HP 6127XLG Blade Series Installation manual

HP 6127XLG Blade Switch Series
V
XLAN
Command Reference
Part number: 797722-001
Software version: Release 2418P03
Document version: 6W100-20150806

Legal and notice information
© Copyright 2015 Hewlett-Packard Development Company, L.P.
No part of this documentation may be reproduced or transmitted in any form or by any means without
prior written consent of Hewlett-Packard Development Company, L.P.
The information contained herein is subject to change without notice.
HEWLETT-PACKARD COMPANY MAKES NO WARRANTY OF ANY KIND WITH REGARD TO THIS
MATERIAL, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY
AND FITNESS FOR A PARTICULAR PURPOSE. Hewlett-Packard shall not be liable for errors contained
herein or for incidental or consequential damages in connection with the furnishing, performance, or
use of this material.
The only warranties for HP products and services are set forth in the express warranty statements
accompanying such products and services. Nothing herein should be construed as constituting an
additional warranty. HP shall not be liable for technical or editorial errors or omissions contained
herein.

i
Contents
VXLAN commands ······················································································································································· 1
Basic VXLAN commands ··················································································································································1
arp suppression enable ···········································································································································1
description·································································································································································1
display arp suppression vsi·····································································································································2
display igmp host group··········································································································································3
display l2vpn mac-address······································································································································5
display l2vpn service-instance·································································································································6
display l2vpn vsi·······················································································································································9
display vxlan tunnel ·············································································································································· 11
encapsulation························································································································································· 12
flooding disable····················································································································································· 13
group ······································································································································································ 14
igmp host enable··················································································································································· 15
l2vpn enable ·························································································································································· 16
mac-address static ················································································································································· 17
reset arp suppression vsi ······································································································································ 18
reset l2vpn mac-address ······································································································································· 18
selective-flooding mac-address ···························································································································· 19
service-instance······················································································································································ 19
shutdown ································································································································································ 20
tunnel ······································································································································································ 21
tunnel bfd enable··················································································································································· 22
tunnel global source-address································································································································ 22
vsi············································································································································································ 23
vtep group member remote ·································································································································· 24
vxlan ······································································································································································· 24
vxlan invalid-udp-checksum discard ···················································································································· 25
vxlan invalid-vlan-tag discard ······························································································································ 26
vxlan local-mac report··········································································································································· 26
vxlan tunnel arp-learning disable ························································································································ 27
vxlan tunnel mac-learning disable ······················································································································· 27
vxlan udp-port························································································································································ 28
xconnect vsi···························································································································································· 29
ENDP commands ··························································································································································· 30
display vxlan neighbor-discovery client member······························································································· 30
display vxlan neighbor-discovery client statistics······························································································· 32
display vxlan neighbor-discovery client summary······························································································ 33
display vxlan neighbor-discovery server member······························································································ 34
display vxlan neighbor-discovery server statistics······························································································ 35
display vxlan neighbor-discovery server summary ···························································································· 36
network-id······························································································································································· 37
vxlan neighbor-discovery authentication············································································································· 37
vxlan neighbor-discovery client enable··············································································································· 38
vxlan neighbor-discovery client register-interval ································································································ 39
vxlan neighbor-discovery server enable ············································································································· 40
VXLAN IS-IS commands················································································································································· 41
display vxlan isis brief ·········································································································································· 41
display vxlan isis graceful-restart status ·············································································································· 42

ii
display vxlan isis local-mac·································································································································· 43
display vxlan isis lsdb ··········································································································································· 44
display vxlan isis peer ·········································································································································· 47
display vxlan isis remote-mac ······························································································································ 48
display vxlan isis remote-vxlan····························································································································· 48
display vxlan isis tunnel ········································································································································ 49
graceful-restart ······················································································································································· 51
graceful-restart interval·········································································································································· 51
log-peer-change enable ········································································································································ 52
mac-synchronization enable································································································································· 53
negotiate-vni enable·············································································································································· 53
overlay isis ded-priority········································································································································· 54
overlay isis timer csnp··········································································································································· 54
overlay isis timer hello ·········································································································································· 55
overlay isis timer holding-multiplier ····················································································································· 56
overlay isis timer lsp·············································································································································· 57
reserved vxlan························································································································································ 57
reset vxlan isis························································································································································ 58
timer lsp-max-age ·················································································································································· 59
timer lsp-refresh······················································································································································ 59
virtual-system ·························································································································································· 60
vxlan-isis ································································································································································· 61
OVSDB commands ························································································································································ 61
ovsdb server ca-certificate ···································································································································· 61
ovsdb server certificate ········································································································································· 62
ovsdb server enable·············································································································································· 63
ovsdb server private-key ······································································································································· 63
ovsdb server pssl ··················································································································································· 64
ovsdb server ptcp ·················································································································································· 65
ovsdb server ssl······················································································································································ 65
ovsdb server tcp ···················································································································································· 66
vtep access port····················································································································································· 67
vtep enable ···························································································································································· 67
vxlan tunnel service node ····································································································································· 68
Support and other resources ·····································································································································69
Contacting HP ································································································································································ 69
Subscription service ·············································································································································· 69
Related information························································································································································ 69
Documents······························································································································································ 69
Websites································································································································································· 69
Conventions ···································································································································································· 70
Index ···········································································································································································72

1
VXLAN commands
Basic VXLAN commands
arp suppression enable
Use arp suppression enable to enable ARP flood suppression.
Use undo arp suppression enable to restore the default.
Syntax
arp suppression enable
undo arp suppression enable
Default
ARP flood suppression is disabled.
Views
VSI view
Predefined user roles
network-admin
Usage guidelines
ARP flood suppression reduces ARP request broadcasts by enabling the VTEP to reply to ARP requests on
behalf of VMs.
This feature snoops ARP packets to populate the ARP flood suppression table for local and remote MAC
addresses. If an ARP request has a matching entry, the VTEP replies to the request on behalf of the VM.
If no match is found, the VTEP floods the request to both local and remote sites.
Examples
# Enable ARP flood suppression for the VSI vsi1.
<Sysname> system-view
[Sysname] vsi vsi1
[Sysname-vsi-vsi1] arp suppression enable
Related commands
•display arp suppression vsi
•reset arp suppression vsi
description
Use description to configure a description for a VSI.
Use undo description to delete the description of a VSI.

2
Syntax
description text
undo description
Default
A VSI does not have a description.
Views
VSI view
Predefined user roles
network-admin
Parameters
text: Specifies the VSI description, a case-sensitive string of 1 to 80 characters.
Examples
# Configure a description for the VSI vpn1.
<Sysname> system-view
[Sysname] vsi vpn1
[Sysname-vsi-vpn1] description vsi for vpn1
Related commands
display l2vpn vsi
display arp suppression vsi
Use display arp suppression vsi to display ARP flood suppression entries.
Syntax
display arp suppression vsi [ name vsi-name ] [ slot slot-number ] [ count ]
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
name vsi-name: Specifies a VSI by its name. If you do not specify a VSI, this command displays entries
for all VSIs.
slot slot-number: Specifies an IRF member device by its member ID. If you do not specify a member
device, this command displays entries on the master device.
count: Displays the number of ARP flood suppression entries that match the command.
Examples
# Display the ARP flood suppression entries on the master device.
<Sysname> display arp suppression vsi
IP address MAC address Vsi Name Link ID Aging

3
1.1.1.2 000f-e201-0101 vsi1 0x5000003 14
1.1.1.3 000f-e201-0202 vsi1 0x5000004 18
1.1.1.4 000f-e201-0203 vsi2 0x5000005 10
# Display the number of ARP flood suppression entries on the master device.
<Sysname> display arp suppression vsi count
Total entries: 3
Table 1 Command output
Field Descri
p
tion
Link ID Link ID that uniquely identifies an AC or a VXLAN tunnel on a VSI.
Aging Remaining lifetime (in minutes) of the ARP flood suppression entry. When the
timer expires, the entry is deleted.
Related commands
•arp suppression enable
•reset arp suppression vsi
display igmp host group
Use display igmp host group to display information about the multicast groups that contain IGMP
host-enabled interfaces.
Syntax
display igmp host group [ group-address | interface interface-type interface-number ] [ verbose ]
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
group-address: Specifies a multicast group address. The value range is 224.0.1.0 to 239.255.255.255.
If you do not specify a multicast group, the command displays information about all multicast groups.
interface interface-type interface-number: Specifies an interface by its type and number. If you do not
specify an interface, the command displays multicast group information for all interfaces.
verbose: Displays detailed multicast group information. If you do not specify this keyword, the command
displays brief multicast group information.
Usage guidelines
For the VXLAN multicast source interface of a multicast-mode VXLAN to join its VXLAN multicast group,
you must enable the IGMP host function.
Use this command to verify the following information:
•Multicast group information for VXLANs.
•Group membership status of VXLAN multicast source interfaces.

4
Examples
# Display brief information about all multicast groups that contain IGMP host-enabled interfaces.
<Sysname> display igmp host group
IGMP host groups in total: 2
Vlan-interface10(1.1.1.20):
IGMP host groups in total: 2
Group address Member state Expires
225.1.1.1 Idle Off
225.1.1.2 Idle Off
# Display detailed information about all multicast groups that contain IGMP host-enabled interfaces.
<Sysname> display igmp host group verbose
Vlan-interface10(1.1.1.20):
IGMP host groups in total: 2
Group: 225.1.1.1
Group mode: Exclude
Member state: Idle
Expires: Off
Source list (sources in total: 0):
Group: 225.1.1.2
Group mode: Exclude
Member state: Idle
Expires: Off
Source list (sources in total: 0):
Table 2 Command output
Field Descri
p
tion
IGMP host groups in total Total number of multicast groups that contain IGMP host-enabled interfaces.
Vlan-interface10(1.1.1.20) Name and IP address of the IGMP host-enabled interface.
IGMP host groups in total Total number of multicast groups on the interface.
Group address/Group Address of the multicast group.
Member state
Member state:
•Delay—The interface has joined the multicast group, and it has started the
delay timer for sending IGMP reports.
•Idle—The interface has joined the multicast group, but it has not started the
delay timer for sending IGMP reports.
The delay timer is not user configurable.
Expires Remaining delay time for the interface to send an IGMP report.
This field displays Off if the delay timer is disabled.
Group mode
Multicast source filtering mode:
•Include.
•Exclude.
Source list Multicast sources of the multicast group.
sources in total Total number of multicast sources.

5
NOTE:
For more information about the command output, see IGMP in
IP Multicast Configuration Guide .
Related commands
igmp host enable
display l2vpn mac-address
Use display l2vpn mac-address to display MAC address entries for VSIs.
Syntax
display l2vpn mac-address [ vsi vsi-name ] [ dynamic ] [ count ]
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
vsi vsi-name: Specifies a VSI name, a case-sensitive string of 1 to 31 characters. If you do not specify a
VSI, the command displays MAC address entries for all VSIs.
dynamic: Specifies dynamic MAC address entries learned in the data plane. If you do not specify this
keyword, the command displays all MAC address entries. The MAC address entries include dynamic
remote- and local-MAC entries, remote-MAC entries advertised through VXLAN IS-IS, and manually
added static remote-MAC entries. VXLAN does not support static local-MAC entries.
count: Displays the number of MAC address entries. If you do not specify this keyword, the command
displays detailed information about MAC address entries.
Examples
# Display MAC address entries for all VSIs.
<Sysname> display l2vpn mac-address
MAC Address State VSI Name Link ID/Name Aging
0000-0000-000a Dynamic vpn1 1 Aging
0000-0000-000b Static vpn1 Tunnel10 NotAging
0000-0000-000c Dynamic vpn1 Tunnel60 Aging
0000-0000-000d Dynamic vpn1 Tunnel99 Aging
--- 4 mac address(es) found ---
# Display the total number of MAC address entries in all VSIs.
<Sysname> display l2vpn mac-address count
4 mac address(es) found

6
Table 3 Command output
Field Descri
p
tion
State
Entry state.
•dynamic—Local- or remote-MAC entry dynamically learned in the data plane.
•static—Static remote-MAC entry.
•is-is—Remote-MAC entry advertised through VXLAN IS-IS.
•openflow—Remote-MAC entry issued by a remote controller through OpenFlow.
The Aging field displays Aging for dynamic entries and displays NotAging for static,
is-is, and openflow entries.
Link ID/Name For a local MAC address, this field displays the AC's link ID on the VSI.
For a remote MAC address, this field displays the tunnel name.
Aging
Entry aging state:
•Aging.
•NotAging.
Related commands
reset l2vpn mac-address
display l2vpn service-instance
Use display l2vpn service-instance to display information about Ethernet service instances.
Syntax
display l2vpn service-instance [ interface interface-type interface-number [ service-instance instance-id ] ]
[ verbose ]
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
interface interface-type interface-number: Specifies a Layer 2 Ethernet interface or Layer 2 aggregate
interface by its interface type and number. If you do not specify an interface, the command displays
Ethernet service instance information for all Layer 2 Ethernet interfaces and Layer 2 aggregate interfaces.
service-instance instance-id: Specifies an Ethernet service instance by its ID, in the range of 1 to 4096.
If you do not specify an Ethernet service instance, the command displays information about all Ethernet
service instances on the specified interface.
verbose: Displays detailed information about Ethernet service instances. If you do not specify this
keyword, the command displays brief information about Ethernet service instances.
Examples
# Display brief information about all Ethernet service instances.
<Sysname> display l2vpn service-instance
Total number of service-instances: 4, 4 up, 0 down

7
Total number of ACs: 4, 4 up, 0 down
Interface SrvID Owner LinkID State Type
XGE1/0/3 1 vsi10 1 Up VSI
XGE1/0/3 2 vsi11 1 Up VSI
XGE1/0/3 3 vsi12 1 Up VSI
XGE1/0/3 4 vsi13 1 Up VSI
Table 4 Command output
Field Descri
p
tion
Total number of ACs Total number of attachment circuits (ACs) and the number of ACs in each state (up
or down).
Interface Name of a Layer 2 Ethernet interface or Layer 2 aggregate interface.
SrvID Ethernet service instance ID.
Owner VSI name. This field is empty if an Ethernet service instance is not mapped to any
VSI.
LinkID Ethernet service instance's link ID on the VSI.
State
Ethernet service instance state:
•Up.
•Down.
Type
L2VPN type of the Ethernet service instance:
•VSI.
•VPWS.
# Display detailed information about all Ethernet service instances on Ten-GigabitEthernet 1/0/3.
<Sysname> display l2vpn service-instance interface ten-gigabitethernet 1/0/3 verbose
Interface: XGE1/0/3
Service Instance: 1
Encapsulation : s-vid 16
VSI Name : vsi10
Link ID : 1
State : Up
Statistics : Enabled
Input Statistics:
Octets :0
Packets :0
Output Statistics:
Octets :0
Packets :0
Service Instance: 2
Encapsulation : s-vid 1001
only-tagged
VSI Name : vsi11
Link ID : 1
State : Up
Statistics : Enabled

8
Input Statistics:
Octets :0
Packets :0
Output Statistics:
Octets :0
Packets :0
Service Instance: 3
Encapsulation : s-vid 2000
c-vid 1016
VSI Name : vsi12
Link ID : 1
State : Up
Statistics : Enabled
Input Statistics:
Octets :0
Packets :0
Output Statistics:
Octets :0
Packets :0
Table 5 Command output
Field Descri
p
tion
Interface Name of a Layer 2 Ethernet interface or Layer 2 aggregate interface.
Service Instance Ethernet service instance ID.
Encapsulation Frame match criterion of the Ethernet service instance. If the Ethernet service instance
does not contain any match criteria, the command does not display this field.
Link ID Ethernet service instance's link ID on the VSI.
State
Ethernet service instance state:
•Up.
•Down.
Statistics
Packet statistics state:
•Enabled—Packet statistics is enabled for the Ethernet service instance.
•Disabled—Packet statistics is disabled for the Ethernet service instance.
Input Statistics
Incoming traffic statistics:
•Octets—Number of incoming bytes.
•Packets—Number of incoming packets.
Output Statistics
Outgoing traffic statistics:
•Octets—Number of outgoing bytes.
•Packets—Number of outgoing packets.
Related commands
•service-instance
•statistics enable (MPLS Command Reference)
•reset l2vpn statistics ac (MPLS Command Reference)

9
display l2vpn vsi
Use display l2vpn vsi to display information about VSIs.
Syntax
display l2vpn vsi [ name vsi-name ] [ verbose ]
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
name vsi-name: Specifies a VSI by its name, a case-sensitive string of 1 to 31 characters. If you do not
specify a VSI, the command displays information about all VSIs.
verbose: Displays detailed information about VSIs. If you do not specify this keyword, the command
displays brief information about VSIs.
Examples
# Display brief information about all VSIs.
<Sysname> display l2vpn vsi
Total number of VSIs: 1, 1 up, 0 down, 0 admin down
VSI Name VSI Index MTU State
vpna 0 1500 Up
# Display detailed information about all VSIs.
<Sysname> display l2vpn vsi verbose
VSI Name: vpna
VSI Index : 0
VSI State : Up
MTU : 1500
Bandwidth : -
Broadcast Restrain : -
Multicast Restrain : -
Unknown Unicast Restrain: -
MAC Learning : Enabled
MAC Table Limit : -
Drop Unknown : -
Flooding : Enabled
VXLAN ID : 10
Tunnels:
Tunnel Name Link ID State Type Flooding proxy
Tunnel1 0x5000001 Up Manual Disabled
Tunnel2 0x5000002 Up Manual Disabled
MTunnel0 0x6002710 Up Auto Disabled
ACs:
AC Link ID State

10
XGE1/0/1 srv1000 0 Up
Table 6 Command output
Field Descri
p
tion
VSI Description Description of the VSI. If the VSI does not have a description, the command does not
display this field.
VSI State
VSI state:
•Up—The VSI is up. A VSI is up only when its VXLAN has an up VXLAN tunnel and
an up AC.
•Down—The VSI is down.
•Administratively down—The VSI has been manually shut down by using the
shutdown command.
MTU MTU on the VSI.
Bandwidth Maximum bandwidth in kbps on the VSI.
Broadcast Restrain Broadcast restraint ratio.
Multicast Restrain Multicast restraint ratio.
Unknown Unicast
Restrain Unknown unicast restraint ratio.
MAC Learning State of the MAC learning function.
MAC Table Limit Maximum number of MAC address entries on the VSI.
Drop Unknown Action on source MAC-unknown frames received after the maximum number of
MAC entries is reached.
Hub-Spoke State of the hub-spoke function.
Flooding
State of the VSI's flooding function:
•Enabled—Flooding is enabled on the VSI. The VTEP floods unknown unicast
frames to both local and remote sites.
•Disabled—Flooding is disabled on the VSI. The VTEP floods unknown unicast
frames only to local sites.
Tunnels Information about the VXLAN tunnels assigned to the VXLAN.
Link ID Tunnel's link ID on the VSI.
State
Tunnel state:
•Up—The tunnel is operating correctly.
•Blocked—The tunnel is a backup proxy tunnel. Its tunnel interface is up, but the
tunnel is blocked because the primary proxy tunnel is operating correctly.
•Defect—The tunnel interface is up, but the VTEP has not received BFD control
packets from the remote end for 5 seconds. You must check for physical link or
VXLAN tunnel problems.
•Down—The tunnel interface is down.
Type
Tunnel assignment method:
•Auto—The tunnel was automatically assigned to the VXLAN:
{VXLAN IS-IS automatically assigned the tunnel to the VXLAN after VXLAN ID
negotiation.
{For a multicast-mode VXLAN, the tunnel (MTunnel) was automatically created
and assigned to the VXLAN to transmit flood traffic.
•Manual—The tunnel was manually assigned to the VXLAN.

11
Field Descri
p
tion
Flooding proxy
Flood proxy state:
•Enabled—Flood proxy is enabled. The VTEP sends broadcast, multicast, and
unknown unicast traffic to a flood proxy server through the tunnel. The flood
proxy server replicates and forwards flood traffic to remote VTEPs.
•Disabled—Flood proxy is disabled.
ACs ACs that are bound to the VSI.
Link ID AC's link ID on the VSI.
State
AC state:
•Up.
•Down.
display vxlan tunnel
Use display vxlan tunnel to display VXLAN tunnel information for VXLANs.
Syntax
display vxlan tunnel [ vxlan-id vxlan-id ]
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
vxlan-id: Specifies a VXLAN ID in the range of 0 to 16777215. If you do not specify a VXLAN, the
command displays VXLAN tunnel information for all VXLANs.
Examples
# Display VXLAN tunnel information for all VXLANs.
<Sysname> display vxlan tunnel
Total number of VXLANs: 1
VXLAN ID: 10, VSI name: vpna, Total tunnels: 4 (4 up, 0 down, 0 defect, 0 blocked)
Tunnel name Link ID State Type Flooding proxy
Tunnel0 0x5000000 Up Auto Disabled
Tunnel1 0x5000001 Up Manual Disabled
Tunnel2 0x5000002 Up Manual/Auto Disabled
MTunnel0 0x6002710 Up Auto Disabled
# Display VXLAN tunnel information for VXLAN 10.
<Sysname> display vxlan tunnel vxlan-id 10
VXLAN ID: 10, VSI name: vpna, Total tunnels: 4 (4 up, 0 down, 0 defect, 0 blocked)
Tunnel name Link ID State Type Flooding proxy
Tunnel0 0x5000000 Up Auto Disabled
Tunnel1 0x5000001 Up Manual Disabled

12
Tunnel2 0x5000002 Up Manual/Auto Disabled
MTunnel0 0x6002710 Up Auto Disabled
Table 7 Command output
Field Descri
p
tion
Link ID Tunnel's link ID in the VXLAN.
State
Tunnel state:
•Up—The tunnel is operating correctly.
•Blocked—The tunnel is a backup proxy tunnel. Its tunnel interface is up, but the tunnel
is blocked because the primary proxy tunnel is operating correctly.
•Defect—The tunnel interface is up, but the VTEP has not received BFD control packets
from the remote end for 5 seconds. You must check for physical link or VXLAN tunnel
problems.
•Down—The tunnel interface is down.
Type
Tunnel assignment method:
•Auto—The tunnel was automatically assigned to the VXLAN:
{VXLAN IS-IS automatically assigned the tunnel to the VXLAN after VXLAN ID
negotiation.
{For a multicast-mode VXLAN, the tunnel (MTunnel) was automatically created and
assigned to the VXLAN to transmit flood traffic.
•Manual—The tunnel was manually assigned to the VXLAN.
Flooding proxy
Flood proxy state:
•Enabled—Flood proxy is enabled. The VTEP sends broadcast, multicast, and
unknown unicast traffic to a flood proxy server through the tunnel. The flood proxy
server replicates and forwards flood traffic to remote VTEPs.
•Disabled—Flood proxy is disabled.
Related commands
•tunnel
•negotiate-vni enable
•vxlan
encapsulation
Use encapsulation to configure a frame match criterion for an Ethernet service instance.
Use undo encapsulation to remove a frame match criterion from an Ethernet service instance.
Syntax
encapsulation default
encapsulation { tagged | untagged }
encapsulation s-vid vlan-id [ only-tagged ]
undo encapsulation
Default
An Ethernet service instance does not contain frame match criteria.

13
Views
Ethernet service instance view
Predefined user roles
network-admin
Parameters
default: Matches any frames.
tagged: Matches any frames that have an 802.1Q VLAN tag.
untagged: Matches any frames that do not have an 802.1Q VLAN tag.
s-vid vlan-id: Matches frames that are tagged with the specified outer 802.1Q VLAN ID. The vlan-id
argument specifies a 802.1Q VLAN ID in the range of 1 to 4094. If the outer 802.1Q VLAN is not the
PVID, the matching result does not differ, whether or not you specify the only-tagged keyword. If the outer
802.1Q VLAN is the PVID, the matching result depends on whether or not the only-tagged keyword is
specified.
only-tagged: Matches only PVID-tagged frames. To match both untagged frames and PVID-tagged
frames, do not specify this keyword.
Usage guidelines
The match criterion in each Ethernet service instance on an interface must be unique. For example, you
cannot configure the encapsulation tagged command in one Ethernet service instance if another Ethernet
service instance already contains this command. You cannot use the encapsulation s-vid vlan-id
command to specify the same 802.1Q VLAN ID for any two Ethernet service instances on the interface.
An Ethernet service instance can contain only one match criterion. To change the match criterion, you
must remove the original criterion first. When you remove the match criterion in an Ethernet service
instance, the mapping between the service instance and the VSI is removed automatically.
If the Ethernet service instance uses the default, tagged, or untagged frame match criterion, the access
mode set by the xconnect vsi command does not take effect. The VSI uses Ethernet access mode to
process traffic.
An SDN transport network uses a controller to deploy and manage VXLANs on VTEPs. If you change the
matching outer VLAN ID on the VTEP, you must also modify the VLAN ID set by the Set-Field action on the
controller.
Examples
# Configure Ethernet service instance 1 on Ten-GigabitEthernet 1/0/1 to match frames that have an
802.1Q VLAN ID of 111.
<Sysname> system-view
[Sysname] interface ten-gigabitethernet 1/0/1
[Sysname-Ten-GigabitEthernet1/0/1] service-instance 1
[Sysname-Ten-GigabitEthernet1/0/1-srv1] encapsulation s-vid 111
Related commands
display l2vpn service-instance
flooding disable
Use flooding disable to disable flooding for a VSI.

14
Use undo flooding disable to restore the default.
Syntax
flooding disable
undo flooding disable
Default
Flooding is enabled for a VSI.
Views
VSI view
Predefined user roles
network-admin
Usage guidelines
By default, the device floods unknown unicast frames received from the local site to the following
interfaces in the frame's VXLAN:
•All interfaces in the local site except for the incoming interface.
•All VXLAN tunnel interfaces.
To limit unknown unicast traffic to the local site, use this command to disable the flooding function for the
VSI bound to the VXLAN. The VSI will not flood unknown unicast frames to VXLAN tunnel interfaces.
Examples
# Disable flooding for the VSI vsi1.
<Sysname> system-view
[Sysname] vsi vsi1
[Sysname-vsi-vsi1] flooding disable
group
Use group to assign a VXLAN a multicast group address for flood traffic, and specify a source IP address
for multicast VXLAN packets.
Use undo group to restore the default.
Syntax
group group-address source source-address
undo group group-address source source-address
Default
A VXLAN uses unicast mode (head-end replication) for flood traffic. No multicast group address or
source IP address is specified for multicast VXLAN packets.
Views
VXLAN view
Predefined user roles
network-admin

15
Parameters
group-address: Specifies a multicast address in the range of 224.0.1.0 to 239.255.255.255.
source source-address: Specifies a source IP address for multicast VXLAN packets.
Usage guidelines
VXLAN flood traffic includes multicast, broadcast, and unknown unicast frames. The following are
methods available for the VTEP to flood traffic to remote sites:
•Unicast mode—Also called head-end replication. The VTEP replicates the flood frame, and then
sends one replica to the destination IP address of each VXLAN tunnel in the VXLAN.
•Multicast mode—Also called tandem replication. The VTEP sends the flood frame in a multicast
VXLAN packet destined for the VXLAN multicast group address. Transport network devices
replicate and forward the packet to remote VTEPs based on their multicast forwarding entries.
•Flood proxy mode—The VTEP sends the flood frame in a VXLAN packet to a flood proxy server. The
flood proxy server replicates and forwards the packet to each remote VTEP through VXLAN tunnels.
To reduce traffic sent to the transport network, use multicast mode if the network has dense flood traffic
or many VTEPs.
For multicast-mode VXLANs, transport network devices must maintain multicast group and forwarding
information. To reduce the multicast forwarding entries maintained by transport network devices, assign
a multicast group address to multiple VXLANs. The VTEP separates traffic between VXLANs by VXLAN
IDs.
NOTE:
For VXLANs that use the same multicast
g
roup address, you must confi
g
ure the same source IP address for
their multicast VXLAN packets.
If you execute the group command multiple times, the most recent configuration takes effect.
Examples
# Set the multicast group address to 233.1.1.1 for flood traffic in VXLAN 100. Set the source IP address
t o 2.1.1.1 f o r m u l t i c as t V X L A N p a c k et s.
<Sysname> system-view
[Sysname] vsi aaa
[Sysname-vsi-aaa] vxlan 100
[Sysname-vsi-aaa-vxlan-100] group 233.1.1.1 source 2.1.1.1
Related commands
igmp host enable
igmp host enable
Use igmp host enable to enable the IGMP host function on an interface.
Use undo igmp host enable to disable the IGMP host function on an interface.
Syntax
igmp host enable
undo igmp host enable

16
Default
The IGMP host function is disabled on an interface.
Views
Interface view
Predefined user roles
network-admin
Usage guidelines
For this command to take effect, you must use the multicast routing command to enable IP multicast
routing.
You must configure an interface as an IGMP host if its IP address is the source IP address of multicast
VXLAN packets. The IGMP host function enables the interface to send IGMP reports in response to IGMP
queries before it can receive traffic from a multicast group.
Examples
# Enable IP multicast routing, and then enable the IGMP host function on VLAN-interface 10.
<Sysname> system-view
[Sysname] multicast routing
[Sysname-mrib] quit
[Sysname] interface vlan-interface 10
[Sysname-Vlan-interface10] igmp host enable
Related commands
•display igmp host group
•group
•multicast routing (IP Multicast Command Reference)
l2vpn enable
Use l2vpn enable to enable L2VPN.
Use undo l2vpn enable to disable L2VPN.
Syntax
l2vpn enable
undo l2vpn enable
Default
L2VPN is disabled.
Views
System view
Predefined user roles
network-admin
Usage guidelines
You must enable L2VPN before you can configure L2VPN settings.