views
System view
Predefined user roles
network-admin
context-admin
Usage guidelines
You must enable L2VPN before you can configure L2VPN settings.
Examples
# Enable L2VPN.
<Sysname> system-view
[Sysname] l2vpn enable
mac-address static vsi
Use mac-address static vsi to add a static remote-MAC address entry for a VXLAN VSI.
Use undo mac-address static vsi to remove static remote-MAC address entries for a VXLAN
VSI.
Syntax
mac-address static mac-address interface tunnel tunnel-number vsi
vsi-name
undo mac-address static [mac-address ][interface tunnel tunnel-number ]
vsi vsi-name
Default
VXLAN VSIs do not have static remote-MAC address entries.

10
Views
System view
Predefined user roles
network-admin
context-admin
Parameters
mac-address: Specifies a MAC address in H-H-H format. Do not specify a multicast MAC address
or an all-zeros MAC address. You can omit the consecutive zeros at the beginning of each segment.
For example, you can enter f-e2-1 for 000f-00e2-0001.
interface tunnel tunnel-number: Specifies a VXLAN tunnel interface by its tunnel interface
number. The value range for the tunnel-number argument is 0 to 1023.
vsi vsi-name: Specifies a VSI name, a case-sensitive string of 1 to 31 characters.
Usage guidelines
A remote MAC address is the MAC address of a VM in a remote site. Remote MAC entries can be
manually added or dynamically learned.
When you add a remote MAC address entry, make sure the specified VSI's VXLAN has been
assigned the specified VXLAN tunnel.
The undo mac-address static vsi vsi-name command removes all static MAC address
entries for a VSI.
Examples
# Add MAC address 000f-e201-0101 to VSI vsi1. Specify Tunnel-interface 1 as the outgoing
interface.
<Sysname> system-view
[Sysname] mac-address static 000f-e201-0101 interface tunnel 1 vsi vsi1
Related commands
vxlan tunnel mac-learning disable
mtu
Use mtu to set the MTU for a VSI.
Use undo mtu to restore the default.
Syntax
mtu size
undo mtu
Default
The default MTU of a VSI is 1500 bytes.
Views
VSI view
Predefined user roles
network-admin
context-admin

11
Parameters
size: Specifies an MTU value. The value range for this argument is 300 to 65535.
Usage guidelines
The MTU set by using this command limits the maximum length of the packets that a VSI receives
from ACs and forwards through VXLAN tunnels. The MTU does not limit the maximum length of
other packets in the VXLAN VSI.
Fragmentation is disabled for a VSI that uses the default MTU. If you set a MTU for a VSI, the
packets longer than the MTU are fragmented.
Examples
# Set the MTU to 1400 bytes for VSI vxlan1.
<Sysname> system-view
[Sysname] vsi vxlan1
[Sysname-vsi-vxlan1] mtu 1400
Related commands
display l2vpn vsi
reserved vxlan
Use reserved vxlan to specify a reserved VXLAN.
Use undo reserved vxlan to restore the default.
Syntax
reserved vxlan vxlan-id
undo reserved vxlan
Default
No VXLAN has been reserved.
Views
System view
Predefined user roles
network-admin
context-admin
Parameters
vxlan-id: Specifies a VXLAN ID in the range of 0 to 16777215.
Usage guidelines
You can specify only one reserved VXLAN on the VTEP. The reserved VXLAN cannot be the VXLAN
created on any VSI.
Examples
# Specify VXLAN 10000 as the reserved VXLAN.
<Sysname> system-view
[Sysname] reserved vxlan 10000

12
reset l2vpn mac-address
Use reset l2vpn mac-address to clear dynamic MAC address entries on VSIs.
Syntax
reset l2vpn mac-address [vsi vsi-name ]
Views
User view
Predefined user roles
network-admin
context-admin
Parameters
vsi vsi-name: Specifies a VSI by its name, a case-sensitive string of 1 to 31 characters. If you do
not specify a VSI, this command clears all dynamic MAC address entries on all VSIs.
Usage guidelines
Use this command when the number of dynamic MAC address entries reaches the limit or the device
learns incorrect MAC addresses.
Examples
# Clear the dynamic MAC address entries on VSI vpn1.
<Sysname> reset l2vpn mac-address vsi vpn1
Related commands
display l2vpn mac-address vsi
selective-flooding mac-address
Use selective-flooding mac-addressto enable selective flood for a MAC address.
Use undo selective-flooding mac-addressto disable selective flood for a MAC address.
Syntax
selective-flooding mac-addressmac-address
undo selective-flooding mac-addressmac-address
Default
Selective flood is disabled for all MAC addresses.
Views
VSI view
Predefined user roles
network-admin
context-admin
Parameters
mac-address: Specifies a MAC address. The MAC address cannot be all Fs.

13
Usage guidelines
This command excludes a remote MAC address from the flood suppression done by using the
flooding disable command. The VTEP will flood the frames destined for the specified MAC
address to remote sites when unknown-unicast floods are confined to the local site.
Examples
# Enable selective flood for 000f-e201-0101 on VSI vsi1.
<Sysname> system-view
[Sysname] vsi vsi1
[Sysname-vsi-vsi1] selective-flooding mac-address 000f-e201-0101
Related commands
flooding disable
shutdown
Use shutdown to shut down a VSI.
Use undo shutdown to bring up a VSI.
Syntax
shutdown
undo shutdown
Default
VSIs are not manually shut down.
Views
VSI view
Predefined user roles
network-admin
context-admin
Usage guidelines
Use this command to temporarily disable a VSI to provide Layer 2 switching services. The shutdown
action does not change settings on the VSI. You can continue to configure the VSI. After you bring up
the VSI again, the VSI provides services based on the latest settings.
Examples
# Shut down VSI vpn1.
<Sysname> system-view
[Sysname] vsi vpn1
[Sysname-vsi-vpn1] shutdown
Related commands
display l2vpn vsi
tunnel
Use tunnel to assign a VXLAN tunnel to a VXLAN.
Use undo tunnel to remove a VXLAN tunnel from a VXLAN.

14
Syntax
tunnel tunnel-number
undo tunnel tunnel-number
Default
A VXLAN does not contain VXLAN tunnels.
Views
VXLAN view
Predefined user roles
network-admin
context-admin
Parameters
tunnel-number: Specifies a tunnel interface number. The value range for this argument is 0 to
1023.The tunnel must be a VXLAN tunnel.
Usage guidelines
This command assigns a VXLAN tunnel to a VXLAN to provide Layer 2 connectivity for the VXLAN
between two sites. In unicast mode, the system floods unknown unicast, multicast, and broadcast
traffic to each tunnel in the VXLAN.
You can assign multiple VXLAN tunnels to a VXLAN, and configure a VXLAN tunnel to trunk multiple
VXLANs.
Examples
# Assign VXLAN tunnels 1 and 2 to VXLAN 10000.
<Sysname> system-view
[Sysname] vsi vpna
[Sysname-vsi-vpna] vxlan 10000
[Sysname-vsi-vpna-vxlan-10000] tunnel 1
[Sysname-vsi-vpna-vxlan-10000] tunnel 2
Related commands
display vxlan tunnel
tunnel global source-address
Use tunnel global source-address to specify a global source address for VXLAN tunnels.
Use undo tunnel global source-address to restore the default.
Syntax
tunnel global source-address ip-address
undo tunnel global source-address
Default
No global source address is specified for VXLAN tunnels.
Views
System view