H3C S12500-X Installation manual

H3C S12500-X & S12500X-AF Switch Series
VXLAN Command Reference
Hangzhou H3C Technologies Co., Ltd.
http://www.h3c.com
Software version: Release 1135 and later
Document version: 6W101-20151130

Copyright ©2015, Hangzhou H3C Technologies Co., Ltd. and its licensors
All rights reserved
No part of this manual may be reproduced or transmitted in any form or by any means without prior
written consent of Hangzhou H3C Technologies Co., Ltd.
Trademarks
H3C, , H3CS, H3CIE, H3CNE, Aolynk, , H3Care, , IRF, NetPilot, Netflow,
SecEngine, SecPath, SecCenter, SecBlade, Comware, ITCMM and HUASAN are trademarks of
Hangzhou H3C Technologies Co., Ltd.
All other trademarks that may be mentioned in this manual are the property of their respective
owners
Notice
The information in this document is subject to change without notice. Every effort has been made in
the preparation of this document to ensure accuracy of the contents, but all statements, information,
and recommendations in this document do not constitute the warranty of any kind, express or
implied.

Preface
The H3C S12500-X & S12500X-AF documentation set includes 17 command references. These
references describe the commands and command syntax options available for the H3C S12500-X &
S12500X-AF Switch Series running Release 1135 and later.
The VXLAN Command Reference describes the commands for configuring VXLAN.
This preface includes:
•Audience
•Conventions
•Obtaining documentation
•Technical support
•Documentation feedback
Audience
This documentation is intended for:
•Network planners
•Field technical support and servicing engineers
•Network administrators working with the S12500-X & S12500X-AF series
Conventions
This section describes the conventions used in this documentation set.
Command conventions
Convention Description
Boldface Bold text represents commands and keywords that you enter literally as shown.
Italic Italic text represents arguments that you replace with actual values.
[ ] Square brackets enclose syntax choices (keywords or arguments) that are optional.
{ x | y | ... }
Braces enclose a set of required syntax choices separated by vertical bars, from which
you select one.
[ x | y | ... ]
Square brackets enclose a set of optional syntax choices separated by vertical bars,
from which you select one or none.
{ x | y | ... } *
Asterisk marked braces enclose a set of required syntax choices separated by vertical
bars, from which you select at least one.
[ x | y | ... ] *
Asterisk marked square brackets enclose optional syntax choices separated by vertical
bars, from which you select one choice, multiple choices, or none.
&<1-n> The argument or keyword and argument combination before the ampersand (&) sign
can be entered 1 to n times.
# A line that starts with a pound (#) sign is comments.

GUI conventions
Convention Description
Boldface Window names, button names, field names, and menu items are in Boldface. For
example, the New User window appears; click OK.
> Multi-level menus are separated by angle brackets. For example, File > Create >
Folder.
Symbols
Convention Description
WARNING An alert that calls attention to important information that if not understood or followed
can result in personal injury.
CAUTION An alert that calls attention to important information that if not understood or followed
can result in data loss, data corruption, or damage to hardware or software.
IMPORTANT An alert that calls attention to essential information.
NOTE An alert that contains additional or supplementary information.
TIP An alert that provides helpful information.
Network topology icons
Represents a generic network device, such as a router, switch, or firewall.
Represents a routing-capable device, such as a router or Layer 3 switch.
Represents a generic switch, such as a Layer 2 or Layer 3 switch, or a router that
supports Layer 2 forwarding and other Layer 2 features.
Represents an access controller, a unified wired-WLAN module, or the access
controller engine on a unified wired-WLAN switch.
Represents an access point.
Represents a mesh access point.
Represents omnidirectional signals.
Represents directional signals.
Represents a security product, such as a firewall, UTM, multiservice security gateway,
or load-balancing device.
Represents a security card, such as a firewall, load-balancing, NetStream, SSL VPN,
IPS, or ACG card.
Port numbering in examples
The port numbers in this document are for illustration only and might be unavailable on your device.





Obtaining documentation
Access the most up-to-date H3C product documentation on the World Wide Web
at http://www.h3c.com.
Click the links on the top navigation bar to obtain different categories of product documentation:
[Technical Support & Documents > Technical Documents]—Provides hardware installation, software
upgrading, and software feature configuration and maintenance documentation.
[Products & Solutions]—Provides information about products and technologies, as well as solutions.
[Technical Support & Documents > Software Download]—Provides the documentation released with
the software version.
Technical support
[e-mail]
http://www.h3c.com
Documentation feedback
You can e-mail your comments about product documentation to [email protected].
We appreciate your comments.

i
Contents
VXLAN commands···········································································1
Basic VXLAN commands·············································································································1
arp suppression enable ········································································································1
description·························································································································2
destination·························································································································2
display arp suppression vsi····································································································3
display igmp host group········································································································4
display l2vpn mac-address ····································································································6
display l2vpn service-instance································································································7
display l2vpn vsi················································································································10
display interface tunnel·······································································································13
display statistic mode·········································································································14
display vxlan tunnel ···········································································································15
encapsulation···················································································································16
flooding disable·················································································································17
interface tunnel·················································································································18
group······························································································································19
hardware-resource vxlan·····································································································20
igmp host enable···············································································································21
l2vpn enable·····················································································································21
mac-address static ············································································································22
reset arp suppression vsi ····································································································23
reset l2vpn mac-address·····································································································23
reset l2vpn statistics ac·······································································································24
reset l2vpn statistics vsi······································································································24
selective-flooding mac-address ····························································································25
service-instance················································································································26
shutdown·························································································································26
source·····························································································································27
statistic mode ···················································································································28
statistics enable (Ethernet service instance view)·····································································29
statistics enable (VSI view)··································································································29
tunnel ·····························································································································30
tunnel global source-address·······························································································31
vsi··································································································································32
vxlan·······························································································································32
vxlan invalid-udp-checksum discard ······················································································33
vxlan invalid-vlan-tag discard ·······························································································34
vxlan ip-forwarding ············································································································34
vxlan local-mac report ········································································································35
vxlan tunnel arp-learning disable ··························································································36
vxlan tunnel mac-learning disable ·························································································37
vxlan udp-port···················································································································37
xconnect vsi·····················································································································38
VXLAN IP gateway commands ···································································································39
arp send-rate····················································································································39
bandwidth························································································································40
default·····························································································································40
description·······················································································································41
display interface vsi-interface·······························································································42
gateway vsi-interface ·········································································································45
interface vsi-interface·········································································································45
mtu·································································································································46
reset counters interface vsi-interface ·····················································································46
shutdown·························································································································47
vtep group member local·····································································································47
vtep group member remote ·································································································48

ii
OVSDB commands ··················································································································49
ovsdb server bootstrap ca-certificate ·····················································································49
ovsdb server enable···········································································································50
ovsdb server pki domain·····································································································50
ovsdb server pssl ··············································································································51
ovsdb server ptcp··············································································································52
ovsdb server ssl················································································································53
ovsdb server tcp················································································································54
vtep access port················································································································54
vtep enable······················································································································55
vxlan tunnel service node····································································································55
Index···························································································57

1
VXLAN commands
Only FC, FE, and FX cards support VXLANs.
FC cards cannot provide VXLAN IP gateway services.
An FE or FX card cannot connect to a user site if it acts as a centralized VXLAN IP gateway.
Before you can configure VXLANs, you must perform the following tasks:
•Set the system operation mode:
a. Set the system operating mode to standard by using the system-working-mode standard
command.
b. Save the configuration.
c. Delete the binary .mdb next-startup configuration file.
d. Reboot the device.
•Reserve one global-type VLAN interface resource for the VSI interface of each VXLAN before
the VXLAN is created if you enable Layer 3 forwarding for VXLANs. For more information about
reserving global-type VLAN interface resources, see VLAN configuration in Layer 2—LAN
Switching Configuration Guide.
For more information about setting the system operating mode, see device management in
Fundamentals Configuration Guide.
Basic VXLAN commands
arp suppression enable
Use arp suppression enable to enableARP flood suppression.
Use undo arp suppression enable to restore the default.
Syntax
arp suppression enable
undo arp suppression enable
Default
ARP flood suppression is disabled.
Views
VSI view
Predefined user roles
network-admin
mdc-admin
Usage guidelines
ARP flood suppression reduces ARP request broadcasts by enabling the VTEP to reply to ARP
requests on behalf of VMs.
This feature snoops ARP packets to populate the ARP flood suppression table for local and remote
MAC addresses. If an ARP request has a matching entry, the VTEP replies to the request on behalf
of the VM. If no match is found, the VTEP floods the request to both local and remote sites.

2
Examples
# Enable ARP flood suppression for the VSI vsi1.
<Sysname> system-view
[Sysname] vsi vsi1
[Sysname-vsi-vsi1] arp suppression enable
Related commands
•display arp suppression vsi
•reset arp suppression vsi
description
Use description to configure a description for a VSI.
Use undo description to delete the description of a VSI.
Syntax
description text
undo description
Default
A VSI does not have a description.
Views
VSI view
Predefined user roles
network-admin
mdc-admin
Parameters
text: Specifies the VSI description, a case-sensitive string of 1 to 80 characters.
Examples
# Configure a description for the VSI vpn1.
<Sysname> system-view
[Sysname] vsi vpn1
[Sysname-vsi-vpn1] description vsi for vpn1
Related commands
display l2vpn vsi
destination
Use destination to specify the destination address of a tunnel.
Use undo destination to remove the destination address of a tunnel.
Syntax
destination ipv4-address
undo destination

3
Default
No destination address is specified for a tunnel.
Views
Tunnel interface view
Predefined user roles
network-admin
mdc-admin
Parameters
ipv4-address: Specifies an IPv4 address.
Examples
# Specify the source address 193.101.1.1 and destination address 192.100.1.1 for Tunnel 1 on
Sysname 1.
<Sysname1> system-view
[Sysname1] interface tunnel 1 mode vxlan
[Sysname1-Tunnel1] source 193.101.1.1
[Sysname1-Tunnel1] destination 192.100.1.1
# Specify the source address 192.100.1.1 and destination address 193.101.1.1 for Tunnel 1 on
Sysname 2.
<Sysname2> system-view
[Sysname2] interface tunnel 1 mode vxlan
[Sysname2-Tunnel1] source 192.100.1.1
[Sysname2-Tunnel1] destination 193.101.1.1
Related commands
•interface tunnel
•source
display arp suppression vsi
Use display arp suppression vsi to display ARP flood suppression entries.
Syntax
In standalone mode:
display arp suppression vsi [ name vsi-name ] [ slot slot-number ] [ count ]
In IRF mode:
display arp suppression vsi [ name vsi-name ] [ chassis chassis-number slot slot-number ]
[ count ]
Views
Any view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator

4
Parameters
name vsi-name: Specifies a VSI by its name. If you do not specify a VSI, this command displays
entries for all VSIs.
slot slot-number: Specifies a card by its slot number. If you do not specify a card, this command
displays entries on the active MPU. (In standalone mode.)
chassis chassis-number slot slot-number: Specifies a card on an IRF member device. The
chassis-number argument represents the IRF member ID. The slot-number argument represents the
slot number of the card. If you do not specify a card, this command displays entries on the global
active MPU. (In IRF mode.)
count: Displays the number ofARP flood suppression entries that match this command.
Examples
# (In standalone mode.) Display the ARP flood suppression entries on the active MPU.
<Sysname> display arp suppression vsi
IP address MAC address Vsi Name Link ID Aging
1.1.1.2 000f-e201-0101 vsi1 0x70000 14
1.1.1.3 000f-e201-0202 vsi1 0x80000 18
1.1.1.4 000f-e201-0203 vsi2 0x90000 10
# (In standalone mode.) Display the number of ARP flood suppression entries on the active MPU.
<Sysname> display arp suppression vsi count
Total entries: 3
# (In IRF mode.) Display the ARP flood suppression entries on the global active MPU.
<Sysname> display arp suppression vsi
IP address MAC address Vsi Name Link ID Aging
1.1.1.2 000f-e201-0101 vsi1 0x70000 14
1.1.1.3 000f-e201-0202 vsi1 0x80000 18
1.1.1.4 000f-e201-0203 vsi2 0x90000 10
# (In IRF mode.) Display the number ofARP flood suppression entries on the global active MPU.
<Sysname> display arp suppression vsi count
Total entries: 3
Table 1 Command output
Field Description
Link ID Link ID that uniquely identifies an AC or a VXLAN tunnel on a VSI.
Aging Remaining lifetime (in minutes) of the ARP flood suppression entry. When
the timer expires, the entry is deleted.
Related commands
•arp suppression enable
•reset arp suppression vsi
display igmp host group
Use display igmp host group to display information about the multicast groups that contain IGMP
host-enabled interfaces.
Syntax
display igmp host group [ group-address | interface interface-type interface-number ] [ verbose ]

5
Views
Any view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Parameters
group-address: Specifies a multicast group address. The value range is 224.0.1.0 to
239.255.255.255. If you do not specify a multicast group, this command displays information about
all multicast groups.
interface interface-type interface-number: Specifies an interface by its type and number. If you do
not specify an interface, this command displays multicast group information for all interfaces.
verbose: Displays detailed multicast group information. If you do not specify this keyword, the
command displays brief multicast group information.
Usage guidelines
For the VXLAN multicast source interface of a multicast-mode VXLAN to join its VXLAN multicast
group, you must enable the IGMP host feature on the interface. The VXLAN multicast source
interface provides the source IP address for multicast VXLAN packets.
Use this command to verify the following information:
•Multicast group information for VXLANs.
•Group membership status of VXLAN multicast source interfaces.
Examples
# Display brief information about all multicast groups that contain IGMP host-enabled interfaces.
<Sysname> display igmp host group
IGMP host groups in total: 2
Vlan-interface10(1.1.1.20):
IGMP host groups in total: 2
Group address Member state Expires
225.1.1.1 Idle Off
225.1.1.2 Idle Off
# Display detailed information about all multicast groups that contain IGMP host-enabled interfaces.
<Sysname> display igmp host group verbose
Vlan-interface10(1.1.1.20):
IGMP host groups in total: 2
Group: 225.1.1.1
Group mode: Exclude
Member state: Idle
Expires: Off
Source list (sources in total: 0):
Group: 225.1.1.2
Group mode: Exclude
Member state: Idle
Expires: Off
Source list (sources in total: 0):

6
Table 2 Command output
Field Description
IGMP host groups in total Total number of multicastgroups that contain IGMP host-enabled interfaces.
Vlan-interface10(1.1.1.20) Name and IP address of the IGMP host-enabled interface.
IGMP host groups in total Total number of multicast groups on the interface.
Group address/Group Address of the multicast group.
Member state
Member state:
•Delay—The interface has joined the multicast group, and it has started
the delay timer for sending IGMP reports.
•Idle—The interface has joined the multicast group, but it has not started
the delay timer for sending IGMP reports.
The delay timer is not user configurable.
Expires Remaining delay time for the interface to send an IGMP report.
This field displays Off if the delay timer is disabled.
Group mode Multicast source filtering mode:
•Include.
•Exclude.
Source list Multicast sources of the multicast group.
sources in total Total number of multicast sources.
NOTE:
For more information about the command output, see IGMP in IP Multicast Configuration Guide.
Related commands
igmp host enable
display l2vpn mac-address
Use display l2vpn mac-address to display MAC address entries for VSIs.
Syntax
display l2vpn mac-address [ vsi vsi-name ] [ dynamic ] [ count ]
Views
Any view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Parameters
vsi vsi-name: Specifies a VSI name, a case-sensitive string of 1 to 31 characters. If you do not
specify a VSI, this command displays MAC address entries for all VSIs.
dynamic: Specifies dynamic MAC address entries learned in the data plane. If you do not specify
this keyword, the command displays all MAC address entries. The MAC address entries include

7
dynamic remote- and local-MAC entries, manually added static remote-MAC entries, and
remote-MAC entries issued through OpenFlow. VXLAN does not support static local-MAC entries.
count: Displays the number of MAC address entries. If you do not specify this keyword, the
command displays detailed information about MAC address entries.
Examples
# Display MAC address entries for all VSIs.
<Sysname> display l2vpn mac-address
MAC Address State VSI Name Link ID/Name Aging
0000-0000-000a Dynamic vpn1 1 Aging
0000-0000-000b Static vpn1 Tunnel10 NotAging
0000-0000-000c Dynamic vpn1 Tunnel60 Aging
0000-0000-000d Dynamic vpn1 Tunnel99 Aging
--- 4 mac address(es) found ---
# Display the total number of MAC address entries in all VSIs.
<Sysname> display l2vpn mac-address count
4 mac address(es) found
Table 3 Command output
Field Description
State
Entry state.
For Release 1135:
•dynamic—Local- or remote-MAC entry dynamically learned in the data
plane.
•static—Manually added static remote-MAC entry.
•openflow—Remote-MAC entry issued by a remote controller through
OpenFlow.
For Release 1138P01 and later versions:
•Dynamic—Local- or remote-MAC entry dynamically learned in the data
plane.
•Static—Manually added static remote-MAC entry.
•OpenFlow—Remote-MAC entry issued by a remote controller through
OpenFlow.
The Aging field displays NotAging for static entries and OpenFlow entries.
Link ID/Name For a local MAC address, this field displays the AC's link ID on the VSI.
For a remote MAC address, this field displays the tunnel name.
Aging Entry aging state:
•Aging.
•NotAging.
Related commands
reset l2vpn mac-address
display l2vpn service-instance
Use display l2vpn service-instance to display information about Ethernet service instances.
Syntax
display l2vpn service-instance [ interface interface-type interface-number [ service-instance
instance-id ] ] [ verbose ]

8
Views
Any view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Parameters
interface interface-type interface-number: Specifies a Layer 2 Ethernet interface or Layer 2
aggregate interface by its interface type and number. If you do not specify an interface, this
command displays Ethernet service instance information for all Layer 2 Ethernet interfaces and
Layer 2 aggregate interfaces.
service-instance instance-id: Specifies an Ethernet service instance by its ID, in the range of 1 to
4096. If you do not specify an Ethernet service instance, this command displays information about all
Ethernet service instances on the specified interface.
verbose: Displays detailed information about Ethernet service instances. If you do not specify this
keyword, the command displays brief information about Ethernet service instances.
Examples
# Display brief information about all Ethernet service instances.
<Sysname> display l2vpn service-instance
Total number of service-instances: 4, 4 up, 0 down
Total number of ACs: 4, 4 up, 0 down
Interface SrvID Owner LinkID State Type
FGE1/0/3 1 vsi10 1 Up VSI
FGE1/0/3 2 vsi11 1 Up VSI
FGE1/0/3 3 vsi12 1 Up VSI
FGE1/0/3 4 vsi13 1 Up VSI
Table 4 Command output
Field Description
Total number of ACs Total number of attachment circuits (ACs) and the number of ACs in each state
(up or down).
Interface Name of a Layer 2 Ethernet interface or Layer 2 aggregate interface.
SrvID Ethernet service instance ID.
Owner VSI name. This field is empty if an Ethernet service instance is not mapped to
any VSI.
LinkID Ethernet service instance's link ID on the VSI.
State Ethernet service instance state:
•Up.
•Down.
Type L2VPN type of the Ethernet service instance:
•VSI.
•VPWS.

9
# Display detailed information about all Ethernet service instances on FortyGigE 1/0/3.
<Sysname> display l2vpn service-instance interface fortygige 1/0/3 verbose
Interface: FGE1/0/3
Service Instance: 1
Encapsulation : s-vid 16
VSI Name : vsi10
Link ID : 1
State : Up
Statistics : Enabled
Input Statistics:
Octets :0
Packets :0
Output Statistics:
Octets :0
Packets :0
Service Instance: 2
Encapsulation : s-vid 1001
only-tagged
VSI Name : vsi11
Link ID : 1
State : Up
Statistics : Disabled
Service Instance: 3
Encapsulation : s-vid 2000
c-vid 1016
VSI Name : vsi12
Link ID : 1
State : Up
Statistics : Disabled
Table 5 Command output
Field Description
Interface Name of a Layer 2 Ethernet interface or Layer 2 aggregate interface.
Service Instance Ethernet service instance ID.
Encapsulation Frame match criterion of the Ethernet service instance. If the Ethernet service instance does not contain any match criterion, the command does not display this
field.
Link ID Ethernet service instance's link ID on the VSI.
State Ethernet service instance state:
•Up.
•Down.
Statistics
Packet statistics state:
•Enabled—The packet statistics feature is enabled for the Ethernet service
instance.
•Disabled—The packet statistics feature is disabled for the Ethernet service
instance.
This field is available in Release 1138P01 and later versions.

10
Field Description
Input Statistics
Incoming traffic statistics:
•Octets—Number of incoming bytes.
•Packets—Number of incoming packets.
This field is available in Release 1138P01 and later versions.
Output Statistics
Outgoing traffic statistics:
•Octets—Number of outgoing bytes.
•Packets—Number of outgoing packets.
This field is available in Release 1138P01 and later versions.
Related commands
service-instance
display l2vpn vsi
Use display l2vpn vsi to display information about VSIs.
Syntax
display l2vpn vsi [ name vsi-name ] [ verbose ]
Views
Any view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Parameters
name vsi-name: Specifies a VSI by its name, a case-sensitive string of 1 to 31 characters. If you do
not specify a VSI, this command displays information about all VSIs.
verbose: Displays detailed information about VSIs. If you do not specify this keyword, the command
displays brief information about VSIs.
Examples
# Display brief information about all VSIs.
<Sysname> display l2vpn vsi
Total number of VSIs: 1, 1 up, 0 down, 0 admin down
VSI Name VSI Index MTU State
vpna 0 1500 Up
# Display detailed information about all VSIs.
<Sysname> display l2vpn vsi verbose
VSI Name: vpna
VSI Index : 0
VSI State : Up
MTU : 1500
Bandwidth : -

11
Broadcast Restrain : -
Multicast Restrain : -
Unknown Unicast Restrain: -
MAC Learning : Enabled
MAC Table Limit : -
Drop Unknown : -
Flooding : Enabled
Statistics : Enabled
Input statistics:
Octets : 0
Packets : 0
Errors : 0
Discards : 0
Output statistics:
Octets : 0
Packets : 0
Errors : 0
Discards : 0
Gateway Interface : VSI-interface 100
VXLAN ID : 10
Tunnels:
Tunnel Name Link ID State Type Flooding proxy
Tunnel1 0x5000001 Up Manual Disabled
Tunnel2 0x5000002 Up Manual Disabled
MTunnel0 0x6002710 Up Auto Disabled
ACs:
AC Link ID State
FGE1/0/1 srv1000 0 Up
Table 6 Command output
Field Description
VSI Description Description of the VSI. If the VSI does not have a description, the command does
not display this field.
VSI State
VSI state:
•Up—The VSI is up. A VSI is up only when its VXLAN has an up VXLAN
tunnel and an up AC.
•Down—The VSI is down.
•Administratively down—The VSI has been manually shut down by using
the shutdown command.
MTU MTU on the VSI.
Bandwidth Maximum bandwidth in kbps on the VSI.
Broadcast Restrain Broadcast restraint ratio.
Multicast Restrain Multicast restraint ratio.
Unknown Unicast
Restrain Unknown unicast restraint ratio.
MAC Learning State of the MAC learning function.
MAC Table Limit Maximum number of MAC address entries on the VSI.

12
Field Description
Drop Unknown Action on source MAC-unknown frames received after the maximum number of
MAC entries is reached.
Hub-Spoke State of the hub-spoke function.
Flooding
State of the VSI's flooding function:
•Enabled—Flooding is enabled on the VSI. The VTEP floods unknown
unicast frames to both local and remote sites.
•Disabled—Flooding is disabled on the VSI. The VTEP floods unknown
unicast frames only to local sites.
Statistics Packet statistics state:
•Enabled—Packet statistics is enabled for the VSI.
•Disabled—Packet statistics is disabled for the VSI.
Input statistics
Incoming traffic statistics:
•Octets—Number of incoming bytes.
•Packets—Number of incoming packets.
•Errors—Number of error packets.
•Discards—Number of discarded packets.
Output statistics
Outgoing traffic statistics:
•Octets—Number of outgoing bytes.
•Packets—Number of outgoing packets.
•Errors—Number of error packets.
•Discards—Number of discarded packets.
Gateway Interface VSI interface name.
Tunnels Information about the VXLAN tunnels assigned to the VXLAN.
Link ID Tunnel's link ID on the VSI.
State
Tunnel state:
•Up—The tunnel is operating correctly.
•Blocked—The tunnel is a backup proxy tunnel. Its tunnel interface is up, but
the tunnel is blocked because the primary proxy tunnel is operating correctly.
This value is available in Release 1138P01 and later versions.
•Defect—The tunnel interface is up, but BFD cannot detect the remote VTEP.
This value is available in Release 1138P01 and later versions.
•Down—The tunnel interface is down.
Type
Tunnel assignment method:
•Auto—The tunnel was automatically assigned to the VXLAN. For a
multicast-mode VXLAN, the tunnel (MTunnel) was automatically created and
assigned to the VXLAN to transmit flood traffic.
•Manual—The tunnel was manually assigned to the VXLAN.
Flooding proxy
Flood proxy state:
•Enabled—Flood proxy is enabled. The VTEP sends broadcast, multicast,
and unknown unicast traffic to a flood proxy server through the tunnel. The
flood proxy server replicates and forwards flood traffic to remote VTEPs.
•Disabled—Flood proxy is disabled. The VTEP sends broadcast, multicast,
and unknown unicast traffic to remote VTEPs by using the unicast or
multicast mode.
This field is available in Release 1138P01 and later versions.
ACs ACs that are bound to the VSI.
Link ID AC's link ID on the VSI.

13
Field Description
State AC state:
•Up.
•Down.
display interface tunnel
Use display interface tunnel to display information about tunnel interfaces.
Syntax
display interface [ tunnel [ number ] ] [ brief [ description | down ] ]
Views
Any view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Parameters
tunnel [ number ]: Specifies tunnel interfaces. If you specify a tunnel interface number, this
command displays information about the specified interface. If you specify only the tunnel keyword,
this command displays information about all tunnel interfaces. If you do not specify the tunnel
[ interface-number ] option, this command displays information about all interfaces.
brief: Displays brief interface information. If you do not specify this keyword, the command displays
detailed interface information.
description: Displays complete interface descriptions. If you do not specify this keyword, the
command displays only the first 27 characters of interface descriptions.
down: Displays interfaces that are physically down as well as the down reason. If you do not specify
this keyword, the command does not filter output by physical interface state.
Examples
# Display detailed information about Tunnel 1.
<Sysname> display interface tunnel 1
Tunnel1
Current state: UP
Line protocol state: UP
Description: Tunnel1 Interface
Bandwidth: 64kbps
Maximum transmission unit: 64000
Internet protocol processing: Disabled
Last clearing of counters: Never
Tunnel source 1.1.1.1, destination 2.2.2.2
Tunnel protocol/transport UDP_VXLAN/IP