H3C MSR 5600 Installation manual

H3C MSR 5600 Routers
Comware 7 VXLAN Command Reference
New H3C Technologies Co., Ltd.
http://www.h3c.com
Software version: MSR-CMW710-R0707
Document version: 6W301-20190302

Copyright © 2019, New H3C Technologies Co., Ltd. and its licensors
All rights reserved
No part of this manual may be reproduced or transmitted in any form or by any means without prior written
consent of New H3C Technologies Co., Ltd.
Trademarks
Except for the trademarks of New H3C Technologies Co., Ltd., any trademarks that may be mentioned in this
document are the property of their respective owners.
Notice
The information in this document is subject to change without notice. All contents in this document, including
statements, information, and recommendations, are believed to be accurate, but they are presented without
warranty of any kind, express or implied. H3C shall not be liable for technical or editorial errors or omissions
contained herein.

Preface
This command reference describes the commands for configuring VXLAN features.
This preface includes the following topics about the documentation:
•Audience.
•Conventions.
•Documentation feedback.
Audience
This documentation is intended for:
•Network planners.
•Field technical support and servicing engineers.
•Network administrators working with the MSR 5600 routers.
Conventions
The following information describes the conventions used in the documentation.
Command conventions
Convention Description
Boldface Bold text represents commands and keywords that you enter literally as shown.
Italic Italic text represents arguments that you replace with actual values.
[ ] Square brackets enclose syntax choices (keywords or arguments) that are optional.
{ x | y | ... }
Braces enclose a set of required syntax choices separated by vertical bars, from which
you select one.
[ x | y | ... ]
Square brackets enclose a set of optional syntax choices separated by vertical bars,
from which you select one or none.
{ x | y | ... } *
Asterisk marked braces enclose a set of required syntax choices separated by vertical
bars, from which you select a minimum of one.
[ x | y | ... ] *
Asterisk marked square brackets enclose optional syntax choices separated by vertical
bars, from which you select one choice, multiple choices, or none.
&<1-n> The argument or keyword and argument combination before the ampersand (&) sign
can be entered 1 to n times.
# A line that starts with a pound (#) sign is comments.
GUI conventions
Convention Description
Boldface Window names, button names, field names, and menu items are in Boldface. For
example, the New User window opens; click OK.
> Multi-level menus are separated by angle brackets. For example, File > Create >
Folder.

Symbols
Convention Description
WARNING! An alert that calls attention to important information that if not understood or followed
can result in personal injury.
CAUTION: An alert that calls attention to important information that if not understood or followed
can result in data loss, data corruption, or damage to hardware or software.
IMPORTANT: An alert that calls attention to essential information.
NOTE: An alert that contains additional or supplementary information.
TIP: An alert that provides helpful information.
Network topology icons
Convention Description
Represents a generic network device, such as a router, switch, or firewall.
Represents a routing-capable device, such as a router or Layer 3 switch.
Represents a generic switch, such as a Layer 2 or Layer 3 switch, or a router that
supports Layer 2 forwarding and other Layer 2 features.
Represents an access controller, a unified wired-WLAN module, or the access
controller engine on a unified wired-WLAN switch.
Represents an access point.
Represents a wireless terminator unit.
Represents a wireless terminator.
Represents a mesh access point.
Represents omnidirectional signals.
Represents directional signals.
Represents a security product, such as a firewall, UTM, multiservice security
gateway, or load balancing device.
Represents a security module, such as a firewall, load balancing, NetStream, SSL
VPN, IPS, or ACG module.
Examples provided in this document
Examples in this document might use devices that differ from your device in hardware model,
configuration, or software version. It is normal that the port numbers, sample output, screenshots,
and other information in the examples differ from what you have on your device.
T
T
T
T





Documentation feedback
You can e-mail your comments about product documentation to [e-mail].
We appreciate your comments.

i
Contents
VXLAN commands···········································································1
Basic VXLAN commands·············································································································1
arp suppression enable ········································································································1
description·························································································································1
display arp suppression vsi····································································································2
display l2vpn interface··········································································································3
display l2vpn mac-address ····································································································4
display l2vpn vsi··················································································································6
display vxlan tunnel ·············································································································8
flooding disable·················································································································10
l2vpn enable·····················································································································11
l2vpn statistics interval········································································································11
mac-address static vsi········································································································12
mtu·································································································································13
reserved vxlan··················································································································13
reset arp suppression vsi ····································································································14
reset l2vpn mac-address·····································································································15
reset l2vpn statistics tunnel··································································································15
selective-flooding mac-address ····························································································16
service-class ····················································································································16
shutdown·························································································································17
tunnel ·····························································································································18
tunnel global source-address·······························································································19
tunnel statistics enable ·······································································································19
vsi··································································································································20
vxlan·······························································································································21
vxlan fast-forwarding enable ································································································21
vxlan invalid-udp-checksum discard ······················································································22
vxlan ip-forwarding ············································································································23
vxlan local-mac report ········································································································23
vxlan tunnel mac-learning disable ·························································································24
vxlan udp-port···················································································································24
xconnect vsi·····················································································································25
VXLAN IP gateway commands ···································································································26
arp distributed-gateway dynamic-entry synchronize··································································26
bandwidth························································································································27
default·····························································································································28
description·······················································································································28
display interface vsi-interface·······························································································29
distributed-gateway local·····································································································32
gateway subnet·················································································································33
gateway vsi-interface ·········································································································34
interface vsi-interface·········································································································34
mac-address ····················································································································35
mtu·································································································································35
reset counters interface vsi-interface ·····················································································36
shutdown·························································································································36
vtep group member local·····································································································37
vtep group member remote ·································································································38
vxlan tunnel arp-learning disable ··························································································38

1
VXLAN commands
Basic VXLAN commands
arp suppression enable
Use arp suppression enable to enable ARP flood suppression.
Use undo arp suppression enable to disable ARP flood suppression.
Syntax
arp suppression enable
undo arp suppression enable
Default
ARP flood suppression is disabled.
Views
VSI view
Predefined user roles
network-admin
Usage guidelines
ARP flood suppression reduces ARP request broadcasts by enabling the VTEP to reply to ARP
requests on behalf of VMs.
This feature snoopsARP packets to populate the ARPflood suppression table with local and remote
MAC addresses. If an ARP request has a matching entry, the VTEP replies to the request on behalf
of the VM. If no match is found, the VTEP floods the request to both local and remote sites.
Examples
# Enable ARP flood suppression for VSI vsi1.
<Sysname> system-view
[Sysname] vsi vsi1
[Sysname-vsi-vsi1] arp suppression enable
Related commands
display arp suppression vsi
reset arp suppression vsi
description
Use description to configure a description for a VSI.
Use undo description to restore the default.
Syntax
description text
undo description

2
Default
A VSI does not have a description.
Views
VSI view
Predefined user roles
network-admin
Parameters
text: Specifies a description, a case-sensitive string of 1 to 80 characters.
Examples
# Configure a description for VSI vpn1.
<Sysname> system-view
[Sysname] vsi vpn1
[Sysname-vsi-vpn1] description vsi for vpn1
Related commands
display l2vpn vsi
display arp suppression vsi
Use display arp suppression vsi to display ARP flood suppression entries.
Syntax
In standalone mode:
display arp suppression vsi [name vsi-name ][slot slot-number ][count ]
In IRF mode:
display arp suppression vsi [name vsi-name ][chassis chassis-number slot
slot-number ][count ]
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
name vsi-name: Specifies a VSI by its name, a case-sensitive string of 1 to 31 characters. If you
do not specify a VSI, this command displays entries for all VSIs.
slot slot-number: Specifies a card by its slot number. If you do not specify a card, this command
displays entries on the active MPU. (In standalone mode.)
chassis chassis-number slot slot-number: Specifies a card on an IRF member device.
The chassis-number argument represents the IRF member ID. The slot-number argument
represents the slot number of the card. If you do not specify a card, this command displays entries on
the global active MPU. (In IRF mode.)
count: Displays the number of ARP flood suppression entries that match the command.
Examples
# Display ARP flood suppression entries.

3
<Sysname> display arp suppression vsi
IP address MAC address Vsi Name Link ID Aging
1.1.1.2 000f-e201-0101 vsi1 0x5000000 14
1.1.1.3 000f-e201-0202 vsi1 0x5000001 18
1.1.1.4 000f-e201-0203 vsi2 0x5000000 10
# Display the number of ARP flood suppression entries.
<Sysname> display arp suppression vsi count
Total entries: 3
Table 1 Command output
Field Description
Link ID Link ID that uniquely identifies an AC or a VXLAN tunnel on a VSI.
Aging Remaining lifetime (in minutes) of the ARP flood suppression entry. When
the timer expires, the entry is deleted.
Related commands
arp suppression enable
reset arp suppression vsi
display l2vpn interface
Use display l2vpn interface to display L2VPN information for Layer 3 interfaces that are
mapped to VSIs.
Syntax
display l2vpn interface [vsi vsi-name |interface-type interface-number ]
[verbose ]
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
vsi vsi-name: Specifies a VSI name, a case-sensitive string of 1 to 31 characters.
interface-type interface-number: Specifies an interface by its type and number.
verbose: Displays detailed information about Layer 3 interfaces. If you do not specify this keyword,
the command displays brief information about Layer 3 interfaces.
Usage guidelines
If you do not specify any parameters, this command displays brief L2VPN information for all Layer 3
interfaces that are mapped to VSIs.
Examples
# Display brief L2VPN information for all Layer 3 interfaces that are mapped to VSIs.
<Sysname> display l2vpn interface
Total number of interfaces: 2, 1 up, 1 down

4
Interface Owner Link ID State Type
GE1/0/1 vxlan3 1 Up VSI
GE1/0/2 vxlan4 2 Down VSI
Table 2 Command output
Field Description
Interface Layer 3 interface name.
Owner VSI name.
Link ID The interface's link ID on the VSI.
State Physical state of the interface:
•Up—The interface is physically up.
•Down—The interface is physically down.
Type L2VPN type of the interface. This field displays VSI for the VXLAN feature.
# Display detailed L2VPN information for all Layer 3 interfaces that are mapped to VSIs.
<Sysname> display l2vpn interface verbose
Interface: GE1/0/1
Owner : vsi1
Link ID : 0
State : Up
Type : VSI
Interface: GE1/0/2
Owner : vsi2
Link ID : 0
State : Down
Type : VSI
Table 3 Command output
Field Description
Interface Layer 3 interface name.
Owner VSI name.
Link ID The interface's link ID on the VSI.
State Physical state of the interface:
•Up—The interface is physically up.
•Down—The interface is physically down.
Type L2VPN type of the interface. This field displays VSI for the VXLAN feature.
Related commands
display l2vpn service-instance
display l2vpn mac-address
Use display l2vpn mac-address to display MAC address entries for VSIs.

5
Syntax
display l2vpn mac-address [vsi vsi-name ][dynamic ][count ]
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
vsi vsi-name: Specifies a VSI name, a case-sensitive string of 1 to 31 characters. If you do not
specify a VSI, this command displays MAC address entries for all VSIs.
dynamic: Specifies dynamic MAC address entries learned in the data plane. If you do not specify
this keyword, the command displays all MAC address entries, including:
•Dynamic remote- and local-MAC entries.
•Remote-MAC entries advertised through BGP EVPN.
•Manually added static remote-MAC entries.
•Remote-MAC entries issued through OpenFlow.
VXLAN does not support static local-MAC entries.
count: Displays the number of MAC address entries. If you do not specify this keyword, the
command displays detailed information about MAC address entries.
Examples
# Display MAC address entries for all VSIs.
<Sysname> display l2vpn mac-address
MAC Address State VSI Name Link ID/Name Aging
0000-0000-000b Static vpn1 Tunnel10 NotAging
0000-0000-000c Dynamic vpn1 Tunnel60 Aging
0000-0000-000d Dynamic vpn1 Tunnel99 Aging
--- 3 mac address(es) found ---
# Display the total number of MAC address entries in all VSIs.
<Sysname> display l2vpn mac-address count
3 mac address(es) found
Table 4 Command output
Field Description
State
Entry state:
•Dynamic—Local- or remote-MAC entry dynamically learned in the data plane.
•Static—Static remote-MAC entry.
•EVPN—Remote-MAC entry advertised through BGP EVPN.
•OpenFlow—Remote-MAC entry issued by a remote controller through
OpenFlow.
Link ID/Name For a local MAC address, this field displays the AC's link ID on the VSI.
For a remote MAC address, this field displays the tunnel interface name.
Aging Entry aging state:
•Aging.
•NotAging.

6
Related commands
reset l2vpn mac-address
display l2vpn vsi
Use display l2vpn vsi to display information about VSIs.
Syntax
display l2vpn vsi [name vsi-name ][verbose ]
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
name vsi-name: Specifies a VSI by its name, a case-sensitive string of 1 to 31 characters. If you
do not specify a VSI, this command displays information about all VSIs.
verbose: Displays detailed information about VSIs. If you do not specify this keyword, the
command displays brief information about VSIs.
Examples
# Display brief information about all VSIs.
<Sysname> display l2vpn vsi
Total number of VSIs: 1, 1 up, 0 down, 0 admin down
VSI Name VSI Index MTU State
vpna 0 1500 Up
Table 5 Command output
Field Description
MTU MTU on the VSI.
State
VSI state:
•Up—The VSI is up.
•Down—The VSI is down.
•Admin down—The VSI has been manually shut down by using the
shutdown command.
# Display detailed information about all VSIs.
<Sysname> display l2vpn vsi verbose
VSI Name: vpna
VSI Index : 0
VSI State : Up
MTU : 1500
Bandwidth : Unlimited
Broadcast Restrain : 5120 kbps
Multicast Restrain : 5120 kbps
Unknown Unicast Restrain: 5120 kbps

7
MAC Learning : Enabled
MAC Table Limit : -
Drop Unknown : Disabled
Flooding : Enabled
Service Class : -
Gateway Interface : VSI-interface 100
VXLAN ID : 10
Tunnel Statistics : Disabled
Tunnels:
Tunnel Name Link ID State Type Flood Proxy Split horizon
Tunnel1 0x5000001 Up Manual Disabled Enabled
Tunnel2 0x5000002 Up Manual Disabled Enabled
ACs:
AC Link ID State
GE1/0/1 0 Up
Table 6 Command output
Field Description
VSI Description Description of the VSI. If the VSI does not have a description, the command does
not display this field.
VSI State
VSI state:
•Up—The VSI is up.
•Down—The VSI is down.
•Administratively down—The VSI has been manually shut down by using
the shutdown command.
MTU MTU on the VSI.
Bandwidth Maximum bandwidth (in kbps) for known unicast traffic on the VSI. If this field is
not supported in the current software version, a hyphen (-) is displayed.
Broadcast Restrain Broadcast restraint bandwidth (in kbps). If this field is not supported in the current
software version, a hyphen (-) is displayed.
Multicast Restrain Multicast restraint bandwidth (in kbps). If this field is not supported in the current
software version, a hyphen (-) is displayed.
Unknown Unicast
Restrain Unknown unicast restraint bandwidth (in kbps). If this field is not supported in the current software version, a hyphen (-) is displayed.
MAC Learning State of the MAC learning feature.
MAC Table Limit Maximum number of MAC address entries on the VSI. If this field is not supported
in the current software version, a hyphen (-) is displayed.
Drop Unknown Action on source MAC-unknown frames received after the maximum number of MAC entries is reached. If this field is not supported in the current software
version, a hyphen (-) is displayed.
Flooding
State of the VSI's flooding feature:
•Enabled—Flooding is enabled on the VSI. The VTEP floods unknown
unicast frames to both local and remote sites.
•Disabled—Flooding is disabled on the VSI. The VTEP floods unknown
unicast frames only to local sites.
Service Class Service class value of outgoing VXLAN packets.
Gateway Interface VSI interface name.
Tunnel Statistics Packet statistics state:

8
Field Description
•Enabled—The packet statistics feature is enabled for the VXLAN tunnels of
the VSI.
•Disabled—The packet statistics feature is disabled for the VXLAN tunnels
of the VSI.
State
Tunnel state:
•Up—The tunnel is operating correctly.
•Blocked—The tunnel is a backup proxy tunnel. Its tunnel interface is up, but
the tunnel is blocked because the primary proxy tunnel is operating
correctly.
•Defect—The tunnel interface is up, but BFD cannot detect the remote
VTEP. This state is not supported in the current software version.
•Down—The tunnel interface is down.
Type
Tunnel assignment method:
•Auto—The tunnel was automatically assigned to the VXLAN through
EVPN.
•Manual—The tunnel was manually assigned to the VXLAN.
Flood Proxy
Flood proxy state:
•Enabled—Flood proxy is enabled. The VTEP sends broadcast, multicast,
and unknown unicast traffic to a flood proxy server through the tunnel. The
flood proxy server replicates and forwards flood traffic to remote VTEPs.
•Disabled—Flood proxy is disabled.
Split horizon
State of split horizon:
•Enabled—Split horizon is enabled on the VXLAN tunnel. The VXLAN tunnel
does not forward the traffic that is received on other VXLAN tunnels.
•Disabled—Split horizon is disabled on the VXLAN tunnel. The VXLAN
tunnel forwards the traffic that is received on ACs and other VXLAN tunnels.
ACs ACs that are bound to the VSI.
Link ID AC's link ID on the VSI.
State AC state:
•Up.
•Down.
display vxlan tunnel
Use display vxlan tunnel to display VXLAN tunnel information for VXLANs.
Syntax
display vxlan tunnel [vxlan-id vxlan-id [tunnel tunnel-number ] ]
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
vxlan-id: Specifies a VXLAN ID in the range of 0 to 16777215. If you do not specify a VXLAN, this
command displays VXLAN tunnel information for all VXLANs.

9
tunnel tunnel-number: Specifies a VXLAN tunnel. The tunnel-number argument
represents the tunnel interface number. The value range for the tunnel-number argument is 0 to
10239. If you do not specify a VXLAN tunnel, this command displays information about all VXLAN
tunnels associated with the specified VXLAN.
Examples
# Display VXLAN tunnel information for all VXLANs.
<Sysname> display vxlan tunnel
Total number of VXLANs: 1
VXLAN ID: 10, VSI name: vpna, Total tunnels: 3 (3 up, 0 down, 0 defect, 0 blocked)
Tunnel name Link ID State Type Flood proxy Split horizon
Tunnel1 0x5000001 Up Manual Disabled Enabled
Tunnel2 0x5000002 Up Manual Disabled Enabled
# Display VXLAN tunnel information for VXLAN 10.
<Sysname> display vxlan tunnel vxlan-id 10
VXLAN ID: 10, VSI name: vpna, Total tunnels: 3 (3 up, 0 down, 0 defect, 0 blocked)
Tunnel name Link ID State Type Flood proxy Split horizon
Tunnel1 0x5000001 Up Manual Disabled Enabled
Tunnel2 0x5000002 Up Manual Disabled Enabled
# Display information about VXLAN tunnel 0 for VXLAN 10.
<Sysname> display vxlan tunnel vxlan-id 10 tunnel 0
Interface: Tunnel0
Link ID : 0x5000000
State : Up
Type : Auto
Flood Proxy: Disabled
Statistics : Enabled
Input statistics:
Octets : 994496
Packets: 15539
Output statistics:
Octets : 0
Packets: 0
Table 7 Command output
Field Description
Link ID Tunnel's link ID in the VXLAN.
State
Tunnel state:
•Up—The tunnel is operating correctly.
•Blocked—The tunnel is a backup proxy tunnel. Its tunnel interface is up, but the
tunnel is blocked because the primary proxy tunnel is operating correctly.
•Defect—The tunnel interface is up, but BFD cannot detect the remote VTEP.
This state is not supported in the current software version.
•Down—The tunnel interface is down.
Type Tunnel assignment method:
•Auto—The tunnel was automatically assigned to the VXLAN through EVPN.
•Manual—The tunnel was manually assigned to the VXLAN.
Flood proxy Flood proxy state:

10
Field Description
•Enabled—Flood proxy is enabled. The VTEP sends broadcast, multicast, and
unknown unicast traffic to a flood proxy server through the tunnel. The flood
proxy server replicates and forwards flood traffic to remote VTEPs.
•Disabled—Flood proxy is disabled.
Split horizon
State of split horizon:
•Enabled—Split horizon is enabled on the VXLAN tunnel. The VXLAN tunnel
does not forward the traffic that is received on other VXLAN tunnels.
•Disabled—Split horizon is disabled on the VXLAN tunnel. The VXLAN tunnel
forwards the traffic that is received onACs and other VXLAN tunnels.
Statistics Packet statistics state:
•Enabled—The packet statistics feature is enabled for the VXLAN tunnel.
•Disabled—The packet statistics feature is disabled for the VXLAN tunnel.
Input statistics Incoming traffic statistics:
•Octets—Number of incoming bytes.
•Packets—Number of incoming packets.
Output statistics Outgoing traffic statistics:
•Octets—Number of outgoing bytes.
•Packets—Number of outgoing packets.
Related commands
tunnel
vxlan
flooding disable
Use flooding disable to disable flooding for a VSI.
Use undo flooding disable to enable flooding for a VSI.
Syntax
flooding disable
undo flooding disable
Default
Flooding is enabled for a VSI.
Views
VSI view
Predefined user roles
network-admin
Usage guidelines
By default, the device floods unknown unicast frames received from the local site to the following
interfaces in the frame's VXLAN:
•All site-facing interfaces except for the incoming interface.
•All VXLAN tunnel interfaces.
To confine unknown unicast traffic to the site-facing interfaces, use this command to disable flooding
for the VSI bound to the VXLAN. The VSI will not flood unknown unicast frames to VXLAN tunnel
interfaces.

11
Examples
# Disable flooding for VSI vsi1.
<Sysname> system-view
[Sysname] vsi vsi1
[Sysname-vsi-vsi1] flooding disable
l2vpn enable
Use l2vpn enable to enable L2VPN.
Use undo l2vpn enable to disable L2VPN.
Syntax
l2vpn enable
undo l2vpn enable
Default
L2VPN is disabled.
Views
System view
Predefined user roles
network-admin
Usage guidelines
You must enable L2VPN before you can configure L2VPN settings.
Examples
# Enable L2VPN.
<Sysname> system-view
[Sysname] l2vpn enable
l2vpn statistics interval
Use l2vpn statistics interval to set the VXLAN statistics collection interval.
Use undo l2vpn statistics interval to restore the default.
Syntax
l2vpn statistics interval interval
undo l2vpn statistics interval
Default
The VXLAN statistics collection interval is 15 minutes.
Views
System view
Predefined user roles
network-admin
Parameters
interval: Specifies an interval value in the range of 30 to 65535 seconds.

12
Examples
# Set the VXLAN statistics collection interval to 30 seconds.
<Sysname> system-view
[Sysname] l2vpn statistics interval 30
mac-address static vsi
Use mac-address static vsi to add a static remote-MAC address entry for a VXLAN VSI.
Use undo mac-address static vsi to remove static remote-MAC address entries for a VXLAN
VSI.
Syntax
mac-address static mac-address interface tunnel tunnel-number vsi
vsi-name
undo mac-address static [mac-address ][interface tunnel tunnel-number ]
vsi vsi-name
Default
VXLAN VSIs do not have static remote-MAC address entries.
Views
System view
Predefined user roles
network-admin
Parameters
mac-address: Specifies a MAC address in H-H-H format. Do not specify a multicast MAC address,
all-zeros MAC address, or all-Fs MAC address. You can omit the consecutive zeros at the beginning
of each segment. For example, you can enter f-e2-1 for 000f-00e2-0001.
interface tunnel tunnel-number: Specifies a VXLAN tunnel interface by its tunnel interface
number. The value range for the tunnel-number argument is 0 to 10239. The tunnel interface
must already exist.
vsi vsi-name: Specifies a VSI name, a case-sensitive string of 1 to 31 characters.
Usage guidelines
A remote MAC address is the MAC address of a VM in a remote site. Remote MAC entries include
manually added MAC entries, dynamically learned MAC entries, and MAC entries advertised
through a protocol, for example, BGP EVPN.
When you add a remote MAC address entry, make sure the specified VSI's VXLAN has been
assigned the specified VXLAN tunnel.
The undo mac-address static vsi vsi-name command removes all static MAC address
entries for a VSI.
Do not configure static remote-MAC entries for tunnels that are automatically established by using
EVPN.
•EVPN re-establishes tunnels if the transport-facing interface goes down and then comes up. If
you have configured static remote-MAC entries, the entries are deleted when the tunnels are
re-established.
•EVPN re-establishes tunnels if you perform configuration rollback. If the tunnel IDs change
during tunnel re-establishment, configuration rollback fails, and static remote-MAC entries on
the tunnels cannot be restored.

13
Examples
# Add MAC address 000f-e201-0101 to VSI vsi1. Specify Tunnel-interface 1 as the outgoing
interface.
<Sysname> system-view
[Sysname] mac-address static 000f-e201-0101 interface tunnel 1 vsi vsi1
Related commands
vxlan tunnel mac-learning disable
mtu
Use mtu to set the MTU for a VSI.
Use undo mtu to restore the default.
Syntax
mtu size
undo mtu
Default
The default MTU of a VSI is 1500 bytes.
Views
VSI view
Predefined user roles
network-admin
Parameters
size: Specifies an MTU value. The value range for this argument is 300 to 65535.
Usage guidelines
The MTU set by using this command limits the maximum length of the packets that a VSI receives
from ACs and forwards through VXLAN tunnels. The MTU does not limit the maximum length of
other packets in the VXLAN VSI.
Fragmentation is disabled for a VSI that uses the default MTU. If you set a MTU for a VSI, the
packets longer than the MTU are fragmented.
Examples
# Set the MTU to 1400 bytes for VSI vxlan1.
<Sysname> system-view
[Sysname] vsi vxlan1
[Sysname-vsi-vxlan1] mtu 1400
Related commands
display l2vpn vsi
reserved vxlan
Use reserved vxlan to specify a reserved VXLAN.
Use undo reserved vxlan to restore the default.

14
Syntax
reserved vxlan vxlan-id
undo reserved vxlan
Default
No VXLAN has been reserved.
Views
System view
Predefined user roles
network-admin
Parameters
vxlan-id: Specifies a VXLAN ID in the range of 0 to 16777215.
Usage guidelines
You can specify only one reserved VXLAN on the VTEP. The reserved VXLAN cannot be the VXLAN
created on any VSI.
The reserved VXLAN ID cannot be the same as the remote VXLAN ID specified by using the
mapping vni command.
Examples
# Specify VXLAN 10000 as the reserved VXLAN.
<Sysname> system-view
[Sysname] reserved vxlan 10000
Related commands
mapping vni (EVPN Command Reference)
reset arp suppression vsi
Use reset arp suppression vsi to clear ARP flood suppression entries on VSIs.
Syntax
reset arp suppression vsi [name vsi-name ]
Views
User view
Predefined user roles
network-admin
Parameters
name vsi-name: Specifies a VSI by its name, a case-sensitive string of 1 to 31 characters. If you
do not specify a VSI, this command clears ARP flood suppression entries on all VSIs.
Examples
# Clear ARP flood suppression entries on all VSIs.
<Sysname> reset arp suppression vsi
This command will delete all entries. Continue? [Y/N]:y
Related commands
arp suppression enable