H3C MSR810 Installation manual

H3C MSR 810 & 2600 & 3600 Routers
Comware 7 VXLAN Command Reference
New H3C Technologies Co., Ltd.
http://www.h3c.com
Software version: MSR-CMW710-R0809
Document version: 6W400-20200823

Copyright © 2020, New H3C Technologies Co., Ltd. and its licensors
All rights reserved
No part of this manual may be reproduced or transmitted in any form or by any means without prior written
consent of New H3C Technologies Co., Ltd.
Trademarks
Except for the trademarks of New H3C Technologies Co., Ltd., any trademarks that may be mentioned in this
document are the property of their respective owners.
Notice
The information in this document is subject to change without notice. All contents in this document, including
statements, information, and recommendations, are believed to be accurate, but they are presented without
warranty of any kind, express or implied. H3C shall not be liable for technical or editorial errors or omissions
contained herein.

Preface
This command reference describes the commands for configuring VXLAN features.
This preface includes the following topics about the documentation:
•
Audience.
•
Conventions.
•
Documentation feedback.
Audience
This documentation is intended for:
•
Network planners.
•
Field technical support and servicing engineers.
•
Network administrators.
Conventions
The following information describes the conventions used in the documentation.
Command conventions
Convention
Description
Boldface Bold text represents commands and keywords that you enter literally as shown.
Italic Italic text represents arguments that you replace with actual values.
[ ] Square brackets enclose syntax choices (keywords or arguments) that are optional.
{ x | y | ... }
Braces enclose a set of required syntax choices separated by vertical bars, from which
you select one.
[ x | y | ... ]
Square brackets enclose a set of optional syntax choices separated by vertical bars,
from which you select one or none.
{ x | y | ... } *
Asterisk marked braces enclose a set of required syntax choices separated by vertical
bars, from which you select a minimum of one.
[ x | y | ... ] *
Asterisk marked square brackets enclose optional syntax choices separated by vertical
bars, from which you select one choice, multiple choices, or none.
&<1-n> The argument or keyword and argument combination before the ampersand (&) sign
can be entered 1 to n times.
# A line that starts with a pound (#) sign is comments.
GUI conventions
Convention
Description
Boldface Window names, button names, field names, and menu items are in Boldface. For
example, the New User window opens; click OK.
> Multi-level menus are separated by angle brackets. For example, File > Create >
Folder.

Symbols
Convention
Description
WARNING! An alert that calls attention to important information that if not understood or followed
can result in personal injury.
CAUTION:
An alert that calls attention to important information that if not understood or followed
can result in data loss, data corruption, or damage to hardware or software.
IMPORTANT:
An alert that calls attention to essential information.
NOTE:
An alert that contains additional or supplementary information.
TIP:
An alert that provides helpful information.
Network topology icons
Convention
Description
Represents a generic network device, such as a router, switch, or firewall.
Represents a routing-capable device, such as a router or Layer 3 switch.
Represents a generic switch, such as a Layer 2 or Layer 3 switch, or a router that
supports Layer 2 forwarding and other Layer 2 features.
Represents an access controller, a unified wired-WLAN module, or the access
controller engine on a unified wired-WLAN switch.
Represents an access point.
Represents a wireless terminator unit.
Represents a wireless terminator.
Represents a mesh access point.
Represents omnidirectional signals.
Represents directional signals.
Represents a security product, such as a firewall, UTM, multiservice security
gateway, or load balancing device.
Represents a security module, such as a firewall, load balancing, NetStream, SSL
VPN, IPS, or ACG module.
Examples provided in this document
Examples in this document might use devices that differ from your device in hardware model,
configuration, or software version. It is normal that the port numbers, sample output, screenshots,
and other information in the examples differ from what you have on your device.
T
T
T
T

Documentation feedback
You can e-mail your comments about product documentation to [e-mail].
We appreciate your comments.

i
Contents
VXLAN commands ························································································1
Basic VXLAN commands···································································································································2
arp suppression enable······························································································································2
description··················································································································································3
display arp suppression vsi························································································································3
display l2vpn interface································································································································4
display l2vpn mac-address·························································································································6
display l2vpn vsi·········································································································································7
display vxlan tunnel··································································································································10
flooding disable········································································································································13
l2vpn enable·············································································································································14
l2vpn rewrite inbound tag·························································································································14
l2vpn statistics interval·····························································································································15
mac-address static vsi······························································································································16
mtu···························································································································································18
reserved vxlan··········································································································································19
reset arp suppression vsi·························································································································19
reset l2vpn mac-address··························································································································20
reset l2vpn statistics tunnel······················································································································20
selective-flooding mac-address················································································································21
service-class ············································································································································22
shutdown··················································································································································24
tunnel ·······················································································································································24
tunnel bfd enable······································································································································27
tunnel global source-address···················································································································28
tunnel statistics enable·····························································································································28
vsi·····························································································································································29
vxlan·························································································································································30
vxlan fast-forwarding enable····················································································································30
vxlan invalid-udp-checksum discard ········································································································31
vxlan local-mac report······························································································································32
vxlan tunnel mac-learning disable············································································································32
vxlan udp-port ··········································································································································33
xconnect vsi ·············································································································································33
VXLAN IP gateway commands························································································································35
arp distributed-gateway dynamic-entry synchronize················································································35
bandwidth·················································································································································35
default ······················································································································································36
description················································································································································37
display interface vsi-interface···················································································································37
distributed-gateway local··························································································································41
gateway subnet········································································································································41
gateway vsi-interface ·······························································································································42
interface vsi-interface·······························································································································43
mac-address ············································································································································43
mtu···························································································································································44
reset counters interface vsi-interface·······································································································44
shutdown··················································································································································45
vtep group member local··························································································································45
vtep group member remote······················································································································46
vxlan tunnel arp-learning disable ·············································································································47

1
VXLAN commands
The following compatibility matrixes show the support of hardware platforms for VXLAN:
Hardware
VXLAN compatibility
MSR810, MSR810-W, MSR810-W-DB, MSR810-LM,
MSR810-W-LM, MSR810-10-PoE, MSR810-LM-HK,
MSR810-W-LM-HK, MSR810-LM-CNDE-SJK,
MSR810-CNDE-SJK
Yes
MSR810-LMS, MSR810-LUS No
MSR810-LMS-EA, MSR810-LME Yes
MSR2600-6-X1, MSR2600-10-X1 Yes
MSR 2630 Yes
MSR3600-28, MSR3600-51 Yes
MSR3600-28-SI, MSR3600-51-SI No
MSR3600-28-X1, MSR3600-28-X1-DP, MSR3600-51-X1,
MSR3600-51-X1-DP Yes
MSR3610-I-DP, MSR3610-IE-DP, MSR3610-IE-ES,
MSR3610-IE-EAD Yes
MSR3610-X1, MSR3610-X1-DP, MSR3610-X1-DC,
MSR3610-X1-DP-DC Yes
MSR 3610, MSR 3620, MSR 3620-DP, MSR 3640, MSR 3660 Yes
MSR3610-G, MSR3620-G Yes
Hardware
VXLAN compatibility
MSR810-W-WiNet, MSR810-LM-WiNet Yes
MSR830-4LM-WiNet No
MSR830-5BEI-WiNet, MSR830-6EI-WiNet,
MSR830-10BEI-WiNet No
MSR830-6BHI-WiNet, MSR830-10BHI-WiNet No
MSR2600-6-WiNet, MSR2600-10-X1-WiNet Yes
MSR2630-WiNet Yes
MSR3600-28-WiNet Yes
MSR3610-X1-WiNet Yes
MSR3610-WiNet, MSR3620-10-WiNet, MSR3620-DP-WiNet,
MSR3620-WiNet, MSR3660-WiNet Yes
Hardware
VXLAN compatibility
MSR2630-XS Yes
MSR3600-28-XS Yes
MSR3610-XS Yes
MSR3620-XS Yes

2
Hardware
VXLAN compatibility
MSR3610-I-XS Yes
MSR3610-IE-XS Yes
Hardware
VXLAN compatibility
MSR810-LM-GL Yes
MSR810-W-LM-GL Yes
MSR830-6EI-GL No
MSR830-10EI-GL No
MSR830-6HI-GL No
MSR830-10HI-GL No
MSR2600-6-X1-GL Yes
MSR3600-28-SI-GL No
Basic VXLAN commands
arp suppression enable
Use arp suppression enable to enable ARP flood suppression.
Use undo arp suppression enable to disable ARP flood suppression.
Syntax
arp suppression enable
undo arp suppression enable
Default
ARP flood suppression is disabled.
Views
VSI view
Predefined user roles
network-admin
Usage guidelines
ARP flood suppression reduces ARP request broadcasts by enabling the VTEP to reply to ARP
requests on behalf of VMs.
This feature snoops ARP packets to populate the ARP flood suppression table with local and remote
MAC addresses. If an ARP request has a matching entry, the VTEP replies to the request on behalf
of the VM. If no match is found, the VTEP floods the request to both local and remote sites.
Examples
# Enable ARP flood suppression for VSI vsi1.
<Sysname> system-view
[Sysname] vsi vsi1
[Sysname-vsi-vsi1] arp suppression enable

3
Related commands
display arp suppression vsi
reset arp suppression vsi
description
Use description to configure a description for a VSI.
Use undo description to restore the default.
Syntax
description text
undo description
Default
A VSI does not have a description.
Views
VSI view
Predefined user roles
network-admin
mdc-admin
Parameters
text: Specifies a description, a case-sensitive string of 1 to 80 characters.
Examples
# Configure a description for VSI vpn1.
<Sysname> system-view
[Sysname] vsi vpn1
[Sysname-vsi-vpn1] description vsi for vpn1
Related commands
display l2vpn vsi
display arp suppression vsi
Use display arp suppression vsi to display ARP flood suppression entries.
Syntax
In standalone mode:
display arp suppression vsi [name vsi-name ][count ]
In IRF mode:
display arp suppression vsi [name vsi-name ][slot slot-number ][count ]
Views
Any view
Predefined user roles
network-admin

4
network-operator
Parameters
name vsi-name: Specifies a VSI by its name, a case-sensitive string of 1 to 31 characters. If you
do not specify a VSI, this command displays entries for all VSIs.
slot slot-number: Specifies an IRF member device by its member ID. If you do not specify a
member device, this command displays entries on the master device. (In IRF mode.)
count: Displays the number of ARP flood suppression entries that match the command.
Examples
# Display ARP flood suppression entries.
<Sysname> display arp suppression vsi
IP address MAC address Vsi Name Link ID Aging
1.1.1.2 000f-e201-0101 vsi1 0x70000 14
1.1.1.3 000f-e201-0202 vsi1 0x80000 18
1.1.1.4 000f-e201-0203 vsi2 0x90000 10
# Display the number of ARP flood suppression entries.
<Sysname> display arp suppression vsi count
Total entries: 3
Table 1 Command output
Field
Description
Link ID Link ID that uniquely identifies an AC or a VXLAN tunnel on a VSI.
Aging Remaining lifetime (in minutes) of the ARP flood suppression entry. When
the timer expires, the entry is deleted.
Related commands
arp suppression enable
reset arp suppression vsi
display l2vpn interface
Use display l2vpn interface to display L2VPN information for Layer 3 interfaces that are
mapped to VSIs.
Syntax
display l2vpn interface [vsi vsi-name |interface-type interface-number ]
[verbose ]
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
vsi vsi-name: Specifies a VSI name, a case-sensitive string of 1 to 31 characters.
interface-type interface-number: Specifies an interface by its type and number.

5
verbose: Displays detailed information about Layer 3 interfaces. If you do not specify this keyword,
the command displays brief information about Layer 3 interfaces.
Usage guidelines
If you do not specify any parameters, this command displays brief L2VPN information for all Layer 3
interfaces that are mapped to VSIs.
Examples
# Display brief L2VPN information for all Layer 3 interfaces that are mapped to VSIs.
<Sysname> display l2vpn interface
Total number of interfaces: 2, 1 up, 1 down
Interface Owner Link ID State Type
GE1/0/1 vxlan3 1 Up VSI
GE1/0/2 vxlan4 2 Down VSI
Table 2 Command output
Field
Description
Interface Layer 3 interface name.
Owner VSI name.
Link ID The interface's link ID on the VSI.
State Physical state of the interface:
•Up—The interface is physically up.
•Down—The interface is physically down.
Type L2VPN type of the interface. This field displays VSI for the VXLAN feature.
# Display detailed L2VPN information for all Layer 3 interfaces that are mapped to VSIs.
<Sysname> display l2vpn interface verbose
Interface: GE1/0/1
Owner : vsi1
Link ID : 0
State : Up
Type : VSI
Interface: GE1/0/2
Owner : vsi2
Link ID : 0
State : Down
Type : VSI
Table 3 Command output
Field
Description
Interface Layer 3 interface name.
Owner VSI name.
Link ID The interface's link ID on the VSI.
State Physical state of the interface:
•Up—The interface is physically up.

6
Field
Description
•Down—The interface is physically down.
Type L2VPN type of the interface. This field displays VSI for the VXLAN feature.
display l2vpn mac-address
Use display l2vpn mac-address to display MAC address entries for VSIs.
Syntax
display l2vpn mac-address [vsi vsi-name ][dynamic ][count ]
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
vsi vsi-name: Specifies a VSI name, a case-sensitive string of 1 to 31 characters. If you do not
specify a VSI, this command displays MAC address entries for all VSIs.
dynamic: Specifies dynamic MAC address entries learned in the data plane. If you do not specify
this keyword, the command displays all MAC address entries, including:
•
Dynamic remote- and local-MAC entries.
•
Remote-MAC entries advertised through BGP EVPN.
•
Manually added static remote-MAC entries.
•
Remote-MAC entries issued through OpenFlow.
VXLAN does not support static local-MAC entries.
count: Displays the number of MAC address entries. If you do not specify this keyword, the
command displays detailed information about MAC address entries.
Examples
# Display MAC address entries for all VSIs.
<Sysname> display l2vpn mac-address
MAC Address State VSI Name Link ID/Name Aging
0000-0000-000b Static vpn1 Tunnel10 NotAging
0000-0000-000c Dynamic vpn1 Tunnel60 Aging
0000-0000-000d Dynamic vpn1 Tunnel99 Aging
--- 3 mac address(es) found ---
# Display the total number of MAC address entries in all VSIs.
<Sysname> display l2vpn mac-address count
3 mac address(es) found
Table 4 Command output
Field
Description
State Entry state:
•Dynamic—Local- or remote-MAC entry dynamically learned in the data plane.

7
Field
Description
•Static—Static remote-MAC entry.
•EVPN—Remote-MAC entry advertised through BGP EVPN.
•OpenFlow—Remote-MAC entry issued by a remote controller through
OpenFlow.
Link ID/Name For a local MAC address, this field displays the AC's link ID on the VSI.
For a remote MAC address, this field displays the tunnel interface name.
Aging Entry aging state:
•Aging.
•NotAging.
Related commands
reset l2vpn mac-address
display l2vpn vsi
Use display l2vpn vsi to display information about VSIs.
Syntax
display l2vpn vsi [name vsi-name ][verbose ]
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
name vsi-name: Specifies a VSI by its name, a case-sensitive string of 1 to 31 characters. If you
do not specify a VSI, this command displays information about all VSIs.
verbose: Displays detailed information about VSIs. If you do not specify this keyword, the
command displays brief information about VSIs.
Examples
# Display brief information about all VSIs.
<Sysname> display l2vpn vsi
Total number of VSIs: 1, 1 up, 0 down, 0 admin down
VSI Name VSI Index MTU State
vpna 0 1500 Up
Table 5 Command output
Field
Description
MTU MTU on the VSI.
State
VSI state:
•Up—The VSI is up.
•Down—The VSI is down.
•Admin down—The VSI has been manually shut down by using the

8
Field
Description
shutdown command.
# Display detailed information about all VSIs.
<Sysname> display l2vpn vsi verbose
VSI Name: vpna
VSI Index : 0
VSI State : Up
MTU : 1500
Bandwidth : -
Broadcast Restrain : -
Multicast Restrain : -
Unknown Unicast Restrain: -
MAC Learning : Enabled
MAC Table Limit : -
MAC Learning rate : -
Drop Unknown : -
PW Redundancy : Slave
Flooding : Enabled
Service Class : -
Statistics : Enabled
Input Statistics:
Octets : 0
Packets : 0
Errors : 0
Discards : 0
Output Statistics:
Octets : 0
Packets : 0
Errors : 0
Discards : 0
Gateway Interface : VSI-interface 100
VXLAN ID : 10
Tunnel Statistics : Disabled
Tunnels:
Tunnel Name Link ID State Type Flood Proxy Split horizon
Tunnel1 0x5000001 Up Manual Disabled Enabled
Tunnel2 0x5000002 Up Manual Disabled Enabled
ACs:
AC Link ID State
GE1/0/1 0 Up
Table 6 Command output
Field
Description
VSI Description Description of the VSI. If the VSI doesnot have a description,the command does
not display this field.
VSI State VSI state:
•
Up
—The VSI is up.

9
Field
Description
•Down—The VSI is down.
•Administratively down—The VSI has been manually shut down by using
the
shutdown
command.
MTU MTU on the VSI.
Bandwidth Maximum bandwidth (in kbps) for known unicast traffic on the VSI. This field
displays a hyphen (-) if it is not available in the current software version.
Broadcast Restrain Broadcast restraint bandwidth (in kbps). This field displays a hyphen (-) if it is not
available in the current software version.
Multicast Restrain Multicast restraint bandwidth (in kbps). This field displays a hyphen (-) if it is not
available in the current software version.
Unknown Unicast
Restrain Unknown unicast restraint bandwidth (in kbps). This field displays a hyphen (-) if it is not available in the current software version.
MAC Learning State of the MAC learning feature.
MAC Table Limit Maximum number of MAC address entries on the VSI. This field displays a
hyphen (-) if it is not available in the current software version.
MAC Learning Rate MAC address entry learning rate of the VSI. This field displays a hyphen (-) if it is
not available in the current software version.
Drop Unknown
Action on source MAC-unknown frames received after the maximum number of
MAC entries is reached.
•Enabled—Drops the frames.
•Disabled—Forwards the frames without learning the source MAC address.
PW Redundancy
PW redundancy mode:
•Slave—Master/slave mode and the local PE operates as the slave node.
•Master—Master/slave mode and the local PE operates as the masternode.
This field is not supported by a VXLAN network.
Flooding
State of the VSI's flooding feature:
•Enabled—Flooding is enabled on the VSI. The VTEP floods unknown
unicast frames to both local and remote sites.
•Disabled—Flooding is disabled on the VSI. The VTEP floods unknown
unicast frames only to local sites.
Service Class Service class value of outgoing VXLAN packets. Thisfield displays a hyphen (-) if
it is not available in the current software version.
Statistics Packet statistics state:
•Enabled—The packet statistics feature is enabled for the VSI.
•Disabled—The packet statistics feature is disabled for the VSI.
Input Statistics
Incoming traffic statistics:
•Octets—Number of incoming bytes.
•Packets—Number of incoming packets.
•Errors—Number of error packets.
•Discards—Number of discarded packets.
Output Statistics
Outgoing traffic statistics:
•Octets—Number of outgoing bytes.
•Packets—Number of outgoing packets.
•Errors—Number of error packets.
•
Discards
—Number of discarded packets.
Gateway Interface VSI interface name.

10
Field
Description
Tunnel Statistics
Packet statistics state:
•Enabled—
The packet statistics feature is enabled for the VXLAN tunnels of
the VSI.
•Disabled—The packet statistics feature is disabled for the VXLAN tunnels
of the VSI.
State
Tunnel state:
•Up—The tunnel is operating correctly.
•Blocked—
The tunnel is a backup proxy tunnel. Its tunnel interface is up, but
the tunnel is blocked because the primary proxy tunnel is operating
correctly.
•Defect—The tunnel interface is up, but BFD cannot detect the remote
VTEP. This state is not supported in the current software version.
•Down—The tunnel interface is down.
Type
Tunnel assignment method:
•Auto—The tunnel was automatically assigned to the VXLAN through
EVPN.
•Manual—The tunnel was manually assigned to the VXLAN.
Flood Proxy
Flood proxy state:
•Enabled—Flood proxy is enabled. The VTEP sends broadcast, multicast,
and unknown unicast traffic to a flood proxy server through the tunnel. The
flood proxy server replicates and forwards flood traffic to remote VTEPs.
•Disabled—Flood proxy is disabled.
Split horizon
State of split horizon:
•Enabled—Splithorizon is enabled on the VXLANtunnel. The VXLAN tunnel
does not forward the traffic that is received on other VXLAN tunnels.
•Disabled—Split horizon is disabled on the VXLAN tunnel. The VXLAN
tunnel forwards the traffic that is received onACs and other VXLAN tunnels.
ACs ACs that are bound to the VSI.
Link ID AC's link ID on the VSI.
State AC state:
•Up.
•Down.
display vxlan tunnel
Use display vxlan tunnel to display VXLAN tunnel information for VXLANs.
Syntax
display vxlan tunnel [vxlan-id vxlan-id [tunnel tunnel-number ] ]
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
vxlan-id: Specifies a VXLAN ID in the range of 0 to 16777215. If you do not specify a VXLAN, this
command displays VXLAN tunnel information for all VXLANs.

11
tunnel tunnel-number: Specifies a VXLAN tunnel. The tunnel-number argument
represents the tunnel interface number. If you do not specify a VXLAN tunnel, this command
displays information about all VXLAN tunnels associated with the specified VXLAN.
The following compatibility matrixes show the value ranges for the tunnel-number argument:
Hardware
Value range
MSR810, MSR810-W, MSR810-W-DB, MSR810-LM,
MSR810-W-LM, MSR810-10-PoE, MSR810-LM-HK,
MSR810-W-LM-HK, MSR810-LM-CNDE-SJK,
MSR810-CNDE-SJK
0 to 10239
MSR810-LMS, MSR810-LUS 0 to 1023
MSR810-LMS-EA, MSR810-LME 0 to 10239
MSR2600-6-X1, MSR2600-10-X1 0 to 10239
MSR 2630 0 to 10239
MSR3600-28, MSR3600-51 0 to 10239
MSR3600-28-SI, MSR3600-51-SI 0 to 10239
MSR3600-28-X1, MSR3600-28-X1-DP, MSR3600-51-X1,
MSR3600-51-X1-DP 0 to 10239
MSR3610-I-DP, MSR3610-IE-DP, MSR3610-IE-ES,
MSR3610-IE-EAD 0 to 10239
MSR3610-X1, MSR3610-X1-DP, MSR3610-X1-DC,
MSR3610-X1-DP-DC 0 to 10239
MSR 3610, MSR 3620, MSR 3620-DP, MSR 3640, MSR 3660 0 to 10239
MSR3610-G, MSR3620-G 0 to 10239
Hardware
Value range
MSR810-W-WiNet, MSR810-LM-WiNet 0 to 10239
MSR830-4LM-WiNet 0 to 10239
MSR830-5BEI-WiNet, MSR830-6EI-WiNet,
MSR830-10BEI-WiNet 0 to 10239
MSR830-6BHI-WiNet, MSR830-10BHI-WiNet 0 to 10239
MSR2600-6-WiNet, MSR2600-10-X1-WiNet 0 to 10239
MSR2630-WiNet 0 to 10239
MSR3600-28-WiNet 0 to 10239
MSR3610-X1-WiNet 0 to 10239
MSR3610-WiNet, MSR3620-10-WiNet, MSR3620-DP-WiNet,
MSR3620-WiNet, MSR3660-WiNet 0 to 10239
Hardware
Value range
MSR2630-XS 0 to 10239
MSR3600-28-XS 0 to 10239
MSR3610-XS 0 to 10239
MSR3620-XS 0 to 10239

12
Hardware
Value range
MSR3610-I-XS 0 to 10239
MSR3610-IE-XS 0 to 10239
Hardware
Value range
MSR810-LM-GL 0 to 10239
MSR810-W-LM-GL 0 to 10239
MSR830-6EI-GL 0 to 10239
MSR830-10EI-GL 0 to 10239
MSR830-6HI-GL 0 to 10239
MSR830-10HI-GL 0 to 10239
MSR2600-6-X1-GL 0 to 10239
MSR3600-28-SI-GL 0 to 10239
Examples
# Display VXLAN tunnel information for all VXLANs.
<Sysname> display vxlan tunnel
Total number of VXLANs: 1
VXLAN ID: 10, VSI name: vpna, Total tunnels: 3 (3 up, 0 down, 0 defect, 0 blocked)
Tunnel name Link ID State Type Flood proxy Split horizon
Tunnel1 0x5000001 Up Manual Disabled Enabled
Tunnel2 0x5000002 Up Manual Disabled Enabled
# Display VXLAN tunnel information for VXLAN 10.
<Sysname> display vxlan tunnel vxlan-id 10
VXLAN ID: 10, VSI name: vpna, Total tunnels: 3 (3 up, 0 down, 0 defect, 0 blocked)
Tunnel name Link ID State Type Flood proxy Split horizon
Tunnel1 0x5000001 Up Manual Disabled Enabled
Tunnel2 0x5000002 Up Manual Disabled Enabled
# Display information about VXLAN tunnel 0 for VXLAN 10.
<Sysname> display vxlan tunnel vxlan-id 10 tunnel 0
Interface: Tunnel0
Link ID : 0x5000000
State : Up
Type : Auto
Flood Proxy: Disabled
Statistics : Enabled
Input statistics:
Octets : 994496
Packets: 15539
Output statistics:
Octets : 0
Packets: 0

13
Table 7 Command output
Field
Description
Link ID Tunnel's link ID in the VXLAN.
State
Tunnel state:
•Up—The tunnel is operating correctly.
•Blocked—The tunnel is a backup proxy tunnel. Its tunnel interface is up, but the
tunnel is blocked because the primary proxy tunnel is operating correctly.
•Defect—The tunnel interface is up, but BFD cannot detect the remote VTEP.
This state is not supported in the current software version.
•Down—The tunnel interface is down.
Type Tunnel assignment method:
•Auto—The tunnel was automatically assigned to the VXLAN through EVPN.
•Manual—The tunnel was manually assigned to the VXLAN.
Flood proxy
Flood proxy state:
•Enabled—Flood proxy is enabled. The VTEP sends broadcast, multicast, and
unknown unicast traffic to a flood proxy server through the tunnel. The flood
proxy server replicates and forwards flood traffic to remote VTEPs.
•Disabled—Flood proxy is disabled.
Split horizon
State of split horizon:
•Enabled—Split horizon is enabled on the VXLAN tunnel. The VXLAN tunnel
does not forward the traffic that is received on other VXLAN tunnels.
•Disabled—Split horizon is disabled on the VXLAN tunnel. The VXLAN tunnel
forwards the traffic that is received on ACs and other VXLAN tunnels.
Statistics Packet statistics state:
•Enabled—The packet statistics feature is enabled for the VXLAN tunnel.
•Disabled—The packet statistics feature is disabled for the VXLAN tunnel.
Input statistics Incoming traffic statistics:
•Octets—Number of incoming bytes.
•Packets—Number of incoming packets.
Output statistics Outgoing traffic statistics:
•Octets—Number of outgoing bytes.
•Packets—Number of outgoing packets.
Related commands
tunnel
vxlan
flooding disable
Use flooding disable to disable flooding for a VSI.
Use undo flooding disable to enable flooding for a VSI.
Syntax
flooding disable
undo flooding disable
Default
Flooding is enabled for a VSI.

14
Views
VSI view
Predefined user roles
network-admin
Usage guidelines
By default, the device floods unknown unicast frames received from the local site to the following
interfaces in the frame's VXLAN:
•
All site-facing interfaces except for the incoming interface.
•
All VXLAN tunnel interfaces.
To confine unknown unicast traffic to the site-facing interfaces, use this command to disable flooding
for the VSI bound to the VXLAN. The VSI will not flood unknown unicast frames to VXLAN tunnel
interfaces.
Examples
# Disable flooding for VSI vsi1.
<Sysname> system-view
[Sysname] vsi vsi1
[Sysname-vsi-vsi1] flooding disable
l2vpn enable
Use l2vpn enable to enable L2VPN.
Use undo l2vpn enable to disable L2VPN.
Syntax
l2vpn enable
undo l2vpn enable
Default
L2VPN is disabled.
Views
System view
Predefined user roles
network-admin
Usage guidelines
You must enable L2VPN before you can configure L2VPN settings.
Examples
# Enable L2VPN.
<Sysname> system-view
[Sysname] l2vpn enable
l2vpn rewrite inbound tag
Use l2vpn rewrite inbound tag to configure the VLAN tag processing rule for incoming traffic.
Use undo l2vpn rewrite inbound to restore the default.