No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

Command Reference

S1720, S2700, S5700, and S6720 V200R011C10

This document describes all the configuration commands of the device, including the command function, syntax, parameters, views, default level, usage guidelines, examples, and related commands.
Rate and give feedback:
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
Multicast VPN Configuration Commands

Multicast VPN Configuration Commands

Command Support

Only S5720EI, S5720HI, S6720EI, and S6720S-EI support multicast VPN.

display default-parameter mvpn

Function

The display default-parameter mvpn command displays default configurations about the multicast VPN (MVPN).

Format

display default-parameter mvpn

Parameters

None

Views

All views

Default Level

1: Monitoring level

Usage Guidelines

Using this command displays only default configurations, regardless of whether the configurations about MVPN parameters are changed.

Example

# Display default configurations about the MVPN.

<HUAWEI> display default-parameter mvpn
  MVPN Instance View Default Configurations:                                    
  ------------------------------------------                                    
  Multicast-domain switch-delay: 5 s                                            
  Multicast-domain switch threshold: 0 kbps-preferred                           
  Multicast-domain holddown-time: 60 s                                          
  Multicast-domain log switch-group-reuse: disabled                             
  Multicast-domain share-group: disabled                                        
  Multicast-domain switch-group-pool: disabled                                  
  Multicast-domain auto-discovery: disabled                                     
  Multicast-domain switch-without-register: disabled                            
  Multicast extranet select-rpf rule: disabled  
Table 8-81  Description of the display default-parameter mvpn command output

Item

Description

MVPN Instance View Default Configurations

Default configurations in the MVPN instance view.

Multicast-domain switch-delay

Delay in switching from the share-MDT to the switch-MDT. This parameter can be configured using the multicast-domain switch-delay command in the VPN instance view or VPN IPv4 address family view.

Multicast-domain switch threshold

Threshold of the multicast packet rate that can trigger the switch to the switch-MDT. This parameter can be configured using the multicast-domain switch-group-pool command in the VPN instance view or VPN IPv4 address family view.

Multicast-domain holddown-time

Delay in switching from the switch-MDT to the share-MDT. This parameter can be configured using the multicast-domain holddown-time command in the VPN instance view or VPN IPv4 address family view.

Multicast-domain log switch-group-reuse

Whether recording logs about switch-group address reuse is configured. This parameter can be configured using the multicast-domain log switch-group-reuse command in the VPN instance view or VPN IPv4 address family view.

Multicast-domain share-group

Whether the Share-Group address is configured and whether the MTI is bound to a VPN instance. This parameter can be configured using the multicast-domain share-group binding command in the VPN instance view or VPN IPv4 address family view.

Multicast-domain switch-group-pool

Whether the range of the switch-MDT switch-group-pool is configured. This parameter can be configured using the multicast-domain switch-group-pool command in the VPN instance view or VPN IPv4 address family view.

Multicast-domain auto-discovery

Whether the A-D mode is configured for the VPN. The switch does not support the A-D mode currently.

Multicast-domain switch-without-register

Whether the source PE sends the null Register message to the RP to establish the SPT on the public network before the Switch-Group address is used to encapsulate VPN data. This parameter can be configured using the multicast-domain switch-without-register command in the VPN instance view or VPN IPv4 address family view.

Multicast extranet select-rpf rule

Whether the multicast routing policy configured for a VPN is configured. The switch does not support the configuration of a multicast routing policy for a VPN currently.

display multicast-domain control-message counters

Function

The display multicast-domain control-message counters command displays statistics about sent and received MDT switch messages in a specified VPN instance or all VPN instances.

Format

display multicast-domain { vpn-instance vpn-instance-name | all-instance } control-message counters

Parameters

Parameter Description Value
vpn-instance vpn-instance-name Displays statistics about sent and received MDT switch messages in a specified VPN instance. The parameter vpn-instance-name specifies the name of an existing VPN instance on the device. The value must be an existing VPN instance name.
all-instance Displays statistics about sent and received MDT switch messages in all VPN instances. -

Views

All views

Default Level

1: Monitoring level

Usage Guidelines

After configuring a Switch-MDT, you can run the display multicast-domain control-message counters command to view statistics about sent and received MDT switch messages in a specified VPN instance or all VPN instances and check whether packets are normally sent and received on the current device.

You can run the reset multicast-domain control-message counters command to clear the statistics.

Example

# Display statistics about sent and received MDT switch messages in VPN instance red.

<HUAWEI> display multicast-domain vpn-instance red control-message counters
VPN-Instance red:
 Message Type     Received         Sent             Invalid
 Switch           5000             0                5000 
Table 8-82  Description of the display multicast-domain vpn-instance red control-message counters command output

Item

Description

VPN-Instance red

VPN instance in which statistics about sent and received MDT switch messages need to be displayed.

Message Type

Message type, that is MDT switch messages.

Received

Number of received messages.

Sent

Number of sent messages.

Invalid

Number of received invalid messages.

display multicast-domain invalid-packet

Function

The display multicast-domain invalid-packet command displays statistics about invalid MDT switch messages received by a device and details of these messages.

Format

display multicast-domain { vpn-instance vpn-instance-name | all-instance } invalid-packet

display multicast-domain invalid-packet [ packet-number ] verbose

Parameters

Parameter Description Value
vpn-instance vpn-instance-name Displays statistics about invalid MDT switch messages received in a specified VPN instance. The parameter vpn-instance-name specifies the name of an existing VPN instance on the device. The value must be an existing VPN instance name.
all-instance Displays statistics about invalid MDT switch messages received in all VPN instances. -
packet-number Displays details of a specified number of invalid MDT switch messages recently received. The value is an integer ranging from 1 to 100. By default, details of all the invalid MDT switch messages currently stored are displayed.
verbose Displays details of invalid MDT switch messages. -

Views

All views

Default Level

1: Monitoring level

Usage Guidelines

You can run the display multicast-domain invalid-packet command to view statistics and details of invalid MDT switch messages for fault location and rectification.

If an SPT fails to be set up in a VPN instance on a multicast network, you can run the display multicast-domain invalid-packet command first to check whether devices have received invalid MDT switch messages. If the command output contains statistics about invalid MDT switch messages, you need to run the display multicast-domain invalid-packet [ packet-number ] verbose command to view details of invalid MDT switch messages to locate the fault.

Example

# Displays statistics about invalid MDT switch messages received in vpn1.

<HUAWEI> display multicast-domain vpn-instance vpn1 invalid-packet

             Statistics of invalid packets for vpn1:            
--------------------------------------------------------------------            
MDT Switch invalid packet:
Fault Length            : 0           Invalid Message Type    : 0
Invalid Multicast Source: 0           Invalid Multicast Group : 0
Invalid Switch Group    : 0                 
--------------------------------------------------------------------            
Table 8-83  Description of the display multicast-domain vpn-instance vpn1 invalid-packet command output

Item

Description

Statistics of invalid packets for vpn1

VPN instance in which statistics about MDT switch messages need to be displayed.

MDT Switch invalid packet

Invalid MDT switch messages.

Fault Length

Messages with invalid lengths.

Invalid Message Type

Messages with invalid message types.

Invalid Multicast Source

Messages with invalid multicast source addresses.

Invalid Multicast Group

Messages with invalid multicast group addresses.

Invalid Switch Group

Messages with invalid switch group addresses.

# Display details of one invalid MDT switch message recently received in the public network instance.

<HUAWEI> display multicast-domain invalid-packet 1 verbose
       Detailed information of invalid packets                                      
-----------------------------------------------------                           
Packet information (Index 1):                                                    
-----------------------------------------------------                           
Interface           :  10.44.44.44
Time                :  2010-6-9 10:50:08 UTC-08:00
Message Length      :  16
Invalid Type        :  Invalid Switch Group
0000: 01 00 10 00 64 64 64 64 e8 00 00 00 0a 00 00 00                                       
-----------------------------------------------------  
Table 8-84  Description of the display multicast-domain invalid-packet 1 verbose command output

Item

Description

Detailed information of invalid packets

Details of the invalid MDT switch message.

Packet information (Index 1)

Sequence number of the invalid MDT switch message (numbered in the opposite order that the message is received, for example, the index of the last received message is 1, the index of the last but one message is 2, and so on).

Interface

IP address of interface receiving the invalid MDT switch message

Time

Time when the invalid MDT switch message is received, in any of the following formats:
  • YYYY-MM-DD HH:MM:SS

  • YYYY-MM-DD HH:MM:SS UTC±HH:MM DST

  • YYYY-MM-DD HH:MM:SS UTC±HH:MM

  • YYYY-MM-DD HH:MM:SS DST

UTC±HH:MM indicates that a time zone is configured through the clock timezone command; DST indicates that the daylight saving time is configured through clock daylight-saving-time command.

Message Length

Length of the invalid MDT switch message.

Invalid Type

Type of the invalid MDT switch message.

0000: 01 00 10 00 64 64 64 64 e8 00 00 00 0a 00 00 00

Contents of the invalid MDT switch message.

display multicast-domain vpn-instance share-group

Function

The display multicast-domain vpn-instance share-group command displays information about the Share-Group address configured for a specified VPN instance.

Format

display multicast-domain vpn-instance vpn-instance-name share-group [ local | remote ]

Parameters

Parameter Description Value
vpn-instance vpn-instance-name Displays information about the Share-Group of a specified VPN instance. The parameter vpn-instance-name specifies the name of an existing VPN instance on the device. The value must be an existing VPN instance name.
local Indicates the locally configured Share-Group address. -
remote Indicates the Share-Group address configured on remote PE and learned through BGP Update packets. -

Views

All views

Default Level

1: Monitoring level

Usage Guidelines

The display multicast-domain vpn-instance share-group command displays information about the Share-Group, peer IP address, and tunnel type, which allows you to determine whether the multicast tunnel is correctly established to forward multicast services.

NOTE:

Remote Share-Group information is displayed only when multicast VPN is implemented through BGP auto-discovery (A-D). Currently, the switch supports only multicast VPN in multicast domain (MD) mode. Therefore, if remote is specified in the command, no information is displayed.

Example

# Display the Share-Group information of VPN instance BLUE in an MD.

<HUAWEI> display multicast-domain vpn-instance BLUE share-group
MD local share-group information for VPN-Instance: BLUE
  Share-group: 239.2.2.0
  MTunnel address: 3.3.3.3
Table 8-85  Description of the display multicast-domain vpn-instance share-group command output

Item

Description

MD local share-group information for VPN-Instance

VPN instance to which local Share-Group information in the multicast domain belongs.

Share-group

Share-MDT group address configured on the local switch. This parameter can be configured using the multicast-domain share-group binding command in the VPN instance view or VPN IPv4 address family view.

MTunnel address

Configured IP address of the MTI bound to the Share-Group on the local switch. The source interface whose IP address is referenced by the MTI can be configured using the multicast-domain source-interface command in the VPN IPv4 address family view. In this way, the IP address of the MTI is obtained. You can also directly configure an IP address for an MTI in the MTI interface view.

display multicast-domain vpn-instance switch-group receive

Function

The display multicast-domain vpn-instance switch-group receive command displays the Switch-Group information received by a specified VPN instance.

Format

display multicast-domain vpn-instance vpn-instance-name switch-group receive brief

display multicast-domain vpn-instance vpn-instance-name switch-group receive [ active | sender source-address | group group-address | vpn-source-address [ mask { source-mask-length | source-mask } ] | vpn-group-address [ mask { group-mask-length | group-mask } ] ] *

Parameters

Parameter Description Value
vpn-instance vpn-instance-name Displays the Switch-Group information received by a specified VPN instance. The parameter vpn-instance-name specifies the name of an existing VPN instance on the device. The value must be an existing VPN instance name.
active Displays the received Switch-Group that joins the Switch-MDT. -
brief Displays brief information about the received Switch-Group. -
group group-address Displays the Switch-Group related to a multicast group specified by group-address of the public network. group-address specifies the address of the multicast group. The value is in dotted decimal notation and ranges from 224.0.1.0 to 239.255.255.255.
sender source-address Displays the Switch-Group information related to the specified multicast source source-address of the public network. The source-address indicates the multicast. The value is in dotted decimal notation.
vpn-source-address Displays the Switch-Group information related to a VPN multicast source specified by vpn-source-address. The value is in dotted decimal notation.
mask Indicates the mask of the VPN multicast group or source address. -
source-mask-length Specifies the mask length of the VPN multicast source address. The value is an integer that ranges from 0 to 32.
source-mask Specifies the mask of the VPN multicast source address. The value is in dotted decimal notation.
vpn-group-address Displays the Switch-Group information related to a VPN multicast group specified by vpn-group-address. The value is in dotted decimal notation and ranges from 224.0.1.0 to 239.255.255.255.
group-mask-length Specifies the mask length of the VPN multicast group address. The value is an integer that ranges from 4 to 32.
group-mask Specifies the mask of the VPN multicast group address. The value is in dotted decimal notation.

Views

All views

Default Level

1: Monitoring level

Usage Guidelines

You can run the display multicast-domain vpn-instance switch-group receive command to display the Switch-Group information received by the local router:

  • Each VPN instance corresponds to an MD. vpn-instance-name specifies a VPN instance. Use the command to display the information about the Switch-Group of a specified MD.

  • If brief is specified, brief information about all Switch-Groups is displayed in ascending order of the Switch-Group address.

  • If active is specified, only information about the Switch-Groups that have joined the Switch-MDT is displayed, in ascending order of the VPN (S, G).

Example

# Display Switch-Group information received by VPN instance VPN1 in an MD.

<HUAWEI> display multicast-domain vpn-instance VPN1 switch-group receive
MD switch-group information received by VPN-Instance: VPN1
Switch group:  226.1.1.0 ref count: 8, active count: 8
  Sender:  172.16.1.1 active count: 8
    (192.168.1.5, 239.1.1.1)                  
    Up time: 01:20:20  expire time: 00:03:10  active
    (192.168.1.5, 239.1.1.158)                
    Up time: 01:20:20  expire time: 00:03:10  active
    (192.168.1.5, 239.1.2.12)                 
    Up time: 01:20:20  expire time: 00:03:10  active
    (192.168.1.5, 239.1.2.197)                
    Up time: 01:20:20  expire time: 00:03:10  active
    (192.168.1.5, 239.1.3.62)                 
    Up time: 01:20:20  expire time: 00:03:10  active
    (192.168.1.2, 225.1.1.109)                
    Up time: 01:20:20  expire time: 00:03:10  active
    (192.168.1.2, 225.1.4.80)                 
    Up time: 01:20:20  expire time: 00:03:10  active
    (192.168.1.2, 225.1.4.173)                
    Up time: 01:20:20  expire time: 00:03:10  active

# Display brief Switch-Group information received by VPN instance VPN1 in an MD.

<HUAWEI> display multicast-domain vpn-instance VPN1 switch-group receive brief
MD switch-group information received by VPN-Instance: VPN1
switch group:  226.1.1.0 ref count: 8, active count: 0
switch group:  226.1.1.1 ref count: 4, active count: 0
switch group:  226.1.1.2 ref count: 8, active count: 0
switch group:  226.1.1.3 ref count: 4, active count: 0
switch group:  226.1.1.4 ref count: 8, active count: 0
Table 8-86  Description of the display multicast-domain vpn-instance switch-group receive command output

Item

Description

MD switch-group information received by VPN-Instance

VPN instance to which MD Switch-Group information belongs.

switch group

Address of the received Switch-Group.

ref count

Number of VPN multicast groups referenced by the Switch-Group.

active count

Number of active VPN multicast groups (where receivers exist ) referenced by the Switch-Group.

sender

BGP peer IP address of the PE that sends Switch-Group information.

Up time

Creation time of switching messages in which the VPN multicast (S, G) entry is referenced by the Switch-group

expire time

Timeout period of the VPN multicast (S, G) entry referenced by the Switch-Group.

display multicast-domain vpn-instance switch-group send

Function

The display multicast-domain vpn-instance switch-group send command displays the Switch-Group information sent by the specified VPN instance in an MD.

Format

display multicast-domain vpn-instance vpn-instance-name switch-group send [ reuse interval | vpn-source-address [ mask { source-mask-length | source-mask } ] | vpn-group-address [ mask { group-mask-length | group-mask } ] | group group-address ] *

Parameters

Parameter Description Value
vpn-instance vpn-instance-name Displays the Switch-Group information sent by a specified VPN instance. The parameter vpn-instance-name specifies the name of an existing VPN instance on the device. The value must be an existing VPN instance name.
group group-address Displays the Switch-Group information related to a multicast group G. The parameter group-address indicates multicast group address. The value is in dotted decimal notation format. The address ranges from 224.0.1.0 to 239.255.255.255.
reuse interval Displays Switch-Group information that is reused by an MD in the specified period. The parameter interval indicates the specified period. The value of the interval is an integer that ranges from 1 to 2147483647 seconds.
vpn-source-address Displays the Switch-Group information related to the specified VPN multicast source. The value is in dotted decimal notation format.
mask Indicates the mask of the VPN multicast group or source address. -
source-mask-length Specifies the mask length of the VPN multicast source address. The value is an integer that ranges from 0 to 32.
source-mask Specifies the mask of the VPN multicast source address. The value is in dotted decimal notation.
vpn-group-address Displays the Switch-Group information related to the specified VPN multicast group G. The value is in dotted decimal notation and ranges from 224.0.1.0 to 239.255.255.255.
group-mask-length Specifies the mask length of the VPN multicast group address. The value is an integer that ranges from 4 to 32.
group-mask Specifies the mask of the VPN multicast group address. The value is in dotted decimal notation.

Views

All views

Default Level

1: Monitoring level

Usage Guidelines

Use the display multicast-domain vpn-instance switch-group send command to display the Switch-Group information sent by the local switch:

  • Each VPN instance corresponds to an MD. vpn-instance-name specifies a VPN instance. The command is only used to display the Switch-Group information related to the specified MD.

  • The Switch-Group information is displayed in ascending order of VPN (S, G) entry.

  • If reuse interval is specified, the group information that is reused in a specified interval is displayed in ascending order of Switch-Group address.

Example

# Display the Switch-Group information sent by VPN instance VPN1 in an MD.

<HUAWEI> display multicast-domain vpn-instance VPN1 switch-group send
MD switch-group information sent by VPN-Instance: VPN1
  226.1.1.0 reference_count: 3
    (1.1.1.1, 239.1.1.1)                  switch time: 00:00:21
    (1.1.1.1, 239.1.1.158)                switch time: 00:00:21
    (1.1.1.1, 239.1.2.50)                 switch time: 00:00:05
  226.1.1.1 reference_count: 3
    (1.1.1.1, 225.1.1.1)                  switch time: 00:00:21
    (1.1.1.1, 225.1.2.50)                 switch time: 00:00:05
    (1.1.1.1, 239.1.1.159)                switch time: 00:00:21

# Display information about the Switch-Group reuse sent by VPN instance VPN1 in an MD within the latest 30s.

<HUAWEI> display multicast-domain vpn-instance VPN1 switch-group send reuse 30
MD switch-group information sent by VPN-Instance: VPN1
  226.1.1.0 reuse_count: 1
  226.1.1.1 reuse_count: 1
  226.1.1.2 reuse_count: 1
Table 8-87  Description of the display multicast-domain vpn-instance switch-group send command output

Item

Description

MD switch-group information sent by VPN-Instance

VPN instance to which MD Switch-Group information belongs.

226.1.1.0 reference_count

Number of VPN multicast groups referenced by the Switch-Group.

switch time

Switching time of the VPN multicast (S, G) entry referenced by the Switch-Group.

226.1.1.0 reuse_count

Number of times of reusing the Switch-Group sent in the specified period.

interface mtunnel

Function

The interface mtunnel command displays the MTI view.

Format

interface mtunnel interface-number

Parameters

Parameter

Description

Value

interface-number

Specifies an MTI number.

The value is an integer that ranges from 0 to 1023.

Views

System view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

An MTI is the inbound/outbound interface of a multicast tunnel and also functions as the inbound/outbound interfaces of the MD. A local PE sends VPN data through the MTI, and the remote PE receives data from the MTI. The MTI is the tunnel for data exchange between the public network instance and the VPN instance on the PE. A PE connects to the MT through the MTI. The VPN instances on PEs in the MD establish PIM neighbor relationships with each other on the MTI.

When you run the multicast-domain share-group binding command, the MTI is automatically created. You can run the interface mtunnel command to enter the MTI view and configure MTI parameters

Prerequisites

The MIT has been automatically created after the multicast-domain share-group binding command is executed to configure a Share-Group for a VPN instance and bind the Share-Group to the MTI.

Example

# Enter the view of MTunnel interface 10, which has been automatically created.

<HUAWEI> system-view
[HUAWEI] interface mtunnel 10
[HUAWEI-MTunnel10]

mtu (MTI view)

Function

The mtu command sets the MTU for a multicast tunnel interface (MTI).

The undo mtu command restores the default MTU of an MTI.

By default, the MTU of an MTI is 1472 bytes.

Format

mtu mtu

undo mtu

Parameters

Parameter Description Value
mtu Specifies the MTU value of an MTI. The value is an integer that ranges from 46 to 1500, in bytes.

Views

MTI view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

If the length of a VPN multicast packet is equal or close to the MTU of the outbound interface of the public network instance, the length of the GRE-encapsulated public network multicast data packet is larger than the MTU of the outbound interface of the public network instance. In this case, the local PE must fragment the encapsulated packet and sends it through the outbound interface of the public network instance. Upon receiving the packet, the remote PE reassembles the packet.

You can set the MTU of the MTI to a smaller value so that VPN multicast packets can be fragmented before being encapuslated using the GRE.The remote PE does not need to reassemble the packets, improving efficiency.

Precautions

If the MTU is set too small and the size of packets is large, packets are broken into a great number of fragments, and may be discarded by QoS queues.

Example

# Set the MTU of MTunnel 10 to 1400.

<HUAWEI> system-view
[HUAWEI] interface mtunnel 10
[HUAWEI-MTunnel10] mtu 1400

multicast-domain holddown-time

Function

The multicast-domain holddown-time command sets the delay for the switching from the Switch-MDT to the Share-MDT.

The undo multicast-domain holddown-time command restores the default value of the interval.

By default, the delay for the switching from the Switch-MDT to the Share-MDT is 60 seconds.

Format

multicast-domain holddown-time interval

undo multicast-domain holddown-time

Parameters

Parameter Description Value
interval Specifies the delay for the switching from the Switch-MDT to the Share-MDT. The value of the delay ranges from 0 to 512, in seconds.

Views

VPN instance view, VPN IPv4 address family view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

During the Switch-MDT configuration, the forwarding rate of VPN multicast data may fluctuate above and below the switchover threshold due to network instability. To prevent multicast data traffic from being frequently switched between the Switch-MDT and Share-MDT, the system does not perform the switchover immediately after it finds that the forwarding rate is smaller than the switching threshold. Instead, the system starts the hold-down timer and performs the switchover after the hold-down timer expires.

Prerequisites

A Share-Group has been configured using the multicast-domain share-group binding command.

Precautions

During a switchover, there is a delay about 1 to 30 seconds from the time when the forwarding rate ranges to the time when the system starts the Switch-Delay timer. The delay is not included in the hold-down time. Consequently, the total delay from the time when the forwarding rate changes to the time when the system completes the switchover is 1-30 seconds longer than the hold-down time.

When interval is set to 0, the system triggers a switchover from the Switch-MDT to the Share-MDT immediately after it finds that the forwarding rate is below the threshold.

If a VPN instance has many multicast forwarding entries, the time taken to collect multicast traffic statistics will exceed the default hold-down time. In this case, increase the hold-down time to prevent frequent switchovers between the Switch-MDT and Share-MDT. Table 8-88 lists the recommended hold-down time values in various conditions.

Table 8-88  Recommended hold-down time values
Number of Multicast Forwarding Entries in a VPN Instance Recommended Hold-down Time Value (Seconds)
1024 60
2048 128
4094 256

Example

# Set the delay for the switching from the Switch-MDT to the Share-MDT to 80 seconds.

<HUAWEI> system-view
[HUAWEI] ip vpn-instance mytest
[HUAWEI-vpn-instance-mytest] route-distinguisher 11:11
[HUAWEI-vpn-instance-mytest-af-ipv4] multicast routing-enable
[HUAWEI-vpn-instance-mytest-af-ipv4] multicast-domain share-group 224.1.1.1 binding mtunnel 0
[HUAWEI-vpn-instance-mytest-af-ipv4] multicast-domain holddown-time 80

multicast-domain log switch-group-reuse

Function

The multicast-domain log switch-group-reuse command enables the output of log information about reusing group address in Switch-Group-Pool.

The undo multicast-domain log command disables the output of log information about reusing group address in Switch-Group-Pool.

By default, the output of log information about reusing Switch-Group is disabled.

Format

multicast-domain log switch-group-reuse

undo multicast-domain log

Parameters

None

Views

VPN instance view, VPN IPv4 address family view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

In the VPN instance that the source PE is bound to, if the Switch-Group-Pool cannot provide enough addresses for VPN multicast data packets whose transmission path needs to be switched to the Switch-MDT, the multicast group addresses can be reused. To record information about reusing Switch-Group, enable the output of log information about reusing Switch-Group addresses.

Prerequisites

A Share-Group has been configured using the multicast-domain share-group binding command.

Example

# Enable the output of log information about reusing Switch-Group addresses in VPN mytest.

<HUAWEI> system-view
[HUAWEI] ip vpn-instance mytest
[HUAWEI-vpn-instance-mytest] route-distinguisher 11:11
[HUAWEI-vpn-instance-mytest-af-ipv4] multicast routing-enable
[HUAWEI-vpn-instance-mytest-af-ipv4] multicast-domain share-group 224.1.1.1 binding mtunnel 0
[HUAWEI-vpn-instance-mytest-af-ipv4] multicast-domain log switch-group-reuse

multicast-domain share-group binding

Function

The multicast-domain share-group binding command specifies the Share-MDT group and binds the Multicast Tunnel Interface (MTI) to a VPN instance.

The undo multicast-domain share-group command restores the default configuration.

By default, the group address of Share-MDT is not specified.

Format

multicast-domain share-group group-address binding mtunnel number

undo multicast-domain share-group

Parameters

Parameter Description Value
group-address Specifies the multicast group address.
NOTE:

Do not enter an IP address in the SSM address range (232.*.*.*); otherwise, the multicast VPN cannot be established.

The value is in the dotted decimal notation. The address ranges from 224.0.1.0 to 239.255.255.255.
mtunnel number Specifies the MTI number. The value is an integer that ranges from 0 to 1023.

Views

VPN instance view, VPN IPv4 address family view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

When you run the multicast-domain share-group binding command, the device automatically creates the MTI and establishes a Share-MDT with the group-address value as the multicast group address for forwarding VPN multicast packets.

Prerequisites

The multicast routing function has been enabled using the multicast routing-enable command in the VPN instance.

Follow-up Procedure

Manually configure an IP address for the MTI in the MTI view or run the multicast-domain source-interface command in the VPN IPv4 address family view to configure the MTI to automatically obtain an IP address.

Precautions

You cannot configure the same Share-Group address for different VPN instances on a PE. The Share-Group address cannot be the same as the Switch-Group address. The number value must be set different from the MTI number.

You cannot repeatedly run the multicast-domain share-group binding command in the same VPN instance view. You can configure a new Share-MDT group address and MTI only after deleting the existing ones.

After the undo multicast-domain share-group command is executed, configurations about the MTI and Switch-MDT are deleted.

Some multicast protocol packets (such as Register and Graft packets) are sent in unicast mode. These packets are transmitted over unicast VPN tunnels but not multicast VPN tunnels (Mtunnels) on the public network.

Example

# Specify the Share-Group of VPN instance mytest as 224.1.1.1 and bind MTI0.

<HUAWEI> system-view
[HUAWEI] ip vpn-instance mytest
[HUAWEI-vpn-instance-mytest] route-distinguisher 11:11
[HUAWEI-vpn-instance-mytest-af-ipv4] multicast routing-enable
[HUAWEI-vpn-instance-mytest-af-ipv4] multicast-domain share-group 224.1.1.1 binding mtunnel 0

multicast-domain source-interface

Function

The multicast-domain source-interface command allows an MTI to use an IP address of a default interface.

The undo multicast-domain source-interface command restores the default setting.

By default, an MTI does not use an IP address of a default interface.

Format

multicast-domain source-interface interface-type interface-number

undo multicast-domain source-interface

Parameters

Parameter Description Value
interface-type interface-number Specifies the type and number of an interface.
NOTE:

To avoid frequent protocol changes caused by interface flapping, use the loopback interface address as the MTI address.

-

Views

System view, VPN IPv4 address family view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

When a PE encapsulates VPN multicast packets, the MTI address is used as the multicast source address of the encapsulated public network multicast data packets. You can run the multicast-domain source-interface command to configure the source interface whose address is referenced by the MTI. This keeps the MTI address consistent with the IP address of the interface on which IBGP neighbor relationships are established, which ensures that VPN multicast packets pass the RPF check.

Prerequisites

The multicast routing function has been enabled using the multicast routing-enable command in the VPN instance.

Precautions

If the multicast-domain source-interface command is run in the system view, the setting takes effect globally. The command run in the VPN IPv4 address family view takes precedence over that run in the system view. If the command is configured in the system view rather than the VPN IPv4 address family view, the setting in the system view takes effect.

A manually configured IP address on an MTI takes precedence over a default interface address specified using the multicast-domain source-interface command.

The source interface whose address is referenced by the MTI must be the interface on which public network IBGP neighbor relationships are established on the PE; otherwise, VPN multicast packets cannot pass the RPF check.

Example

# Configure the MTI to use the IP address of the default interface named loopback 1.

<HUAWEI> system-view
[HUAWEI] ip vpn-instance mytest
[HUAWEI-vpn-instance-mytest] route-distinguisher 11:11
[HUAWEI-vpn-instance-mytest-af-ipv4] multicast routing-enable
[HUAWEI-vpn-instance-mytest-af-ipv4] multicast-domain source-interface loopback 1

multicast-domain switch-delay

Function

The multicast-domain switch-delay command specifies the delay for the switchover from the Share-MDT to Switch-MDT in a specified VPN instance.

The undo multicast-domain switch-delay command restores the default value of the delay.

By default, the delay for the switchover from the Share-MDT to Switch-MDT is 5 seconds.

Format

multicast-domain switch-delay switch-delay

undo multicast-domain switch-delay

Parameters

Parameter Description Value
switch-delay Specifies the delay for the switchover from the Share-MDT to Switch-MDT. The value of the delay is an integer that ranges from 3 to 60, in seconds.

Views

VPN instance view, VPN IPv4 address family view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

In some cases, the forwarding rate of VPN multicast data packets fluctuates above and below the switchover threshold. To prevent frequent switchovers between the Share-MDT and Switch-MDT, configure a delay for the switchover from the Share-MDT to Switch-MDT. When detecting that the forwarding rate is higher than the switchover threshold, the system does not immediately perform the switchover but starts the Switch-Delay timer. Before the Switch-Delay timer expires, the system continues to detect the data forwarding rate. If the rate remains higher than the switchover threshold throughout the duration of the Switch-Delay timer, the transmission path of data packets is switched to the Switch-MDT; otherwise, the packets are still forwarded along the Share-MDT.

Prerequisites

The Share-Group has been configured using the multicast-domain share-group binding command in the VPN instance.

Precautions

During a switchover, there is a delay about 1 to 30 seconds from the time when the forwarding rate ranges to the time when the system starts the Switch-Delay timer. The delay is not included in the value of the Switch-Delay. Consequently, the total delay from the time when the forwarding rate of the data changes to the time when the system completes the switchover is 1-30 seconds longer than the Switch-Delay.

Example

# Specify the delay for the switching to Switch-MDT to 20 seconds in VPN instance mytest.

<HUAWEI> system-view
[HUAWEI] ip vpn-instance mytest
[HUAWEI-vpn-instance-mytest] route-distinguisher 11:11
[HUAWEI-vpn-instance-mytest-af-ipv4] multicast routing-enable
[HUAWEI-vpn-instance-mytest-af-ipv4] multicast-domain share-group 224.1.1.1 binding mtunnel 0
[HUAWEI-vpn-instance-mytest-af-ipv4] multicast-domain switch-delay 20

multicast-domain switch-group-pool

Function

The multicast-domain switch-group-pool command specifies the conditions for the switchover from the Share-MDT to Switch-MDT and configures the Switch-Group-Pool in a specified VPN instance.

The undo multicast-domain switch-group-pool command restores the default configuration.

By default, the Switch-Group-Pool is not specified, and the switchover to the Switch-MDT is not performed.

Format

multicast-domain switch-group-pool switch-group-pool { network-mask | network-mask-length } [ threshold threshold-value | acl advanced-acl-number ] *

undo multicast-domain switch-group-pool

Parameters

Parameter Description Value
switch-group-pool Specifies the start address of the Switch-Group-Pool. The value is in dotted decimal notation and ranges from 224.0.1.0 to 239.255.255.255.
network-mask Specifies the mask of a Switch-Group-Pool address. The value is in dotted decimal notation and ranges from 255.255.255.0 to 255.255.255.255.
network-mask-length Specifies the mask length of a Switch-Group-Pool address. The value is an integer that ranges from 24 to 32; that is, the range of the group address in the Switch-MDT Switch-Group-Pool is from 0 to 255.
threshold threshold-value Specifies the switchover threshold. The value is an integer that ranges from 0 to 4194304, in kbit/s. By default, it is 0.
acl advanced-acl-number Specifies the (S, G) entry which the Switch-Group-Pool takes effect on. advanced-acl-number indicates the advanced ACL number. If the ACL is not specified, the Switch-Group-Pool takes effect on all (S, G) entries. The value is an integer that ranges from 3000 to 3999.

Views

VPN instance view, VPN IPv4 address family view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

Between the PE connected to the VPN receivers and the PE connected to the VPN multicast source, a special Switch-MDT is set up for the high-speed VPN multicast data packets flowing into the public network. The multicast data flow can be switched from the Share-MDT to the Switch-MDT. Therefore, on-demand multicast can be realized. This prevents data from be flooded in the public network when the Share-MDT is used to transmit VPN multicast data packets.

Prerequisites

A Share-Group has been configured using the multicast-domain share-group binding command.

Follow-up Procedure

In some cases, the forwarding rate of VPN multicast data packets fluctuates above and below the switchover threshold. Configure a delay for the switchover from the Share-MDT to Switch-MDT using the multicast-domain switch-delay command. If the rate remains higher than the switchover threshold throughout the duration of the Switch-Delay timer, the transmission path of data packets is switched to the Switch-MDT; otherwise, the packets are still forwarded along the Share-MDT.

Precautions

On a PE, the address ranges defined by the Switch-Group-Pool cannot overlap for VPN instances.

Example

# Configure the Switch-Group-Pool of VPN instance named mytest to range from 225.2.2.1 to 225.2.2.15.

<HUAWEI> system-view
[HUAWEI] ip vpn-instance mytest
[HUAWEI-vpn-instance-mytest] route-distinguisher 11:11
[HUAWEI-vpn-instance-mytest-af-ipv4] multicast routing-enable
[HUAWEI-vpn-instance-mytest-af-ipv4] multicast-domain share-group 224.1.1.1 binding mtunnel 0
[HUAWEI-vpn-instance-mytest-af-ipv4] multicast-domain switch-group-pool 225.2.2.1 28

multicast-domain switch-without-register

Function

The multicast-domain switch-without-register command disables the source PE from sending null Register messages to the RP to establish the SPT on the public network before the Switch-Group address is used to encapsulate VPN data.

The undo multicast-domain switch-without-register command restores the default setting.

By default, before the Switch-Group address is used to encapsulate VPN data, the source PE sends null Register messages to the RP and establishes the SPT on the public network.

Format

multicast-domain switch-without-register

undo multicast-domain switch-without-register

Parameters

None

Views

VPN instance view, VPN IPv4 address family view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

In previous implementation, if the Switch-Group address is in the ASM address range, when the SPT switchover occurs on the multicast tunnel of the public network, the source PE sends the switchover message to all receiver PEs. After receiving the switchover message, these receiver PEs send the (*, G) Join messages to the RP of the public network to establish the RPT. When the Switch-Group address is used in the VPN to encapsulate multicast data, the public network side of the source PE receives the data forwarded from the VPN based on the Switch-Group address. Then the forwarding entries are created on the source PE, and the source PE encapsulates the data in the Register messages which are sent to the RP of the public network. Then, the RP decapsulates the Register messages, and sends the data to the receiver PEs. Finally, the receiver PEs trigger the SPT switchover towards the source PE. In this manner, the SPT is established on the public network.

When there are many entries involved in SPT switchovers, the speed of sending Register messages is reduced. As a result, sending the first Register message to the RP takes a long time for certain entries, and establishing the SPT on the public network is delayed. In addition, in the process of establishing the SPT on the public network, multicast services are interrupted and certain VPN data may also be discarded, leading to the service interruption on the user end.

To address the preceding problems, disable the source PE from sending the null Register message to the RP and establishing a public network SPT before the Switch-Group address is used to encapsulate VPN data.

Prerequisites

A Share-Group has been configured using the multicast-domain share-group binding command.

Configuration Impact

After the VPN data traffic exceeds the upper limit, the source PE uses the Switch-Group address to encapsulate data and sends the switchover message to the receiver PEs. If the Switch-Group address is allocated for the first time, when sending the switchover message, the source PE sends the Register message that is encapsulated with the VPN Hello message to the RP, and the RP forwards the Register message to the receiver PEs. Based on the received messages, the receiver PEs and the RP directly send the (S, G) Join messages to the source PE and establish the SPT on the public network in advance. In this manner, when the public network tunnel is switched from the RPT to the SPT, the number of discarded multicast messages is reduced and the impact on multicast services is minimized.

Example

# When the Switch-Group address is not used to encapsulate VPN data for mytest, configure the source PE to send the null Register message to the RP to establish the SPT on the public network.

<HUAWEI> system-view
[HUAWEI] ip vpn-instance mytest
[HUAWEI-vpn-instance-mytest] route-distinguisher 11:11
[HUAWEI-vpn-instance-mytest-af-ipv4] multicast routing-enable
[HUAWEI-vpn-instance-mytest-af-ipv4] multicast-domain share-group 224.1.1.1 binding mtunnel 0
[HUAWEI-vpn-instance-mytest-af-ipv4] multicast-domain switch-without-register

reset multicast-domain control-message counters

Function

The reset multicast-domain control-message counters command clears statistics about sent and received MDT switch messages in a specified VPN instance or all VPN instances.

Format

reset multicast-domain { vpn-instance vpn-instance-name | all-instance } control-message counters

Parameters

Parameter Description Value
vpn-instance vpn-instance-name Clears statistics about sent and received MDT switch messages in a specified VPN instance. The parameter vpn-instance-name specifies the name of an existing VPN instance on the device. The value must be an existing VPN instance name.
all-instance Clears statistics about sent and received MDT switch messages in all VPN instances. -

Views

User view

Default Level

3: Management level

Usage Guidelines

Usage Scenario

If a fault occurs on a multicast VPN network, you need to check whether MDT switch messages are properly sent and received. If the current device already records a large number of statistics about MDT switch messages, you can run the reset multicast-domain control-message counters command to clear statistics about sent and received messages in a specified VPN instance or all VPN instances and then run the display multicast-domain control-message counters command to check whether the count of MDT switch messages increases, which helps fault location.

Precautions

Running the reset multicast-domain control-message counters command will clear all statistics about MDT switch messages. Therefore, exercise caution before using this command.

Example

# Clear statistics about sent and received MDT switch messages in VPN instance red.

<HUAWEI> reset multicast-domain vpn-instance red control-message counters

service type (Eth-trunk interface view)

Function

The service type multicast-tunnel command configures an Eth-trunk interface as a multicast loopback interface.

The undo service type multicast-tunnel command cancels the configuration.

By default, an Eth-trunk interface is not configured as a multicast loopback interface.

Format

service type multicast-tunnel

undo service type multicast-tunnel

Parameters

None

Views

Eth-trunk interface view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

The switch can receive the VPN multicast packets and use GRE to encapsulate them only after a multicast loopback interface has been configured.

Follow-up Procedure

Configure member interfaces of the multicast loopback interface using the trunkport command.

Precautions

  • After you configure an interface as a multicast loopback interface, the switch automatically disables STP on this interface. The interface then does not support STP configuration commands. After the multicast loopback interface configuration is cancelled, the switch automatically enables STP on the interface.
  • On the switch, only one Eth-Trunk interface can function as the multicast loopback interface. All VPN multicast packets are encapsulated on this interface into public network multicast data packets.
  • The configurations allowed on an Eth-Trunk to be configured as a loopback interface include description, enable snmp trap updown, jumboframe enable, qos phb marking enable, set flow-stat interval, shutdown, traffic-policy (interface view), and trust. If other configurations exist on the Eth-Trunk, the Eth-Trunk cannot be configured as a loopback interface.

  • After an Eth-Trunk is configured as a loopback interface, the Eth-Trunk supports only the following configurations: authentication open ucl-policy enable, description, enable snmp trap updown, jumboframe enable, mixed-rate link enable, qos phb marking enable, set flow-stat interval, shutdown, statistic enable (interface view), traffic-policy (interface view), vcmp disable, and trust.

  • Before disabling an Eth-Trunk interface from working as the multicast loopback interface, delete all member interfaces of the Eth-Trunk interface.
  • If "Warning: ACL resources are insufficient when the physical interface is added to the multicast loopback interface, so the multicast VPN function may be abnormal." is displayed when you add a physical interface to a multicast loopback interface, resources on the multicast loopback interface are occupied by other services. To ensure normal running of services, delete this physical interface from the multicast loopback interface or delete unnecessary configurations, for example, unnecessary traffic policies.
  • If an Eth-Trunk has been configured as a multicast VPN loopback interface, do not use the MIB to perform other service configuration on the Eth-Trunk. Otherwise, the multicast VPN loopback interface will become invalid or the service configuration issued by the MIB may not take effect.

Example

# Configure Eth-Trunk 1 as a multicast loopback interface.

<HUAWEI> system-view
[HUAWEI] interface Eth-Trunk 1
[HUAWEI-Eth-Trunk1] service type multicast-tunnel
Related Topics
Translation
Download
Updated: 2019-10-09

Document ID: EDOC1000178165

Views: 47686

Downloads: 1159

Average rating:
This Document Applies to these Products
Related Documents
Related Version
Share
Previous Next