H3C S6800 Series Installation manual

H3C S6800 Switch Series
VXLAN Command Reference
Hangzhou H3C Technologies Co., Ltd.
http://www.h3c.com
Software version: Release 24xx
Document version: 6W102-20151130

Copyright © 2015, Hangzhou H3C Technologies Co., Ltd. and its licensors
All rights reserved
No part of this manual may be reproduced or transmitted in any form or by any means without prior written
consent of Hangzhou H3C Technologies Co., Ltd.
Trademarks
H3C, , H3CS, H3CIE, H3CNE,Aolynk, , H3Care, , IRF, NetPilot, Netflow, SecEngine,
SecPath, SecCenter, SecBlade, Comware, ITCMM and HUASAN are trademarks of Hangzhou H3C
Technologies Co., Ltd.
All other trademarks that may be mentioned in this manual are the property of their respective owners
Notice
The information in this document is subject to change without notice. Every effort has been made in the
preparation of this document to ensure accuracy of the contents, but all statements, information, and
recommendations in this document do not constitute the warranty of any kind, express or implied.

Preface
This command reference describes VXLAN configuration commands.
This preface includes the following topics about the documentation:
•Audience.
•Conventions.
•About the H3C S6800 documentation set.
•Obtaining documentation.
•Technical support.
•Documentation feedback.
Audience
This documentation is intended for:
•Network planners.
•Field technical support and servicing engineers.
•Network administrators working with the S6800 switch series.
Conventions
This section describes the conventions used in the documentation.
Port numbering in examples
The port numbers in the documentation are for illustration only and might be unavailable on your
device.
Command conventions
Convention Description
Boldface Bold text represents commands and keywords that you enter literally as shown.
Italic Italic text represents arguments that you replace with actual values.
[ ] Square brackets enclose syntax choices (keywords or arguments) that are optional.
{ x | y | ... }
Braces enclose a set of required syntax choices separated by vertical bars, from which
you select one.
[ x | y | ... ]
Square brackets enclose a set of optional syntax choices separated by vertical bars,
from which you select one or none.
{ x | y | ... } *
Asterisk marked braces enclose a set of required syntax choices separated by vertical
bars, from which you select at least one.
[ x | y | ... ] *
Asterisk marked square brackets enclose optional syntax choices separated by vertical
bars, from which you select one choice, multiple choices, or none.
&<1-n> The argument or keyword and argument combination before the ampersand (&) sign
can be entered 1 to n times.
# A line that starts with a pound (#) sign is comments.

GUI conventions
Convention Description
Boldface Window names, button names, field names, and menu items are in Boldface. For
example, the New User window appears; click OK.
> Multi-level menus are separated by angle brackets. For example, File > Create >
Folder.
Symbols
Convention Description
WARNING! An alert that calls attention to important information that if not understood or followed
can result in personal injury.
CAUTION: An alert that calls attention to important information that if not understood or followed
can result in data loss, data corruption, or damage to hardware or software.
IMPORTANT: An alert that calls attention to essential information.
NOTE: An alert that contains additional or supplementary information.
TIP: An alert that provides helpful information.
Network topology icons
Convention Description
Represents a generic network device, such as a router, switch, or firewall.
Represents a routing-capable device, such as a router or Layer 3 switch.
Represents a generic switch, such as a Layer 2 or Layer 3 switch, or a router that
supports Layer 2 forwarding and other Layer 2 features.
Represents an access controller, a unified wired-WLAN module, or the access
controller engine on a unified wired-WLAN switch.
Represents an access point.
Wireless terminator unit.
Wireless terminator.
Represents a mesh access point.
Represents omnidirectional signals.
Represents directional signals.
Represents a security product, such as a firewall, UTM, multiservice security
gateway, or load balancing device.
T
T
T
T





Convention Description
Represents a security card, such as a firewall, load balancing, NetStream, SSL VPN,
IPS, or ACG card.
About the H3C S6800 documentation set
The H3C S6800 documentation set includes the following categories of documents:
Category Documents Purposes
Hardware
specifications and
installation
Compliance and safety
manual
CE DOC
Provides regulatory information and the safety
instructions that must be followed during
installation.
Installation quick start Provides basic installation instructions.
Installation guide Provides a complete guide to hardware
installation and hardware specifications.
Fan assemblies installation
manual
Describes the appearance, specifications, and
installation and removal of hot-swappable fan
assemblies.
Power modules user manual Describes the appearance, specifications, and installation and removal of hot-swappable power
modules.
Pluggable transceiver
modules installation guide Guides you through installing SFP/SFP+/QSFP+ transceiver modules.
Pluggable modules manual Describes the hot-swappable modules available
for the H3C switches, their external views, and
specifications.
Software
configuration
Configuration guides Describe software features and configuration
procedures.
Command references Provide a quick reference to all available
commands.
Operations and
maintenance
MIB Companion Describes the MIBs for the software release.
Release notes
Provide information about the product release,
including the version history, hardware and
software compatibility matrix, version upgrade
information, technical support information, and
software upgrading.
Obtaining documentation
Access the most up-to-date H3C product documentation on the World Wide Web at
http://www.h3c.com.
Click the following links to obtain different categories of product documentation:
[Technical Documents]—Provides hardware installation, software upgrading, and software feature
configuration and maintenance documentation.
[Products & Solutions]—Provides information about products and technologies, as well as solutions.
[Software Download]—Provides the documentation released with the software version.

Technical support
[e-mail]
http://www.h3c.com
Documentation feedback
You can e-mail your comments about product documentation to [e-mail].
We appreciate your comments.

i
Contents
VXLAN commands··························································································1
Basic VXLAN commands···································································································································1
arp suppression enable······························································································································1
description··················································································································································1
display arp suppression vsi························································································································2
display igmp host group·····························································································································3
display l2vpn mac-address·························································································································4
display l2vpn service-instance ···················································································································6
display l2vpn vsi·········································································································································8
display vxlan tunnel··································································································································10
encapsulation···········································································································································12
flooding disable········································································································································13
group························································································································································14
igmp host enable······································································································································15
l2vpn enable·············································································································································16
mac-address static···································································································································16
reserved vxlan··········································································································································17
reset arp suppression vsi·························································································································18
reset l2vpn mac-address··························································································································18
selective-flooding mac-address················································································································19
service-instance·······································································································································19
shutdown··················································································································································20
tunnel ·······················································································································································20
tunnel bfd enable······································································································································21
tunnel global source-address···················································································································22
vsi·····························································································································································23
vtep group member remote······················································································································24
vxlan·························································································································································24
vxlan invalid-udp-checksum discard ········································································································25
vxlan invalid-vlan-tag discard···················································································································25
vxlan local-mac report······························································································································26
vxlan tunnel mac-learning disable············································································································27
vxlan udp-port ··········································································································································27
xconnect vsi ·············································································································································28
OVSDB commands··········································································································································29
ovsdb server ca-certificate·······················································································································29
ovsdb server certificate····························································································································30
ovsdb server enable·································································································································30
ovsdb server private-key··························································································································31
ovsdb server pssl·····································································································································32
ovsdb server ptcp·····································································································································32
ovsdb server ssl·······································································································································33
ovsdb server tcp·······································································································································33
vtep access port·······································································································································34
vtep enable···············································································································································35
vxlan tunnel service node·························································································································35
Index·············································································································37

1
VXLAN commands
For Release 2416, VXLAN requires a license. For Release 2418P01 and later versions, VXLAN
does not require a license. For information about feature licensing, see Fundamentals Configuration
Guide.
Basic VXLAN commands
arp suppression enable
Use arp suppression enable to enableARP flood suppression.
Use undo arp suppression enable to restore the default.
Syntax
arp suppression enable
undo arp suppression enable
Default
ARP flood suppression is disabled.
Views
VSI view
Predefined user roles
network-admin
Usage guidelines
ARP flood suppression reduces ARP request broadcasts by enabling the VTEP to reply to ARP
requests on behalf of VMs.
This feature snoops ARP packets to populate the ARP flood suppression table for local and remote
MAC addresses. If an ARP request has a matching entry, the VTEP replies to the request on behalf
of the VM. If no match is found, the VTEP floods the request to both local and remote sites.
Examples
# Enable ARP flood suppression for the VSI vsi1.
<Sysname> system-view
[Sysname] vsi vsi1
[Sysname-vsi-vsi1] arp suppression enable
Related commands
•display arp suppression vsi
•reset arp suppression vsi
description
Use description to configure a description for a VSI.
Use undo description to delete the description of a VSI.
Syntax
description text

2
undo description
Default
A VSI does not have a description.
Views
VSI view
Predefined user roles
network-admin
Parameters
text: Specifies the VSI description, a case-sensitive string of 1 to 80 characters.
Examples
# Configure a description for the VSI vpn1.
<Sysname> system-view
[Sysname] vsi vpn1
[Sysname-vsi-vpn1] description vsi for vpn1
Related commands
display l2vpn vsi
display arp suppression vsi
Use display arp suppression vsi to display ARP flood suppression entries.
Syntax
display arp suppression vsi [ name vsi-name ] [ slot slot-number ] [ count ]
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
name vsi-name: Specifies a VSI by its name. If you do not specify a VSI, this command displays
entries for all VSIs.
slot slot-number: Specifies an IRF member device by its member ID. If you do not specify a member
device, this command displays entries on the master device.
count: Displays the number ofARP flood suppression entries that match the command.
Examples
# Display the ARP flood suppression entries on the master device.
<Sysname> display arp suppression vsi
IP address MAC address Vsi Name Link ID Aging
1.1.1.2 000f-e201-0101 vsi1 0x5000003 14
1.1.1.3 000f-e201-0202 vsi1 0x5000004 18
1.1.1.4 000f-e201-0203 vsi2 0x5000005 10
# Display the number of ARP flood suppression entries on the master device.
<Sysname> display arp suppression vsi count

3
Total entries: 3
Table 1 Command output
Field Description
Link ID Link ID that uniquely identifies an AC or a VXLAN tunnel on a VSI.
Aging Remaining lifetime (in minutes) of the ARP flood suppression entry. When
the timer expires, the entry is deleted.
Related commands
•arp suppression enable
•reset arp suppression vsi
display igmp host group
Use display igmp host group to display information about the multicast groups that contain IGMP
host-enabled interfaces.
Syntax
display igmp host group [ group-address | interface interface-type interface-number ] [ verbose ]
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
group-address: Specifies a multicast group address. The value range is 224.0.1.0 to
239.255.255.255. If you do not specify a multicast group, the command displays information about
all multicast groups.
interface interface-type interface-number: Specifies an interface by its type and number. If you do
not specify an interface, the command displays multicast group information for all interfaces.
verbose: Displays detailed multicast group information. If you do not specify this keyword, the
command displays brief multicast group information.
Usage guidelines
For the VXLAN multicast source interface of a multicast-mode VXLAN to join its VXLAN multicast
group, you must enable the IGMP host function.
Use this command to verify the following information:
•Multicast group information for VXLANs.
•Group membership status of VXLAN multicast source interfaces.
Examples
# Display brief information about all multicast groups that contain IGMP host-enabled interfaces.
<Sysname> display igmp host group
IGMP host groups in total: 2
Vlan-interface10(1.1.1.20):
IGMP host groups in total: 2
Group address Member state Expires

4
225.1.1.1 Idle Off
225.1.1.2 Idle Off
# Display detailed information about all multicast groups that contain IGMP host-enabled interfaces.
<Sysname> display igmp host group verbose
Vlan-interface10(1.1.1.20):
IGMP host groups in total: 2
Group: 225.1.1.1
Group mode: Exclude
Member state: Idle
Expires: Off
Source list (sources in total: 0):
Group: 225.1.1.2
Group mode: Exclude
Member state: Idle
Expires: Off
Source list (sources in total: 0):
Table 2 Command output
Field Description
IGMP host groups in total Total number of multicast groups that contain IGMP host-enabled
interfaces.
Vlan-interface10(1.1.1.20) Name and IP address of the IGMP host-enabled interface.
IGMP host groups in total Total number of multicast groups on the interface.
Group address/Group Address of the multicast group.
Member state
Member state:
•Delay—The interface has joined the multicast group, and it has started
the delay timer for sending IGMP reports.
•Idle—The interface has joined the multicast group, but it has not
started the delay timer for sending IGMP reports.
The delay timer is not user configurable.
Expires Remaining delay time for the interface to send an IGMP report.
This field displays Off if the delay timer is disabled.
Group mode Multicast source filtering mode:
•Include.
•Exclude.
Source list Multicast sources of the multicast group.
sources in total Total number of multicast sources.
NOTE:
For more information about the command output, see IGMP in IP Multicast Configuration Guide.
Related commands
igmp host enable
display l2vpn mac-address
Use display l2vpn mac-address to display MAC address entries for VSIs.

5
Syntax
display l2vpn mac-address [ vsi vsi-name ] [ dynamic ] [ count ]
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
vsi vsi-name: Specifies a VSI name, a case-sensitive string of 1 to 31 characters. If you do not
specify a VSI, the command displays MAC address entries for all VSIs.
dynamic: Specifies dynamic MAC address entries learned in the data plane. If you do not specify
this keyword, the command displays all MAC address entries. The MAC address entries include
dynamic remote- and local-MAC entries, remote-MAC entries issued through OpenFlow, and
manually added static remote-MAC entries. VXLAN does not support static local-MAC entries.
count: Displays the number of MAC address entries. If you do not specify this keyword, the
command displays detailed information about MAC address entries.
Examples
# Display MAC address entries for all VSIs.
<Sysname> display l2vpn mac-address
MAC Address State VSI Name Link ID/Name Aging
0000-0000-000a Dynamic vpn1 1 Aging
0000-0000-000b Static vpn1 Tunnel10 NotAging
0000-0000-000c Dynamic vpn1 Tunnel60 Aging
0000-0000-000d Dynamic vpn1 Tunnel99 Aging
--- 4 mac address(es) found ---
# Display the total number of MAC address entries in all VSIs.
<Sysname> display l2vpn mac-address count
4 mac address(es) found
Table 3 Command output
Field Description
State
Entry state.
For Release 2416:
•dynamic—Local- or remote-MAC entry dynamically learned in the data
plane.
•static—Manually added remote-MAC entry.
For Release 2418P01 and later versions:
•Dynamic—Local- or remote-MAC entry dynamically learned in the data
plane.
•Static—Manually added remote-MAC entry.
•OpenFlow—Remote-MAC entry issued by a remote controller through
OpenFlow.
Link ID/Name For a local MAC address, this field displays the AC's link ID on the VSI.
For a remote MAC address, this field displays the tunnel name.

6
Field Description
Aging Entry aging state:
•Aging.
•NotAging.
Related commands
reset l2vpn mac-address
display l2vpn service-instance
Use display l2vpn service-instance to display information about Ethernet service instances.
Syntax
display l2vpn service-instance [ interface interface-type interface-number [ service-instance
instance-id ] ] [ verbose ]
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
interface interface-type interface-number: Specifies a Layer 2 Ethernet interface or Layer 2
aggregate interface by its interface type and number. If you do not specify an interface, the command
displays Ethernet service instance information for all Layer 2 Ethernet interfaces and Layer 2
aggregate interfaces.
service-instance instance-id: Specifies an Ethernet service instance by its ID, in the range of 1 to
4096. If you do not specify an Ethernet service instance, the command displays information about all
Ethernet service instances on the specified interface.
verbose: Displays detailed information about Ethernet service instances. If you do not specify this
keyword, the command displays brief information about Ethernet service instances.
Examples
# Display brief information about all Ethernet service instances.
<Sysname> display l2vpn service-instance
Total number of service-instances: 4, 4 up, 0 down
Total number of ACs: 4, 4 up, 0 down
Interface SrvID Owner LinkID State Type
FGE1/0/3 1 vsi10 1 Up VSI
FGE1/0/3 2 vsi11 1 Up VSI
FGE1/0/3 3 vsi12 1 Up VSI
FGE1/0/3 4 vsi13 1 Up VSI
Table 4 Command output
Field Description
Total number of ACs Total number of attachment circuits (ACs) and the number of ACs in each state
(up or down).

7
Field Description
Interface Name of a Layer 2 Ethernet interface or Layer 2 aggregate interface.
SrvID Ethernet service instance ID.
Owner VSI name. This field is empty if an Ethernet service instance is not mapped to
any VSI.
LinkID Ethernet service instance's link ID on the VSI.
State Ethernet service instance state:
•Up.
•Down.
Type L2VPN type of the Ethernet service instance:
•VSI.
•VPWS.
# Display detailed information about all Ethernet service instances on FortyGigE 1/0/3.
<Sysname> display l2vpn service-instance interface fortygige 1/0/3 verbose
Interface: FGE1/0/3
Service Instance: 1
Encapsulation : s-vid 16
VSI Name : vsi10
Link ID : 1
State : Up
Statistics : Enabled
Input Statistics:
Octets :0
Packets :0
Output Statistics:
Octets :0
Packets :0
Service Instance: 2
Encapsulation : s-vid 1001
only-tagged
VSI Name : vsi11
Link ID : 1
State : Up
Statistics : Enabled
Input Statistics:
Octets :0
Packets :0
Output Statistics:
Octets :0
Packets :0
Service Instance: 3
Encapsulation : s-vid 2000
c-vid 1016
VSI Name : vsi12
Link ID : 1
State : Up

8
Statistics : Enabled
Input Statistics:
Octets :0
Packets :0
Output Statistics:
Octets :0
Packets :0
Table 5 Command output
Field Description
Interface Name of a Layer 2 Ethernet interface or Layer 2 aggregate interface.
Service Instance Ethernet service instance ID.
Encapsulation Frame match criterion of the Ethernet service instance. If the Ethernet service instance does not contain a frame match criterion, the command does not display
this field.
Link ID Ethernet service instance's link ID on the VSI.
State Ethernet service instance state:
•Up.
•Down.
Statistics Packet statistics state:
•Enabled—Packet statistics is enabled for the Ethernet service instance.
•Disabled—Packet statistics is disabled for the Ethernet service instance.
Input Statistics Incoming traffic statistics:
•Octets—Number of incoming bytes.
•Packets—Number of incoming packets.
Output Statistics Outgoing traffic statistics:
•Octets—Number of outgoing bytes.
•Packets—Number of outgoing packets.
Related commands
•service-instance
•statistics enable (MPLS Command Reference)
•reset l2vpn statistics ac (MPLS Command Reference)
display l2vpn vsi
Use display l2vpn vsi to display information about VSIs.
Syntax
display l2vpn vsi [ name vsi-name ] [ verbose ]
Views
Any view
Predefined user roles
network-admin
network-operator

9
Parameters
name vsi-name: Specifies a VSI by its name, a case-sensitive string of 1 to 31 characters. If you do
not specify a VSI, the command displays information about all VSIs.
verbose: Displays detailed information about VSIs. If you do not specify this keyword, the command
displays brief information about VSIs.
Examples
# Display brief information about all VSIs.
<Sysname> display l2vpn vsi
Total number of VSIs: 1, 1 up, 0 down, 0 admin down
VSI Name VSI Index MTU State
vpna 0 1500 Up
# Display detailed information about all VSIs.
<Sysname> display l2vpn vsi verbose
VSI Name: vpna
VSI Index : 0
VSI State : Up
MTU : 1500
Bandwidth : -
Broadcast Restrain : -
Multicast Restrain : -
Unknown Unicast Restrain: -
MAC Learning : Enabled
MAC Table Limit : -
Drop Unknown : -
Flooding : Enabled
VXLAN ID : 10
Tunnels:
Tunnel Name Link ID State Type Flooding proxy
Tunnel1 0x5000001 Up Manual Disabled
Tunnel2 0x5000002 Up Manual Disabled
MTunnel0 0x6002710 Up Auto Disabled
ACs:
AC Link ID State
FGE1/0/1 srv1000 0 Up
Table 6 Command output
Field Description
VSI Description Description of the VSI. If the VSI does not have a description, the command does
not display this field.
VSI State
VSI state:
•Up—The VSI is up. A VSI is up only when its VXLAN has an up VXLAN
tunnel and an up AC.
•Down—The VSI is down.
•Administratively down—The VSI has been manually shut down by using
the shutdown command.
MTU MTU on the VSI.

10
Field Description
Bandwidth Maximum bandwidth in kbps on the VSI.
Broadcast Restrain Broadcast restraint ratio.
Multicast Restrain Multicast restraint ratio.
Unknown Unicast
Restrain Unknown unicast restraint ratio.
MAC Learning State of the MAC learning function.
MAC Table Limit Maximum number of MAC address entries on the VSI.
Drop Unknown Action on source MAC-unknown frames received after the maximum number of
MAC entries is reached.
Hub-Spoke State of the hub-spoke function.
Flooding
State of the VSI's flooding function:
•Enabled—Flooding is enabled on the VSI. The VTEP floods unknown
unicast frames to both local and remote sites.
•Disabled—Flooding is disabled on the VSI. The VTEP floods unknown
unicast frames only to local sites.
Tunnels Information about the VXLAN tunnels assigned to the VXLAN.
Link ID Tunnel's link ID on the VSI.
State
Tunnel state:
•Up—The tunnel is operating correctly.
•Blocked—The tunnel is a backup proxy tunnel. Its tunnel interface is up, but
the tunnel is blocked because the primary proxy tunnel is operating correctly.
•Defect—The tunnel interface is up, but the VTEP has not received BFD
control packets from the remote end for 5 seconds. You must check for
physical link or VXLAN tunnel problems. This value is available in Release
2418P01 and later versions.
•Down—The tunnel interface is down.
Type
Tunnel assignment method:
•Auto—The tunnel was automatically assigned to the VXLAN. For a
multicast-mode VXLAN, the tunnel (MTunnel) was automatically created and
assigned to the VXLAN to transmit flood traffic.
•Manual—The tunnel was manually assigned to the VXLAN.
Flooding proxy
Flood proxy state:
•Enabled—Flood proxy is enabled. The VTEP sends broadcast, multicast,
and unknown unicast traffic to a flood proxy server through the tunnel. The
flood proxy server replicates and forwards flood traffic to remote VTEPs.
•Disabled—Flood proxy is disabled.
ACs ACs that are bound to the VSI.
Link ID AC's link ID on the VSI.
State AC state:
•Up.
•Down.
display vxlan tunnel
Use display vxlan tunnel to display VXLAN tunnel information for VXLANs.

11
Syntax
display vxlan tunnel [ vxlan-id vxlan-id ]
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
vxlan-id: Specifies a VXLAN ID in the range of 0 to 16777215. If you do not specify a VXLAN, the
command displays VXLAN tunnel information for all VXLANs.
Examples
# Display VXLAN tunnel information for all VXLANs.
<Sysname> display vxlan tunnel
Total number of VXLANs: 1
VXLAN ID: 10, VSI name: vpna, Total tunnels: 4 (4 up, 0 down, 0 defect, 0 blocked)
Tunnel name Link ID State Type Flooding proxy
Tunnel0 0x5000000 Up Auto Disabled
Tunnel1 0x5000001 Up Manual Disabled
Tunnel2 0x5000002 Up Manual/Auto Disabled
MTunnel0 0x6002710 Up Auto Disabled
# Display VXLAN tunnel information for VXLAN 10.
<Sysname> display vxlan tunnel vxlan-id 10
VXLAN ID: 10, VSI name: vpna, Total tunnels: 4 (4 up, 0 down, 0 defect, 0 blocked)
Tunnel name Link ID State Type Flooding proxy
Tunnel0 0x5000000 Up Auto Disabled
Tunnel1 0x5000001 Up Manual Disabled
Tunnel2 0x5000002 Up Manual/Auto Disabled
MTunnel0 0x6002710 Up Auto Disabled
Table 7 Command output
Field Description
Link ID Tunnel's link ID in the VXLAN.
State
Tunnel state:
•Up—The tunnel is operating correctly.
•Blocked—The tunnel is a backup proxy tunnel. Its tunnel interface is up, but the
tunnel is blocked because the primary proxy tunnel is operating correctly.
•Defect—The tunnel interface is up, but the VTEP has not received BFD control
packets from the remote end for 5 seconds. You must check for physical link or
VXLAN tunnel problems. This value is available in Release 2418P01 and later
versions.
•Down—The tunnel interface is down.
Type
Tunnel assignment method:
•Auto—The tunnel was automatically assigned to the VXLAN. For a
multicast-mode VXLAN, the tunnel (MTunnel) was automatically created and
assigned to the VXLAN to transmit flood traffic.
•Manual—The tunnel was manually assigned to the VXLAN.

12
Field Description
Flooding proxy
Flood proxy state:
•Enabled—Flood proxy is enabled. The VTEP sends broadcast, multicast, and
unknown unicast traffic to a flood proxy server through the tunnel. The flood
proxy server replicates and forwards flood traffic to remote VTEPs.
•Disabled—Flood proxy is disabled.
Related commands
•tunnel
•vxlan
encapsulation
Use encapsulation to configure a frame match criterion for an Ethernet service instance.
Use undo encapsulation to remove a frame match criterion from an Ethernet service instance.
Syntax
Releases 2416, 2418P01, and 2418P05:
encapsulation default
encapsulation { tagged | untagged }
encapsulation s-vid vlan-id [ only-tagged ]
undo encapsulation
Release 2422 and later versions:
encapsulation default
encapsulation { tagged | untagged }
encapsulation s-vid vlan-id [ only-tagged ]
encapsulation s-vid vlan-id c-vid vlan-id
undo encapsulation
Default
An Ethernet service instance does not contain a frame match criterion.
Views
Ethernet service instance view
Predefined user roles
network-admin
Parameters
default: Matches frames that do not match any other Ethernet service instance on the interface.
tagged: Matches any frames that have an 802.1Q VLAN tag.
untagged: Matches any frames that do not have an 802.1Q VLAN tag.
s-vid vlan-id: Matches frames that are tagged with the specified outer 802.1Q VLAN ID. The vlan-id
argument specifies a 802.1Q VLAN ID in the range of 1 to 4094. If the outer 802.1Q VLAN is not the
PVID, the matching result does not differ, whether or not you specify the only-tagged keyword. If the
outer 802.1Q VLAN is the PVID, the matching result depends on whether or not the only-tagged
keyword is specified.

13
only-tagged: Matches only PVID-tagged frames. To match both untagged frames and PVID-tagged
frames, do not specify this keyword.
s-vid vlan-id c-vid vlan-id: Matches frames that are tagged with the specified outer and inner 802.1Q
VLAN IDs. The vlan-id argument specifies an 802.1Q VLAN ID in the range of 1 to 4094. This option
is available in Release 2422 and later versions.
Usage guidelines
The match criterion in each Ethernet service instance on an interface must be unique. For example,
you cannot configure the encapsulation tagged command in one Ethernet service instance if
another Ethernet service instance already contains this command. You cannot use the
encapsulation s-vid vlan-id command to specify the same 802.1Q VLAN ID for any two Ethernet
service instances on the interface.
For Release 2422 and later versions, the encapsulation s-vid vlan-id [ only-tagged ] and
encapsulation s-vid vlan-id c-vid vlan-id commands can specify the same outer VLAN ID for two
Ethernet service instances on an interface. Frames that match both Ethernet service instances are
assigned to the Ethernet service instance configured by using the encapsulation s-vid vlan-id c-vid
vlan-id command.
An Ethernet service instance can contain only one match criterion. To change the match criterion,
you must remove the original criterion first. When you remove the match criterion in an Ethernet
service instance, the mapping between the service instance and the VSI is removed automatically.
If the Ethernet service instance uses the default, tagged, or untagged frame match criterion, the
access mode set bythe xconnect vsi command does not take effect. The VSI uses Ethernet access
mode to process traffic.
An SDN transport network uses a controller to deploy and manage VXLANs on VTEPs. If you
change the matching outer VLAN ID on the VTEP, you must also modify the VLAN ID set by the
Set-Field action on the controller.
Examples
# Configure Ethernet service instance 1 on FortyGigE 1/0/1 to match frames that have an outer
802.1Q VLAN ID of 111.
<Sysname> system-view
[Sysname] interface fortygige 1/0/1
[Sysname-FortyGigE1/0/1] service-instance 1
[Sysname-FortyGigE1/0/1-srv1] encapsulation s-vid 111
Related commands
display l2vpn service-instance
flooding disable
Use flooding disable to disable flooding for a VSI.
Use undo flooding disable to restore the default.
Syntax
flooding disable
undo flooding disable
Default
Flooding is enabled for a VSI.
Views
VSI view