IPv4 IS-IS Configuration Commands
- Command Support
- adjacency-strict-check enable
- area-authentication-mode
- attached-bit advertise
- attached-bit avoid-learning
- auto-cost enable
- bandwidth-reference (IS-IS)
- bfd all-interfaces (IS-IS)
- bfd all-interfaces enable
- circuit-cost
- circuit default-tag
- cost-style
- default-route-advertise (IS-IS)
- description (IS-IS)
- display default-parameter isis
- display isis cost interface
- display isis bfd interface
- display isis bfd session
- display isis brief
- display isis debug-switches
- display isis error
- display isis graceful-restart status
- display isis interface
- display isis last-peer-change
- display isis lsdb
- display isis mesh-group
- display isis migp-routing
- display isis name-table
- display isis peer
- display isis purge packet
- display isis route
- display isis spf-log
- display isis spf-tree
- display isis statistics
- display isis traffic-eng advertisements
- display isis traffic-eng link
- display isis traffic-eng network
- display isis traffic-eng statistics
- display isis traffic-eng sub-tlvs
- display snmp-agent trap feature-name isis all
- domain-authentication-mode
- filter-policy export (IS-IS)
- filter-policy import (IS-IS)
- flash-flood
- frr (IS-IS)
- frr-policy route
- graceful-restart (IS-IS)
- graceful-restart no-impact-holdtime
- graceful-restart interval
- graceful-restart suppress-sa
- graceful-restart t2-interval
- import-route (IS-IS)
- import-route isis level-1 into level-2
- import-route isis level-2 into level-1
- isis
- isis authentication-mode
- isis bfd
- isis bfd block
- isis bfd enable
- isis bfd static
- isis circuit-level
- isis circuit-type
- isis cost
- isis delay-peer
- isis dis-name
- isis dis-priority
- isis enable
- isis lfa-backup
- isis lsp seq-overflow auto-recover disable
- isis mesh-group
- isis padding-hello
- isis peer-ip-ignore
- isis ppp-negotiation
- isis ppp-osicp-check
- isis purge-lsp auto-protect disable
- isis silent
- isis small-hello
- isis suppress-flapping peer
- isis suppress-flapping peer disable
- isis suppress-flapping peer hold-down
- isis suppress-flapping peer hold-max-cost disable
- isis suppress-reachability
- isis system-id auto-recover disable
- isis tag-value
- isis timer csnp
- isis timer hello
- isis timer holding-multiplier
- isis timer lsp-retransmit
- isis timer lsp-throttle
- is-level
- is-name
- is-name map
- local-mt enable (IS-IS)
- local-mt filter-policy (IS-IS)
- log-peer-change
- loop-free-alternate
- lsp-fragments-extend
- lsp-length
- maximum load-balancing (IS-IS)
- network-entity
- nexthop (IS-IS)
- optional-checksum enable
- preference (IS-IS)
- prefix-priority (IS-IS)
- purge-originator-identification enable
- reset isis all
- reset isis peer
- reset isis suppress-flapping peer
- set-overload
- snmp-agent trap enable feature-name isis
- spf-priority
- spf-slice-size
- summary (IS-IS)
- suppress-flapping peer disable (IS-IS)
- timer lsp-generation
- timer lsp-max-age
- timer lsp-refresh
- timer spf
- virtual-system
Command Support
For details about command support, see the description of each command. If no command support information is provided, all switch models support the command by default.
adjacency-strict-check enable
Function
The adjacency-strict-check enable command enables IS-IS adjacency strict-check.
The undo adjacency-strict-check enable command disables IS-IS adjacency strict-check.
The adjacency-strict-check disable command disables IS-IS adjacency strict-check.
By default, IS-IS adjacency strict-check is disabled when IS-IS establishes neighbor relationships.
Format
adjacency-strict-check enable
undo adjacency-strict-check [ enable ]
adjacency-strict-check disable
Usage Guidelines
Usage Scenario
During the establishment of IS-IS neighbor relationships, if both IPv4 and IPv6 are configured at both ends, both IPv4 and IPv6 neighbors are established. By default, IPv4 and IPv6 share the standard topology. When the faulty link is restored, IPv4 goes Up faster than IPv6. After the IS-IS router receives a message indicating that IPv4 goes Up, it considers that both IPv4 and IPv6 neighbors are established. If IPv6 packets are being transmitted at that time, some of these IPv6 packets are discarded.
To resolve this problem, run the adjacency-strict-check enable command to enable IS-IS adjacency strict-check to ensure that an IS-IS neighbor is established only when both IPv4 and IPv6 go Up.
Prerequisites
You have created an IS-IS process and entered the IS-IS view using the isis command.
Configuration Impact
After you run the adjacency-strict-check enable command on a broadcast network, the basic topology becomes Down if the IP protocol enabled on the local router is different from that on its neighbors.
After you run the adjacency-strict-check enable command on a P2P network, neighbor relationships cannot be established if the IP protocol enabled on the local router is different from that on its neighbors and only the basic topology is available for the local router.
Precautions
undo adjacency-strict-check [ enable ] and undo adjacency-strict-check commands have the same function, enable is just provide convenience for users.
area-authentication-mode
Function
The area-authentication-mode command configures an IS-IS area to authenticate received Level-1 packets (LSPs and SNPs) using the specified authentication mode and password or adds authentication information to Level-1 packets to be sent.
The undo area-authentication-mode command restores the default configuration.
By default, the system neither encapsulates generated Level-1 packets with authentication information nor authenticates received Level-1 packets.
Format
area-authentication-mode { { simple { plain plain-text | [ cipher ] plain-cipher-text } | md5 { [ cipher ] plain-cipher-text | plain plain-text } } [ ip | osi ] | { keychain keychain-name } } [ snp-packet { authentication-avoid | send-only } | all-send-only ]
area-authentication-mode hmac-sha256 key-id key-id { plain plain-text | [ cipher ] plain-cipher-text } [ snp-packet { authentication-avoid | send-only } | all-send-only ]
undo area-authentication-mode
Parameters
Parameter | Description | Value |
---|---|---|
simple | Transmits the password in plain text. NOTICE:
Simple authentication has potential risks. HMAC-SHA256 cipher text authentication is recommended. |
- |
plain plain-text | Specifies the authentication password in plain text.
You can enter only the password in plain text. When you view the configuration
file, the password is displayed in plain text. NOTICE:
If plain is selected, the password is saved in the configuration file in plain text. This brings security risks. It is recommended that you select cipher to save the password in cipher text. |
The value is a string of case-sensitive characters without spaces. The value contains digits and letters. When the authentication mode is simple, the value is a string of 1 to 16 characters. When the authentication mode is md5 or hmac-sha256, the value is a string of 1 to 255 characters. |
cipher plain-cipher-text | Specifies the authentication password in cipher text. You can enter the password in plain or cipher text. When you view the configuration file, the password is displayed in cipher text. By default, the password is in cipher text. | The value is a string of case-sensitive characters without spaces. The value contains digits and letters. When the authentication mode is simple, the value is a string of 1 to 16 characters in plain text or a string of 32 or 48 characters in cipher text. When the authentication mode is md5 or hmac-sha256, the value is a string of 1 to 255 characters in plain text or a string of 20 to 392 characters in cipher text. |
md5 | Transmits the password that is encrypted using MD5. NOTICE:
MD5 authentication has potential risks. HMAC-SHA256 cipher text authentication is recommended. |
- |
ip | Indicates the IP authentication password. This parameter cannot be configured when keychain authentication is used. | - |
osi | Indicates the OSI authentication password. This parameter cannot be configured when keychain authentication is used. When neither osi nor ip is specified, the default parameter osi is used. | - |
keychain keychain-name | Indicates the keychain that changes with time and is encrypted using MD5. This parameter takes effect only when keychain-name is set using the keychain command. | The value is a string of 1 to 47 case-insensitive characters. Except the question mark (?) and space. However, when double quotation marks (") are used around the string, spaces are allowed in the string. |
snp-packet | Authenticates SNPs. | - |
authentication-avoid | Encapsulates generated LSPs but not SNPs with authentication information and authenticates received LSPs but not SNPs. | - |
send-only | Encapsulates generated LSPs and SNPs with authentication information, and authenticates received LSPs but not SNPs. | - |
all-send-only | Encapsulates generated LSPs and SNPs with authentication information, but does not authenticate received LSPs and SNPs. | - |
hmac-sha256 | Encapsulates generated packets with the HMAC-SHA256 authentication and a password encrypted by the HMAC-SHA256 algorithm and authenticates received packets. | - |
key-id key-id | Indicates key ID of the HMAC-SHA256 algorithm. | It is an integer ranging from 0 to 65535. |
Usage Guidelines
Usage Scenario
Generally, the IS-IS packets to be sent are not encapsulated with authentication information, and the received packets are not authenticated. If a user sends malicious packets to attack a network, information on the entire network may be stolen. Therefore, you can configure IS-IS authentication to improve the network security.
The area authentication password is encapsulated into Level-1 IS-IS packets. Only the packets that pass the area authentication can be accepted. Therefore, you can configure IS-IS area authentication to authenticate the Level-1 area.
Precautions
The area-authentication-mode command is valid only on Level-1 or Level-1-2 routers.
By using this command enables IS-IS to discard all the Level-1 LSPs and SNPs whose area authentication passwords are not consistent with the one set by this command. At the same time, IS-IS inserts the configured area authentication password into all the Level-1 routing packets (LSPs and SNPs) sent from the local node. The establishment of the Level-1 neighbor relationship is not affected, regardless of whether the packets pass the area authentication.
The authentication takes effect only on the peer configured with authentication. The peer with no authentication configured can still receive the LSP and SNP packet with the password.
attached-bit advertise
Function
The attached-bit advertise command configures a rule for setting the ATT bit in Link state Protocol Data Units (LSPs).
The undo attached-bit advertise command restores the default setting rule.
By default, the Level-1-2 device sets the ATT bit in LSPs using the default rule.
Parameters
Parameter | Description | Value |
---|---|---|
always | Indicates that the ATT bit is set to 1. | - |
never | Indicates that the ATT bit is set to 0. | - |
Usage Guidelines
Usage Scenario
An ATT bit is a field in link state packets. An ATT bit identifies whether Level-1 area is attached to other areas. A Level-1-2 device sets the ATT bit to 1 to notify the devices in Level-1 area of its attachment to a Level-2 backbone area. After a Level-1 device receives the LSPs carrying the ATT bit 1 from the Level-1-2 device, the Level-1 device generates a route with the same destination address as the default route of the Level-1-2 device. Traffic can be forwarded along this route.
If you want the ATT bit in LSPs to be set to 1, run the attached-bit advertise always command.
- If you want to disable the Level-1 device connected to the Level-1-2 device from advertising default routes when the ATT bit is set to 1, run either of the following commands:
Run the attached-bit advertise never command on the Level-1-2 device to disable the device from sending LSPs with the ATT bit 1.
Run the attached-bit avoid-learning command on the Level-1 device that is connected to the Level-1-2 device.
Running the attached-bit advertise never command applies to all Level-1 devices that receive LSPs with the ATT bit 0. Therefore, it is more convenient.
Precautions
The ATT bit is defined in both Level-1 and Level-2 LSPs, but it can be set to 1 only in Level-1 LSPs. Additionally, only the Level-1-2 device can set the ATT bit. Therefore, running the attached-bit avoid-learning command takes effect only on the Level-1-2 device.
attached-bit avoid-learning
Function
The attached-bit avoid-learning command disables a device from advertising default routes to a routing table when the ATT bit is set to 1.
The undo attached-bit avoid-learning command restores the device to generates default routes when the ATT bit is set to 1.
By default, a device advertises default routes when the ATT bit is set to 1.
Usage Guidelines
An ATT bit is a field in link state packets. An ATT bit identifies whether Level-1 area is attached to other areas. A Level-1-2 device sets the ATT bit to 1 to notify the devices in Level-1 area of its attachment to a Level-2 backbone area. After a Level-1 device receives the LSPs carrying the ATT bit 1 from the Level-1-2 device, the Level-1 device generates a route with the same destination address as the default route of the Level-1-2 device. Traffic can be forwarded along this route.
To prevent the Level-1 device from advertising the default route when the ATT bit is set to 1, run the attached-bit avoid-learning command.
Run the attached-bit advertise never command on the Level-1-2 device to disable the device from sending LSPs with the ATT bit 1.
Run the attached-bit avoid-learning command on the Level-1 device that is connected to the Level-1-2 device.
The difference between the preceding commands lies in that the attached-bit avoid-learning command applies to a specified device.
auto-cost enable
Function
The auto-cost enable command enables IS-IS to automatically calculate the interface cost based on the interface bandwidth.
The undo auto-cost enable command disables IS-IS from automatically calculating the interface cost based on the interface bandwidth.
By default, IS-IS is disabled from automatically calculating the interface cost based on the interface bandwidth.
Parameters
Parameter | Description | Value |
---|---|---|
compatible | Specifies the IS-IS to calculate the cost of an interface based on the bandwidth of the interface automatically in compatible. |
- |
Usage Guidelines
Usage Scenario
After this command is run, if the cost of an IS-IS interface is not set in the interface view and no cost is set in the IS-IS view, the system automatically calculates a cost for the interface.
If the cost style of the system is wide or wide-compatible:
When auto-cost enable command is configured, Interface cost = (Bandwidth-reference/Link-bandwidth) x 10.
The cost style is set by the cost-style command.The Bandwidth-reference is set by the bandwidth-reference command. The Link-bandwidth is the interface bandwidth.
If the cost style of the system is narrow, narrow-compatible or compatible, the cost of each interface is based on the following table.
Cost |
Range of the Interface Bandwidth |
---|---|
60 |
Interface bandwidth =< 10 Mbit/s |
50 |
10 Mbit/s < Interface bandwidth ≤ 100 Mbit/s |
40 |
100 Mbit/s < Interface bandwidth ≤ 155 Mbit/s |
30 |
155 Mbit/s < Interface bandwidth ≤ 622 Mbit/s |
20 |
622 Mbit/s < Interface bandwidth ≤ 2.5 Gbit/s |
10 |
2.5 Gbit/s < Interface bandwidth |
Precautions
The priority of the cost value of the global configured by the circuit-cost command is higher than the auto cost value.
The auto-cost enable command cannot change the cost of the loopback interface.
bandwidth-reference (IS-IS)
Function
The bandwidth-reference command sets the bandwidth reference value that is used in automatic IS-IS interface cost calculation.
The undo bandwidth-reference command restores the default bandwidth reference value that is used in automatic IS-IS interface cost calculation.
By default, the bandwidth reference value is 100 Mbit/s.
Parameters
Parameter | Description | Value |
---|---|---|
value | Specifies the bandwidth reference value used in automatic IS-IS interface cost calculation. | The value is an integer that ranges from 1 to 2147483648, in Mbit/s. |
Usage Guidelines
To make the set link cost of IS-IS routes reflect the actual link cost, configure a proper link cost for all interfaces or enable automatic interface cost calculation. To enable automatic interface cost calculation, set a proper bandwidth reference value.
You can run the bandwidth-reference command to set a proper bandwidth reference value. After automatic interface cost calculation is enabled, and the cost type is wide or wide-compatible, the system calculates the cost of each interface with the following formula: Interface cost = (Bandwidth-reference/Interface bandwidth) x 10. If the interface cost calculated through this formula is greater than 16777214, 16777214 is used as the interface cost for route calculation. That is, the interface cost will never be greater than 16777214.
The bandwidth bandwidth command can only set an interface bandwidth obtained by the NMS from the MIB. It can not change an interface actual bandwidth and interface cost .
After the auto-cost enable command enables automatic IS-IS interface cost calculation, the system automatically calculates the interface cost based on the bandwidth reference value set using the bandwidth-reference command.
PrecautionsThe bandwidth reference value set using the bandwidth-reference command takes effect only when the cost style is wide or wide-compatible. In this case, the interface cost is calculated using the following formula:
Interface cost = (Bandwidth-reference/Interface bandwidth) × 10.
If the cost style of the system is narrow, narrow-compatible or compatible, the cost of each interface is based on the following table.
Table 7-89 Relationship between the IS-IS interface cost and the bandwidthCost
Range of the Interface Bandwidth
60
Interface bandwidth =< 10 Mbit/s
50
10 Mbit/s < Interface bandwidth =< 100 Mbit/s
40
100 Mbit/s < Interface bandwidth =< 155 Mbit/s
30
155 Mbit/s < Interface bandwidth =< 622 Mbit/s
20
622 Mbit/s < Interface bandwidth =< 2.5 Gbit/s
10
2.5 Gbit/s < Interface bandwidth
bfd all-interfaces (IS-IS)
Function
The bfd all-interfaces command sets values for BFD session parameters used in BFD for IS-IS.
The undo bfd all-interfaces command restores the default values of BFD session parameters used in BFD for IS-IS.
By default, the minimum intervals for receiving and sending BFD packets are 1000 ms and the detection time multiplier is 3.
Format
bfd all-interfaces { min-rx-interval receive-interval | min-tx-interval transmit-interval | detect-multiplier multiplier-value | frr-binding } *
undo bfd all-interfaces { min-rx-interval [ receive-interval ] | min-tx-interval [ transmit-interval ] | detect-multiplier [ multiplier-value ] | frr-binding } *
Parameters
Parameter | Description | Value |
---|---|---|
min-rx-interval receive-interval | Specifies the minimum interval for receiving BFD packets from the peer end. The interval for receiving BFD packets between determines the BFD session detection time. On an unstable link, a smaller receive interval may result in BFD session flapping. To prevent BFD session flapping, increase the receive interval. | The value is an integer, in milliseconds. If
the MPU is equipped with the ES0D00FSUA00 or the MPU is EH1D2SRUDC00/EH1D2SRUDC01, the value ranges from 3 to 1000. Otherwise, the value ranges from
100 to 1000.By default, the minimum interval for receiving
BFD packets is 10 ms when the MPU is equipped with the ES0D00FSUA00 or the MPU is EH1D2SRUDC00/EH1D2SRUDC01; otherwise, the minimum interval for receiving BFD packets is 1000
ms.
NOTE:
When the MPU is the EH1D2SRUDC00 or EH1D2SRUDC01, you need to first run the detect-engine enable command in the system view so that the value range is 3 to 1000. If the detect-engine enable command is not used first, the value range is 100 to 1000. |
min-tx-interval transmit-interval | Specifies the minimum interval for transmitting BFD packets to the peer end. The interval for transmitting BFD packets determines the BFD session detection time. On a stable link, you can increase the transmit interval to prevent frequent link status detection. | The value is an integer, in milliseconds. If
the MPU is equipped with the ES0D00FSUA00 or the MPU is EH1D2SRUDC00/EH1D2SRUDC01, the value ranges from 3 to 1000. Otherwise, the value ranges from
100 to 1000.By default, the minimum interval for receiving
BFD packets is 10 ms when the MPU is equipped with the ES0D00FSUA00 or the MPU is EH1D2SRUDC00/EH1D2SRUDC01; otherwise, the minimum interval for receiving BFD packets is 1000
ms.
NOTE:
When the MPU is the EH1D2SRUDC00 or EH1D2SRUDC01, you need to first run the detect-engine enable command in the system view so that the value range is 3 to 1000. If the detect-engine enable command is not used first, the value range is 100 to 1000. |
detect-multiplier multiplier-value | Specifies the local detection multiplier. On a stable link, you can increase the BFD detection multiplier to prevent frequent link status detection. | The value is an integer that ranges from 3 to 50. The default value is 3. |
frr-binding | Binds the BFD session status to IS-IS Auto FRR. When BFD detects a link fault on an interface, the BFD session goes Down, triggering FRR on the interface. Then traffic is switched from the faulty link to the backup link to ensure traffic forwarding. | - |
Usage Guidelines
Usage Scenario
During the establishment of a BFD session, you can adjust the interval for transmitting BFD packets, interval for receiving BFD packets, and local detection multiplier according to network and performance requirements.
Precautions
The value of receive-interval is obtained by negotiating the local min-rx-interval value and the remote min-tx-interval value. If a router does not receive any BFD packet from its peer in the receive-interval × multiplier-value period, the router advertises that its peer is Down.
If only parameters of a BFD session are set but the bfd all-interfaces enable command is not used, the BFD session cannot be set up.
The BFD priority of the interface is higher than the BFD priority of the process. If BFD of the interface is enabled, the BFD session is set up based on the BFD parameters on the interface.
bfd all-interfaces enable
Function
The bfd all-interfaces enable command enables BFD in an IS-IS process.
The undo bfd all-interfaces enable command disables BFD in an IS-IS process.
By default, BFD is disabled in an IS-IS process.
Usage Guidelines
Usage Scenario
If global BFD is not enabled, you can configure IS-IS BFD but cannot set up the BFD session. Before establishing BFD sessions, you need to enable BFD on the two ends.
Precautions
When BFD is enabled in the process using the bfd all-interfaces enable command, the interface does not set up a BFD session in the following cases:
The isis bfd block command is used on the interface. The command suppresses the BFD capability of the interface. To set up a session on the interface, run the undo isis bfd block command.
When the isis bfd static command is used on the interface, the interface does not set up the BFD session. To set up a session on the interface, run the undo isis bfd static command.
The BFD priority of the interface is higher than the BFD priority of the process. If BFD of the interface is enabled, a BFD session is set up based on the BFD parameters on the interface.
circuit-cost
Function
The circuit-cost command sets the link cost for all IS-IS interfaces during SPF calculation.
The undo circuit-cost command deletes the configured link cost of all IS-IS interfaces.
By default, no link cost is set for IS-IS interfaces.
Format
circuit-cost { cost | maximum } [ level-1 | level-2 ]
undo circuit-cost [ cost | maximum ] [ level-1 | level-2 ]
Parameters
Parameter | Description | Value |
---|---|---|
cost | Specifies the interface cost used in SPF calculation. | If the IS-IS cost style is wide or wide-compatible, the cost of imported routes ranges from 1 to 16777214; otherwise, the cost ranges from 1 to 63. |
maximum | Sets the link cost of IS-IS interfaces to 16777215. NOTE:
You can configure this parameter only when the IS-IS cost style is wide or wide-compatible. After the interface cost is set to 16777215, the neighbor TLV generated on the link can only be used to transmit TE information but cannot be used for route calculation. |
- |
level-1 | Specifies the link cost for all Level-1 interfaces. If no level is specified, the link cost is set for Level-1-2 interfaces. | - |
level-2 | Specifies the link cost for all Level-2 interfaces. If no level is specified, the link cost is set for Level-1-2 interfaces. | - |
Usage Guidelines
Usage Scenario
- All traffic is forwarded along the optimal path, resulting in load unbalance.
- If the optimal path is intermittently disconnected, traffic is still forwarded along the optimal path, resulting in traffic loss.
To solve the preceding problems, run the circuit-cost command to change the cost of all IS-IS interfaces so that traffic can be forwarded along different physical links.
Precautions
The isis cost command takes precedence over the circuit-cost command. The circuit-cost command cannot change the cost of loopback interfaces.
Changing the link cost of interfaces will cause routes of the entire network to be recalculated and change the forwarding path of traffic.
circuit default-tag
Function
The circuit default-tag command sets the administrative tag value for all interfaces in an IS-IS process.
The undo circuit default-tag command restores the default administrative tag value for all interfaces in an IS-IS process.
By default, the administrative tag value of all IS-IS interfaces is 0.
Format
circuit default-tag tag [ level-1 | level-2 ]
undo circuit default-tag [ tag ] [ level-1 | level-2 ]
Parameters
Parameter | Description | Value |
---|---|---|
tag | Specifies the administrative tag value for all interfaces in an IS-IS process. | The value is an integer that ranges from 1 to 4294967295. |
level-1 | Specifies the administrative tag value for all Level-1 interfaces in an IS-IS process. If no interface level is specified, the administrative tag values of Level-1 and Level-2 interfaces are set. | - |
level-2 | Specifies the administrative tag value for all Level-2 interfaces in an IS-IS process. If no interface level is specified, the administrative tag values of Level-1 and Level-2 interfaces are set. | - |
Usage Guidelines
Usage Scenario
The administrative tag carries management information about IP address prefixes to control the import of routes of different levels and areas. You can use the administrative tag to control the advertisement of IP address prefixes in an IS-IS routing domain to simplify route management.
The circuit default-tag command allows you to set the administrative tag value for all routes in an IS-IS process. You can filter routes based on the configured administrative tag value.
When the cost style of IS-IS is narrow or narrow-compatible, the administrative tag value is neither advertised nor takes effect in the LSP.
When the cost style of IS-IS is wide, wide-compatible, or compatible, the administrative tag value is advertised in the LSP.
Precautions
The value of the administrative tag configured through thecircuit default-tag command is the global administrative tag. The priority of the interface administrative tag configured by the isis tag-value command is higher than the priority of the global administrative tag.
cost-style
Function
The cost-style command sets the cost style of routes received and sent by an IS-IS device.
The undo cost-style command restores the default cost style of routes received and sent by an IS-IS device.
By default, the cost style of routes received and sent by an IS-IS device is narrow.
Format
cost-style { narrow | wide | wide-compatible | { compatible | narrow-compatible } [ relax-spf-limit ] }
undo cost-style
Parameters
Parameter | Description | Value |
---|---|---|
narrow | Configures an IS-IS device to receive and send only routes with cost style narrow. When the cost style is narrow, the cost of routes ranges from 1 to 63. | - |
wide | Configures an IS-IS device to receive and send only routes with cost style wide. When the cost style is wide, the cost of routes ranges from 1 to 16777215. | - |
wide-compatible | Configures an IS-IS device to receive routes with cost style narrow or wide and sent only routes with cost style wide. | - |
compatible | Configures an IS-IS device to receive and send routes with cost style narrow or wide. | - |
narrow-compatible | Configures an IS-IS device to receive routes with cost style narrow or wide and sent only routes with cost style narrow. | - |
relax-spf-limit | Configures an IS-IS device to receive routes with cost
higher than 1023. If this parameter is specified, there is no restriction on the link costs of interfaces or route costs. The cost of a received route is the actual cost. If this parameter is not specified,
the following situations occur:
|
- |
Usage Guidelines
Usage Scenario
By default, the cost style of IS-IS routes is narrow, indicating that only routes with the cost ranging from 1 to 63 can be received and sent. LSPs carrying TE information when IS-IS is applied to MPLS TE or LSPs carrying tag information to be filtered by a routing policy cannot be flooded when the cost style is narrow. The cost-style command can be used to change the cost style of IS-IS routes so that they can be transmitted successfully.
To implement extended IS-IS functions, setting the cost style of IS-IS routes to wide is recommended.
Precautions
When the cost style of a route is changed from wide to narrow, transmission of the route may be interrupted.
If you want to change the cost style of IS-IS routes, running the command while configuring basic IS-IS functions is recommended. If the cost style of IS-IS routes is changed during network operation, the IS-IS process is restarted and neighbors are disconnected.
default-route-advertise (IS-IS)
Function
The default-route-advertise command configures IS-IS devices to generate default routes.
The undo default-route-advertise command disables IS-IS devices from generating default routes.
By default, IS-IS devices do not generate default routes.
Format
default-route-advertise [ always | match default | route-policy route-policy-name ] [ cost cost | tag tag | [ level-1 | level-1-2 | level-2 ] ] * [ avoid-learning ]
undo default-route-advertise
Parameters
Parameter | Description | Value |
---|---|---|
always | Configures an IS-IS device to unconditionally advertise default routes with itself as the next hop. | - |
match default | Advertises a default route through an LSP if the default route is generated by other routing protocols or other IS-IS processes in the routing table. If this default route is deleted from the routing table, it is not advertised through an LSP. | - |
route-policy route-policy-name | Specifies the name of a route-policy. A Level-1-2 device advertises default routes to the IS-IS routing domain only when there are external routes matching the route-policy in the routing table of the device. This prevents routing blackhole when link faults make some important external routes unavailable but default routes are still advertised. This route-policy does not affect external route import in IS-IS. | The name is a string of 1 to 40 case-sensitive characters, with spaces not supported. When double quotation marks are used around the string, spaces are allowed in the string. |
cost cost | Specifies the cost of default routes. | The value is an integer. The value range varies according to the cost style. When the cost style is narrow, narrow-compatible, or compatible, the value ranges from 0 to 63. When the cost style is wide or wide-compatible, the value ranges from 0 to 4261412864. |
tag tag | Specifies the tag value of advertised default routes. Advertised LSPs carry the tag value only when the IS-IS cost style is wide, wide-compatible, or compatible. | The value is an integer that ranges from 1 to 4294967295. |
level-1 | Sets the level of default routes to Level-1. If no level is specified, Level-2 default routes are generated by default. | - |
level-2 | Sets the level of default routes to Level-2. If no level is specified, Level-2 default routes are generated by default. | - |
level-1-2 | Sets the level of default routes to Level-1-2. If no level is specified, Level-2 default routes are generated by default. | - |
avoid-learning | Prevents an IS-IS process from learning default routes or adding them to the routing table. If existing default routes in the routing table are active, set the default route that needs to be added to the routing table to inactive. | - |
Usage Guidelines
Usage Scenario
Configure a boundary router in the IS-IS domain to advertise default routes to the IS-IS domain.
Configure a boundary router in the IS-IS domain to import routes from the other routing domains to the IS-IS domain.
The first method is simpler, because the routers in the IS-IS domain do not need to learn routes imported form the other routing protocols.
Precautions
If always is configured on multiple devices within the same area, a routing loop may occur.
After this command is run on an IS-IS router, all traffic in an IS-IS domain will be forwarded by this IS-IS router to a destination outside the domain. Compared with configuring a static default route on each router in an IS-IS domain, running this command simplifies configurations, because this command only needs to be run on a boundary router in the IS-IS domain. In addition, you can specify different parameters to allow default routes to be advertised in different ways.
If this command is run on a Level-1 router, the router advertises default routes only to the Level-1 area.
Creating a route-policy before it is referenced is recommended. By default, nonexistent route-policies cannot be referenced using the command. If the route-policy nonexistent-config-check disable command is run in the system view and a nonexistent route-policy is referenced using the current command, an ABR advertises the default route to the IS-IS domain as long as the local routing table contains external routes.
description (IS-IS)
Function
The description command configures a description for an IS-IS process.
The undo description command deletes the description of an IS-IS process.
By default, no description is configured for an IS-IS process.
Parameters
Parameter | Description | Value |
---|---|---|
description | Configures a description for an IS-IS process. | The value is a string of 1 to 80 case-sensitive characters. Spaces are supported. |
Usage Guidelines
Configuring descriptions for IS-IS processes helps identify and maintain IS-IS processes.
IS-IS process description that is configured through the description command is not advertised in an LSP.
IS-IS process description that is configured through the is-name command is advertised in an LSP.
PrecautionsIf you run the description command multiple times, only the latest configuration takes effect.
display default-parameter isis
Usage Guidelines
You can run the display default-parameter isis command to check the default IS-IS configuration in IS-IS initialization.
Example
# Display the default IS-IS configuration.
<HUAWEI> display default-parameter isis
Default Configurations For Process
----------------------------------
Cost-Style : Narrow
Circuit-Cost <IPv4> : L1 10 L2 10
Circuit-Cost <IPv6> : L1 10 L2 10
IS-Level : L12
LSP-Originate-Length : 1497
LSP-Receive-Length : 1497
LSP-Max-Age <s> : 1200
LSP-Generation-IntelliTimer <s,ms,ms> : L1 Max 2 Init 0 Incr 0
L2 Max 2 Init 0 Incr 0
LSP-Refresh-Interval <s> : 900
Preference : IPv4 15 IPv6 15
SPF-IntelliTimer <s,ms,ms> : Max 5 Init 50 Incr 200
Default Configurations For Interfaces
-------------------------------------
Circuit-Level : L12
CSNP-Interval <s> : L1 10 L2 10
Cost <IPv4> : L1 10 L2 10
Cost <IPv6> : L1 10 L2 10
DIS-Priority : L1 64 L2 64
Hello-Interval <s> : L1 10 L2 10
Holding-Multiplier : L1 3 L2 3
LSP-Retransmit <s> : 5
LSP-Throttle <ms> : 50 count 10
PPP-Negotiation : 3-Way
Peer Suppress-Flapping <s> : Detect-Interval 60
Resume-Interval 120
Threshold 10
Item |
Description |
---|---|
Default Configurations For Process |
Default configuration of an IS-IS process. |
Cost-Style |
IS-IS cost style:
|
Circuit-Cost <IPv4> |
Cost of all IS-IS IPv4 interfaces. To set the cost of IS-IS IPv4 interfaces, run the circuit-cost command. |
Circuit-Cost <IPv6> |
Cost of all IS-IS IPv6 interfaces. To set the cost of IS-IS IPv6 interfaces, run the ipv6 circuit-cost command. |
IS-Level |
Level of an IS-IS device:
|
LSP-Originate-Length |
Maximum length of an LSP generated by IS-IS. To set the maximum length of an LSP generated by IS-IS, run the lsp-length command. |
LSP-Receive-Length |
Maximum length of an LSP received by IS-IS. To set the maximum length of an LSP received by IS-IS, run the lsp-length command. |
LSP-Max-Age <s> |
Maximum lifetime of an LSP generated by an IS-IS process, in seconds. To set the maximum lifetime of an LSP generated by an IS-IS process, run the timer lsp-max-age command. |
LSP-Generation-IntelliTimer <s,ms,ms> |
Delay in generating LSPs:
|
LSP-Refresh-Interval <s> |
Interval for refreshing LSPs, in seconds. To set the interval for refreshing LSPs, run the timer lsp-refresh command. |
Preference |
Protocol preference of IS-IS routes. To set the protocol preference of IS-IS routes, run the preference (IS-IS) command. |
SPF-IntelliTimer <s,ms,ms> |
Delay in SPF calculation:
|
Default Configurations For Interfaces |
Default configuration of IS-IS interfaces. |
Circuit-Level |
IS-IS interface level. To set the IS-IS interface level, run the isis circuit-level command. |
CSNP-Interval <s> |
Interval for sending CSNPs, in seconds. To set the interval for sending CSNPs, run the isis timer csnp command. |
Cost <IPv4> |
Cost of IS-IS interfaces in an IPv4 topology. To set the cost of IS-IS interfaces in an IPv4 topology, run the isis cost command. |
Cost <IPv6> |
Cost of IS-IS interfaces in an IPv6 topology. To set the cost of IS-IS interfaces in an IPv6 topology, run the isis ipv6 cost command. |
DIS-Priority |
Priority for DIS election. To set the priority for DIS election, run the isis dis-priority command. |
Hello-Interval <s> |
Interval for sending Hello packets, in seconds. To set the interval for sending Hello packets, run the isis timer hello command. |
Holding-Multiplier |
Number of consecutive Hello packets that are not received before the neighbor is declared Down. To set this value, run the isis timer holding-multiplier command. |
LSP-Retransmit <s> |
Interval for retransmitting LSPs on a P2P link, in seconds. To set the retransmit interval, run the isis timer lsp-retransmit command. |
LSP-Throttle <ms> |
Interval for sending LSPs or CSNPs, in milliseconds, and number of LSPs or CSNPs that are sent each time. To set the two values, run the isis timer lsp-throttle command. |
PPP-Negotiation |
PPP negotiation type during the establishment of IS-IS adjacencies:
|
Peer Suppress-Flapping <s> |
Detection parameters for IS-IS neighbor relationship flapping
suppression on an interface:
|
display isis cost interface
Function
The display isis cost interface command displays costs of an interface and how they are generated.
Parameters
Parameter | Description | Value |
---|---|---|
interface-type interface-number | Specifies the type and number of an interface. | - |
Usage Guidelines
You can run the display isis cost interface command to check costs of an IS-IS interface, including the link cost and route prefix cost that the interface uses in each topology, and how the costs are generated.
Example
# Display costs of VLANIF 100 and how they are generated.
<HUAWEI> display isis cost interface vlanif 100
Interface: Vlanif 100
Level-2 interface cost
Topology base(0):
Link effective cost: 10(A) enabled by circuit cost
IP prefix effective cost:
10.10.7.0/24 cost: 10 enabled by circuit cost
10.10.8.0/24 cost: 10 enabled by circuit cost
10.10.9.0/24 cost: 10 enabled by circuit cost
Topology red(7):
Link effective cost: 87(A) enabled by circuit cost
IP prefix effective cost:
10.10.7.0/24 cost: 87 enabled by circuit cost
10.10.8.0/24 cost: 87 enabled by circuit cost
10.10.9.0/24 cost: 87 enabled by circuit cost
Flags: R-Relative cost A-Absolute cost
Item |
Description |
---|---|
Interface |
Type and ID of an interface on which IS-IS is enabled |
Link effective cost |
Link cost |
IP prefix effective cost |
Cost of an IPv4 route |
cost |
Interface cost |
enabled by circuit cost |
Default cost or cost configured in the isis cost command |
enabled by auto cost |
Cost configured in the auto-cost enable command |
enabled by global cost |
Cost configured in the circuit cost command |
enabled by igp ldp |
The interface cost is configured by LDP |
enabled by rui cost |
Cost that inherits the cost of the RUI route |
enabled by silent cost |
Cost configured in the isis silent command in the interface view |
enabled by tunnel cost |
Cost generated after the TE Tunnel is configured |
IPv6 prefix effective cost |
Cost of an IPv6 route |
Flags |
Cost flag
|
display isis bfd interface
Function
The display isis bfd interface command displays information about BFD-enabled IS-IS interfaces.
Parameters
Parameter | Description | Value |
---|---|---|
process-id | Specifies an IS-IS process ID. | The value is an integer that ranges from 1 to 65535. |
Usage Guidelines
BFD can provide millisecond-level fault detection. It can work with IS-IS to fast detect faults on neighboring devices and instruct IS-IS to recalculate routes for correct packet forwarding. You can run the display isis bfd interface command to check information about BFD-enabled IS-IS interfaces.
Example
# Display information about BFD-enabled IS-IS interfaces.
<HUAWEI> display isis 1 bfd interface
BFD information of interface for ISIS(1) ----------------------------------------- Interface BFD.State Min-Tx Min-Rx Mul Vlanif101 enable 1000 1000 3 Total interfaces: 1 Total bfd enabled interfaces: 1
Item |
Description |
---|---|
Interface |
BFD-enabled IS-IS interface. To enable BFD on an IS-IS interface, run the bfd all-interfaces enable or isis bfd enable command. |
BFD.State |
BFD status on the IS-IS interface:
|
Min-Tx |
Minimum interval for transmitting BFD packets. To set the minimum interval, run the bfd all-interfaces (IS-IS) or isis bfd command. |
Min-Rx |
Minimum interval for receiving BFD packets. To set the minimum interval, run the bfd all-interfaces (IS-IS) or isis bfd command. |
Mul |
Local detection multiplier. To set the local detection multiplier, run the bfd all-interfaces (IS-IS) or isis bfd command. |
display isis bfd session
Format
display isis [ process-id | vpn-instance vpn-instance-name ] bfd session { all | peer ip-address | interface interface-type interface-number }
Parameters
Parameter | Description | Value |
---|---|---|
process-id | Specifies an IS-IS process ID. | The value is an integer that ranges from 1 to 65535. |
vpn-instance vpn-instance-name | Specifies the IS-IS multi-instance process in a specified VPN instance. | The value must be an existing VPN instance name. |
all | Specifies all IS-IS interfaces in the IS-IS process. | - |
peer ip-address | Specifies the IP address of a neighbor. | The value is in dotted decimal notation. |
interface interface-type interface-number | Specifies the interface on which BFD session statistics need to be collected. | - |
Usage Guidelines
BFD can provide millisecond-level fault detection. It can work with IS-IS to fast detect faults on neighboring devices and instruct IS-IS to recalculate routes for correct packet forwarding. You can run the display isis bfd session command to check information about dynamic BFD sessions.
Example
# Display information about dynamic BFD sessions.
<HUAWEI> display isis bfd session all
BFD session information for ISIS(1)
-----------------------------------
Peer System ID : 0000.0000.0002 Interface : Vlanif10
TX : 1000 BFD State : up Peer IP Address : 10.1.1.2
RX : 1000 LocDis : 8194 Local IP Address: 10.1.1.1
Multiplier : 3 RemDis : 8197 Type : L1
Diag : No diagnostic information
Total BFD session(s) : 1
Item |
Description |
---|---|
Peer System ID |
System ID of the neighbor. |
Interface |
Local IS-IS interface connected to the neighbor. |
TX |
Negotiated minimum interval for transmitting BFD packets. |
BFD State |
BFD session status: Up or Down. |
Peer IP Address |
IP address of the remote IS-IS interface. |
RX |
Negotiated minimum interval for receiving BFD packets. |
LocDis |
Local discriminator dynamically assigned by BFD. |
Local IP Address |
IP address of the local IS-IS interface. |
Multiplier |
Remote detection multiplier. |
RemDis |
Remote identifier dynamically assigned by BFD. |
Type |
Level of the neighbor:
|
Diag |
Diagnostic information. "No diagnostic information" indicates that BFD runs properly and no diagnostic information is displayed. |
Total BFD session (s) |
Total number of BFD sessions. |
display isis brief
Format
display isis brief [ process-id | vpn-instance vpn-instance-name ]
display isis [ process-id ] brief
Parameters
Parameter | Description | Value |
---|---|---|
process-id | Display brief information about a specified IS-IS process. | The value is an integer that ranges from 1 to 65535. |
vpn-instance vpn-instance-name | Display brief information about the IS-IS multi-instance process in a specified VPN instance. | The value must be an existing VPN instance name. |
Example
# Display brief information about IS-IS.
<HUAWEI> display isis brief
ISIS Protocol Information for ISIS(1)
-------------------------------------
SystemId: 0000.0000.0001 System Level: L1
Area-Authentication-mode: NULL
Domain-Authentication-mode: NULL
Ipv6 is not enabled
ISIS is in starting status
ISIS is in protocol hot standby state: Real-Time Backup
Flush Protect Mode: False
Interface: (Vlanif10)
Cost: L1 10 L2 10 Ipv6 Cost: L1 10 L2 10
State: IPV4 Down IPV6 Down
Type: BROADCAST MTU: 1497
Priority: L1 64 L2 64
Timers: Csnp: L1 10 L2 10 ,Retransmit: L12 5 , Hello: L1 10 L2 10 ,
Hello Multiplier: L1 3 L2 3 , LSP-Throttle Timer: L12 50
Item |
Description |
---|---|
ISIS Protocol Information for ISIS(1) |
Information about IS-IS process 1. To create an IS-IS process, run the isis command. |
SystemId |
System ID of the current IS-IS device. To set the system ID, run the network-entity command. |
System Level |
Level of an IS-IS device:
|
Area-Authentication-mode |
IS-IS area authentication mode. To set the IS-IS area authentication mode and password, run the area-authentication-mode command. |
Domain-Authentication-mode |
IS-IS routing domain authentication mode. To set the IS-IS domain authentication mode and password, run the domain-authentication-mode command. |
Ipv6 is not enabled |
IPv6 is not enabled in the IS-IS process. |
ISIS is in starting status |
IS-IS is running. |
ISIS is in protocol hot standby state: Real-Time Backup |
IS-IS hot standby is real-time backup. |
Flush Protect Mode |
Indicates whether the process works in purge LSP protection mode. |
Interface |
Interface on which IS-IS is enabled. To enable IS-IS on an interface, run the isis enable command. |
Cost |
Cost of IS-IS IPv4 interfaces. To set the cost of IS-IS IPv4 interfaces, run the circuit-cost or isis cost command. |
Ipv6 Cost |
Cost of IS-IS IPv6 interfaces. To set the cost of IS-IS IPv6 interfaces, run the ipv6 circuit-cost or isis ipv6 cost command. |
State |
Status of the IS-IS interface. |
Type |
Network type of the IS-IS interface: P2P or broadcast. To set the network type of an IS-IS interface, run the isis circuit-type command. |
MTU |
MTU of the IS-IS interface. |
Priority |
Priority of the IS-IS interface.
NOTE:
When the current interface is a virtual link interface, the priority field is not displayed. |
Timers |
IS-IS timer. |
Csnp |
Interval for sending CSNPs. To set the interval for sending CSNPs, run the isis timer csnp command. |
Retransmit |
Interval for retransmitting LSPs on a P2P link. To set the retransmit interval, run the isis timer lsp-retransmit command. |
Hello |
Interval for sending Hello packets. To set the interval for sending Hello packets, run the isis timer hello command. |
Hello Multiplier |
Number of consecutive Hello packets that are not received before the neighbor is declared Down. To set this value, run the isis timer holding-multiplier command. |
LSP-Throttle Timer |
Interval for sending LSPs or CSNPs and number of LSPs or CSNPs that are sent each time. To set the two values, run the isis timer lsp-throttle command. |
display isis debug-switches
Parameters
Parameter | Description | Value |
---|---|---|
process-id | Displays the current status of IS-IS debugging of specified IS-IS process ID. If process-id is not specified, display the current status of IS-IS debugging of all IS-IS process. |
The value is an integer that ranges from 1 to 65535. |
display isis error
Function
The display isis error command displays statistics about error LSPs and Hello packets that are received by IS-IS interfaces or processes.
Format
display isis error [ { process-id | vpn-instance vpn-instance-name } [ interface ] ]
display isis error interface interface-type interface-number
Parameters
Parameter | Description | Value |
---|---|---|
process-id | Displays statistics about error packets received by a specified IS-IS process. | The value is an integer that ranges from 1 to 65535. |
vpn-instance vpn-instance-name | Displays statistics about error packets received by the IS-IS process in a specified VPN instance. | The value must be an existing VPN instance name. |
interface | Displays statistics about error packets received on all interfaces in a specified IS-IS process or VPN instance. |
- |
interface-type interface-number | Displays statistics about error packets received by a specified interface. | - |
Usage Guidelines
You can run the display isis error command to check statistics about error LSPs and Hello packets that are received by IS-IS interfaces or processes.
Example
# Display statistics about error LSPs and Hello packets received on all interfaces in IS-IS process 1.
<HUAWEI> display isis error 1
Statistics of error packets for ISIS(1)
---------------------------------------
LSP packet errors:
Longer LSP : 0 Smaller LSP : 0
Mismatched Level : 0 Invalid Sysid : 0
Zero Sequence Number : 0 Illegal IS Type : 0
Zero Checksum : 0 Incorrect Checksum : 0
Bad Authentication : 0 Bad Auth Count : 0
More Protocol TLV : 0 Bad Nbr TLV : 0
Bad Extended IS TLV : 0 Bad IF Addr TLV : 0
Bad Reach TLV : 0 Bad Inter Domain TLV : 0
Mismatched Area Id(L1) : 0 Bad TLV Length : 0
Bad Alias TLV : 0 Bad Area TLV : 0
Bad SRLG TLV : 0 Unknown Adjacency : 0
Bad Protocol ID : 0 Bad Version : 0
Zero Lifetime : 0 Bad Ext Reach TLV : 0
Bad TE Router ID TLV : 0 Bad TE Sub TLV : 0
Hello packet errors:
Bad Packet Length : 0 Reserved CircType : 0
Repeated System ID : 0 Bad Circuit Type : 0
Longer packet : 0 More Area Addr : 0
Longer Area Addr : 0 Bad Area Addr TLV : 0
More IF Addr : 0 Bad Formatted IF TLV : 0
More Nbr SNPA(LAN) : 0 Invalid Sysid : 0
Bad TLV Length : 0 Zero HoldingTime : 0
Unusable IP Addr : 0 Repeated IPv4 Addr : 0
Mismatched Area Addr(L1): 0 Mismatched Proto : 0
SNPA Conflicted(LAN) : 0 Mismatched Level : 0
Mismatched Max Area Addr: 0 Bad Authentication : 0
More Auth TLV : 0 3-Way Option Error(P2P) : 0
No Area Addr TLV : 0 Bad Protocol ID : 0
Bad Version : 0 Invalid IPv6 Addr : 0
More IPv6 IF Addr : 0 Duplicate IPv6 Addr : 0
More Optional Checksum : 0 Bad Optional Checksum : 0
--------------------------------------------------------------------
Item |
Description |
---|---|
LSP packet errors |
LSP errors. |
Longer LSP |
The LSP length is greater than the value set using the lsp-length receive command. |
Smaller LSP |
The LSP header length is smaller than the fixed length. |
Mismatched Level |
The level of received LSPs mismatches the local IS-IS level. |
Invalid Sysid |
The system ID in an LSP is invalid. |
Zero Sequence Number |
The sequence number of an LSP is 0. |
Illegal IS Type |
The IS type is invalid. |
Zero Checksum |
The checksum of an LSP is 0. |
Incorrect Checksum |
The checksum of an LSP is incorrect. |
Bad Authentication |
The authentication field of an LSP is incorrect. |
Bad Auth Count |
The number of authentication fields carried in an LSP is incorrect, that is, it is greater than 1. |
More Protocol TLV |
The number of protocol TLVs in an LSP is greater than 1. |
Bad Nbr TLV |
The neighbor TLV is incorrect. |
Bad Extended IS TLV |
The extended IS TLV is incorrect. |
Bad IF Addr TLV |
The interface address TLV is incorrect. |
Bad Reach TLV |
The reachability TLV is incorrect. |
Bad Inter Domain TLV |
The inter-domain TLV is incorrect. The correct TLV is 0x83. |
Mismatched Area Id(L1) |
Mismatched Level-1 area ID. |
Bad TLV Length |
The TLV length is incorrect. |
Bad Alias TLV |
The Alias TLV is incorrect. |
Bad Area TLV |
The area TLV is incorrect. |
Bad SRLG TLV |
The SRLG TLV is incorrect. |
Unknown Adjacency |
LSPs are received from unknown adjacency. |
Bad Protocol ID |
The protocol ID is incorrect. |
Bad Version |
The version is incorrect. |
Zero Lifetime |
The remaining lifetime of an LSP is 0. |
Bad Ext Reach TLV |
The Ext Reach TLV is incorrect. |
Bad TE Router ID TLV |
The TE Router ID TLV is incorrect. |
Bad TE Sub TLV |
The TE sub-TLV is incorrect. |
Hello packet errors |
Hello packet errors. |
Bad Packet Length |
The Hello packet length is incorrect. |
Reserved CircType |
The reserved link type is incorrect. |
Repeated System ID |
The system ID is repeated. |
Bad Circuit Type |
The link type is incorrect. |
Longer packet |
The Hello packet length is greater than the larger value between the interface MTU and the value set using the lsp-lengthoriginate command. |
More Area Addr |
Area addresses are superfluous. |
Longer Area Addr |
The area address is too long. |
Bad Area Addr TLV |
The area address TLV is incorrect. |
More IF Addr |
Interface addresses are superfluous. |
Bad Formatted IF TLV |
The format of the interface TLV is incorrect. |
More Nbr SNPA(LAN) |
Sub-network Points of Attachment (SNPAs) of a neighbor on a broadcast network are superfluous. |
Invalid Sysid |
The system ID length field is not 0 or 6. |
Bad TLV Length |
The TLV length is incorrect. |
Zero HoldingTime |
The neighbor holdtime is 0. |
Unusable IP Addr |
The IP address is on a different network segment than the peer end. |
Repeated IPv4 Addr |
The IPv4 address is repeated. |
Mismatched Area Addr(L1) |
Mismatched Level-1 area address. |
Mismatched Proto |
Mismatched protocol. |
SNPA Conflicted(LAN) |
Conflicting SNPA on a broadcast network. |
Mismatched Level |
The level of received Hello packets mismatches the local IS-IS level. |
Mismatched Max Area Addr |
The maximum area address is incorrect. |
Bad Authentication |
The authentication field of a Hello packet is incorrect. |
More Auth TLV |
Authentication TLVs are superfluous. |
3-Way Option Error(P2P) |
3-way information is incorrect. |
No Area Addr TLV |
The received Hello packet has no area address TLV. |
Bad Protocol ID |
The protocol ID is incorrect. |
Bad Version |
The version is incorrect. |
Invalid IPv6 Addr |
An IPv6 address is invalid. |
More IPv6 IF Addr |
A Hello packet carries more than 11 IPv6 addresses. |
Duplicate IPv6 Addr |
The IPv6 address is repeated. |
More Optional Checksum |
More than one optional checksum TLV is contained in a packet. |
Bad Optional Checksum |
Error optional checksum TLV. |
display isis graceful-restart status
Format
display isis process-id graceful-restart status [ level-1 | level-2 ]
display isis graceful-restart status [ level-1 | level-2 ] [ process-id | vpn-instance vpn-instance-name ]
Parameters
Parameter | Description | Value |
---|---|---|
level-1 | Displays the Level-1 IS-IS GR status. | - |
level-2 | Displays the Level-2 IS-IS GR status. | - |
process-id | Displays the IS-IS GR status of a specified IS-IS process. | The value is an integer that ranges from 1 to 65535. |
vpn-instance vpn-instance-name | Displays the IS-IS GR status of the IS-IS multi-instance process in a specified VPN instance. | The value must be an existing VPN instance name. |
Usage Guidelines
You can run the display isis graceful-restart status command to check the IS-IS GR status.
Example
# Display the IS-IS GR status.
<HUAWEI> display isis graceful-restart status
Restart information for ISIS(1)
-------------------------------
IS-IS(1) Level-1 Restart Status
Restart Interval: 300
SA Bit Supported
Total Number of Interfaces = 1
Restart Status: RESTART COMPLETE
IS-IS(1) Level-2 Restart Status
Restart Interval: 300
SA Bit Supported
Total Number of Interfaces = 1
Restart Status: RESTART COMPLETE
Item |
Description |
---|---|
Restart Interval |
Expected restart time of the device. This parameter is configured using the graceful-restart interval command. |
SA Bit Supported |
Whether the device supports SA. |
Total Number of Interfaces = 1 |
Number of interfaces on which IS-IS is enabled. IS-IS is enabled using the isis enable command on an interface. |
Restart Status: |
Restart status of the current device. RESTART COMPLETE indicates that the restart is complete. |
display isis interface
Format
display isis interface [ [ verbose | traffic-eng ] * | te-tunnel ] [ process-id | vpn-instance vpn-instance-name ]
display isis process-id interface [ te-tunnel | [ traffic-eng | verbose ] * ]
display isis interface interface-type interface-number [ verbose ]
Parameters
Parameter | Description | Value |
---|---|---|
verbose | Displays detailed information about IS-IS interfaces. | - |
process-id | Specifies an IS-IS process ID. | The value is an integer that ranges from 1 to 65535. |
traffic-eng | Displays Traffic Engineering information of IS-IS. | - |
te-tunnel | Displays information on the MPLS TE tunnel of IS-IS. | - |
vpn-instance vpn-instance-name | Display IS-IS interface information in the IS-IS multi-instance process in a specified VPN instance. | The value must be an existing VPN instance name. |
interface-type interface-number | Specifies the type and number of an interface. | - |
Usage Guidelines
You can use this command to view IS-IS interface information, including the interface name, IP address, link status of the interface. If verbose is specified, the command output also includes the configuration of IS-IS parameters for the interface, such as the CSNP broadcast interval, Hello packet broadcast interval, and number of IS-IS Hello packets that fail to be received before IS-IS declares the neighbor Down.
Example
# Display information about IS-IS interfaces.
<HUAWEI> display isis interface
Interface information for ISIS(1)
---------------------------------
Interface Id IPV4.State IPV6.State MTU Type DIS
Vlanif10 001 Up Down 1497 L1/L2 No/No
# Display detailed information about IS-IS interfaces.
<HUAWEI> display isis interface verbose
Interface information for ISIS(1) --------------------------------- Interface Id IPV4.State IPV6.State MTU Type DIS Vlanif10 001 Up Down 1497 L1/L2 No/No Circuit MT State : Standard Description : SNPA Address : 0000-1382-4569 IP Address : 10.1.1.5 IPV6 Link Local Address : IPV6 Global Address (es) : Csnp Timer Value : L1 10 L2 10 Hello Timer Value : L1 10 L2 10 DIS Hello Timer Value : L1 3 L2 3 Hello Multiplier Value : L1 3 L2 3 LSP-Throttle Timer : L12 50 Cost : L1 10 L2 10 Ipv6 Cost : L1 10 L2 10 Priority : L1 64 L2 64 Retransmit Timer Value : L12 5 Bandwidth-Value : Low 1000000000 High 0 Static Bfd : NO Dynamic Bfd : NO Dynamic IPv6 Bfd : NO Fast-Sense Rpr : NO Suppress flapping peer : enable (flapping-count: 0, threshold: 10)
Item |
Description |
---|---|
Interface |
IS-IS interface type and number. |
Id |
Link ID. |
IPV4.State |
IPv4 link status. |
IPV6.State |
IPv6 link status. |
MTU |
Interface MTU. An IS-IS neighbor relationship can be established only when two interfaces on both ends of a link have the same MTU. |
Type |
Interface type:
|
DIS |
Whether the interface is a DIS. NOTE:
Only an interface with network type broadcast can be selected as the DIS. If an interface is a P2P interface, "--" is displayed in this field. |
Circuit MT State |
Topology status on the interface:
To configure the IPv6 topology type, run the ipv6 enable command in the IS-IS view. |
SNPA Address |
MAC address. |
IP Address |
IPv4 address of the interface. |
IPV6 Link Local Address |
IPv6 link-local address. |
IPV6 Global Address(es) |
IPv6 global address. |
Csnp Timer Value |
Interval for sending CSNPs. To set the interval for sending CSNPs, run the isis timer csnp command. |
Hello Timer Value |
Interval for sending Hello packets. To set the interval for sending Hello packets, run the isis timer hello command. |
DIS Hello Timer Value |
Interval at which the DIS sends Hello packets, which is one third of Hello Timer Value. The field takes effect only when the interface functions as the DIS. |
Hello Multiplier Value |
Number of consecutive Hello packets that are not received before the neighbor is declared Down. To set this value, run the isis timer holding-multiplier command. |
LSP-Throttle Timer |
Interval for sending LSPs or CSNPs and number of LSPs or CSNPs that are sent each time. To set the two values, run the isis timer lsp-throttle command. |
Cost |
Cost of an IPv4 interface. This field value affects route selection. |
Ipv6 Cost |
Cost of an IPv6 interface. This field value affects route selection in IPv6 topologies. |
Priority |
Priority for DIS election. To set the priority for DIS election, run the isis dis-priority command. |
Retransmit Timer Value |
Interval for retransmitting LSPs on a P2P link. To set the retransmit interval, run the isis timer lsp-retransmit command. |
Bandwidth-Value |
Physical bandwidth of an interface. The value can be calculated
using the following formula: Bandwidth-Value = 4294967296 x high + low. For example, if the value of high is
1 and the value of low is 705032704, Bandwidth-Value = 1 x
4294967296 + 705032704 = 5000000000.
|
Static Bfd |
Status BFD status:
|
Dynamic Bfd |
Dynamic BFD status:
|
Dynamic IPv6 Bfd |
Status of dynamic IPv6 BFD:
|
Fast-Sense Rpr |
Whether the fast sense RPR function is enabled. |
Suppress flapping peer |
Status of IS-IS neighbor relationship flapping suppression:
NOTE:
In the flapping suppression state, remain-interval is reset each time when the device detects a valid neighbor flapping event. |
display isis last-peer-change
Function
The display isis last-peer-change command displays changes in IS-IS neighbor relationships.
Format
display isis process-id last-peer-change
display isis last-peer-change [ process-id | vpn-instance vpn-instance-name ]
Parameters
Parameter | Description | Value |
---|---|---|
process-id | Specifies an IS-IS process ID. | The value is an integer that ranges from 1 to 65535. |
vpn-instance vpn-instance-name | Specifies the IS-IS multi-instance process in a specified VPN instance. | The value must be an existing VPN instance name. |
Usage Guidelines
You can use the display isis last-peer-change command to view a maximum of 100 latest records in each IS-IS process.
Example
# Display changes in IS-IS neighbor relationships.
<HUAWEI> display isis last-peer-change
Peer change information for ISIS(1)
-----------------------------------
Time : 2011-03-28 09:30:34
System Id : 0000.0000.0002
Type : L1 LAN
Interface : vlanif10
State : IPv4 -> IPv4/IPv6
Details : Protocol change
Item |
Description |
---|---|
Time |
Time a neighbor relationship changes. |
System Id |
System ID of a neighbor. |
Type |
Neighbor type:
|
Interface |
Interface connected to the neighbor. |
State |
Changes in the IS-IS neighbor relationship status:
|
Details |
Causes for IS-IS neighbor relationship changes:
|
display isis lsdb
Format
display isis process-id lsdb [ { level-1 | level-2 } | verbose | { local | lsp-id | is-name symbolic-name } ] *
display isis lsdb [ { level-1 | level-2 } | verbose | { local | lsp-id | is-name symbolic-name } ] * [ process-id | vpn-instance vpn-instance-name ]
Parameters
Parameter | Description | Value |
---|---|---|
process-id | Specifies an IS-IS process ID. | The value is an integer that ranges from 1 to 65535. |
level-1 | Displays Level-1 LSDBs. If no level is specified, Level-1 and Level-2 LSDBs are displayed. | - |
level-2 | Displays Level-2 LSDBs. If no level is specified, Level-1 and Level-2 LSDBs are displayed. | - |
verbose | Displays detailed information about IS-IS LSDBs. | - |
local | Displays information about the local LSDB. | - |
lsp-id | Specifies an LSP ID. | The value is in dotted decimal notation. The value ranges from 16 to 20 in ####.####.####.##-## format, such as 0050.0500.5004.00-00. |
is-name symbolic-name | Specifies the dynamic host name in is-name or is-name.##-## format. ##-## indicates the pseudonode ID-LSP fragment ID. | The value is a string of 1 to 70 characters. |
vpn-instance vpn-instance-name | Displays the LSDB of the IS-IS multi-instance process in a specified VPN instance. | The value must be an existing VPN instance name. |
Example
# Display IS-IS LSDB information.
<HUAWEI> display isis lsdb
Database information for ISIS(1)
--------------------------------
Level-2 Link State Database
LSPID Seq Num Checksum Holdtime Length ATT/P/OL
-------------------------------------------------------------------------------
0000.0000.0001.00-00 0x0000017a 0xa21c 846 84 0/0/0
2222.2222.2222.00-00* 0x000001ce 0xbdcc 845 111 0/0/0
3333.3333.3333.00-00 0x00000013 0x8847 1004 84 0/0/0
3333.3333.3333.01-00 0x0000000b 0x95bc 1004 55 0/0/0
Total LSP(s): 4
*(In TLV)-Leaking Route, *(By LSPID)-Self LSP, +-Self LSP(Extended),
ATT-Attached, P-Partition, OL-Overload
Item |
Description |
---|---|
LSPID |
LSP ID. |
Seq Num |
LSP sequence number. |
Checksum |
LSP checksum. |
Holdtime |
LSP holdtime. |
Length |
LSP length. |
ATT/P/OL |
|
Total LSP(s) |
Number of LSPs. |
*/+ |
|
# Display detailed information about IS-IS LSDB.
<HUAWEI> display isis lsdb verbose Database information for ISIS(1) -------------------------------- Level-1 Link State Database LSPID Seq Num Checksum Holdtime Length ATT/P/OL ------------------------------------------------------------------------------- 0000.0000.0001.00-00 0x00000010 0xc776 0 (724) 36 0/0/0 SOURCE 0000.0000.0001.00 NLPID IPV4 AREA ADDR 10 INTF ADDR 10.22.21.1 NBR ID 0000.0000.0002.02 COST: 10 IP-Internal 10.22.21.0 255.255.255.0 COST: 10 0000.0000.0003.00-00* 0x00000026 0x6fb4 1145 350 0/0/0 SOURCE 0000.0000.0003.00 HOST NAME RouterA NLPID IPV4 NLPID IPV6 AREA ADDR 10 INTF ADDR 10.1.1.2 INTF ADDR 10.1.2.2 INTF ADDR V6 FC00:1::1 Topology Standard NBR ID 0000.0000.0001.00 COST: 10 +NBR ID 0000.0000.0001.00 COST: 10 IP-Internal 10.1.1.0 255.255.255.0 COST: 10 IP-Internal 10.1.2.0 255.255.255.0 COST: 10 +IP-Extended 10.1.1.0 255.255.255.0 COST: 10 +IP-Extended 10.1.2.0 255.255.255.0 COST: 10 IPV6 FC00:1::/64 COST: 10 Total LSP(s): 2 *(In TLV)-Leaking Route, *(By LSPID)-Self LSP, +-Self LSP(Extended), ATT-Attached, P-Partition, OL-Overload Level-2 Link State Database LSPID Seq Num Checksum Holdtime Length ATT/P/OL ------------------------------------------------------------------------------- 0000.0000.0003.00-00* 0x0000001c 0x9b0d 1131 233 0/0/0 SOURCE RouterA.00 ORG ID: RouterA.00 ORG ID: 0000.0000.0003.00 HOST NAME RouterA NLPID IPV4 NLPID IPV6 AREA ADDR 10 INTF ADDR 10.1.1.2 INTF ADDR 10.1.2.2 INTF ADDR V6 FC00:1::1 Topology Standard NBR ID 0000.0000.0004.00 COST: 10 +NBR ID 0000.0000.0004.00 COST: 10 +MT NBR ID 0000.0000.0004.00 COST: 10 IP-Internal 10.1.1.0 255.255.255.0 COST: 10 IP-Internal 10.1.2.0 255.255.255.0 COST: 10 +IP-Extended 10.1.1.0 255.255.255.0 COST: 10 +IP-Extended 10.1.2.0 255.255.255.0 COST: 10 IPV6 FC00:1::/64 COST: 10 0000.0000.0003.00-01* 0x00000005 0x5ec1 1129 70 0/0/0 SOURCE RouterA.00 Auth: ***** Len: -- Type: MD5 IP-External 10.1.3.0 255.255.255.0 COST: 0 +IP-Extended 10.1.3.0 255.255.255.0 COST: 0 Total LSP(s): 2 *(In TLV)-Leaking Route, *(By LSPID)-Self LSP, +-Self LSP(Extended), ATT-Attached, P-Partition, OL-Overload
Item |
Description |
---|---|
SOURCE |
System ID of the source node. |
ORG ID |
Source system ID of the virtual system. |
HOST NAME |
Dynamic host name. |
Auth |
Authentication password. |
Len |
Authentication password length. |
Type |
Authentication type:
|
NLPID |
Supported network protocol.
|
AREA ADDR |
Area address. |
INTF ADDR |
Interface IPv4 address. |
INTF ADDR V6 |
Interface IPv6 address. |
Topology |
Topology type. |
NBR ID |
System ID of a neighbor. |
+NBR ID |
System ID of a neighbor, which can carry TE information. |
+MT NBR ID |
Neighbor ID in the MT topology. |
COST |
Route cost. |
IP-Internal |
Internal IPv4 routing information. |
IP-External |
External IPv4 routing information. |
+IP-Extended |
Extended IP routing information, which can carry TE information. |
IPV6 |
Internal IPv6 routing information. |
display isis mesh-group
Format
display isis mesh-group [ process-id | vpn-instance vpn-instance-name ]
display isis process-id mesh-group
Parameters
Parameter | Description | Value |
---|---|---|
process-id | Specifies an IS-IS process ID. | The value is an integer that ranges from 1 to 65535. |
vpn-instance vpn-instance-name | Specifies the IS-IS multi-instance process in a specified VPN instance. | The value must be an existing VPN instance name. |
Usage Guidelines
You can run the display isis mesh-group command to check the configuration of the IS-IS mesh-group.
display isis migp-routing
Function
The display isis migp-routing command displays IS-IS Multicast IGP (MIGP) routing information.
Format
display isis [ process-id ] migp-routing [ ip-address [ mask | mask-length ] | { level-1 | level-2 } | verbose ] *
Parameters
Parameter | Description | Value |
---|---|---|
process-id | Specifies the IS-IS process ID. | The value is an integer ranging from 1 to 65535. |
ip-address | Displays the route with the specified destination address. | It is in dotted decimal notation. |
mask | Specifies the mask of the ip address. | It is in dotted decimal notation. |
mask-length | Specifies the mask length. | The value is an integer ranging from 0 to 32. |
level-1 | Displays IS-IS Level-1 routes. | - |
level-2 | Displays IS-IS Level-2 routes. | - |
verbose | Displays the administrative tag of the route. | - |
Usage Guidelines
You can run the display isis migp-routing command to view the physical interface of the route with the outgoing interface as a TE tunnel interface.
Example
# Display IS-IS MIGP routing information.
<HUAWEI> display isis migp-routing
MIGP Route information for ISIS(1)
----------------------------------
ISIS(1) Level-2 Forwarding Table
--------------------------------
IPV4 Destination IntCost ExtCost ExitInterface NextHop Flags
--------------------------------------------------------------------------------
192.168.3.0/24 40 NULL Vlanif10 10.0.1.1 A/-
10.5.5.5/32 30 NULL Vlanif10 10.0.1.1 A/-
10.4.4.4/32 20 NULL Vlanif10 10.0.1.1 A/-
10.0.2.0/24 20 NULL Vlanif10 10.0.1.1 A/-
10.0.3.0/24 30 NULL Vlanif10 10.0.1.1 A/-
Flags: A-Added to MIGP, U-Up/Down Bit Set
Item |
Description |
---|---|
IPV4 Destination |
Indicates the IPv4 destination address and the mask. |
IntCost |
Indicates the internal cost. |
ExtCost |
Indicates the external cost. |
ExitInterface |
Indicates the outgoing interface of the IS-IS route. |
Next Hop |
Indicates the next hop of the IS-IS route. |
Flags
|
Indicates routing information flags:
|
<HUAWEI> display isis migp-routing verbose
MIGP Route information for ISIS(1)
----------------------------------
ISIS(1) Level-2 Forwarding Table
--------------------------------
IPV4 Dest : 192.168.3.0/24 Int. Cost : 40 Ext. Cost : NULL
Admin Tag : - Src Count : 1 Flag : A/-
Priority : Low
NextHop : Interface : ExitIndex :
10.0.1.1 Vlanif10 0x00000009
IPV4 Dest : 10.5.5.5/32 Int. Cost : 30 Ext. Cost : NULL
Admin Tag : - Src Count : 1 Flag : A/-
Priority : Low
NextHop : Interface : ExitIndex :
10.0.1.1 Vlanif10 0x00000009
IPV4 Dest : 10.4.4.4/32 Int. Cost : 20 Ext. Cost : NULL
Admin Tag : - Src Count : 1 Flag : A/-
Priority : Low
NextHop : Interface : ExitIndex :
10.0.1.1 Vlanif10 0x00000009
IPV4 Dest : 10.0.2.0/24 Int. Cost : 20 Ext. Cost : NULL
Admin Tag : - Src Count : 1 Flag : A/-
Priority : Low
NextHop : Interface : ExitIndex :
10.0.1.1 Vlanif10 0x00000009
IPV4 Dest : 10.0.3.0/24 Int. Cost : 30 Ext. Cost : NULL
Admin Tag : - Src Count : 1 Flag : A/-
Priority : Low
NextHop : Interface : ExitIndex :
10.0.1.1 Vlanif10 0x00000009
Flags: A-Added to MIGP, U-Up/Down Bit Set
Item |
Description |
---|---|
IPV4 Dest |
Indicates the IPv4 destination address and the mask. |
Int.Cost |
Indicates the internal cost. |
Ext.Cost |
Indicates the external cost. |
Admin Tag |
Indicates the administrative tag of the IS-IS route. |
Src Count |
Indicates the number of source addresses to the same destination. |
Flags
|
Indicates the routing information flags.
|
Priority |
Convergence priorities of IS-IS routes
|
Next Hop |
Indicates the next hop of the route. |
Interface |
Indicates the outgoing interface of the IS-IS route. |
ExitIndex |
Indicates the index value of the outgoing interface. |
display isis name-table
Function
The display isis name-table command displays the mapping between the dynamic hostnames of IS-IS routers and the system IDs.
Format
display isis name-table [ process-id | vpn-instance vpn-instance-name ]
display isis process-id name-table
Parameters
Parameter | Description | Value |
---|---|---|
process-id | Displays the mapping between dynamic hostnames of IS-IS routers and system IDs in a specified IS-IS process. |
The value is an integer that ranges from 1 to 65535. |
vpn-instance vpn-instance-name | Displays the mapping between dynamic hostnames of IS-IS routers and system IDs in a specified VPN instance. |
The value must be an existing VPN instance name. |
Usage Guidelines
After dynamic hostnames are configured, you can run the display isis name-table command to check the mapping between the dynamic hostnames and system IDs.
Example
# Configure a name for the local IS-IS system.
[Switch] isis
[Switch-isis-1] is-name RUTA
# Configure a static name mapping for the remote IS-IS system (0000.0000.0041).
[Switch-isis-1] is-name map 0000.0000.0041 RUTB
# Display the IS-IS system name table.
<Switch> display isis name-table
Name table information for ISIS(1)
System ID Hostname Type
---------------------------------------------------------------
6789.0000.0001 RUTA DYNAMIC
0000.0000.0041 RUTB STATIC
Item |
Description |
---|---|
System ID |
System ID of the current IS-IS device. To set the system ID, run the network-entity command. |
Hostname |
Host name of the device. To set a host name for the local or remote device, run the is-name or is-name map command. |
Type |
Type of the mapping between the host name and system ID: static or dynamic. |
display isis peer
Format
display isis process-id peer [ verbose ]
display isis peer [ verbose ] [ process-id | vpn-instance vpn-instance-name ]
display isis peer interface interface-type interface-number [ verbose ]
Parameters
Parameter | Description | Value |
---|---|---|
verbose | Displays detailed IS-IS neighbor information, including the area address, period during which the neighbor remains Up, and IP address of its directly connected interface. |
- |
process-id | Specifies an IS-IS process ID. | The value is an integer that ranges from 1 to 65535. |
vpn-instance vpn-instance-name | Specifies the IS-IS multi-instance process in a specified VPN instance. | The value must be an existing VPN instance name. |
interface interface-type interface-number | Specifies the type and number of an interface. | - |
Usage Guidelines
In an IS-IS area, if you need to check whether two devices can communicate properly, run the display isis peer command to view information about the neighbor, including the neighbor status, period during which the neighbor remains Up, and neighbor type.
Example
# Display information about IS-IS neighbors.
<HUAWEI> display isis peer
Peer information for ISIS(1) System Id Interface Circuit Id State HoldTime Type PRI ------------------------------------------------------------------------------- 0000.0000.0001 Vlanif10 0000.0000.0001.01 Up 24s L1(L1L2) 64 0000.0000.0001 Vlanif10 0000.0000.0001.01 Up 24s L2(L1L2) 64 Total Peer(s): 2
Item |
Description |
---|---|
System Id |
System ID of the neighbor. |
Interface |
Type and number of the interface. |
Circuit Id |
Circuit ID. |
State |
Neighbor status:
|
HoldTime |
Neighbor holdtime. |
Type |
Neighbor type:
|
PRI |
Priority of the neighbor in DIS election. |
# Display detailed information about IS-IS neighbor.
<HUAWEI> display isis peer verbose
Peer information for ISIS(1) System Id Interface Circuit Id State HoldTime Type PRI ------------------------------------------------------------------------------- 0000.0000.0001 Vlanif10 0000.0000.0001.01 Up 26s L1(L1L2) 64 MT IDs supported : 0(UP) Local MT IDs : 0 Area Address(es) : 10 Peer IP Address(es) : 10.10.10.1 Uptime : 00:00:19 Adj Protocol : IPV4 Restart Capable : YES Suppressed Adj : NO 0000.0000.0001 Vlanif10 0000.0000.0001.01 Up 27s L2(L1L2) 64 MT IDs supported : 0(UP) Local MT IDs : 0 Area Address(es) : 10 Peer IP Address(es) : 10.10.10.1 Uptime : 00:00:19 Adj Protocol : IPV4 Restart Capable : YES Suppressed Adj : NO Total Peer(s): 2
Item |
Description |
---|---|
MT IDs supported |
IDs of topology instances supported by the remote interface. |
Local MT IDs |
IDs of topology instances supported by the local interface. |
Area Address(es) |
Area addresses of the neighbor. |
Peer IP Address(es) |
IP address of the remote interface. |
Uptime |
Period during which the neighbor remains Up. |
Adj Protocol |
Protocol used for establishing the adjacency. |
Restart Capable |
Whether GR is supported:
|
Suppressed Adj |
Whether neighbor suppression is supported:
|
Total Peer(s) |
Number of neighbors. |
display isis purge packet
Function
The display isis purge packet command displays statistics about received IS-IS purge LSPs carrying the POI TLV.
Format
display isis process-id purge packet [ packet-number ]
display isis purge packet process-id [ packet-number ]
Parameters
Parameter | Description | Value |
---|---|---|
process-id | Specifies an IS-IS process ID. | The value is an integer ranging from 1 to 65535. |
packet-number | Specifies the number of purge LSPs whose statistics are to be displayed. | The value is an integer ranging from 1 to 20. |
Usage Guidelines
- The first two displayed purge LSPs are sent by the local source system, with fragment number 0, one of which is Level-1, and the other is Level-2.
- The first 10 displayed purge LSPs are generated locally, and the next 10 purge LSPs are from neighbors. The purge LSPs are displayed in reverse order of the time when they were received. If the LSP ID is followed by an asterisk (*), the purge LSP is generated locally.
Example
# Display statistics about received IS-IS purge LSPs carrying the POI TLV.
<HUAWEI> display isis purge packet 1 10
Purge LSP packet for ISIS(1) ------------------------------------------------------------ Packet information(Index 1): ----------------------------------------------------- Received LSPID : 0000.0000.0027.00-00* Source Interface : Vlanif100 Time : 2015-1-22 13:55:06 Level : Level-2 PDU Type : 20(Level-2 LSP) PDU Length : 55 Sequence Number : 0x00000015 Checksum : 0xc891 POI NAME : 0000.0000.0004 POI NAME(Neighbor) : 0000.0000.0005 HOST NAME : RT4-Pro1 Auth Type : ** 0010: 83 1b 01 06 12 01 00 03 00 43 00 00 00 00 00 00 0020: 00 27 00 00 00 01 6a 6c bd ed 01 0d 07 01 00 00 0030: 00 00 00 01 89 0a 52 54 31 2d 50 72 6f 2d 30 31 0040: ** ** ** ** ** ** ** ** ** ** ** ** ** ** ** ** 0050: ** ** ** ----------------------------------------------------- **-Authentication TLV, *(By LSPID)-Self LSP
Item |
Description |
---|---|
Received LSPID |
ID of a received purge LSP |
Source Interface |
Source interface of a received purge LSP |
Time |
Time when a purge LSP was received |
Level |
Level of a received purge LSP |
PDU Type |
Type of received purge LSP |
PDU Length |
Length of a received purge LSP |
Sequence Number |
Sequence number (LSN) of a received purge LSP |
Checksum |
Checksum of a received purge LSP |
POI NAME |
POI TLV carried in a received purge LSP |
POI NAME(Neighbor) |
Neighbor system ID in the POI TLV carried in a received purge LSP |
HOST NAME |
Dynamic hostname carried in a received purge LSP |
Auth Type |
Authentication information carried in a received purge LSP |
display isis route
Format
display isis route [ process-id | vpn-instance vpn-instance-name ] [ ipv4 ] [ verbose | [ level-1 | level-2 ] | ip-address [ mask | mask-length ] ] *
display isis route [ process-id | vpn-instance vpn-instance-name ] ipv6 [ verbose | [ level-1 | level-2 ] | ipv6-address [ prefix-length ] ] *
display isis process-id route [ ipv4 ] [ verbose | [ level-1 | level-2 ] | ip-address [ mask | mask-length ] ] *
display isis process-id route ipv6 [ verbose | [ level-1 | level-2 ] | ipv6-address [ prefix-length ] ] *
Parameters
Parameter | Description | Value |
---|---|---|
process-id | Specifies an IS-IS process ID. | The value is an integer that ranges from 1 to 65535. |
vpn-instance vpn-instance-name | Specifies the IS-IS multi-instance process in a specified VPN instance. | The value must be an existing VPN instance name. |
ipv4 | Displays IPv4 routes. If this parameter is not specified, both IPv4 and IPv6 IS-IS routes are displayed. | - |
verbose | Displays detailed routing information. | - |
level-1 | Displays Level-1 IS-IS routes. | - |
level-2 | Displays Level-2 IS-IS routes. | - |
ip-address | Displays the routes with the specified IPv4 destination address. | The value is in dotted decimal notation. |
mask | Specifies the mask of an IP address. | The value is in dotted decimal notation. |
mask-length | Specifies the mask length of an IP address. | The value is an integer that ranges from 0 or 32. |
ipv6 | Displays IPv6 routes. If this parameter is not specified, both IPv4 and IPv6 IS-IS routes are displayed. | - |
ipv6-address | Displays the routes with the specified IPv6 destination address. | The value is a 32-digit hexadecimal number, in X:X:X:X:X:X:X:X format. |
prefix-length | Specifies the prefix length of an IPv6 address. | The value is an integer that ranges from 0 to 128. |
Example
# Display all IS-IS routes.
<HUAWEI> display isis route
Route information for ISIS(1) ----------------------------- ISIS(1) Level-1 Forwarding Table -------------------------------- IPV4 Destination IntCost ExtCost ExitInterface NextHop Flags ------------------------------------------------------------------------------- 10.2.1.0/24 10 NULL Vlanif10 Direct D/-/L/- 172.18.0.0/16 20 NULL Vlanif10 10.2.1.1 A/-/L/- IPV6 Dest. ExitInterface NextHop Cost Flags ------------------------------------------------------------------------------- FC00:0:0:200::/64 Vlanif10 Direct 10 D/L/- Flags: D-Direct, A-Added to URT, L-Advertised in LSPs, S-IGP Shortcut, U-Up/Down Bit Set ISIS(1) Level-2 Forwarding Table -------------------------------- IPV4 Destination IntCost ExtCost ExitInterface NextHop Flags ------------------------------------------------------------------------------- 10.2.1.0/24 10 NULL Vlanif10 Direct D/-/L/- 172.18.0.0/16 20 NULL Vlanif10 10.2.1.1 A/-/L/- IPV6 Dest. ExitInterface NextHop Cost Flags ------------------------------------------------------------------------------- FC00:0:0:200::/64 Vlanif10 Direct 10 D/L/- Flags: D-Direct, A-Added to URT, L-Advertised in LSPs, S-IGP Shortcut, U-Up/Down Bit Set
Item |
Description |
---|---|
IPV4 Destination |
IPv4 destination address and mask. |
IPV6 Dest. |
IPv6 destination address and mask. |
IntCost |
IPv4 internal cost or IS-IS route cost. To change the IS-IS IPv4 route cost, run the circuit-cost or isis cost command to set the link cost of an IS-IS IPv4 interface. |
ExtCost |
IPv4 external cost or cost of routes imported from other
routing protocols. To set the cost of imported routes, run the import-route (IS-IS) command.
NOTE:
The costs of external routes imported using the import-route cost-type external command are displayed in this field to differentiate the costs of IS-IS routes. |
Cost |
IPv6 route cost. To change the IS-IS IPv6 route cost, run the ipv6 circuit-cost or isis ipv6 cost command to set the link cost of an IS-IS IPv6 interface. |
ExitInterface |
Outbound interface of a route. |
NextHop |
Next hop address of a route. This field displays Direct if the destination network segment is the direct network segment. |
Flags |
Route flag:
|
# Display IS-IS IPv4 routes.
<HUAWEI> display isis route ipv4
Route information for ISIS(1) ----------------------------- ISIS(1) Level-1 Forwarding Table -------------------------------- IPV4 Destination IntCost ExtCost ExitInterface NextHop Flags ------------------------------------------------------------------------------- 10.1.1.0/24 10 NULL Loop1 Direct D/-/L/- 10.2.2.0/24 10 NULL Loop2 Direct D/-/L/- Flags: D-Direct, A-Added to URT, L-Advertised in LSPs, S-IGP Shortcut, U-Up/Down Bit Set ISIS(1) Level-2 Forwarding Table -------------------------------- IPV4 Destination IntCost ExtCost ExitInterface NextHop Flags ------------------------------------------------------------------------------- 10.1.1.0/24 10 NULL Loop1 Direct D/-/L/- 10.2.2.0/24 10 NULL Loop2 Direct D/-/L/- Flags: D-Direct, A-Added to URT, L-Advertised in LSPs, S-IGP Shortcut, U-Up/Down Bit Set
# Display IS-IS IPv6 routes.
<HUAWEI> display isis route ipv6
Route information for ISIS(1) ----------------------------- ISIS(1) Level-1 Forwarding Table -------------------------------- IPV6 Dest. ExitInterface NextHop Cost Flags ------------------------------------------------------------------------------- FC00:0:0:200::/64 Vlanif10 Direct 10 D/L/- Flags: D-Direct, A-Added to URT, L-Advertised in LSPs, S-IGP Shortcut, U-Up/Down Bit Set ISIS(1) Level-2 Forwarding Table -------------------------------- IPV6 Dest. ExitInterface NextHop Cost Flags ------------------------------------------------------------------------------- FC00:0:0:200::/64 Vlanif10 Direct 10 D/L/- Flags: D-Direct, A-Added to URT, L-Advertised in LSPs, S-IGP Shortcut, U-Up/Down Bit Set
# Display detailed IS-IS routing information.
<HUAWEI> display isis route verbose
Route information for ISIS(1) ----------------------------- ISIS(1) Level-1 Forwarding Table -------------------------------- IPV4 Dest : 10.0.0.0/24 Int. Cost : 10 Ext. Cost : NULL Admin Tag : - Src Count : 2 Flags : D/L/- Priority : - NextHop : Interface : ExitIndex : Direct Vlanif10 0x00000000 IPV4 Dest : 10.1.0.0/24 Int. Cost : 10 Ext. Cost : NULL Admin Tag : - Src Count : 2 Flags : D/L/- Priority : - NextHop : Interface : ExitIndex : Direct Vlanif20 0x00000000 IPV4 Dest : 10.2.0.0/24 Int. Cost : 20 Ext. Cost : NULL Admin Tag : - Src Count : 2 Flags : A/L/- Priority : Low NextHop : Interface : ExitIndex : 10.2.0.2 Vlanif20 0x00000003 10.0.0.2 Vlanif10 0x00000005 IPV4 Dest : 10.4.1.1/32 Int. Cost : 10 Ext. Cost : NULL Admin Tag : - Src Count : 1 Flags : A/L/- Priority : Medium NextHop : Interface : ExitIndex : 10.0.0.2 Vlanif10 0x00000005 (B)10.2.0.2 Vlanif20 0x00000003 Flags: D-Direct, A-Added to URT, L-Advertised in LSPs, S-IGP Shortcut, U-Up/Down Bit Set ISIS(1) Level-2 Forwarding Table -------------------------------- IPV4 Dest : 10.0.0.0/24 Int. Cost : 10 Ext. Cost : NULL Admin Tag : - Src Count : 3 Flags : D/L/- Priority : - NextHop : Interface : ExitIndex : Direct Vlanif10 0x00000000 IPV4 Dest : 10.1.0.0/24 Int. Cost : 10 Ext. Cost : NULL Admin Tag : - Src Count : 3 Flags : D/L/- Priority : - NextHop : Interface : ExitIndex : Direct Vlanif20 0x00000000 IPV4 Dest : 10.2.0.0/24 Int. Cost : 20 Ext. Cost : NULL Admin Tag : - Src Count : 2 Flags : -/-/- Priority : Low IPV4 Dest : 10.3.1.1/32 Int. Cost : 10 Ext. Cost : NULL Admin Tag : - Src Count : 2 Flags : -/-/- Priority : Medium Flags: D-Direct, A-Added to URT, L-Advertised in LSPs, S-IGP Shortcut, U-Up/Down Bit Set
Item |
Description |
---|---|
IPV4 Dest |
IPv4 destination address and mask. |
Int.Cost |
IPv4 internal cost, the cost of an IS-IS route. |
Ext.Cost |
IPv4 external cost, the cost of other protocol route imported
by IS-IS.
NOTE:
The costs of non-IS-IS routes imported by the import-route cost-type external command are displayed in this field so that the costs of non-IS-IS routes are kept independently from the costs of IS-IS routes. |
Admin Tag |
Administrative tag. |
Src Count |
Number of source addresses to the same destination. |
Priority |
Convergence priority of IS-IS routes:
|
NextHop |
Next hop of a route. The next hop (B) tag of a route is a backup route tag. |
Interface |
Outbound interface of a route. |
ExitIndex |
Index of the outbound interface. |
Flags |
Flags of routing information |
display isis spf-log
Format
display isis spf-log [ process-id | vpn-instance vpn-instance-name ] [ [ level-1 | level-2 ] | ipv6 | verbose ]*
display isis process-id spf-log [ [ level-1 | level-2 ] | ipv6 | verbose ]*
Parameters
Parameter | Description | Value |
---|---|---|
process-id | Specifies an IS-IS process ID. | The value is an integer that ranges from 1 to 65535. |
vpn-instance vpn-instance-name | Specifies the IS-IS multi-instance process in a specified VPN instance. | The value must be an existing VPN instance name. |
ipv6 | Displays SPF logs in IPv6 topologies. | - |
level-1 | Displays Level-1 SPF logs. | - |
level-2 | Displays Level-2 SPF logs. | - |
verbose | Displays detailed information about SPF logs. | - |
Usage Guidelines
If the SPT calculated by IS-IS is incorrect, you can run the display isis spf-log command to diagnose the fault. The command displays information about SPF calculation, such as the start time and duration of the SPF calculation, number of nodes, and events that trigger the SPF calculation. You can determine whether the events are the cause of the SPF calculation fault based on the start time of the SPF calculation.
Example
# Display IS-IS SPF logs.
<HUAWEI> display isis spf-log
SPF Log information for ISIS(10) -------------------------------- ISIS(10) Level-1 SPF Log ------------------------ StartTime Duration Nodes Count Last Trigger LSP Trigger Event ------------------------------------------------------------------------------- 2013-09-05 10:14:48+00:00 0 1 1 NULL ISPF_CIRC_DR_CHANGE 2013-09-05 10:13:23+00:00 1 1 2 NULL FULL_SPF ISIS(10) Level-2 SPF Log ------------------------ StartTime Duration Nodes Count Last Trigger LSP Trigger Event ------------------------------------------------------------------------------- 2013-09-05 10:14:48+00:00 1 1 1 NULL ISPF_CIRC_DR_CHANGE 2013-09-05 10:13:23+00:00 1 1 2 NULL FULL_SPF
Item |
Description |
---|---|
StartTime |
Start time of SPF calculation. |
Duration |
Duration of SPF calculation. |
Nodes |
Number of nodes in SPF calculation. |
Count |
Number of times SPF calculated is triggered. |
Last Trigger LSP |
LSP that triggers the last SPF calculation:
|
Trigger Event |
Event that triggers the last SPF calculation:
|
display isis spf-tree
Function
The display isis spf-tree command displays the topology of the SPF tree that is generated by IS-IS.
Format
display isis spf-tree [ systemid systemid | dname dname ] [ [ level-1 | level-2 ] | ipv6 | verbose ] * [ process-id | vpn-instance vpn-instance-name ]
display isis process-id spf-tree [ systemid systemid | dname dname ] [ [ level-1 | level-2 ] | ipv6 | verbose ] *
display isis process-id spf-tree statistics [ [ level-1 | level-2 ] | ipv6 ] *
display isis spf-tree statistics [ [ level-1 | level-2 ] | ipv6 ] * [ process-id | vpn-instance vpn-instance-name ]
Parameters
Parameter | Description | Value |
---|---|---|
systemid systemid | Displays the SPF tree of the switch with a specified system ID or pseudonode ID. | The value is in XXXX.XXXX.XXXX[.XX] format. |
dname dname | Displays the SPF tree of the switch with a specified dynamic name. | The value is a string of 1 to 64 characters without spaces.When double quotation marks are used around the string, spaces are allowed in the string. |
level-1 | Displays Level-1 SPF tree. | - |
level-2 | Displays Level-2 SPF tree. | - |
ipv6 | Displays SPF tree in IPv6 topologies. | - |
verbose | Displays detailed information about SPF tree. | - |
process-id | Display SPF tree in a specified IS-IS process. | The value is an integer that ranges from 1 to 65535. |
vpn-instance vpn-instance-name | Displays SPF tree of the IS-IS multi-instance process in a specified VPN instance. | The value must be an existing VPN instance name. |
statistics | Displays SPF tree statistics, including information about links and nodes on the SPF tree. | - |
Usage Guidelines
You can specify statistics to view the current status of the SPF tree. The generated SPF tree can be used to calculate routes only when the SPF calculation status is Completed, that is, incremental SPF (ISPF) calculation is complete.
Example
# Display information about the SPF tree.
<HUAWEI> display isis spf-tree
Shortest Path Tree for ISIS(1) ------------------------------ Flags: T-System is on SPF TREE R-System is directly reachable O-System is Overload D-System or Link is to be deleted C-Neighbor is child P-Neighbor is parent G-Cost gets greater L-Cost gets lower H-Nexthop is changed U-Protocol usage is changed V-Link is involved N-Link is a new path S-Link is IGP Shortcut *-Relative cost ISIS(1) Level-1 Shortest Path Tree ---------------------------------- SpfNode NodeFlags NeighbourNode LinkCost LinkFlags ------------------------------------------------------------------------ ------------------------------------------------------------------------ 0000.0000.0001.00 T/-/-/- >0000.0000.0002.01 10 P/-/-/-/-/-/- >0000.0000.0002.00 T/-/-/- 0000.0000.0003.01 10 C/-/-/-/-/-/- >0000.0000.0002.01 10 C/-/-/-/-/-/- 0000.0000.0004.00 -10* C/-/-/-/S/-/- >0000.0000.0002.01 T/R/-/- 0000.0000.0001.00 0 C/-/-/-/-/-/- >0000.0000.0002.00 0 P/-/-/-/-/-/- 0000.0000.0003.00 T/-/-/- 0000.0000.0004.02 10 C/-/-/-/-/-/- 0000.0000.0003.01 10 P/-/-/-/-/-/- 0000.0000.0003.01 T/R/-/- 0000.0000.0003.00 0 C/-/-/-/-/-/- >0000.0000.0002.00 0 P/-/-/-/-/-/- 0000.0000.0004.00 T/-/-/- 0000.0000.0004.02 10 P/-/-/-/-/-/- 0000.0000.0004.01 10 C/-/-/-/-/-/- 0000.0000.0004.01 T/-/-/- 0000.0000.0004.00 0 P/-/-/-/-/-/- 0000.0000.0005.00 0 C/-/-/-/-/-/- 0000.0000.0004.02 T/-/-/- 0000.0000.0004.00 0 C/-/-/-/-/-/- 0000.0000.0003.00 0 P/-/-/-/-/-/- 0000.0000.0005.00 T/-/-/- 0000.0000.0004.01 10 P/-/-/-/-/-/- ISIS(1) Level-2 Shortest Path Tree ---------------------------------- SpfNode NodeFlags NeighbourNode LinkCost LinkFlags ------------------------------------------------------------------------ ------------------------------------------------------------------------ 0000.0000.0001.00 T/-/-/- >0000.0000.0002.01 10 P/-/-/-/-/-/- >0000.0000.0002.00 T/-/-/- 0000.0000.0003.01 10 C/-/-/-/-/-/- >0000.0000.0002.01 10 C/-/-/-/-/-/- 0000.0000.0004.00 -10* C/-/-/-/S/-/- >0000.0000.0002.01 T/R/-/- 0000.0000.0001.00 0 C/-/-/-/-/-/- >0000.0000.0002.00 0 P/-/-/-/-/-/- 0000.0000.0003.00 T/-/-/- 0000.0000.0004.02 10 C/-/-/-/-/-/- 0000.0000.0003.01 10 P/-/-/-/-/-/- 0000.0000.0003.01 T/R/-/- 0000.0000.0003.00 0 C/-/-/-/-/-/- >0000.0000.0002.00 0 P/-/-/-/-/-/- 0000.0000.0004.00 T/-/-/- 0000.0000.0004.02 10 P/-/-/-/-/-/- 0000.0000.0004.01 10 C/-/-/-/-/-/- 0000.0000.0004.01 T/-/-/- 0000.0000.0004.00 0 P/-/-/-/-/-/- 0000.0000.0005.00 0 C/-/-/-/-/-/- 0000.0000.0004.02 T/-/-/- 0000.0000.0004.00 0 C/-/-/-/-/-/- 0000.0000.0003.00 0 P/-/-/-/-/-/- 0000.0000.0005.00 T/-/-/- 0000.0000.0004.01 10 P/-/-/-/-/-/-
Item |
Description |
---|---|
SpfNode |
Node ID in the network topology. |
NodeFlags |
Node flag:
|
NeighbourNode |
ID of the neighboring node. |
LinkCost |
Link cost. |
LinkFlags |
Link flag:
|
> |
Mark of the local node. |
# Display detailed information about SPF tree.
<HUAWEI> display isis spf-tree verbose
Shortest Path Tree for ISIS(1) ------------------------------ ISIS(1) Level-1 Shortest Path Tree ---------------------------------- >0000.0000.0001.00 Distance : 0 Distance-URT : 0 Flags : SPT IPv4 Nexthops-URT : 0 IPv4 Nexthops-MIGP : 0 IPv6 Nexthops : 0 Neighbors: 2 (Children:2 Parents:0 Others:0) (1) 0000.0000.0002.01 Cost : 10 Flags : Child (2) >0000.0000.0001.01 Cost : 10 Flags : Child >0000.0000.0001.01 Distance : 10 Distance-URT : 10 Flags : SPT/Direct/Isolate/V6_Islt IPv4 Nexthops-URT : 0 IPv4 Nexthops-MIGP : 0 IPv6 Nexthops : 0 Neighbors: 2 (Children:1 Parents:1 Others:0) (1) 0000.0000.0003.00 Cost : 0 C:0 I:vlanif 10 Flags : Adj/Child (2) >0000.0000.0001.00 Cost : 0 Flags : Parent 0000.0000.0002.00 Distance : 10 Distance-URT : 10 Flags : SPT/V6_Islt IPv4 Nexthops-URT : 1 (1) 10.1.0.2 IF:vlanif 10 NBR:0000.0000.0002.00 (B) 10.0.0.2 IF:vlanif 20 NBR:0000.0000.0003.00 TYPE:LOOP-FREE PROTECT:LINK IPv4 Nexthops-MIGP : 0 IPv6 Nexthops : 0 Neighbors: 2 (Children:1 Parents:1 Others:0) (1) 0000.0000.0002.02 Cost : 10 Flags : Child (2) 0000.0000.0002.01 Cost : 10 Flags : Parent 0000.0000.0002.01 Distance : 10 Distance-URT : 10 Flags : SPT/Direct/Isolate/V6_Islt IPv4 Nexthops-URT : 0 IPv4 Nexthops-MIGP : 0 IPv6 Nexthops : 0 Neighbors: 2 (Children:1 Parents:1 Others:0) (1) 0000.0000.0002.00 Cost : 0 C:0 I:vlanif 10 Flags : Adj/Child (2) >0000.0000.0001.00 Cost : 0 Flags : Parent 0000.0000.0002.02 Distance : 20 Distance-URT : 20 Flags : SPT/V6_Islt IPv4 Nexthops-URT : 2 (1) 10.1.0.2 IF:vlanif 10 NBR:0000.0000.0002.00 (2) 10.0.0.2 IF:vlanif 20 NBR:0000.0000.0003.00 IPv4 Nexthops-MIGP : 0 IPv6 Nexthops : 0 Neighbors: 2 (Children:0 Parents:2 Others:0) (1) 0000.0000.0002.00 Cost : 0 Flags : Parent (2) 0000.0000.0003.00 Cost : 0 Flags : Parent 0000.0000.0003.00 Distance : 10 Distance-URT : 10 Flags : SPT/V6_Islt IPv4 Nexthops-URT : 1 (1) 10.0.0.2 IF:vlanif 10 NBR:0000.0000.0003.00 (B) 10.1.0.2 IF:vlanif 20 NBR:0000.0000.0002.00 TYPE:LOOP-FREE PROTECT:LINK IPv4 Nexthops-MIGP : 0 IPv6 Nexthops : 0 Neighbors: 2 (Children:1 Parents:1 Others:0) (1) 0000.0000.0002.02 Cost : 10 Flags : Child (2) >0000.0000.0001.01 Cost : 10 Flags : Parent ISIS(1) Level-2 Shortest Path Tree ---------------------------------- >0000.0000.0001.00 Distance : 0 Distance-URT : 0 Flags : SPT IPv4 Nexthops-URT : 0 IPv4 Nexthops-MIGP : 0 IPv6 Nexthops : 0 Neighbors: 2 (Children:2 Parents:0 Others:0) (1) 0000.0000.0002.01 Cost : 10 Flags : Child (2) >0000.0000.0001.01 Cost : 10 Flags : Child >0000.0000.0001.01 Distance : 10 Distance-URT : 10 Flags : SPT/Direct/Isolate/V6_Islt IPv4 Nexthops-URT : 0 IPv4 Nexthops-MIGP : 0 IPv6 Nexthops : 0 Neighbors: 2 (Children:1 Parents:1 Others:0) (1) 0000.0000.0003.00 Cost : 0 C:0 I:vlanif 10 Flags : Adj/Child (2) >0000.0000.0001.00 Cost : 0 Flags : Parent 0000.0000.0002.00 Distance : 10 Distance-URT : 10 Flags : SPT/V6_Islt IPv4 Nexthops-URT : 1 (1) 10.1.0.2 IF:vlanif 10 NBR:0000.0000.0002.00 (B) 10.0.0.2 IF:vlanif 20 NBR:0000.0000.0003.00 TYPE:LOOP-FREE PROTECT:LINK IPv4 Nexthops-MIGP : 0 IPv6 Nexthops : 0 Neighbors: 2 (Children:1 Parents:1 Others:0) (1) 0000.0000.0002.02 Cost : 10 Flags : Child (2) 0000.0000.0002.01 Cost : 10 Flags : Parent 0000.0000.0002.01 Distance : 10 Distance-URT : 10 Flags : SPT/Direct/Isolate/V6_Islt IPv4 Nexthops-URT : 0 IPv4 Nexthops-MIGP : 0 IPv6 Nexthops : 0 Neighbors: 2 (Children:1 Parents:1 Others:0) (1) 0000.0000.0002.00 Cost : 0 C:0 I:vlanif 10 Flags : Adj/Child (2) >0000.0000.0001.00 Cost : 0 Flags : Parent 0000.0000.0002.02 Distance : 20 Distance-URT : 20 Flags : SPT/V6_Islt IPv4 Nexthops-URT : 2 (1) 10.1.0.2 IF:vlanif 10 NBR:0000.0000.0002.00 (2) 10.0.0.2 IF:vlanif 20 NBR:0000.0000.0003.00 IPv4 Nexthops-MIGP : 0 IPv6 Nexthops : 0 Neighbors: 2 (Children:0 Parents:2 Others:0) (1) 0000.0000.0002.00 Cost : 0 Flags : Parent (2) 0000.0000.0003.00 Cost : 0 Flags : Parent 0000.0000.0003.00 Distance : 10 Distance-URT : 10 Flags : SPT/V6_Islt IPv4 Nexthops-URT : 1 (1) 10.0.0.2 IF:vlanif 10 NBR:0000.0000.0003.00 (B) 10.1.0.2 IF:vlanif 20 NBR:0000.0000.0002.00 TYPE:LOOP-FREE PROTECT:LINK IPv4 Nexthops-MIGP : 0 IPv6 Nexthops : 0 Neighbors: 2 (Children:1 Parents:1 Others:0) (1) 0000.0000.0002.02 Cost : 10 Flags : Child (2) >0000.0000.0001.01 Cost : 10 Flags : Parent
Item |
Description |
---|---|
Distance |
Cost of the shortest path from the root node to the destination node, excluding the TE tunnel link. |
Distance-URT |
Cost of the shortest path from the root node to the destination node, including the TE tunnel link. |
Flags |
Flag:
|
IPv4 Nexthops-URT |
IPv4 next hop of the node in the unicast routing table. |
IPv6 Nexthops |
IPv6 next hop of the node in the unicast routing table. |
Neighbors |
Information about all the neighbors of this node. |
Cost |
Cost of the link from the root node to this node. |
Flags |
Relationship with the neighbor:
|
IF |
Name of the outbound interface. |
NBR |
System ID of the next hop. |
TYPE |
Traffic protection type:
|
PROTECT |
Traffic protection type of IS-IS Auto FRR:
|
# Display the current status statistics of the SPF tree.
<HUAWEI> display isis spf-tree statistics
Statistics information of SPT for ISIS(100)
-------------------------------------------
Level-2 Statistics
------------------
Nodes information:
Total: 3605
Count of nodes in SPT: 3605
Count of isolate nodes in SPT: 1
Count of IPv6 isolate nodes in SPT: 3604
Max Distance of nodes in SPT: 1220
Links information:
Total: 14172
Count of links from Parent to Son: 7085
Count of links from Son to Parent: 7085
Count of links that just changed: 0
Status of SPF: Completed
Item |
Description |
---|---|
Total (Nodes information) |
Total number of nodes. |
Count of nodes in SPT |
Number of nodes in the SPT tree. |
Count of isolate nodes in SPT |
Number of isolated nodes in the network topology. |
Count of IPv6 isolate nodes in SPT |
Number of isolated IPv6 nodes in the network topology. |
Max Distance of nodes in SPT |
Maximum distance from the root node to the leaf node. |
Total (Links information) |
Total number of links. |
Count of links from Parent to Son |
Number of links from the parent node to the child node. |
Count of links from Son to Parent |
Number of links from the child node to the parent node. |
Count of links that just changed |
Number of links that just changed. |
Status of SPF |
Status of SPF calculation:
|
display isis statistics
Format
display isis statistics packet [ interface [ interface-type interface-number ] ]
display isis statistics [ updated-lsp [ history ] ] [ level-1 | level-2 | level-1-2 ] [ process-id | vpn-instance vpn-instance-name ]
display isis process-id statistics [ [ [ updated-lsp [ history ] ] [ level-1 | level-2 | level-1-2 ] ] | packet ]
Parameters
Parameter | Description | Value |
---|---|---|
packet | Displays IS-IS packet statistics. | - |
interface interface-type interface-number | Displays IS-IS packet statistics on a specified interface. | - |
updated-lsp | Displays real-time data of received LSPs. By default, statistics about the LSPs received within the last 1 hour are displayed. |
- |
history | Displays historical data of received LSPs. By default, statistics about the LSPs received within the last 24 hours are displayed. |
- |
level-1 | Displays IS-IS Level-1 statistics. | - |
level-2 | Displays IS-IS Level-2 statistics. | - |
level-1-2 | Displays IS-IS Level-1-2 statistics. | - |
process-id | Displays statistics in a specified IS-IS process. | The value is an integer that ranges from 1 to 65535. |
vpn-instance vpn-instance-name | Displays statistics about the IS-IS multi-instance process in a specified VPN instance. | The value must be an existing VPN instance name. |
Usage Guidelines
You can use the display isis statistics command to view IS-IS process statistics, including the number of routes learned from other IS-IS devices, number of routes imported from other routing protocols, number of locally generated LSPs, and convergence priorities of IS-IS routes.
Example
# Display IS-IS process statistics.
<HUAWEI> display isis statistics
Statistics information for ISIS(1)
----------------------------------
Level-1 Statistics
------------------
Forwarding routes information:
Total IPV4 Learnt Routes: 0
Critical: 0
High : 0
Medium : 0
Low : 0
Total IPv4 Forwarding Routes: 1
Total IPv6 Learnt Routes: 0 Critical: 0 High : 0 Medium : 0 Low : 0
Total IPv6 Forwarding Routes: 1
Imported routes information:
IPv4 Imported Routes:
Static: 0 Direct: 0
ISIS: 0 BGP: 0
RIP: 0 OSPF: 0
IPv6 Imported Routes:
Static: 0 Direct: 0
ISIS: 0 BGP: 0
RIPng: 0 OSPFv3: 0
Number of advertised imported routes:
IPv4 Imported Routes: 0
IPv6 Imported Routes: 0
Lsp information:
LSP Source ID: No. of used LSPs
0000.0000.0022 002
Level-2 Statistics
------------------
Forwarding routes information:
Total IPV4 Learnt Routes: 0
Critical: 0
High : 0
Medium : 0
Low : 0
Total IPv4 Forwarding Routes: 1
Total IPv6 Learnt Routes: 0 Critical: 0 High : 0 Medium : 0 Low : 0
Total IPv6 Forwarding Routes: 1
Imported routes information:
IPv4 Imported Routes:
Static: 0 Direct: 0
ISIS: 0 BGP: 0
RIP: 0 OSPF: 0
IPv6 Imported Routes:
Static: 0 Direct: 0
ISIS: 0 BGP: 0
RIPng: 0 OSPFv3: 0
Number of advertised imported routes:
IPv4 Imported Routes: 0
IPv6 Imported Routes: 0
Lsp information:
LSP Source ID: No. of used LSPs
0000.0000.0002 001
Item |
Description |
---|---|
Total IPV4 Learnt Routes
|
Number of IPv4 routes learned by IS-IS:
|
Total IPv4 Forwarding Routes |
Number of IPv4 routes counted based on the destination address. If there are multiple routes to the same destination, these routes are counted as one route. |
Total IPv6 Learnt Routes
|
Number of IPv6 routes learned by IS-IS:
|
Total IPv6 Forwarding Routes |
Number of IPv6 routes counted based on the destination address. If there are multiple routes to the same destination, these routes are counted as one route. |
IPv4 Imported Routes |
Imported IPv4 routes. |
Static |
Number of imported static routes. |
Direct |
Number of imported direct routes. |
ISIS |
Number of imported IS-IS routes. |
BGP |
Number of imported BGP routes. |
RIP |
Number of imported RIP routes. |
OSPF |
Number of imported OSPF routes. |
IPv6 Imported Routes |
Imported IPv6 routes. |
RIPng |
Number of imported RIPng routes. |
OSPFv3 |
Number of imported OSPFv3 routes. |
LSP Source ID |
System ID of the switch that generates the LSP. |
No. of used LSPs |
Number of used LSPs. |
Number of advertised imported routes |
Number of imported external routes that are advertised. |
# Display IS-IS packet statistics.
<HUAWEI> display isis statistics packet
PDUs information for ISIS(1)
----------------------------
Sent packets:
PDU type Total(packets)
L1 IIH 2516
L1 LSP 84
L1 CSNP 8
L1 PSNP 44
L2 IIH 5028
L2 LSP 80
L2 CSNP 8
L2 PSNP 46
Received packets:
PDU type Total(packets)
L1 IIH 12943
L1 LSP 216
L1 CSNP 3911
L1 PSNP 40
L2 IIH 14907
L2 LSP 206
L2 CSNP 3900
L2 PSNP 41
Item |
Description |
---|---|
PDU type |
Packet type. |
Total(packets) |
Total number of packets. |
L1 IIH |
Level-1 Hello packets. |
L1 LSP |
Level-1 LSPs. |
L1 CSNP |
Level-1 CSNPs. |
L1 PSNP |
Level-1 PSNPs. |
L2 IIH |
Level-2 Hello packets. |
L2 LSP |
Level-2 LSPs. |
L2 CSNP |
Level-2 CSNPs. |
L2 PSNP |
Level-2 PSNPs. |
display isis traffic-eng advertisements
Function
The display isis traffic-eng advertisements command displays latest advertised traffic engineering (TE) information.
Format
display isis traffic-eng advertisements [ { level-1 | level-2 | level-1-2 } | { lsp-id | local } ] * [ process-id | vpn-instance vpn-instance-name ]
display isis process-id traffic-eng advertisements [ { level-1 | level-2 | level-1-2 } | { lsp-id | local } ] *
Parameters
Parameter | Description | Value |
---|---|---|
level-1 | Displays TE information in a Level-1 LSDB. | - |
level-2 | Displays TE information in a Level-2 LSDB. | - |
level-1-2 | Displays TE information in a Level-1 or Level-2 LSDB based on the local node type. That is, if the local node is a Level-1 or Level-2 node, TE information in a Level-1 or Level-2 LSDB is displayed. If the local node is a Level-1-2 node, TE information in Level-1 and Level-2 LSDBs is displayed. | - |
lsp-id | Displays TE information in the specified LSP. | The value is in dotted decimal notation. The value ranges from 16 to 20 in ####.####.####.##-## format, such as 0050.0500.5004.00-00. |
local | Displays locally advertised TE information. | - |
process-id | Specifies an IS-IS process ID. | The value is an integer that ranges from 1 to 65535. |
vpn-instance vpn-instance-name | Specifies the IS-IS multi-instance process in a specified VPN instance. | The value must be an existing VPN instance name. |
Usage Guidelines
You can run the display isis traffic-eng advertisements command to check latest advertised TE information.
Example
# Display advertised TE information.
<HUAWEI> display isis traffic-eng advertisements
TE information for ISIS(1)
--------------------------
Level-1 Link State Database
---------------------------
LSPID LSP Seq Num LSP Checksum LSP Holdtime ATT/P/OL
0000.0000.0001.00-00* 0x00000001 0x3f57 534 0/0/0
NLPID : IPV4
AREA ADDR : 00.0005
Level-2 Link State Database
---------------------------
LSPID LSP Seq Num LSP Checksum LSP Holdtime ATT/P/OL
0000.0000.0001.00-00* 0x0000001c 0xf1ec 687 0/0/0
NLPID : IPV4
AREA ADDR : 00.0005
Router ID : 10.1.1.9
+NBR : 0000.0000.0002.02 COST: 10
Affinity: 0x00000000
Interface IP Address: 10.1.1.1
Physical BW : 12500 Bytes/sec
Reservable BW: 6250 Bytes/sec
Unreserved BW:
BW Unresrv[0] : 6250 Bytes/sec BW Unresrv[1] : 6250 Bytes/sec
BW Unresrv[2] : 6250 Bytes/sec BW Unresrv[3] : 6250 Bytes/sec
BW Unresrv[4] : 6250 Bytes/sec BW Unresrv[5] : 6250 Bytes/sec
BW Unresrv[6] : 6250 Bytes/sec BW Unresrv[7] : 6250 Bytes/sec
TE Cost : 10
Sub Unreserved BW for Class Type 1:
BW Unresrv[0] : 0 Bytes/sec BW Unresrv[1] : 0 Bytes/sec
BW Unresrv[2] : 0 Bytes/sec BW Unresrv[3] : 0 Bytes/sec
BW Unresrv[4] : 0 Bytes/sec BW Unresrv[5] : 0 Bytes/sec
BW Unresrv[6] : 0 Bytes/sec BW Unresrv[7] : 0 Bytes/sec
Bandwidth Constraint Model: Russian Doll
Bandwidth Constraints:
BC[0] : 6250 Bytes/sec BC[1] : 0 Bytes/sec
Local Overbooking Multiplier:
LOM[0] : 100 % LOM[1] : 100 %
+NBR : 0000.0000.0004.00 COST: 10
Affinity: 0x00000000
Interface IP Address: 10.3.1.1
Peer IP Address : 10.3.1.2
Physical BW : 12500 Bytes/sec
Reservable BW: 6250 Bytes/sec
Unreserved BW:
BW Unresrv[0] : 6250 Bytes/sec BW Unresrv[1] : 6250 Bytes/sec
BW Unresrv[2] : 6250 Bytes/sec BW Unresrv[3] : 6250 Bytes/sec
BW Unresrv[4] : 6250 Bytes/sec BW Unresrv[5] : 6250 Bytes/sec
BW Unresrv[6] : 6250 Bytes/sec BW Unresrv[7] : 6250 Bytes/sec
TE Cost : 10
Sub Unreserved BW for Class Type 1:
BW Unresrv[0] : 0 Bytes/sec BW Unresrv[1] : 0 Bytes/sec
BW Unresrv[2] : 0 Bytes/sec BW Unresrv[3] : 0 Bytes/sec
BW Unresrv[4] : 0 Bytes/sec BW Unresrv[5] : 0 Bytes/sec
BW Unresrv[6] : 0 Bytes/sec BW Unresrv[7] : 0 Bytes/sec
Bandwidth Constraint Model: Russian Doll
Bandwidth Constraints:
BC[0] : 6250 Bytes/sec BC[1] : 0 Bytes/sec
Local Overbooking Multiplier:
LOM[0] : 100 % LOM[1] : 100 %
+SRLG NBR ID: 0000.0000.0004.00 Interface IP Address: 10.3.1.1 Neighbor IP Address : 10.3.1.2 Shared Risk Link Group: 10,20
Item |
Description |
---|---|
LSPID |
LSP ID. |
LSP Seq Num |
LSP sequence number. |
LSP Checksum |
LSP checksum. |
LSP Holdtime |
LSP holdtime. |
ATT/P/OL |
|
NLPID |
Network protocol. |
AREA ADDR |
Area address. |
Router ID |
Router ID of the switch. |
+NBR |
System ID of the neighbor with the cost style wide, wide-compatible, or compatible. |
COST |
Cost. |
Affinity: |
Affinity attribute of a link. |
Interface IP Address |
IP address of an interface. |
Peer IP Address |
Peer IP address of an interface. |
Physical BW |
Physical bandwidth of a link. |
Reservable BW |
Reservable bandwidth of a link. |
Unreserved BW |
Unreserved bandwidth. |
Sub Unreserved BW for Class Type 1 |
Unreserved bandwidth for CT1. |
BW Unresrv [ x ] |
Unreserved bandwidth for the link with priority x. |
TE Cost |
TE cost of a link. |
Bandwidth Constraint Model |
Bandwidth constraint model used by a link. |
Bandwidth Constraints |
Bandwidth constraint. |
BC[x] |
Bandwidth constraint of BCx. |
Local Overbooking Multiplier |
Local overbooking multiplier. |
LOM[x] |
Local overbooking multiplier of BCx. |
+SRLG NBR ID |
System ID of a neighbor in a shared risk link group (SRLG). |
Neighbor IP Address |
IP address of the neighbor. |
Shared Risk Link Group |
Shared risk link group. NOTE:
When SRLG is enabled on an interface, TE information contains SRLG information. |
display isis traffic-eng link
Format
display isis traffic-eng link [ { level-1 | level-2 | level-1-2 } | verbose ] * [ process-id | vpn-instance vpn-instance-name ]
display isis process-id traffic-eng link [ { level-1 | level-2 | level-1-2 } | verbose ] *
Parameters
Parameter | Description | Value |
---|---|---|
level-1 | Displays TE link information on a Level-1 switch. | - |
level-2 | Displays TE link information on a Level-2 switch. | - |
level-1-2 | Displays TE link information on a Level-1-2switch. | - |
verbose | Displays detailed TE link information. | - |
process-id | Specifies an IS-IS process ID. | The value is an integer that ranges from 1 to 65535. |
vpn-instance vpn-instance-name | Specifies the IS-IS multi-instance process in a specified VPN instance. | The value must be an existing VPN instance name. |
Example
# Display IS-IS TE link information.
<HUAWEI> display isis traffic-eng link
TE information for ISIS(1)
--------------------------
Level-2 Link Information
------------------------
0000.0000.0001.00--> 0000.0000.0001.01 Type: MULACC LinkID: 10.1.1.1
0000.0000.0002.00--> 0000.0000.0003.00 Type: P2P LinkID: 10.3.3.9
0000.0000.0002.00--> 0000.0000.0001.01 Type: MULACC LinkID: 10.1.1.1
0000.0000.0003.00--> 0000.0000.0002.00 Type: P2P LinkID: 10.2.2.9
0000.0000.0003.00--> 0000.0000.0004.01 Type: MULACC LinkID: 10.1.1.2
0000.0000.0004.00--> 0000.0000.0004.01 Type: MULACC LinkID: 10.1.1.2
Total Number of TE Links in Level-2 Area: 6, Num Active: 6
Item |
Description |
---|---|
Type |
Link type:
|
LinkID |
TE link ID. |
Total Number of TE Links in Level-2 Area |
Total number of TE links in a Level-2 area. |
Num Active |
Number of active TE links. |
# Display detailed IS-IS TE link information.
<HUAWEI> display isis traffic-eng link verbose
TE information for ISIS(1)
--------------------------
Level-2 Link Information
------------------------
Link Status In CSPF : INACTIVE
0000.0000.0001.00-->0000.0000.0002.00 Type: P2P LinkID: 10.2.2.2
Process ID : 1 Router ID : 10.2.2.1
Area ID : 2 Admin Group : 0
Te Cost : 10 Igp Cost : 10
Max Bandwidth : 0 Max Res Bandwidth: 0
Shared Risk Link Group: 20
BC Model : RDM
DS-TE Mode : Non-standard IETF DS-TE Mode
Link Status In CSPF : INACTIVE
0000.0000.0002.00-->0000.0000.0001.00 Type: P2P LinkID: 10.2.2.1
Process ID : 1 Router ID : 10.2.2.2
Area ID : 2 Admin Group : 0
Te Cost : 10 Igp Cost : 10
Max Bandwidth : 0 Max Res Bandwidth: 0
BC Model : RDM
DS-TE Mode : Non-standard IETF DS-TE Mode
Total Number of TE Links in Level-2 Area: 2, Num Active: 0
Item |
Description |
---|---|
Link Status In CSPF |
Link status in CSPF calculation. |
Process ID |
IS-IS process ID. |
Router ID |
Router ID. |
Area ID |
Area ID. |
Admin Group |
Administrative group. |
Te Cost |
TE cost. |
Igp Cost |
IGP cost. |
Max Bandwidth |
Maximum bandwidth. |
Max Res Bandwidth |
Maximum reservable bandwidth. |
Shared Risk Link Group |
Shared risk link group. |
BC Model |
Bandwidth constraint model. |
DS-TE Mode |
DS-TE mode, including standard and non-standard DS-TE modes. |
display isis traffic-eng network
Format
display isis traffic-eng network [ level-1 | level-2 | level-1-2 ] [ process-id | vpn-instance vpn-instance-name ]
display isis process-id traffic-eng network [ level-1 | level-2 | level-1-2 ]
Parameters
Parameter | Description | Value |
---|---|---|
level-1 | Displays TE network information on a Level-1 router. | - |
level-2 | Displays TE network information on a Level-2 router. | - |
level-1-2 | Displays TE network information on a Level-1-2 router. | - |
process-id | Specifies an IS-IS process ID. | The value is an integer that ranges from 1 to 65535. |
vpn-instance vpn-instance-name | Specifies the IS-IS multi-instance process in a specified VPN instance. | The value must be an existing VPN instance name. |
Usage Guidelines
This command does not take effect on P2P networks.
If the IS level is not specified, Level-1-2 TE network information is displayed.
Example
# Display IS-IS TE network information.
<HUAWEI> display isis traffic-eng network
TE information for ISIS(1)
--------------------------
Level-2 Network Information
---------------------------
DIS Router ID : 10.1.1.9 DIS''s Ip Address : 10.1.1.1
Status In CSPF : ACTIVE Attached Router Count : 2
List of Attached Routers
RouterId : 10.1.1.9 Nbr : 0000.0000.0001.00 Link State : 1
RouterId : 10.2.2.9 Nbr : 0000.0000.0002.00 Link State : 1
DIS Router ID : 10.4.4.9 DIS''s Ip Address : 10.1.1.2
Status In CSPF : ACTIVE Attached Router Count : 2
List of Attached Routers
RouterId : 10.4.4.9 Nbr : 0000.0000.0004.00 Link State : 1
RouterId : 10.3.3.9 Nbr : 0000.0000.0003.00 Link State : 1
Total Number of TE Networks in Level-2 Area: 2, Num Active: 2
Item |
Description |
---|---|
DIS Router ID |
Router ID of the DIS. |
DIS's Ip Address |
IP address of the DIS. |
Status In CSPF |
Whether CSPF is enabled on the switch. |
Attached Router Count |
Number of connected switchs, including the local switch. |
List of Attached Routers |
List of connected switchs. |
RouterId |
Router ID of the local switch. |
Nbr |
IP address of the neighbor. |
Link State |
Link status. |
Total Number of TE Networks in Level-2 Area |
Total number of networks on which TE is enabled in a Level-2 area. |
display isis traffic-eng statistics
Format
display isis traffic-eng statistics [ process-id | vpn-instance vpn-instance-name ]
display isis process-id traffic-eng statistics
Parameters
Parameter | Description | Value |
---|---|---|
process-id | Specifies an IS-IS process ID. If no process ID is specified, TE statistics about all IS-IS processes are displayed. | The value is an integer that ranges from 1 to 65535. |
vpn-instance vpn-instance-name | Specifies the IS-IS multi-instance process in a specified VPN instance. | The value must be an existing VPN instance name. |
Usage Guidelines
You can use this command to view IS-IS TE statistics on the switch, including the IS level, cost style, IS-IS TE level, and IS-IS router ID.
Example
# Display IS-IS TE statistics.
<HUAWEI> display isis traffic-eng statistics
TE information for ISIS(1)
--------------------------
TE Statistics Information
-------------------------
IS-IS System Type : Level-1-2
IS-IS Cost Style Status : Wide
IS-IS Level-1 Traffic Engineering Status : Disabled
IS-IS Level-2 Traffic Engineering Status : Enabled
IS-IS Router ID : 10.1.1.9
Item |
Description |
---|---|
IS-IS System Type |
IS level. |
IS-IS Cost Style Status |
Cost style of the switch. |
IS-IS Level-1 Traffic Engineering Status |
TE status of a Level-1 router. |
IS-IS Level-2 Traffic Engineering Status |
TE status of a Level-2 router. |
IS-IS Router ID |
Router ID of an IS-IS router. |
display isis traffic-eng sub-tlvs
Function
The display isis traffic-eng sub-tlvs command displays the types of sub-TLVs carrying DS-TE parameters.
Format
display isis traffic-eng sub-tlvs [ process-id | vpn-instance vpn-instance-name ]
display isis process-id traffic-eng sub-tlvs
Parameters
Parameter | Description | Value |
---|---|---|
process-id | Specifies an IS-IS process ID. | The value is an integer that ranges from 1 to 65535. |
vpn-instance vpn-instance-name | Specifies the IS-IS multi-instance process in a specified VPN instance. | The value must be an existing VPN instance name. |
Usage Guidelines
You can run the display isis traffic-eng sub-tlvs command to check the types of sub-TLVs carrying DS-TE parameters.
Example
# Display the types of sub-TLVs carrying DS-TE parameters.
<HUAWEI> display isis traffic-eng sub-tlvs
IS-IS(1) SubTlv Information
---------------------------------
Unreserved sub-pool bandwidth sub-tlv value : 251
Bandwidth constraint sub-tlv value : 252
LO multiplier sub-tlv value : 253
Item |
Description |
---|---|
IS-IS(1) SubTlv Information |
Sub-TLV information about IS-IS process 1. |
Unreserved sub-pool bandwidth sub-tlv value |
Sub-TLV of the unreserved sub-pool bandwidth. |
Bandwidth constraint sub-tlv value |
Sub-TLV of the bandwidth constraint. |
LO multiplier sub-tlv value |
Sub-TLV of the local overbooking multiplier. |
display snmp-agent trap feature-name isis all
Function
The display snmp-agent trap feature-name isis all command displays the status of the trap function on the IS-IS module.
Usage Guidelines
If the trap function has been enabled, the status is displayed as on. Otherwise, the status is displayed as off.
To change the status of the trap function, run the snmp-agent trap enable feature-name isis command to enable the trap function or run the undo snmp-agent trap enable feature-name isis command to disable the trap function.
Example
# Display the status of the trap function on the IS-IS module.
<HUAWEI> display snmp-agent trap feature-name isis all
------------------------------------------------------------------------------
Feature name: ISIS
Trap number : 17
------------------------------------------------------------------------------
Trap name Default switch status Current switch status
isisDatabaseOverload off off
isisManualAddressDrops off off
isisCorruptedLSPDetected off off
isisAttemptToExceedMaxSequence off off
isisIDLenMismatch off off
isisMaxAreaAddressesMismatch off off
isisOwnLSPPurge off off
isisSequenceNumberSkip off off
isisAuthenticationTypeFailure off off
isisAuthenticationFailure off off
isisVersionSkew off off
isisAreaMismatch off off
isisRejectedAdjacency off off
isisLSPTooLargeToPropagate off off
isisOrigLSPBuffSizeMismatch off off
isisProtocolsSupportedMismatch off off
isisAdjacencyChange off off
Item |
Description |
---|---|
Feature name |
Name of the module that trap messages belong to. |
Trap number |
Number of trap messages. |
Trap name |
Name of the trap message of the IS-IS module:
|
Default switch status |
Default status of the trap function:
|
Current switch status |
Current status of the trap function:
|
domain-authentication-mode
Function
The domain-authentication-mode command configures an IS-IS routing domain to authenticate received Level-2 packets using the specified authentication mode and password and adds authentication information to Level-2 packets to be sent.
The undo domain-authentication-mode command cancels authenticating Level-2 packets and deletes the added authentication information from Level-2 packets.
By default, the system neither encapsulates generated Level-2 packets with authentication information nor authenticates received Level-2 packets.
Format
domain-authentication-mode { simple { plain plain-text | [ cipher ] plain-cipher-text } | md5 { [ cipher ] plain-cipher-text | plain plain-text } } [ ip | osi ] [ snp-packet { authentication-avoid | send-only } | all-send-only ]
domain-authentication-mode keychain keychain-name [ snp-packet { authentication-avoid | send-only } | all-send-only ]
domain-authentication-mode hmac-sha256 key-id key-id { plain plain-text | [ cipher ] plain-cipher-text } [ snp-packet { authentication-avoid | send-only } | all-send-only ]
undo domain-authentication-mode
Parameters
Parameter | Description | Value |
---|---|---|
simple | Transmits the password in plain text. NOTICE:
Simple authentication has potential risks. HMAC-SHA256 cipher text authentication is recommended. |
- |
plain plain-text | Specifies the authentication password in plain text.
You can enter only the password in plain text. When you view the configuration
file, the password is displayed in plain text. NOTICE:
If plain is selected, the password is saved in the configuration file in plain text. This brings security risks. It is recommended that you select cipher to save the password in cipher text. |
The value is a string of case-sensitive characters without spaces. The value contains digits and letters. When the authentication mode is simple, the value is a string of 1 to 16 characters. When the authentication mode is md5 or hmac-sha256, the value is a string of 1 to 255 characters. |
cipher plain-cipher-text | Specifies the authentication password in cipher text. You can enter the password in plain or cipher text. When you view the configuration file, the password is displayed in cipher text. By default, the password is in cipher text. |
The value is a string of case-sensitive characters without spaces. The value contains digits and letters. When the authentication mode is simple, the value is a string of 1 to 16 characters in plain text or a string of 32 or 48 characters in cipher text. When the authentication mode is md5 or hmac-sha256, the value is a string of 1 to 255 characters in plain text or a string of 20 to 392 characters in cipher text. |
md5 | Transmits the password that is encrypted using MD5. NOTICE:
MD5 authentication has potential risks. HMAC-SHA256 cipher text authentication is recommended. |
- |
keychain keychain-name | Specifies the keychain that changes with time. | The value is a string of 1 to 47 case-insensitive characters. Except the question mark (?) and space. However, when double quotation marks (") are used around the string, spaces are allowed in the string. |
ip | Indicates the IP authentication password. When neither ip nor osi is specified, the default parameter osi is used. | - |
osi | Indicates the OSI authentication password. When neither ip nor osi is specified, the default parameter osi is used. | - |
snp-packet | Authenticates SNPs. | - |
authentication-avoid | Encapsulates generated LSPs but not SNPs with authentication information and authenticates received LSPs but not SNPs. | - |
send-only | Encapsulates generated LSPs and SNPs with authentication information, and authenticates received LSPs but not SNPs. | - |
all-send-only | Encapsulates generated LSPs and SNPs with authentication information, but does not authenticate received LSPs and SNPs. | - |
hmac-sha256 | Encapsulates generated packets with the HMAC-SHA256 authentication and a password encrypted by the HMAC-SHA256 algorithm and authenticates received packets. | - |
key-id key-id | Indicates key ID of the HMAC-SHA256 algorithm. | It is an integer ranging from 0 to 65535. |
Usage Guidelines
Generally, the IS-IS packets to be sent are not encapsulated with authentication information, and the received packets are not authenticated. If a user sends malicious packets to attack a network, information on the entire network may be stolen. Therefore, you can configure IS-IS authentication to improve the network security.
The domain authentication password is encapsulated into Level-2 IS-IS packets. Only the packets that pass the domain authentication can be accepted. Therefore, you can configure IS-IS domain authentication to authenticate Level-2 area.
PrecautionsThis command is valid in all the topologies in the specified IS-IS process and is only valid for Level-2 or Level-1-2 routers.
By using this command, you can discard all the Level-2 packets whose domain authentication password does not contain the one set through this command. At the same time, IS-IS adds the configured domain authentication password in all the Level-2 packets carrying routing information sent from the local node.
The authentication takes effect on the interface with the password. The port without the password can still receive the LSP and SNP with password.
filter-policy export (IS-IS)
Function
The filter-policy export command configures a filtering policy to allow IS-IS to filter the imported routes to be advertised.
The undo filter-policy export command cancels the filtering function.
By default, IS-IS does not filter the imported routes to be advertised.
Format
filter-policy { acl-number | acl-name acl-name | ip-prefix ip-prefix-name | route-policy route-policy-name } export [ protocol [ process-id ] ]
undo filter-policy [ acl-number | acl-name acl-name | ip-prefix ip-prefix-name | route-policy route-policy-name ] export [ protocol [ process-id ] ]
Parameters
Parameter | Description | Value |
---|---|---|
acl-number | Specifies the number of a basic ACL. | The value is an integer that ranges from 2000 to 2999. |
acl-name acl-name | Specifies the name of a named ACL. | The value is a string of 1 to 64 case-sensitive characters without spaces. The value must start with a letter. |
ip-prefix ip-prefix-name | Specifies the name of an IP prefix-list. | The name is a string of 1 to 169 case-sensitive characters, with spaces not supported. When double quotation marks are used around the string, spaces are allowed in the string. |
route-policy route-policy-name | Specifies the name of a route-policy to filter routes based on tag and other protocol parameters. | The name is a string of 1 to 40 case-sensitive characters, with spaces not supported. When double quotation marks are used around the string, spaces are allowed in the string. |
protocol | Specifies the imported routes that need to be filtered when the routes are advertised. If this parameter is not specified, all the imported routes to be advertised are filtered. | The value can be direct, static, unr, rip, bgp, ospf, or another isis process. |
process-id | Specifies the process ID if protocol is rip, ospf, or another isis process. | The value is an integer that ranges from 1 to 65535. |
Usage Guidelines
Usage Scenario
When IS-IS and other routing protocols are running on the network, and a boundary router in the IS-IS routing domain has imported routes of other routing protocols, the boundary router will advertise all the imported routes to its IS-IS neighbors by default. To advertise some of the imported routes to neighbors, use the filter-policy export command.
Precautions
Running the filter-policy export command does not affect the routes on the local device, but only advertises specific imported routes to IS-IS neighbors.
For an ACL, when the rule command is used to configure a filtering rule, the filtering rule is effective only with the source address range that is specified by the source parameter and with the time period that is specified by the time-range parameter.
Creating an ACL before it is referenced is recommended. If a nonexistent ACL is referenced using the command, all external routes of the specified routing domain that are imported by IS-IS are advertised to the specified neighbor.
Creating an IP prefix list or route-policy before it is referenced is recommended. By default, nonexistent IP prefix lists or route-policies cannot be referenced using the command. If the route-policy nonexistent-config-check disable command is run in the system view and a nonexistent IP prefix list or route-policy is referenced using the current command, all external routes of the specified routing domain that are imported by IS-IS are advertised to the specified neighbor.
filter-policy import (IS-IS)
Function
The filter-policy import command configures a filtering policy to allow IS-IS to filter the received routes to be added to the IP routing table.
The undo filter-policy import command cancels the filtering function.
By default, IS-IS does not filter the received routes to be added to the IP routing table.
Format
filter-policy { acl-number | acl-name acl-name | ip-prefix ip-prefix-name | route-policy route-policy-name } import
undo filter-policy [ acl-number | acl-name acl-name | ip-prefix ip-prefix-name | route-policy route-policy-name ] import
Parameters
Parameter | Description | Value |
---|---|---|
acl-number | Specifies the number of a basic ACL. | The value is an integer that ranges from 2000 to 2999. |
acl-name acl-name | Specifies the name of a named ACL. | The value is a string of 1 to 64 case-sensitive characters without spaces. The value must start with a letter. |
ip-prefix ip-prefix-name | Specifies the name of an IP prefix list. | The name is a string of 1 to 169 case-sensitive characters, with spaces not supported. When double quotation marks are used around the string, spaces are allowed in the string. |
route-policy route-policy-name | Specifies the name of a route-policy to filter routes based on tag and other protocol parameters. | The name is a string of 1 to 40 case-sensitive characters, with spaces not supported. When double quotation marks are used around the string, spaces are allowed in the string. |
Usage Guidelines
Usage Scenario
IS-IS routing entries need to be added to an IP routing table to guide IP packet forwarding. If an IS-IS routing table has routes destined for a specific network segment, but these routes are not expected to be added to an IP routing table, run the filter-policy import command with specified parameters to allow only the needed IS-IS routes to be added to the IP routing table.
Precautions
Running the filter-policy import command on a router does not affect LSP flooding and LSDB synchronization on the router, but affects the local IP routing table.
For an ACL, when the rule command is used to configure a filtering rule, the filtering rule is effective only with the source address range that is specified by the source parameter and with the time period that is specified by the time-range parameter.
Creating an ACL before it is referenced is recommended. If a nonexistent ACL is referenced using the command, all routes received by IS-IS are delivered to the IP routing table.
Creating an IP prefix list or route-policy before it is referenced is recommended. By default, nonexistent IP prefix lists or route-policies cannot be referenced using the command. If the route-policy nonexistent-config-check disable command is run in the system view and a nonexistent IP prefix list or route-policy is referenced using the current command, all routes received by IS-IS are delivered to the IP routing table.
flash-flood
Function
The flash-flood command enables LSP fast flooding to speed up IS-IS network convergence.
The undo flash-flood command disables LSP fast flooding.
By default, LSP fast flooding is disabled.
Format
flash-flood [ lsp-count | max-timer-interval interval | [ level-1 | level-2 ] ] *
undo flash-flood [ lsp-count | max-timer-interval interval | [ level-1 | level-2 ] ] *
Parameters
Parameter | Description | Value |
---|---|---|
lsp-count | Specifies the maximum number of LSPs to be flooded at a time on an interface. | The value is an integer that ranges from 1 to 15. The default value is 5. |
max-timer-interval interval | Specifies the maximum interval for LSP flooding. | The value is an integer that ranges from 10 to 50000, in milliseconds. The default value is 10 ms. |
level-1 | Enables LSP fast flooding in Level-1. If no level is specified, by default, LSP fast flooding is enabled in both Level-1 and Level-2. | - |
level-2 | Enables LSP fast flooding in Level-2. If no level is specified, by default, LSP fast flooding is enabled in both Level-1 and Level-2. | - |
Usage Guidelines
In most cases, when an IS-IS router receives new LSPs from other routers, it updates the LSPs in its LSDB and periodically floods the updated LSPs according to a timer.
LSP fast flooding speeds up LSDB synchronization because it allows a device to flood fewer LSPs than the specified number before route calculation when the device receives one or more new LSPs. This mechanism also speeds up network convergence.
PrecautionsYou can specify the number of LSPs to be flooded each time. The number is valid for all IS-IS interfaces. If the number of LSPs to be flooded is greater than the specified value, the lsp-count number of the LSPs are sent. If the timer is configured and does not time out before route calculation, LSPs are flooded immediately; otherwise, LSPs are flooded when the timer times out.
frr (IS-IS)
Function
The frr command enables the IS-IS Auto FRR function and displays the IS-IS Auto FRR view.
The undo frr command disables the IS-IS Auto FRR function.
By default, the IS-IS Auto FRR function is disabled.
Usage Guidelines
With the development of networks, the Voice over IP (VoIP) and on-line video services require high-quality real-time transmission. Nevertheless, if an IS-IS fault occurs, multiple processes, including fault detection, LSP update, LSP flooding, route calculation, and FIB entry delivery, must be performed to switch traffic to a new link. This results in a lengthy traffic interruption, which cannot meet the requirement for real-time services.
IS-IS Auto FRR can fast switch traffic to a backup link, ensuring millisecond-level traffic interruption. This protects traffic and improves IS-IS network reliability.
PrecautionsAfter running this command, run the loop-free-alternate command to calculate a loop-free backup route.
frr-policy route
Function
The frr-policy route command configures a filtering policy to allow IS-IS to filter the IS-IS backup routes to be added in the IP routing table.
The undo frr-policy route command cancels the filtering function.
By default, IS-IS does not filter the IS-IS backup routes to be added in the IP routing table.
Parameters
Parameter | Description | Value |
---|---|---|
route-policy route-policy-name | Specifies the name of a route-policy to filter IS-IS backup routes. | The name is a string of 1 to 40 case-sensitive characters, with spaces not supported. When double quotation marks are used around the string, spaces are allowed in the string. |
Usage Guidelines
The filtering policy can be configured as required. In this case, the IS-IS backup route that satisfies specified rules can be added to the IP routing table and delivered to the forwarding table. When a fault occurs on the route, the system can fast switch the forwarded traffic to the IS-IS backup route to protect traffic.
You can use IP prefix lists or ACLs to filter IS-IS backup routes.
PrecautionsIf you run the frr-policy route command multiple times, only the latest configuration takes effect.
Creating a route-policy before it is referenced is recommended. By default, nonexistent route-policies cannot be referenced using the command. If the route-policy nonexistent-config-check disable command is run in the system view and a nonexistent route-policy is referenced using the current command, IS-IS adds all backup routes to the IP routing table.
graceful-restart (IS-IS)
Function
The graceful-restart command enables the graceful restart (GR) function for an IS-IS process.
The undo graceful-restart command disables the GR function for an IS-IS process.
By default, the GR function is disabled for an IS-IS process.
Usage Guidelines
Usage Scenario
This command is valid for all topologies in an IS-IS process.
When an IS-IS process on a device is restarted, neighbors delete neighbor relationships with the device and delete LSPs from the device. As a result, routes of neighbors are calculated incorrectly and packets are lost. Consequently, the network is temporarily interrupted.
To solve this problem, you can enable GR of the IS-IS process by running the graceful-restart command.
After the graceful-restart command is run, the device can notify its restart status to neighbors and permit neighbors to maintain neighbor relationships. In this manner, nonstop packet forwarding is implemented.
Configuration Impact
If IS-IS GR is enabled on a router, the holdtimes of this router's neighbors are automatically changed to 60s if they are smaller than 60s, and the holdtimes of this router's neighbors are kept unchanged if they are equal to or greater than 60s. If a router is faulty in non-GR scenarios, its neighbors need to take 60 seconds to detect the fault. A large number of packets may be discarded within the 60 seconds.
To resolve this problem, run the graceful-restart no-impact-holdtime command to configure the holdtimes of the neighbors to remain unchanged after IS-IS GR is enabled.
graceful-restart no-impact-holdtime
Function
The graceful-restart no-impact-holdtime command configures the holdtime of an IS-IS neighbor to remain unchanged after IS-IS GR is enabled.
The undo graceful-restart no-impact-holdtime command cancels the configuration.
By default, after IS-IS GR is enabled, the holdtime of an IS-IS neighbor is automatically changed to 60s if it is smaller than 60s, and the holdtime of an IS-IS neighbor is kept unchanged if it is equal to or greater than 60s.
Usage Guidelines
Usage Scenario
If IS-IS GR is enabled on a router, the holdtimes of this router's neighbors are automatically changed to 60s if they are smaller than 60s, and the holdtimes of this router's neighbors are kept unchanged if they are equal to or greater than 60s. If a router is faulty in non-GR scenarios, its neighbors need to take 60 seconds to detect the fault. A large number of packets may be discarded within the 60 seconds.
To resolve this problem, run the graceful-restart no-impact-holdtime command to configure the holdtimes of the neighbors to remain unchanged after IS-IS GR is enabled. After you run this command, the router can still fast detect neighbor status, implementing rapid network convergence.
Prerequisites
You have run the graceful-restart (IS-IS) command in the IS-IS view.
graceful-restart interval
Function
The graceful-restart interval command sets the GR T3 timer.
The undo graceful-restart interval command restores the default T3 timer.
By default, the GR T3 timer is 300 seconds.
Parameters
Parameter | Description | Value |
---|---|---|
interval-value | Specifies the GR T3 timer. | The value is an integer that ranges from 30 to 1800,
in seconds. Setting a value greater than that of the GR T2 timer specified using the graceful-restart t2-interval command is recommended. If the value is smaller than that of the GR T2 timer, the GR may fail. |
Usage Guidelines
Usage Scenario
IS-IS GR can be classified into restarting GR and starting GR based on the restart type. The restarting GR is triggered by a master/slave main control board switchover or an IS-IS process restart, while the starting GR is triggered by a restart of the IS-IS-enabled router.
During a restarting GR, the restarter restarts the protocol and starts the T1, T2, and T3 timers at the same time. The value of the T1 timer indicates the longest time during which the GR restarter waits for the LSP from the GR helper. The value of the T2 timer indicates the longest time during which the system waits for the LSDB synchronization. The value of the T3 timer indicates the longest time that a GR lasts. A router disables the T3 timer after the LSDB synchronization ends in all areas. If LSDBs are not synchronized yet when the T3 timer expires, the GR fails.
You can run the graceful-restart interval command to adjust the value of the T3 timer so that the LSDB synchronization can end before the T3 timer expires, which prevents the GR failure.
Prerequisites
The GR of the IS-IS process has been enabled using the graceful-restart command.
Configuration Impact
If the graceful-restart interval command is run on an IS-IS-enabled router, interval-value is used as the holdtime of its neighbor during the GR.
Precautions
The graceful-restart interval command is applicable only to restarting GRs.
graceful-restart suppress-sa
Function
The graceful-restart suppress-sa command suppresses the suppress-advertisement (SA) bit of the restart TLV.
The undo graceful-restart suppress-sa command restores the default setting.
By default, the SA bit of the restart TLV is not suppressed.
Usage Guidelines
The switch that starts for the first time (not including GR) does not maintain the forwarding status. If the switch does not start for the first time, the LSPs generated when the switch run last time may exist in the LSP database of other switchs in the network.
The sequence number of the LSP fragment is reinitialized when the switch starts, so the LSPs stored in the LSP database of other switchs seem to be newer than the LSPs generated after the switch starts. This leads to the black hole in the network, and the black hole lasts until the switch regenerates its LSPs and advertises the LSPs with the highest sequence number.
If the neighbor suppresses the advertisement of the adjacency relationship to this switch during the switch starting until the switch advertises the updated LSPs, the preceding case can be avoided.
PrerequisitesGR has been enabled for the IS-IS process using the graceful-restart command.
graceful-restart t2-interval
Function
The graceful-restart t2-interval command configures a value for the T2 timer during an IS-IS GR.
The undo graceful-restart t2-interval command restores the default value of the T2 timer.
By default, the GR T2 timer is 60 seconds.
Parameters
Parameter | Description | Value |
---|---|---|
interval-value | Specifies the value of the T2 timer during the IS-IS GR. |
The value is an integer that ranges from 30 to 1800,
in seconds. Setting a value smaller than that of the GR T3 timer specified using the graceful-restart interval command is recommended. |
Usage Guidelines
Usage Scenario
IS-IS GR can be classified into restarting GR and starting GR based on the restart type. The restarting GR is triggered by a master/slave main control board switchover or an IS-IS process restart, while the starting GR is triggered by a restart of the IS-IS-enabled router.
A GR restarter starts the T1 and T2 timers during all GRs. The value of the T1 timer indicates the longest time during which the GR restarter waits for the LSP from the GR helper. The value of the T2 timer indicates the longest time during which the system waits for the LSDB synchronization. The T2 timer is disabled after the LSDB synchronization among Level-1 or Level-2 routers ends. If LSDBs are not synchronized yet when the T2 timer expires, the GR fails.
You can run the graceful-restart t2-interval command to adjust the value of the T2 timer so that the LSDB synchronization can end before the T2 timer expires, which prevents the GR failure.
Prerequisites
The GR of the IS-IS process has been enabled using the graceful-restart command.
Precautions
If the value of the T2 timer is too small, a GR may fail. Keeping the default value is recommended. If you want to adjust it, configure a value to meet the conditions on the live network.
import-route (IS-IS)
Function
The import-route command configures IS-IS to import routes from other routing protocols.
The undo import-route command restores the default setting.
By default, IS-IS does not import routes from other routing protocols.
Format
import-route { { rip | isis | ospf } [ process-id ] | static | direct | unr | bgp [ permit-ibgp ] } [ cost-type { external | internal } | cost cost | tag tag | route-policy route-policy-name | [ level-1 | level-2 | level-1-2 ] ] *
import-route { { rip | isis | ospf } [ process-id ] | direct | unr | bgp [ permit-ibgp ] } inherit-cost [ tag tag | route-policy route-policy-name | [ level-1 | level-2 | level-1-2 ] ] *
import-route limit limit-number [ threshold-alarm upper-limit upper-limit-value lower-limit lower-limit-value ] { level-1 | level-2 | level-1-2 }
undo import-route { { rip | isis | ospf } [ process-id ] | static | direct | unr | bgp [ permit-ibgp ] } [ cost-type { external | internal } | cost cost | tag tag | route-policy route-policy-name | [ level-1 | level-2 | level-1-2 ] ] *
undo import-route { { rip | isis | ospf } [ process-id ] | direct | unr | bgp [ permit-ibgp ] } inherit-cost [ tag tag | route-policy route-policy-name | [ level-1 | level-2 | level-1-2 ] ] *
undo import-route limit [ limit-number ] [ threshold-alarm upper-limit upper-limit-value lower-limit lower-limit-value ] { level-1 | level-2 | level-1-2 }
Parameters
Parameter | Description | Value |
---|---|---|
rip | Indicates that the routing protocol from which routes are imported is RIP. | - |
isis | Indicates that the routing protocol from which routes are imported is IS-IS. | - |
ospf | Indicates that the routing protocol from which routes are imported is OSPF. | - |
process-id | Specifies a process ID. When protocol is rip, ospf, or isis, a process ID needs to be specified. The default process ID is 1. | The value is an integer that ranges from 1 to 65535. |
static | Indicates that the imported routes are active static routes. | - |
direct | Indicates that the imported routes are direct routes. | - |
unr | Specifies the imported source routing protocol as unr. User Network Route (UNR) is allocated if dynamic routing protocols cannot be used when users are getting online. |
- |
bgp | Indicates that the routing protocol from which routes are imported is BGP. | - |
permit-ibgp | Specifies the imported source route as an IBGP route. If you do not configure this parameter, only the EBGP routes are imported. |
- |
cost-type { external | internal } | Indicates the cost type of the imported routes. By
default, the cost type is external. The
configuration of this parameter will affect the costs of imported
routes.
NOTE:
If the cost style of the switch is wide, compatible, or wide-compatible, the cost types of imported routes are not differentiated between external and internal. |
- |
cost cost | Specifies the cost value of imported routes. | If the cost style of the switch is wide or wide-compatible, the cost value of imported routes ranges from 0 to 4261412864. Otherwise, the value ranges from 0 to 63. The default value is 0. |
tag tag | Specifies the administrative tag of imported routes. | The value is an integer that ranges from 1 to 4294967295. |
route-policy route-policy-name | Specifies the name of a route-policy. | The name is a string of 1 to 40 case-sensitive characters, with spaces not supported. When double quotation marks are used around the string, spaces are allowed in the string. |
level-1 | Indicates that routes are imported into Level-1 routing tables. If no level is specified, routes are imported to Level-2 routing tables by default. | - |
level-2 | Indicates that routes are imported into Level-2 routing tables. If no level is specified, routes are imported to Level-2 routing tables by default. | - |
level-1-2 | Indicates that routes are imported into Level-1 and Level-2 routing tables. If no level is specified, routes are imported to Level-2 routing tables by default. | - |
inherit-cost | Indicates that the original cost value of imported external routes is retained. When IS-IS is configured to retain the original cost value of imported routes, the cost style and cost value cannot be set for the imported routes. | - |
limit limit-number | Specifies the maximum number of external routes allowed to be imported to the IS-IS area. | The value is an integer ranging from 1 to 10000000. |
threshold-alarm | Specifies the alarm threshold for imported routes. | - |
upper-limit upper-limit-value | Specifies the upper alarm threshold for imported routes. | The value is an integer ranging from 1 to 100. The default value is 80. |
lower-limit lower-limit-value | Specifies the lower alarm threshold for imported routes. | The value is an integer ranging from 1 to 100. The default value is 70. |
Usage Guidelines
Usage Scenario
Configure boundary devices in the IS-IS routing domain to advertise default routes to the IS-IS routing domain.
Configure boundary devices in the IS-IS routing domain to import routes from other routing domains into the IS-IS routing domain.
If there are multiple boundary devices in the IS-IS routing domain, optimal routes destined for another routing domain need to be selected. This requires all devices in the IS-IS routing domain learn all or some external routes. Configure boundary devices in the IS-IS routing domain to import routes from other routing domains into the IS-IS routing domain. Alternatively, run the route-policy route-policy-name command to import some external routes from other routing domains.
Precautions
When the routes of the other protocols are imported, you can set the cost value and cost style for the imported route. You can also configure IS-IS to retain the original cost value of the imported external route. During route advertisement and route calculation, the original cost values of these routes are used. In this case, the cost style and cost value of the imported routes cannot be set, and static routes cannot be imported.
After the import-route direct command is executed, routes to the network segment where the IP address of the management interface belongs are also imported in the ISIS routing table. Therefore, use this command with caution.
Creating a route-policy before it is referenced is recommended. By default, nonexistent route-policies cannot be referenced using the command. If the route-policy nonexistent-config-check disable command is run in the system view and a nonexistent route-policy is referenced using the current command, all routes of the specified routing domain are imported to the IS-IS routing table.
Example
# Configure IS-IS to import static routes and set the cost value of the routes to 15.
<HUAWEI> system-view [HUAWEI] isis [HUAWEI-isis-1] import-route static cost 15
# Configure IS-IS to import OSPF routes and retain the original cost value of the routes.
<HUAWEI> system-view [HUAWEI] isis [HUAWEI-isis-1] import-route ospf inherit-cost
import-route isis level-1 into level-2
Function
The import-route isis level-1 into level-2 command configures route leaking from Level-1 areas to Level-2 areas.
The undo import-route isis level-1 into level-2 command prohibits route leaking from Level-1 areas to Level-2 areas.
By default, all Level-1 routing information, excluding information about default routes, is leaked to Level-2 areas.
Format
import-route isis level-1 into level-2 [ filter-policy { acl-number | acl-name acl-name | ip-prefix ip-prefix-name | route-policy route-policy-name } | tag tag | direct allow-filter-policy ] *
undo import-route isis level-1 into level-2 [ filter-policy { acl-number | acl-name acl-name | ip-prefix ip-prefix-name | route-policy route-policy-name } | tag tag | direct allow-filter-policy ] *
Parameters
Parameter | Description | Value |
---|---|---|
filter-policy | Specifies a filtering policy. | - |
acl-number | Specifies the number of a basic ACL. | The value is an integer that ranges from 2000 to 2999. |
acl-name acl-name | Specifies the name of a named ACL. | The value is a string of 1 to 64 case-sensitive characters without spaces. The value must start with a letter. |
ip-prefix ip-prefix-name | Specifies the name of an IP prefix list. Only the routes that match the IP prefix can be leaked to Level-2 areas. | The name is a string of 1 to 169 case-sensitive characters, with spaces not supported. When double quotation marks are used around the string, spaces are allowed in the string. |
route-policy route-policy-name | Specifies the name of a route-policy. | The name is a string of 1 to 40 case-sensitive characters, with spaces not supported. When double quotation marks are used around the string, spaces are allowed in the string. |
tag tag | Specifies the administrative tag value of imported routes. | The value is an integer that ranges from 1 to 4294967295. |
direct allow-filter-policy | Specifies the filtering policy to filter the direct routes. Only the IS-IS Level-1 area direct routing information that matches the filtering policy can be shared with the Level-2 area with this parameter, and all Level-1 area direct routing information will be shared with the Level-2 area without this parameter. |
- |
Usage Guidelines
Usage Scenario
IS-IS is designed for a hierarchical network. This means that routes of Level-1 areas are leaked to Level-2 areas, whereas routes of Level-2 areas are not leaked to Level-1 areas.
The import-route isis level-1 into level-2 command can be run only on Level-1-2 routers to allow some or no Level-1 routes to be leaked to Level-2 areas. For example, there are two Level-1-2 routers in a Level-1 area. You can run the import-route isis level-1 into level-2 command on one Level-1-2 router to allow some Level-1 routes to be leaked to the Level-2 area, and run the import-route isis level-1 into level-2 command on the other Level-1-2 router to allow the remaining Level-1 routes to be leaked to the Level-2 area. Then, traffic that is sent from the Level-2 area and destined for different network segments in Level-1 area will be forwarded to different Level-1-2 routers. This allows route selection to be controlled.
Precautions
For an ACL, when the rule command is used to configure a filtering rule, the filtering rule is effective only with the source address range that is specified by the source parameter and with the time period that is specified by the time-range parameter.
Creating an ACL before it is referenced is recommended. If a nonexistent ACL is referenced using the command, all routes in the Level-1 area leak to the Level-2 area.
Creating an IP prefix list or route-policy before it is referenced is recommended. By default, nonexistent IP prefix lists or route-policies cannot be referenced using the command. If the route-policy nonexistent-config-check disable command is run in the system view and a nonexistent IP prefix list or route-policy is referenced using the current command, all routes in the Level-1 area leak to the Level-2 area.
import-route isis level-2 into level-1
Function
The import-route isis level-2 into level-1 command configures route leaking from Level-2 areas to Level-1 areas.
The undo import-route isis level-2 into level-1 command prohibits route leaking from Level-2 areas to Level-1 areas.
By default, Level-2 routing information is not leaked to Level-1 areas.
Format
import-route isis level-2 into level-1 [ filter-policy { acl-number | acl-name acl-name | ip-prefix ip-prefix-name | route-policy route-policy-name } | tag tag | direct { allow-filter-policy | allow-up-down-bit } * ] *
undo import-route isis level-2 into level-1 [ filter-policy { acl-number | acl-name acl-name | ip-prefix ip-prefix-name | route-policy route-policy-name } | tag tag | direct { allow-filter-policy | allow-up-down-bit } * ] *
Parameters
Parameter | Description | Value |
---|---|---|
filter-policy | Specifies a filtering policy. | - |
acl-number | Specifies the number of a basic ACL. | The value is an integer that ranges from 2000 to 2999. |
acl-name acl-name | Specifies the name of a named ACL. | The value is a string of 1 to 64 case-sensitive characters without spaces. The value must start with a letter. |
ip-prefix ip-prefix-name | Specifies the name of an IP prefix list. Only the routes that match the specified IP prefix can be imported. | The name is a string of 1 to 169 case-sensitive characters, with spaces not supported. When double quotation marks are used around the string, spaces are allowed in the string. |
route-policy route-policy-name | Specifies the name of a route-policy. | The name is a string of 1 to 40 case-sensitive characters, with spaces not supported. When double quotation marks are used around the string, spaces are allowed in the string. |
tag tag | Specifies the administrative tag value of imported routes. | The value is an integer that ranges from 1 to 4294967295. |
direct allow-filter-policy | Indicates the filtering policy to filter the direct routes. Only the IS-IS Level-1 area direct routing information that matches the filtering policy can leak to the Level-2 area with this parameter, and all Level-1 area direct routing information is available to the Level-2 area without this parameter. |
- |
direct allow-up-down-bit | Indicates that the Up or Down bit is used during the leak of directs routes. If direct allow-up-down-bit is specified, the direct routes that have already leaked to the Level-1 area have the lowest priority and cannot leak back. |
- |
Usage Guidelines
Usage Scenario
When multiple Level-1-2 switchs in a Level-1 area are connected to a Level-2 area, Level-1 switchs are unable to know the network topology of the Level-2 area, but forward traffic to the nearest Level-1-2 switch (based on the route with the smallest cost). For Level-2 switchs, however, this route may not be the optimal one. Therefore, you need to allow some Level-2 routes to be leaked to the Level-1 area to help Level-1 switchs select the optimal route for forwarding traffic to the Level 2 area.
To solve the preceding problem, IS-IS provides the route leaking function to enable Level-1 devices to choose the best path for traffic forwarding.
The import-route isis level-2 into level-1 command can be run only on Level-1-2 routers to allow all or some Level-2 routes to be leaked to the Level-1 area.
Precautions
For an ACL, when the rule command is used to configure a filtering rule, the filtering rule is effective only with the source address range that is specified by the source parameter and with the time period that is specified by the time-range parameter.
Creating an ACL before it is referenced is recommended. If a nonexistent ACL is referenced using the command, all routes in the Level-2 area leak to the Level-1 area.
Creating an IP prefix list or route-policy before it is referenced is recommended. By default, nonexistent IP prefix lists or route-policies cannot be referenced using the command. If the route-policy nonexistent-config-check disable command is run in the system view and a nonexistent IP prefix list or route-policy is referenced using the current command, all routes in the Level-1 area leak to the Level-2 area.
isis
Function
The isis command starts an IS-IS process and a specified VPN instance, and displays the IS-IS view.
The undo isis command deletes a specified IS-IS process.
By default, no IS-IS instance exists on the network.Parameters
Parameter | Description | Value |
---|---|---|
process-id | Specifies an IS-IS process ID. | The value is an integer that ranges from 1 to 65535. |
vpn-instance vpn-instance-name | Specifies the name of a VPN instance. | The value must be an existing VPN instance name. |
Usage Guidelines
Usage Scenario
Before you configure IS-IS functions and interface-related features, run the isis command to create an IS-IS process and enable IS-IS on the interface.
On a large-scale network, if a large number of switches run IS-IS, there will be a huge number routes, increasing maintenance costs, slowing down route convergence, and affecting network stability. To resolve the problem, you can run the isis process-id command to start multi-processes to reduce the number of routes to be maintained.
In addition, to ensure that different services are forwarded properly on the network, you can run the isis vpn-instance vpn-instance-name command to start multiple IS-IS processes on one device to isolate these services.
Follow-up Procedure
After the isis command is used to enable an IS-IS process, run the network-entity command to set a NET for the switch, and run the isis enable command to enable IS-IS on each interface that needs to run IS-IS. You can start IS-IS only when these configurations are completed.
Precautions
One IS-IS process can be bound to only one VPN instance. Multiple IS-IS interfaces can be bound to one VPN instance.
If a VPN instance is deleted, the IS-IS process bound to the VPN instance is deleted.
When creating an IS-IS process, bind it to a VPN instance. An existing IS-IS process cannot be bound to any VPN instance.
isis authentication-mode
Function
The isis authentication-mode command configures an IS-IS interface to authenticate Hello packets using the specified mode and password.
The undo isis authentication-mode command cancels the authentication and deletes the authentication information in Hello packets.
By default, no authentication information is added to Hello packets and no authentication is performed on received Hello packets.
Format
isis authentication-mode { simple | md5 } { plain plain-text | [ cipher ] plain-cipher-text } [ level-1 | level-2 ] [ ip | osi ] [ send-only ]
isis authentication-mode keychain keychain-name [ level-1 | level-2 ] [ send-only ]
isis authentication-mode hmac-sha256 key-id key-id { plain plain-text | [ cipher ] plain-cipher-text } [ level-1 | level-2 ] [ send-only ]
undo isis authentication-mode [ level-1 | level-2 ]
undo isis authentication-mode keychain keychain-name [ level-1 | level-2 ] [ send-only ]
undo isis authentication-mode { simple { plain plain-text | cipher plain-cipher-text } | md5 { cipher plain-cipher-text | plain plain-text } } [ level-1 | level-2 ] [ ip | osi ] [ send-only ]
undo isis authentication-mode hmac-sha256 key-id key-id { plain plain-text | cipher plain-cipher-text } [ level-1 | level-2 ] [ send-only ]
Parameters
Parameter | Description | Value |
---|---|---|
simple | Indicates that the password is transmitted in plain text. NOTICE:
Simple authentication has potential risks. HMAC-SHA256 cipher text authentication is recommended. |
- |
plain plain-text | Indicates that the password is in plain text. Only a plain-text password can be entered. The password in the configuration file is displayed in plain text. NOTICE:
If plain is selected, the password is saved in the configuration file in plain text. This brings security risks. It is recommended that you select cipher to save the password in cipher text. |
The value is a string of case-sensitive characters. It contains letters and digits without spaces. In simple authentication mode, the value is a string of 1 to 16 characters. In md5 or hmac-sha256 authentication mode, the value is a string of 1 to 255 characters. |
cipher plain-cipher-text | Indicates that the password is in cipher text. A plain-text or cipher-text password can be entered. The password in the configuration file is displayed in cipher text. By default, the password is in cipher text. | The value is a string of case-sensitive characters. It contains letters and digits without spaces. In simple authentication mode, the value is a string of 1 to 16 characters in plain text or a string of 32 characters in cipher text. In md5 or hmac-sha256 authentication mode, the value is a string of 1 to 255 characters in plain text or a string of 20 to 392 characters in cipher text. |
md5 | Indicates that the password to be transmitted is encrypted using MD5. NOTICE:
MD5 authentication has potential risks. HMAC-SHA256 cipher text authentication is recommended. |
- |
level-1 | Indicates Level-1 authentication. When the link type of an IS-IS interface is Level-1-2, if level-1 and level-2 are not specified, both Level-1 and Level-2 Hello packets are configured with the authentication mode and password. | - |
level-2 | Indicates Level-2 authentication. When the link type of an IS-IS interface is Level-1-2, if level-1 and level-2 are not specified, both Level-1 and Level-2 Hello packets are configured with the authentication mode and password. | - |
ip | Indicates the IP authentication password. This parameter cannot be configured in keychain authentication mode. If parameters ip and osi are not specified, the parameter osi is used by default. | - |
osi | Indicates the OSI authentication password. This parameter cannot be configured in keychain authentication mode. If parameters ip and osi are not specified, the parameter osi is used by default. | - |
send-only | Encapsulates sent Hello packets with authentication information but does not authenticate received Hello packets. | - |
keychain keychain-name | Indicates that the password is a keychain that changes with time. This parameter takes effect only when keychain-name is set using the keychain command. | The value is a string of 1 to 47 case-insensitive characters. Except the question mark (?) and space. However, when double quotation marks (") are used around the string, spaces are allowed in the string. |
hmac-sha256 | Encapsulates generated packets with the HMAC-SHA256 authentication and a password encrypted by the HMAC-SHA256 algorithm and authenticates received packets. | - |
key-id key-id | Indicates key ID of the HMAC-SHA256 algorithm. | It is an integer ranging from 0 to 65535. |
Usage Guidelines
To improve network security, authenticate received packets or encapsulate sent packets with authentication information. Only the packets that pass the authentication can be transmitted on the network.
You can use the isis authentication-mode command to discard the Hello packets whose authentication passwords are different from the authentication password configured using this command. At the same time, IS-IS adds the configured interface authentication password into all the Hello packets sent from the local node.
Prerequisites
IS-IS has been enabled on the interface using the isis enable command.
PrecautionsIf a broadcast interface is emulated as a P2P interface using the isis circuit-type command and then restored to the broadcast interface using the undo isis circuit-type command, the authentication configuration of the IS-IS area is restored to the default setting.
Example
# Set HMAC-SHA256 authentication password admin@huawei key id 33 on VLANIF100
<HUAWEI> system-view
[HUAWEI] isis
[HUAWEI-isis-1] network-entity 01.0000.0000.0001.00
[HUAWEI-isis-1] quit
[HUAWEI] interface vlanif 100
[HUAWEI-Vlanif100] isis enable 1
[HUAWEI-Vlanif100] isis authentication-mode hmac-sha256 key-id 33 cipher admin@huawei
# Set HMAC-SHA256 authentication password admin@huawei key id 33 GE1/0/1
<HUAWEI> system-view [HUAWEI] isis [HUAWEI-isis-1] network-entity 01.0000.0000.0001.00 [HUAWEI-isis-1] quit [HUAWEI] interface gigabitethernet 1/0/1 [HUAWEI-GigabitEthernet1/0/1] undo portswitch [HUAWEI-GigabitEthernet1/0/1] isis enable 1 [HUAWEI-GigabitEthernet1/0/1] isis authentication-mode hmac-sha256 key-id 33 cipher admin@huawei
isis bfd
Function
The isis bfd command sets values of BFD session parameters on a specified IS-IS interface.
The undo isis bfd command restores the default values of BFD session parameters on a specified IS-IS interface.
By default, BFD session parameters use default values.
Format
isis bfd { min-rx-interval receive-interval | min-tx-interval transmit-interval | detect-multiplier multiplier-value | frr-binding } *
undo isis bfd { min-rx-interval [ receive-interval ] | min-tx-interval [ transmit-interval ] | detect-multiplier [ multiplier-value ] | frr-binding } *
Parameters
Parameter | Description | Value |
---|---|---|
min-rx-interval receive-interval | Specifies the minimum interval for receiving BFD packets from the peer end. | The value is an integer, in milliseconds. If
the MPU is equipped with the ES0D00FSUA00 or the MPU is EH1D2SRUDC00/EH1D2SRUDC01, the value ranges from 3 to 1000. Otherwise, the value ranges from
100 to 1000.By default, the minimum interval for receiving
BFD packets is 10 ms when the MPU is equipped with the ES0D00FSUA00 or the MPU is EH1D2SRUDC00/EH1D2SRUDC01; otherwise, the minimum interval for receiving BFD packets is 1000
ms.
NOTE:
When the MPU is the EH1D2SRUDC00 or EH1D2SRUDC01, you need to first run the detect-engine enable command in the system view so that the value range is 3 to 1000. If the detect-engine enable command is not used first, the value range is 100 to 1000. |
min-tx-interval transmit-interval | Specifies the minimum interval for transmitting BFD packets to the peer end. | The value is an integer, in milliseconds. If
the MPU is equipped with the ES0D00FSUA00 or the MPU is EH1D2SRUDC00/EH1D2SRUDC01, the value ranges from 3 to 1000. Otherwise, the value ranges from
100 to 1000.By default, the minimum interval for receiving
BFD packets is 10 ms when the MPU is equipped with the ES0D00FSUA00 or the MPU is EH1D2SRUDC00/EH1D2SRUDC01; otherwise, the minimum interval for receiving BFD packets is 1000
ms.
NOTE:
When the MPU is the EH1D2SRUDC00 or EH1D2SRUDC01, you need to first run the detect-engine enable command in the system view so that the value range is 3 to 1000. If the detect-engine enable command is not used first, the value range is 100 to 1000. |
detect-multiplier multiplier-value | Specifies the local detection multiplier. | The value is an integer that ranges from 3 to 50. The default value is 3. |
frr-binding | Binds the BFD session status to IS-IS Auto FRR. When BFD detects the link fault on an interface, the BFD session goes Down, triggering FRR on the interface. After that, the traffic is switched from the faulty link to the backup link, which protects the traffic. | - |
Usage Guidelines
BFD can quickly detect faults on links. Configure proper parameters based on the actual network situation to improve the IS-IS convergence speed when network faults occur. You can use the isis bfd command to change BFD session parameters such as the minimum interval for sending BFD packets, minimum interval for receiving BFD packets, and local detection multiplier.
In an IS-IS process, after IS-IS establishes a BFD session, the value of receive-interval is obtained after the negotiation of the local min-rx-interval value and the remote min-tx-interval value. If no BFD packet is received from the peer end within the specified period (receive-interval x multiplier-value), the neighbor is considered Down.
Negotiation principle: Actual interval for the local device to receive BFD packets = MAX {local min-rx-interval value, remote min-tx-interval value}
PrerequisitesBFD has been enabled globally. In the interface view, IS-IS has been enabled and BFD has been enabled on the interface using the isis bfd enable command.
PrecautionsThe BFD priority of the interface is higher than that of the process. If BFD of the interface is enabled, the BFD session is set up based on the BFD parameters on the interface.
Example
# Enable BFD on VLANIF100 and set the minimum receive interval to 600 ms and local detection multiplier to 4.
<HUAWEI> system-view [HUAWEI] isis [HUAWEI-isis-1] network-entity 01.0000.0000.0001.00 [HUAWEI-isis-1] quit [HUAWEI] interface vlanif 100 [HUAWEI-Vlanif100] isis enable 1 [HUAWEI-Vlanif100] isis bfd enable [HUAWEI-Vlanif100] isis bfd min-rx-interval 600 detect-multiplier 4
# Enable BFD on IS-IS interface and bind the status of the BFD session to IS-IS Auto FRR.
<HUAWEI> system-view [HUAWEI] isis [HUAWEI-isis-1] network-entity 01.0000.0000.0001.00 [HUAWEI-isis-1] quit [HUAWEI] interface vlanif 100 [HUAWEI-Vlanif100] isis enable 1 [HUAWEI-Vlanif100] isis bfd enable [HUAWEI-Vlanif100] isis bfd frr-binding
# Enable BFD on GE1/0/1 and set the minimum receive interval to 600 ms and local detection multiplier to 4.
<HUAWEI> system-view [HUAWEI] isis [HUAWEI-isis-1] network-entity 01.0000.0000.0001.00 [HUAWEI-isis-1] quit [HUAWEI] interface gigabitethernet 1/0/1 [HUAWEI-GigabitEthernet1/0/1] undo portswitch [HUAWEI-GigabitEthernet1/0/1] isis enable 1 [HUAWEI-GigabitEthernet1/0/1] isis bfd enable [HUAWEI-GigabitEthernet1/0/1] isis bfd min-rx-interval 600 detect-multiplier 4
isis bfd block
Function
The isis bfd block command prevents an IS-IS interface from dynamically establishing a BFD session.
The undo isis bfd block command restores the default setting.
By default, an interface can dynamically establish a BFD session.
Usage Guidelines
BFD can provide millisecond-level fault detection, help IS-IS rapidly detect the faults that occur on neighboring devices or links, and instruct IS-IS to recalculate routes for correct packet forwarding. If the network contains unstable links that do not require high reliability and BFD has been enabled, a link cannot transmit data normally when it flaps. You can use the isis bfd block command to prevent specified interfaces from dynamically establishing BFD sessions.
Prerequisites
IS-IS has been enabled on the interface using the isis enable command.
PrecautionsIf the isis bfd block, isis bfd enable, and isis bfd static commands are executed, only the last command takes effect.
Example
# Prevent VLANIF100 from dynamically establishing a BFD session.
<HUAWEI> system-view [HUAWEI] isis [HUAWEI-isis-1] network-entity 01.0000.0000.0001.00 [HUAWEI-isis-1] quit [HUAWEI] interface vlanif 100 [HUAWEI-Vlanif100] isis enable 1 [HUAWEI-Vlanif100] isis bfd block
# Prevent GE1/0/1 from dynamically establishing a BFD session.
<HUAWEI> system-view [HUAWEI] isis [HUAWEI-isis-1] network-entity 01.0000.0000.0001.00 [HUAWEI-isis-1] quit [HUAWEI] interface gigabitethernet 1/0/1 [HUAWEI-GigabitEthernet1/0/1] undo portswitch [HUAWEI-GigabitEthernet1/0/1] isis enable 1 [HUAWEI-GigabitEthernet1/0/1] isis bfd block
isis bfd enable
Function
The isis bfd enable command enables BFD on a specified IS-IS interface.
The undo isis bfd enable command disables BFD on a specified IS-IS interface.
By default, BFD is not enabled on an IS-IS interface.
Usage Guidelines
BFD can provide millisecond-level fault detection, help IS-IS to detect the faults that occur on neighboring devices or links more rapidly, and instruct IS-IS to recalculate routes for correct packet forwarding. The isis bfd enable command can be used to enable BFD on a specified IS-IS interface and establish BFD sessions by using default parameters.
Prerequisites
IS-IS has been enabled on the interface using the isis enable command.
PrecautionsIf global BFD is not enabled, you can configure BFD parameters on an interface but cannot establish a BFD session.
The BFD priority of the interface is higher than the BFD priority of the process. If BFD of the interface is enabled, the BFD session is set up based on the BFD parameters on the interface.
If the isis bfd block, isis bfd enable, and isis bfd static commands are run, only the last command takes effect.
Example
# Enable BFD on VLANIF100.
<HUAWEI> system-view [HUAWEI] isis [HUAWEI-isis-1] network-entity 01.0000.0000.0001.00 [HUAWEI-isis-1] quit [HUAWEI] interface vlanif 100 [HUAWEI-Vlanif100] isis enable 1 [HUAWEI-Vlanif100] isis bfd enable
# Enable BFD on GE1/0/1.
<HUAWEI> system-view [HUAWEI] isis [HUAWEI-isis-1] network-entity 01.0000.0000.0001.00 [HUAWEI-isis-1] quit [HUAWEI] interface gigabitethernet 1/0/1 [HUAWEI-GigabitEthernet1/0/1] undo portswitch [HUAWEI-GigabitEthernet1/0/1] isis enable 1 [HUAWEI-GigabitEthernet1/0/1] isis bfd enable
isis bfd static
Function
The isis bfd static command enables static BFD on a specified IS-IS interface.
The undo isis bfd static command disables static BFD on a specified IS-IS interface.
By default, static BFD is disabled on an IS-IS interface.
Usage Guidelines
In static BFD, BFD session parameters are set manually and BFD session establishment requests are delivered manually. Then static BFD can quickly detect faults on links. You can run the isis bfd static command to enable static BFD on a specified interface to establish static BFD sessions on specified links.
Prerequisites
IS-IS has been enabled on the interface using the isis enable command.
PrecautionsIf the isis bfd block, isis bfd enable, and isis bfd static commands are run, only the last command takes effect.
Example
# Enable static BFD on VLANIF100.
<HUAWEI> system-view [HUAWEI] isis [HUAWEI-isis-1] network-entity 01.0000.0000.0001.00 [HUAWEI-isis-1] quit [HUAWEI] interface vlanif 100 [HUAWEI-Vlanif100] isis enable 1 [HUAWEI-Vlanif100] isis bfd static
# Enable static BFD on GE1/0/1.
<HUAWEI> system-view [HUAWEI] isis [HUAWEI-isis-1] network-entity 01.0000.0000.0001.00 [HUAWEI-isis-1] quit [HUAWEI] interface gigabitethernet 1/0/1 [HUAWEI-GigabitEthernet1/0/1] undo portswitch [HUAWEI-GigabitEthernet1/0/1] isis enable 1 [HUAWEI-GigabitEthernet1/0/1] isis bfd static
isis circuit-level
Function
The isis circuit-level command sets the link type of an interface on a Level-1-2 router.
The undo isis circuit-level command restores the default link type of an interface on a Level-1-2 router.
By default, the link type of an interface on a Level-1-2 router is Level-1-2, and both Level-1 and Level-2 neighbor relationships can be established on the interface.
Parameters
Parameter | Description | Value |
---|---|---|
level-1 | Specifies the Level-1 link type. That is, only Level-1 neighbor relationship can be established on the interface. | - |
level-1-2 | Specifies the Level-2 link type. That is, both Level-1 and Level-2 neighbor relationships can be established on the interface. | - |
level-2 | Specifies the Level-2 link type. That is, only Level-2 neighbor relationship can be established on the interface. | - |
Usage Guidelines
Usage Scenario
When an adjacency is established between a Level-1-2 router and a remote device, the Level-1-2 router sends and receives both Level-1 and Level-2 Hello packets, wasting bandwidth and memory resources. To solve this problem, run the isis circuit-level command to set a specified link type for an interface.
Prerequisites
IS-IS has been enabled using the isis enable command in the interface view.
Precautions
Network flapping may occur if the link type of an IS-IS interface is changed during network operation. Therefore, setting a link type for an IS-IS interface on the switch when configuring IS-IS is recommended.
The configuration of the isis circuit-level command takes effect only when the IS-IS system type is Level-1-2. Otherwise, the level configured using the is-level command is used as the link type.
Example
# If VLANIF100 is connected to a non-backbone router in the same area, set this interface to Level-1, and prohibit the interface from sending and receiving Level-2 Hello packets.
<HUAWEI> system-view [HUAWEI] isis [HUAWEI-isis-1] network-entity 01.0000.0000.0001.00 [HUAWEI-isis-1] quit [HUAWEI] interface vlanif 100 [HUAWEI-Vlanif100] isis enable 1 [HUAWEI-Vlanif100] isis circuit-level level-1
# If GE1/0/1 is connected to a non-backbone router in the same area, set this interface to Level-1, and prohibit the interface from sending and receiving Level-2 Hello packets.
<HUAWEI> system-view [HUAWEI] isis [HUAWEI-isis-1] network-entity 01.0000.0000.0001.00 [HUAWEI-isis-1] quit [HUAWEI] interface gigabitethernet 1/0/1 [HUAWEI-GigabitEthernet1/0/1] undo portswitch [HUAWEI-GigabitEthernet1/0/1] isis enable 1 [HUAWEI-GigabitEthernet1/0/1] isis circuit-level level-1
isis circuit-type
Function
The isis circuit-type command simulates the network type of an IS-IS broadcast interface to a P2P interface.
The undo isis circuit-type command restores the default network type of an IS-IS interface.
By default, the network type of an interface is determined by the physical type of the interface.
Parameters
Parameter | Description | Value |
---|---|---|
p2p | Sets the network type of an IS-IS interface to P2P. | - |
strict-snpa-check | Enables IS-IS to check the SNPA address of each received LSP or SNP. | - |
Usage Guidelines
Usage Scenario
The network type of IS-IS interfaces at the ends of the link must be identical. Otherwise, the two interfaces cannot set up the neighbor relationship. In most cases, the network types of interfaces on a broadcast network and a P2P network are Ethernet and P2P respectively.
The isis circuit-type command sets the network type of an interface to simulate a P2P interface so that the network type of IS-IS interfaces at the ends of the link is identical and the neighbor relationship can be established between them.
When an IS-IS neighbor relationship is established between a P2P interface and a simulated P2P interface and the simulated P2P interface has direct neighbors, the P2P interface may receive unneeded packets from these direct neighbors. To prevent the P2P interface from accepting these unneeded packets, specify strict-snpa-check in the isis circuit-type command to enable IS-IS to check the SNPA address of each received LSP or SNP. After the command is run, the P2P interface accepts only the packets whose SNPA addresses are included in the local neighbor address list, which improves network security.
Precautions
After a broadcast interface is simulated as a P2P interface using the isis circuit-type command, the interval for sending Hello packets, the number of Hello packets that IS-IS does not receive from a neighbor before the neighbor is declared Down, interval for resending LSP packets on a P2P link, and various IS-IS authentication modes are restored to the default settings; other configurations such as the DIS priority, DIS name, and interval for sending CSNP packets on a broadcast network become invalid.
After the undo isis circuit-type command is run to restore the network type of an IS-IS interface, the interval for sending Hello packets, the number of Hello packets that IS-IS does not receive from a neighbor before the neighbor is declared Down, interval for resending LSP packets on a P2P link, various IS-IS authentication modes, DIS priority, and interval for sending CSNP packets on a broadcast network are restored to the default settings.
Example
# Set the network type of VLANIF100 to P2P.
<HUAWEI> system-view [HUAWEI] isis [HUAWEI-isis-1] network-entity 01.0000.0000.0001.00 [HUAWEI-isis-1] quit [HUAWEI] interface vlanif 100 [HUAWEI-Vlanif100] isis enable 1 [HUAWEI-Vlanif100] isis circuit-type p2p
# Set the network type of GE1/0/1 to P2P.
<HUAWEI> system-view [HUAWEI] isis [HUAWEI-isis-1] network-entity 01.0000.0000.0001.00 [HUAWEI-isis-1] quit [HUAWEI] interface gigabitethernet 1/0/1 [HUAWEI-GigabitEthernet1/0/1] undo portswitch [HUAWEI-GigabitEthernet1/0/1] isis enable 1 [HUAWEI-GigabitEthernet1/0/1] isis circuit-type p2p
isis cost
Function
The isis cost command sets the link cost value of an IS-IS interface.
The undo isis cost command restores the default link cost value of an IS-IS interface.
By default, the link cost value of an IS-IS interface is 10.
Format
isis cost { cost | maximum } [ level-1 | level-2 ]
undo isis cost [ cost | maximum ] [ level-1 | level-2 ]
Parameters
Parameter | Description | Value |
---|---|---|
cost | Specifies the link cost value of an interface. | The value is an integer that varies according to the
cost style.
|
maximum | Sets the link cost of IS-IS interfaces to 16777215. NOTE:
You can configure this parameter only when the IS-IS cost style is wide or wide-compatible. After the interface cost is set to 16777215, the neighbor TLV generated on the link can only be used to transmit TE information but cannot be used for route calculation. |
- |
level-1 | Specifies the link cost value of a Level-1 interface. If the interface level is not specified, link cost values of Level-1 and Level-2 interfaces are set. | - |
level-2 | Specifies the link cost value of a Level-2 interface. If the interface level is not specified, link cost values of Level-1 and Level-2 interfaces are set. | - |
Usage Guidelines
Usage Scenario
All traffic is transmitted over the optimal route, causing load imbalance.
If the optimal route is faulty, traffic will get lost.
To solve the preceding problems, run the isis cost command to set a link cost for interfaces so that traffic can be transmitted over different physical links.
Prerequisites
IS-IS has been enabled on the interface using the isis enable command.
Configuration Impact
If the link cost of an interface is changed, routes will be re-calculated on the whole network, causing the changes in traffic forwarding paths.
Precautions
On the TE tunnel interface that is enabled with IGP shortcut, the link cost is the value specified through the mpls te igp metric command. If the command is not configured, the IS-IS cost is adopted as the link cost of the TE tunnel interface.
The priority of the circuit-cost command is lower than that of the isis cost command.
Example
# Set the Level-2 link cost of VLANIF100 to 5.
<HUAWEI> system-view [HUAWEI] isis [HUAWEI-isis-1] network-entity 01.0000.0000.0001.00 [HUAWEI-isis-1] quit [HUAWEI] interface vlanif 100 [HUAWEI-Vlanif100] isis enable 1 [HUAWEI-Vlanif100] isis cost 5 level-2
# Set the Level-2 link cost of GE1/0/1 to 5.
<HUAWEI> system-view [HUAWEI] isis [HUAWEI-isis-1] network-entity 01.0000.0000.0001.00 [HUAWEI-isis-1] quit [HUAWEI] interface gigabitethernet 1/0/1 [HUAWEI-GigabitEthernet1/0/1] undo portswitch [HUAWEI-GigabitEthernet1/0/1] isis enable 1 [HUAWEI-GigabitEthernet1/0/1] isis cost 5 level-2
isis delay-peer
Function
The isis delay-peer command configures a delay for an interface so that the interface delays establishing neighbor relationships after the neighbor relationship with the last neighbor goes Down due to packet timeout.
The undo isis delay-peer command deletes the configured delay and restores the default configurations.
By default, if the neighbor relationship goes Down due to packet timeout, the interface re-establishes the neighbor relationship after it receives a new Hello packet.
Format
isis delay-peer track last-peer-expired [ delay-time delay-interval ]
undo isis delay-peer [ track last-peer-expired [ delay-time delay-interval ] ]
Parameters
Parameter | Description | Value |
---|---|---|
track | Tracks the mode of the neighbor relationship establishment delay. | - |
last-peer-expired | Indicates that neighbor relationship establishment is delayed after the neighbor relationship with the last neighbor goes Down due to packet timeout. | - |
delay-time delay-interval | Specifies the neighbor relationship establishment delay. | The value is an integer ranging from 1 to 3600, in seconds. The default value is 60 seconds. |
Usage Guidelines
Usage Scenario
On IS-IS networks, devices at both ends of a link establish a neighbor relationship by exchanging Hello packets. After the neighbor relationship is established, both devices need to send Hello packets at a specified interval to maintain the neighbor relationship. If an IS-IS device does not receive any Hello packets from the neighbor at the other end within the specified period (Holddown time), the local device considers the neighbor Down and re-establishes the neighbor relationship after it receives a new Hello packet. If links are unstable or some Hello packets are lost or incorrect due to network transmission delay or poor transmission, neighbor relationships may alternate between Up and Down frequently, which causes a route flapping.
To address this issue, run the isis delay-peer command to configure a neighbor relationship establishment delay after the neighbor relationship goes Down.
Pre-configuration Tasks
IS-IS has been enabled using the isis enable command in the interface view.
Precautions
If a new delay-interval is configured and it is less than the remaining time of the ongoing delay, the new delay-interval takes effect immediately; if the new delay-interval is greater than the remaining time of the ongoing delay, the ongoing delay continues until the new delay-interval takes effect at the next delay.
Example
# Set the delay to 100s on VLANIF100 so that the neighbor relationship establishment is delayed after the neighbor relationship with the last neighbor goes Down due to packet timeout.
<HUAWEI> system-view [HUAWEI] isis [HUAWEI-isis-1] network-entity 01.0000.0000.0001.00 [HUAWEI-isis-1] quit [HUAWEI] interface vlanif 100 [HUAWEI-Vlanif100] isis enable 1 [HUAWEI-Vlanif100] isis delay-peer track last-peer-expired delay-time 100
# Set the delay to 100s on GE1/0/1 so that the neighbor relationship establishment is delayed after the neighbor relationship with the last neighbor goes Down due to packet timeout.
<HUAWEI> system-view [HUAWEI] isis [HUAWEI-isis-1] network-entity 01.0000.0000.0001.00 [HUAWEI-isis-1] quit [HUAWEI] interface gigabitethernet 1/0/1 [HUAWEI-GigabitEthernet1/0/1] undo portswitch [HUAWEI-GigabitEthernet1/0/1] isis enable 1 [HUAWEI-GigabitEthernet1/0/1] isis delay-peer track last-peer-expired delay-time 100
isis dis-name
Function
The isis dis-name command configures a host name for the DIS.
The undo isis dis-name command deletes the host name configured for the DIS.
By default, no host name is configured for the DIS.
Parameters
Parameter | Description | Value |
---|---|---|
symbolic-name | Specifies a host name for the DIS. | The value is a string of 1 to 64 characters without spaces. It is case sensitive. NOTE:
When double quotation marks are used around the string, spaces are allowed in the string. |
Usage Guidelines
You can configure the name for the DIS on an interface only after you run the isis enable command to enable IS-IS on the interface. The DIS name is advertised in a pseudo-node LSP. In this manner, the configured DIS name is associated with the system ID of the DIS.
This command takes effect only on the DIS in the broadcast network.
If the isis circuit-type command is run to emulate the interface as a P2P interface, the isis dis-name command becomes invalid on the interface; after the undo isis circuit-type command is run to restore the broadcast interface, the isis dis-name command becomes valid on the interface.
Example
# Configure a host name for the DIS on VLANIF100.
<HUAWEI> system-view [HUAWEI] isis [HUAWEI-isis-1] network-entity 01.0000.0000.0001.00 [HUAWEI-isis-1] quit [HUAWEI] interface vlanif 100 [HUAWEI-Vlanif100] isis enable 1 [HUAWEI-Vlanif100] isis dis-name LOCALAREA
# Configure a host name for the DIS on GE1/0/1.
<HUAWEI> system-view [HUAWEI] isis [HUAWEI-isis-1] network-entity 01.0000.0000.0001.00 [HUAWEI-isis-1] quit [HUAWEI] interface gigabitethernet 1/0/1 [HUAWEI-GigabitEthernet1/0/1] undo portswitch [HUAWEI-GigabitEthernet1/0/1] isis enable 1 [HUAWEI-GigabitEthernet1/0/1] isis dis-name LOCALAREA
isis dis-priority
Function
The isis dis-priority command sets the priority of the IS-IS interface that is a candidate for the DIS at a specified level.
The undo isis dis-priority command restores the default priority.
By default, the DIS priority of broadcast IS-IS interfaces at Level-1 and Level-2 is 64.
Format
isis dis-priority priority [ level-1 | level-2 ]
undo isis dis-priority [ priority ] [ level-1 | level-2 ]
Parameters
Parameter | Description | Value |
---|---|---|
priority | Specifies the priority for DIS election. | The value is an integer that ranges from 0 to 127. The default value is 64. A larger value indicates a higher DIS priority. |
level-1 | Indicates the DIS priority of interfaces at Level 1. If the level is not specified, the same priority is set for Level-1 and Level-2 interfaces. | - |
level-2 | Indicates the DIS priority of interfaces at Level 2. If the level is not specified, the same priority is set for Level-1 and Level-2 interfaces. | - |
Usage Guidelines
The configuration is useful only for the broadcast network.
The DIS priority is advertised through Hello packets. The switch with the highest priority is elected as the DIS. In the case of the same priority, the switch with the largest MAC address is elected as the DIS.
IS-IS has been enabled on the interface using the isis enable command.
If the isis circuit-type command is run to emulate the interface as a P2P interface, the isis dis-priority command becomes invalid on the interface; after the undo isis circuit-type command is run to restore the broadcast interface, the isis dis-priority command becomes valid on the interface.
Example
# Set the Level-2 priority for electing the DIS to 127 on VLANIF100.
<HUAWEI> system-view [HUAWEI] isis [HUAWEI-isis-1] network-entity 01.0000.0000.0001.00 [HUAWEI-isis-1] quit [HUAWEI] interface vlanif 100 [HUAWEI-Vlanif100] isis enable 1 [HUAWEI-Vlanif100] isis dis-priority 127 level-2
# Set the Level-2 priority for electing the DIS to 127 on GE1/0/1.
<HUAWEI> system-view [HUAWEI] isis [HUAWEI-isis-1] network-entity 01.0000.0000.0001.00 [HUAWEI-isis-1] quit [HUAWEI] interface gigabitethernet 1/0/1 [HUAWEI-GigabitEthernet1/0/1] undo portswitch [HUAWEI-GigabitEthernet1/0/1] isis enable 1 [HUAWEI-GigabitEthernet1/0/1] isis dis-priority 127 level-2
isis enable
Function
The isis enable command enables IS-IS on an interface and specifies the ID of the IS-IS process to be associated with the interface.
The undo isis enable command disables IS-IS on an interface and cancels the ID of the IS-IS process associated with the interface.
By default, IS-IS is disabled on an interface.
Parameters
Parameter | Description | Value |
---|---|---|
process-id | Specifies an IS-IS process ID. | The value is an integer that ranges from 1 to 65535. The default value is 1. |
Usage Guidelines
Usage Scenario
After an IS-IS process is configured in the system view, to make the IS-IS protocol function normally, enable IS-IS on an interface to associate the interface with the IS-IS process.
Prerequisites
An IS-IS process has been enabled using the isis command in the system view.
PrecautionsAn interface can be associated with only one IS-IS process.
Example
# Create IS-IS process 1 and activate the process on VLANIF100.
<HUAWEI> system-view [HUAWEI] isis 1 [HUAWEI-isis-1] network-entity 10.0001.1010.1020.1030.00 [HUAWEI-isis-1] quit [HUAWEI] interface vlanif 100 [HUAWEI-Vlanif100] isis enable 1
# Create IS-IS process 1 and activate the process on GE1/0/1.
<HUAWEI> system-view [HUAWEI] isis 1 [HUAWEI-isis-1] network-entity 10.0001.1010.1020.1030.00 [HUAWEI-isis-1] quit [HUAWEI] interface gigabitethernet1/0/1 [HUAWEI-GigabitEthernet1/0/1] undo portswitch [HUAWEI-GigabitEthernet1/0/1] isis enable 1
isis lfa-backup
Function
The isis lfa-backup command enables an IS-IS interface to participate in loop-free alternate (LFA) calculation so that the interface can be a candidate for a backup interface.
The undo isis lfa-backup command disables an IS-IS interface from participating in LFA calculation.
By default, an IS-IS interface can participate in LFA calculation.
Format
isis lfa-backup [ level-1 | level-2 | level-1-2 ]
undo isis lfa-backup [ level-1 | level-2 | level-1-2 ]
Parameters
Parameter | Description | Value |
---|---|---|
level-1 | Indicates that an interface can be a backup interface in Level-1 areas. | - |
level-2 | Indicates that an interface can be a backup interface in Level-2 areas. | - |
level-1-2 | Indicates that an interface can be a backup interface in both Level-1 and Level-2 areas. | - |
Usage Guidelines
To facilitate traffic management and avoid the uncertainty in the traffic forwarding path in the case the primary link fails, run the undo isis lfa-backup command on some interfaces to disable them from participating in LFA calculation.
IS-IS has been enabled on the interface using the isis enable command.
Example
# Disable VLANIF100 from becoming a backup interface for IS-IS Auto FRR.
<HUAWEI> system-view [HUAWEI] isis [HUAWEI-isis-1] network-entity 01.0000.0000.0001.00 [HUAWEI-isis-1] quit [HUAWEI] interface vlanif 100 [HUAWEI-Vlanif100] isis enable 1 [HUAWEI-Vlanif100] undo isis lfa-backup
# Disable GE1/0/1 from becoming a backup interface for IS-IS Auto FRR.
<HUAWEI> system-view [HUAWEI] isis [HUAWEI-isis-1] network-entity 01.0000.0000.0001.00 [HUAWEI-isis-1] quit [HUAWEI] interface gigabitethernet 1/0/1 [HUAWEI-GigabitEthernet1/0/1] undo portswitch [HUAWEI-GigabitEthernet1/0/1] isis enable 1 [HUAWEI-GigabitEthernet1/0/1] undo isis lfa-backup
isis lsp seq-overflow auto-recover disable
Function
The isis lsp seq-overflow auto-recover disable command prevents an IS-IS system from changing its system ID when it receives a locally generated LSP with the maximum sequence number (0xFFFFFFFF).
The undo isis lsp seq-overflow auto-recover disable command restores the default configuration.
By default, an IS-IS system changes its system ID when it receives a locally generated LSP with the maximum sequence number.
Usage Guidelines
Usage Scenario
On an IS-IS network, if a device receives a locally generated LSP with the sequence number greater than that of the corresponding LSP stored locally, the device adds 1 to the sequence number of the received LSP and floods it. An attacker may send an IS-IS LSP with the maximum sequence number (0xFFFFFFFF) and the system ID of a target device. Upon receipt of the LSP, the target device considers it a locally generated LSP because it carries the local system ID and adds 1 to the sequence number because the sequence number is greater than that of the corresponding LSP stored locally. Consequently, the sequence number exceeds the maximum number, causing the target device to enter the hibernation state. The state can last 18 hours and 1 minute, affecting network operation. To prevent this problem, an IS-IS system changes its system ID when it receives a locally generated LSP with the sequence number of 0xFFFFFFFF. However, if the IS-IS system has changed its system ID for three times within 24 hours when it receives one more such an LSP, it directly enters the hibernation state.
The preceding function also applies to CSNPs and PSNPs.
By default, an IS-IS system changes its system ID when it receives a locally generated LSP with the maximum sequence number. To disable this function, run the isis lsp seq-overflow auto-recover disable command.
isis mesh-group
Function
The isis mesh-group command adds an IS-IS interface to a specified mesh group.
The undo isis mesh-group command deletes an IS-IS interface from a specified mesh group.
By default, an IS-IS interface does not belong to any mesh group and floods LSPs normally.
Parameters
Parameter | Description | Value |
---|---|---|
mesh-group-number | Specifies the mesh group number. | The value is an integer that ranges from 1 to 4294967295. |
mesh-blocked | Blocks an interface to prevent it from flooding received LSPs to other interfaces. | - |
Usage Guidelines
Usage Scenario
When receiving LSPs, the interface, not in the mesh group, floods the LSPs to other interfaces following the normal procedure. For the NBMA network that is with higher connectivity and several P2P links, this process causes repeated LSP flooding and wastes bandwidth.
After receiving LSPs, the interface that joins a mesh group only floods the LSPs to the interfaces that are not in the local mesh group.
Prerequisites
IS-IS has been enabled on the interface using the isis enable command.
Precautions
When adding interfaces to mesh groups or blocking interfaces, keep certain interfaces from being configured with the isis mesh-group command. This can prevent link faults from affecting the normal spreading of LSPs.
Example
# Add VLANIF100 to mesh group 3.
<HUAWEI> system-view [HUAWEI] isis [HUAWEI-isis-1] network-entity 01.0000.0000.0001.00 [HUAWEI-isis-1] quit [HUAWEI] interface vlanif 100 [HUAWEI-Vlanif100] isis enable 1 [HUAWEI-Vlanif100] isis mesh-group 3
# Add GE1/0/1 to mesh group 3.
<HUAWEI> system-view [HUAWEI] isis [HUAWEI-isis-1] network-entity 01.0000.0000.0001.00 [HUAWEI-isis-1] quit [HUAWEI] interface gigabitethernet 1/0/1 [HUAWEI-GigabitEthernet1/0/1] undo portswitch [HUAWEI-GigabitEthernet1/0/1] isis enable 1 [HUAWEI-GigabitEthernet1/0/1] isis mesh-group 3
isis padding-hello
Function
The isis padding-hello command configures an IS-IS interface to send Hello packets with the padding field.
The undo isis padding-hello command restores the default setting.
By default, an IS-IS interface is not configured to send Hello packets with the padding field.
Usage Guidelines
The isis padding-hello and isis small-hello commands are mutually exclusive and cannot be configured on the same interface simultaneously.
If an interface that is not configured with the two commands, it sends Hello packets based on the following rules:
For a P2P interface
Before the P2P neighbor relationship is established, the P2P interface sends Hello packets with the padding field.
After the P2P neighbor relationship is established, the P2P interface sends Hello packets without the padding field.
NOTE:
For a P2P interface, the length of padding field is equal to the length of LSP packets orignate by local IS.
For a broadcast interface
It sends Hello packets with the padding field.
NOTE:
For a broadcast interface, the length of padding field is equal to the length of MTU.
IS-IS has been enabled on the interface using the isis enable command.
Example
# Configure VLANIF100 to send Hello packets with the padding field.
<HUAWEI> system-view [HUAWEI] isis [HUAWEI-isis-1] network-entity 01.0000.0000.0001.00 [HUAWEI-isis-1] quit [HUAWEI] interface vlanif 100 [HUAWEI-Vlanif100] isis enable 1 [HUAWEI-Vlanif100] isis padding-hello
# Configure GE1/0/1 to send Hello packets with the padding field.
<HUAWEI> system-view [HUAWEI] isis [HUAWEI-isis-1] network-entity 01.0000.0000.0001.00 [HUAWEI-isis-1] quit [HUAWEI] interface gigabitethernet 1/0/1 [HUAWEI-GigabitEthernet1/0/1] undo portswitch [HUAWEI-GigabitEthernet1/0/1] isis enable 1 [HUAWEI-GigabitEthernet1/0/1] isis padding-hello
isis peer-ip-ignore
Function
The isis peer-ip-ignore command configures IS-IS not to check the IP address of Hello packets received by an interface.
The undo isis peer-ip-ignore command restores the default setting.
By default, IS-IS checks the IP address of received Hello packets.
Usage Guidelines
By default, IS-IS checks the IP address carried in the Hello packet. The neighbor relationship can be set up only when the local interface address and the interface address carried in the received packets belong to the same network segment. When the two interface IP addresses are not in the same network segment, if the isis peer-ip-ignore command is used, the check on the peer IP address is ignored, and the two IS-IS interfaces can set up normal neighbor relationship. Routes of this two network segments exist in the routing table, but cannot ping through each other.
PrecautionsThis command is valid for P2P interfaces, NBMA interfaces and the interface with the network type configured to P2P by using the isis circuit-type p2p command. The command takes effect only when the command is used on the two ends of the link.
For the broadcast interface, you can run the isis peer-ip-ignore command only after you run the isis circuit-type p2p command. The isis circuit-type p2p command is valid only for the broadcast interface.
For the P2P and NBMA interfaces, you can run the isis peer-ip-ignore command without running the isis circuit-type p2p command.
Example
# Configure VLANIF100 not to check the IP address of the Hello packets sent by the peer.
<HUAWEI> system-view [HUAWEI] isis [HUAWEI-isis-1] network-entity 01.0000.0000.0001.00 [HUAWEI-isis-1] quit [HUAWEI] interface vlanif 100 [HUAWEI-Vlanif100] isis enable 1 [HUAWEI-Vlanif100] isis circuit-type p2p [HUAWEI-Vlanif100] isis peer-ip-ignore
# Configure GE1/0/1 not to check the IP address of the Hello packets sent by the peer.
<HUAWEI> system-view [HUAWEI] isis [HUAWEI-isis-1] network-entity 01.0000.0000.0001.00 [HUAWEI-isis-1] quit [HUAWEI] interface gigabitethernet 1/0/1 [HUAWEI-GigabitEthernet1/0/1] undo portswitch [HUAWEI-GigabitEthernet1/0/1] isis enable 1 [HUAWEI-GigabitEthernet1/0/1] isis circuit-type p2p [HUAWEI-GigabitEthernet1/0/1] isis peer-ip-ignore
isis ppp-negotiation
Function
The isis ppp-negotiation command specifies the PPP negotiation mode for establishing neighbor relationships.
The undo isis ppp-negotiation command restores the default negotiation mode.
By default, the 3-way handshake mode is used.
Parameters
Parameter | Description | Value |
---|---|---|
2-way | Establishes the neighbor relationship using the 2-way handshake negotiation mode. | - |
3-way | Establishes the neighbor relationship using the 3-way handshake negotiation mode. | - |
only | Establishes the neighbor relationship using the 3-way handshake negotiation mode that is not backward compatible. | - |
Usage Guidelines
The 3-way handshake negotiation mode is backward compatible. If the neighbor only supports 2-way handshake, use the the 2-way handshake negotiation mode to establish a neighbor relationship.
The command is applicable only for P2P interfaces. It can be used on the broadcast interfaces only after the circuit type is set to P2P.
Example
# Establish the neighbor relationship on VLANIF100 using the 2-way handshake negotiation mode.
<HUAWEI> system-view [HUAWEI] isis [HUAWEI-isis-1] network-entity 01.0000.0000.0001.00 [HUAWEI-isis-1] quit [HUAWEI] interface vlanif 100 [HUAWEI-Vlanif100] isis enable 1 [HUAWEI-Vlanif100] isis circuit-type p2p [HUAWEI-Vlanif100] isis ppp-negotiation 2-way
# Establish the neighbor relationship on GE1/0/1 using the 2-way handshake negotiation mode.
<HUAWEI> system-view [HUAWEI] isis [HUAWEI-isis-1] network-entity 01.0000.0000.0001.00 [HUAWEI-isis-1] quit [HUAWEI] interface gigabitethernet 1/0/1 [HUAWEI-GigabitEthernet1/0/1] undo portswitch [HUAWEI-GigabitEthernet1/0/1] isis enable 1 [HUAWEI-GigabitEthernet1/0/1] isis circuit-type p2p [HUAWEI-GigabitEthernet1/0/1] isis ppp-negotiation 2-way
isis ppp-osicp-check
Function
The isis ppp-osicp-check command enables OSICP negotiation check on a PPP interface. The negotiation status can affect IS-IS interface status.
The undo isis ppp-osicp-check command restores the default setting.
By default, IS-IS does not check OSICP status of PPP.
Usage Guidelines
By default, OSCIP status of PPP does not affect IS-IS interface status.
After this command is configured, OSI network negotiation status of PPP can affect IS-IS interface status. When PPP senses that the OSI network fails, the link status of the IS-IS interface turns Down and the route to the network segment where the interface resides is not advertised through LSP.
PrecautionsThis command applies to only PPP interfaces. For other point-to-point interfaces, this command is invalid.
Example
# Configure VLANIF100 to check OSICP status of PPP.
<HUAWEI> system-view [HUAWEI] isis [HUAWEI-isis-1] network-entity 01.0000.0000.0001.00 [HUAWEI-isis-1] quit
[HUAWEI] interface vlanif 100 [HUAWEI-Vlanif100] isis enable 1 [HUAWEI-Vlanif100] isis circuit-type p2p [HUAWEI-Vlanif100] isis ppp-osicp-check
# Configure GE1/0/1 to check OSICP status of PPP.
<HUAWEI> system-view [HUAWEI] isis [HUAWEI-isis-1] network-entity 01.0000.0000.0001.00 [HUAWEI-isis-1] quit [HUAWEI] interface gigabitethernet 1/0/1 [HUAWEI-GigabitEthernet1/0/1] undo portswitch [HUAWEI-GigabitEthernet1/0/1] isis enable 1 [HUAWEI-GigabitEthernet1/0/1] isis circuit-type p2p [HUAWEI-GigabitEthernet1/0/1] isis ppp-osicp-check
isis purge-lsp auto-protect disable
Function
The isis purge-lsp auto-protect disable command disables IS-IS purge LSPs from triggering master/slave main control board switchovers.
The undo isis purge-lsp auto-protect disable command restores the default configuration.
By default, IS-IS purge LSPs trigger master/slave main control board switchovers.
Usage Guidelines
When an IS-IS process on a device proactively sends a purge LSP, the device deletes the corresponding LSP and floods it to the network. In most cases, before the device sends a purge LSP, the end that generated the corresponding LSP sends an updated LSP. If the clock on the device runs fast, the device frequently floods purge LSPs to devices on the entire network, causing network flapping. If the device generates more than five purge LSPs for 80% or more non-pseudonode LSPs with a non-zero fragment number in the local LSDB within 6500s, a master/slave main control board switchover is performed if the device has two main control boards, or the device is restarted if it has only one main control board. The switchover or restart prevents network flapping.
By default, IS-IS purge LSPs trigger master/slave main control board switchovers. To disable IS-IS purge LSPs from triggering master/slave main control board switchovers, run the isis purge-lsp auto-protect disable command.
isis silent
Function
The isis silent command configures an IS-IS interface as a silent interface. That is, the interface is suppressed from sending and receiving IS-IS packets, but routes of the network segment on which the interface resides can be advertised.
The undo isis silent command restores the default setting.
By default, no IS-IS interface is configured as a silent interface.
Usage Guidelines
When an IS-IS network is connected to other ASs, it is required to enable IS-IS on the interfaces that connect the IS-IS network to other ASs so that the switch on the IS-IS network can learn the routes to other ASs. This interface, however, unnecessarily advertises IS-IS Hello packets on its network segment. In this case, you can run the isis silent command to suppress the IS-IS interface.
Prerequisites
IS-IS has been enabled on the interface using the isis enable command.
Example
# Configure VLANIF100 as a silent interface.
<HUAWEI> system-view [HUAWEI] isis [HUAWEI-isis-1] network-entity 01.0000.0000.0001.00 [HUAWEI-isis-1] quit [HUAWEI] interface vlanif 100 [HUAWEI-Vlanif100] isis enable 1 [HUAWEI-Vlanif100] isis silent
# Configure GE1/0/1 as a silent interface.
<HUAWEI> system-view [HUAWEI] isis [HUAWEI-isis-1] network-entity 01.0000.0000.0001.00 [HUAWEI-isis-1] quit [HUAWEI] interface gigabitethernet 1/0/1 [HUAWEI-GigabitEthernet1/0/1] undo portswitch [HUAWEI-GigabitEthernet1/0/1] isis enable 1 [HUAWEI-GigabitEthernet1/0/1] isis silent
isis small-hello
Function
The isis small-hello command configures an IS-IS interface to send Hello packets without the padding field.
The undo isis small-hello command restores the default setting.
By default, an IS-IS interface is not configured to send Hello packets without the padding field.
Usage Guidelines
The command can simplify the operations of sending and receiving Hello packets.
The isis small-hello and isis padding-hello commands are mutually exclusive and cannot be configured on the same interface simultaneously.
If an interface is not configured with the two commands, it sends Hello packets based on the following rules:
P2P interface
Before the P2P neighbor relationship is established, the P2P interface sends Hello packets with the padding field.
After the P2P neighbor relationship is established, the P2P interface sends Hello packets without the padding field.
NOTE:
For a P2P interface, the length of padding field is equal to the length of LSP packets orignate by local IS.
Broadcast interface
The interface sends Hello packets with the padding field.
NOTE:
For a broadcast interface, the length of padding field is equal to the length of MTU.
Before running this command on an interface, run the isis enable command on the interface to enable IS-IS.
Example
# Configure VLANIF100 to send Hello packets without the padding field.
<HUAWEI> system-view [HUAWEI] isis [HUAWEI-isis-1] network-entity 01.0000.0000.0001.00 [HUAWEI-isis-1] quit [HUAWEI] interface vlanif 100 [HUAWEI-Vlanif100] isis enable 1 [HUAWEI-Vlanif100] isis small-hello
# Configure GE1/0/1 to send Hello packets without the padding field.
<HUAWEI> system-view [HUAWEI] isis [HUAWEI-isis-1] network-entity 01.0000.0000.0001.00 [HUAWEI-isis-1] quit [HUAWEI] interface gigabitethernet 1/0/1 [HUAWEI-GigabitEthernet1/0/1] undo portswitch [HUAWEI-GigabitEthernet1/0/1] isis enable 1 [HUAWEI-GigabitEthernet1/0/1] isis small-hello
isis suppress-flapping peer
Function
The isis suppress-flapping peer command configures detection parameters for IS-IS neighbor relationship flapping suppression.
The undo isis suppress-flapping peer command restores the default detection parameters.
By default, the detection interval of IS-IS neighbor relationship flapping suppression is 60s, the suppression threshold is 10, and the interval for exiting from suppression is 120s.
Format
isis suppress-flapping peer { detecting-interval detecting-interval | threshold threshold | resume-interval resume-interval } *
undo isis suppress-flapping peer { detecting-interval [ detecting-interval ] | threshold [ threshold ] | resume-interval [ resume-interval ] } *
Parameters
Parameter | Description | Value |
---|---|---|
detecting-interval detecting-interval | Specifies the detection interval of IS-IS neighbor relationship flapping suppression. Each IS-IS interface on which IS-IS neighbor relationship flapping suppression is enabled starts a flapping counter. If the interval between two successive neighbor status changes from Full to a non-Full state is shorter than detecting-interval, a valid flapping_event is recorded, and the flapping_count increases by 1. |
The value is an integer ranging from 1 to 300, in seconds. The default value is 60s. |
threshold threshold | Specifies the threshold of IS-IS neighbor relationship flapping suppression. When the flapping-count reaches or exceeds threshold, flapping suppression takes effect. |
The value is an integer ranging from 1 to 1000. The default value is 10. |
resume-interval resume-interval |
NOTE:
The value of resume-interval must be greater than that of detecting-interval. |
The value is an integer ranging from 2 to 1000, in seconds. The default value is 120s. |
Usage Guidelines
Usage Scenario
To configure detection parameters for IS-IS neighbor relationship flapping suppression on an interface, run the isis suppress-flapping peer command. However, keeping the default configurations is recommended.
Prerequisites
IS-IS neighbor relationship flapping suppression must have been enabled globally before you configure detection parameters for it. By default, the function is enabled. If it is disabled, run the undo suppress-flapping peer disable command to enable it before you configure the detection parameters.
Example
# Set the detection interval of IS-IS neighbor relationship flapping suppression to 5s, the suppression threshold to 40, and the interval for exiting from suppression to 20s on VLANIF100.
<HUAWEI> system-view
[HUAWEI] interface vlanif 100
[HUAWEI-Vlanif100] isis suppress-flapping peer detecting-interval 5 threshold 40 resume-interval 20
isis suppress-flapping peer disable
Function
The isis suppress-flapping peer disable command disables IS-IS neighbor relationship flapping suppression from an interface.
The undo isis suppress-flapping peer disable command enables IS-IS neighbor relationship flapping suppression on an interface.
By default, IS-IS neighbor relationship flapping suppression is enabled on all interfaces.
Usage Guidelines
Usage Scenario
By default, IS-IS neighbor relationship flapping suppression is enabled on all interfaces in the same IS-IS process. To disable the function from one of the interfaces, run the isis suppress-flapping peer disable command.
Prerequisites
IS-IS neighbor relationship flapping suppression must have been enabled globally before you enable the function on an interface using the undo isis suppress-flapping peer disable command. By default, the function is enabled globally. If it is disabled, run the undo suppress-flapping peer disable command to enable it first.
isis suppress-flapping peer hold-down
Function
The isis suppress-flapping peer hold-down command configures the Hold-down mode and sets duration for this mode.
The undo isis suppress-flapping peer hold-down command cancels the Hold-down mode.
By default, the Hold-down mode is disabled.
Format
isis suppress-flapping peer hold-down interval
undo isis suppress-flapping peer hold-down [ interval ]
Parameters
Parameter | Description | Value |
---|---|---|
interval | Specifies the duration of the Hold-down mode. | The value is an integer ranging from 1 to 600, in seconds. |
Usage Guidelines
Usage Scenario
Flapping suppression works in either Hold-down or Hold-max-cost mode.
- Hold-down mode: In the case of frequent flooding and topology changes during neighbor relationship establishment, interfaces prevent neighbor relationship reestablishment during Hold-down suppression, which minimizes LSDB synchronization attempts and packet exchanges.
- Hold-max-cost mode: If the traffic forwarding path changes frequently, interfaces use the maximum value (16777214 for the wide mode and 63 for the narrow mode) as the cost of the flapping link during Hold-max-cost suppression, which prevents traffic from passing through the flapping link.
Flapping suppression can also work first in Hold-down mode and then in Hold-max-cost mode.
By default, the Hold-max-cost mode takes effect. To configure the Hold-down mode and set duration for this mode, run the isis suppress-flapping peer hold-down interval command.
Prerequisites
IS-IS neighbor relationship flapping suppression must have been enabled globally before you configure the Hold-down mode and set duration for this mode. By default, the function is enabled. If it is disabled, run the undo suppress-flapping peer disable command to enable it before you configure the Hold-down mode and set duration for this mode.
isis suppress-flapping peer hold-max-cost disable
Function
The isis suppress-flapping peer hold-max-cost disable command disables the Hold-max-cost mode.
The undo isis suppress-flapping peer hold-max-cost disable command enables the Hold-max-cost mode.
By default, the Hold-max-cost mode is enabled.
Format
isis suppress-flapping peer hold-max-cost disable
undo isis suppress-flapping peer hold-max-cost disable
Usage Guidelines
Usage Scenario
Flapping suppression works in either Hold-down or Hold-max-cost mode.
- Hold-down mode: In the case of frequent flooding and topology changes during neighbor relationship establishment, interfaces prevent neighbor relationship reestablishment during Hold-down suppression, which minimizes synchronization attempts and packet exchanges.
- Hold-max-cost mode: If the traffic forwarding path changes frequently, interfaces use the maximum value (16777214 for the wide mode and 63 for the narrow mode) as the cost of the flapping link during Hold-max-cost suppression, which prevents traffic from passing through the flapping link. If a device on a key path is isolated from the network due to IS-IS neighbor relationship flapping, the network is separated into two isolated parts. To prevent this problem, use the Hold-max-cost mode on the key path.
If the neighbor relationship does not go Down within successive resume-intervals, or the interval between two successive neighbor Down events is greater than or equal to resume-interval, the suppression in Hold-max-cost mode exits.
Flapping suppression can also work first in Hold-down mode and then in Hold-max-cost mode.
By default, the Hold-max-cost mode takes effect. To configure the Hold-down mode and set duration for this mode, run the isis suppress-flapping peer hold-down interval command.
Precautions
The Hold-max-cost mode takes effect only unidirectionally. If a remote device does not support IS-IS neighbor relationship flapping suppression, bidirectional traffic between the local and remote devices may travel along different paths.
isis suppress-reachability
Function
The isis suppress-reachability command suppresses the advertisement of direct routes on an IS-IS interface in a specified topology.
The undo isis suppress-reachability command restores the default setting.
By default, direct routes on an IS-IS interface are advertised.
Parameters
Parameter | Description | Value |
---|---|---|
level-1 | Indicates that the advertisement of IPv4 addresses is suppressed on Level-1 interfaces. If the level is not specified, the advertisement of IPv6 addresses on Level-1 and Level-2 interfaces is suppressed. | - |
level-1-2 | Indicates that the advertisement of IPv4 addresses is suppressed on Level-1 and Level-2 interfaces. | - |
level-2 | Indicates that the advertisement of IPv4 addresses is suppressed on Level-2 interfaces. If the level is not specified, the advertisement of IPv4 addresses is suppressed on Level-1 and Level-2 interfaces. | - |
Usage Guidelines
Before running this command on an interface, run the isis enable command on the interface to enable IS-IS.
Example
# Suppress the advertisement of IPv4 addresses on VLANIF100.
<HUAWEI> system-view [HUAWEI] isis [HUAWEI-isis-1] network-entity 01.0000.0000.0001.00 [HUAWEI-isis-1] quit [HUAWEI] interface vlanif 100 [HUAWEI-Vlanif100] isis enable 1 [HUAWEI-Vlanif100] isis suppress-reachability
# Suppress the advertisement of IPv4 addresses on GE1/0/1.
<HUAWEI> system-view [HUAWEI] isis [HUAWEI-isis-1] network-entity 01.0000.0000.0001.00 [HUAWEI-isis-1] quit [HUAWEI] interface gigabitethernet 1/0/1 [HUAWEI-GigabitEthernet1/0/1] undo portswitch [HUAWEI-GigabitEthernet1/0/1] isis enable 1 [HUAWEI-GigabitEthernet1/0/1] isis suppress-reachability
isis system-id auto-recover disable
Function
The isis system-id auto-recover disable command disables the system from automatically resolving IS-IS system ID conflicts.
The undo isis system-id auto-recover disable command enables the system to automatically resolve IS-IS system ID conflicts.
By default, if the system detects an IS-IS system ID conflict, it automatically changes the local system ID to resolve the conflict.
Usage Guidelines
Usage Scenario
A system ID uniquely identifies an IS-IS device. If the same system ID is configured for more than one device on the network, a routing loop may occur. By default, if the system detects an IS-IS system ID conflict, it automatically changes the local system ID to resolve the conflict.
To disable the system from automatically resolving IS-IS system ID conflicts, run the isis system-id auto-recover disable command. After the command is run, IS-IS system ID conflicts need to be manually resolved.
The first two bytes of the system ID automatically changed by the system are Fs, and the last four bytes are randomly generated. For example, FFFF:1234:5678 is such a system ID.
Precautions
If an IS-IS system ID conflict occurs between two directly connected devices, a neighbor relationship fails to be established only between the two devices, without affecting the entire network. As a result, the conflict is not automatically resolved in this case.
On broadcast networks, the system ID generated automatically is not recorded in the configuration file. If the device is restarted, the system restores this system ID to the originally configured one and then generates another one, which may be different from the one last generated automatically. If the conflict persists after the system automatically generates three system IDs, the system no longer resolves this conflict.
isis tag-value
Function
The isis tag-value command sets the administrative tag value of an IS-IS interface.
The undo isis tag-value command deletes the administrative tag value on an IS-IS interface.
By default, an IS-IS interface has no administrative tag value.
Parameters
Parameter | Description | Value |
---|---|---|
tag | Specifies the administrative tag of an IS-IS interface. | The value is an integer that ranges from 1 to 4294967295. |
level-1 | Indicates the administrative tag value of a Level-1 interface. If the interface level is not specified, the administrative tag value is set for Level-1 and Level-2 interfaces. | - |
level-2 | Indicates the administrative tag value of a Level-2 interface. If the interface level is not specified, the administrative tag value is set for Level-1 and Level-2 interfaces. | - |
Usage Guidelines
Usage Scenario
An administrative tag carries administrative information about IP address prefixes. The tag can be used to import routes of different levels and different areas. Administrative tags can advertise IP address prefixes in an IS-IS routing domain to control routes and simplify management.
Using the isis tag-value command, you can set the administrative tag value for all routes of a specified IS-IS process. The tag can be used as a filtering condition of a route-policy to filter routes.
Prerequisites
IS-IS has been enabled on the interface using the isis enable command.
Precautions
The advertised LSPs contain the administrative tag value only when the IS-IS cost style is wide, wide-compatible, or compatible.
The administrative tag value set using the isis tag-value command has a higher priority than the administrative tag value set using the circuit default-tag command.
Example
# Set the administrative tag value of VLANIF100 to 77.
<HUAWEI> system-view [HUAWEI] isis [HUAWEI-isis-1] network-entity 01.0000.0000.0001.00 [HUAWEI-isis-1] quit [HUAWEI] interface vlanif 100 [HUAWEI-Vlanif100] isis enable 1 [HUAWEI-Vlanif100] isis tag-value 77
# Set the administrative tag value of GE1/0/1 to 77.
<HUAWEI> system-view [HUAWEI] isis [HUAWEI-isis-1] network-entity 01.0000.0000.0001.00 [HUAWEI-isis-1] quit [HUAWEI] interface gigabitethernet 1/0/1 [HUAWEI-GigabitEthernet1/0/1] undo portswitch [HUAWEI-GigabitEthernet1/0/1] isis enable 1 [HUAWEI-GigabitEthernet1/0/1] isis tag-value 77
isis timer csnp
Function
The isis timer csnp command sets the interval for sending CSNPs on a broadcast network.
The undo isis timer csnp command restores the default setting.
By default, the interval for sending CSNPs on a broadcast network is 10 seconds.
Format
isis timer csnp csnp-interval [ level-1 | level-2 ]
undo isis timer csnp [ csnp-interval ] [ level-1 | level-2 ]
Parameters
Parameter | Description | Value |
---|---|---|
csnp-interval | Specifies the interval for sending CSNPs on a broadcast network. | The value is an integer that ranges from 1 to 65535, in seconds. The default value is 10 seconds. |
level-1 | Indicates the interval for sending Level-1 CSNPs. If no level is specified, the interval for the IS-IS process of the current level to send CSNP packets is set by default. | - |
level-2 | Indicates the interval for sending Level-2 CSNPs. If no level is specified, the interval for the IS-IS process of the current level to send CSNP packets is set by default. | - |
Usage Guidelines
Usage Scenario
In a broadcast network, a DIS sends CSNPs periodically to enable all devices to synchronize LSDBs with one another. If a device finds that the local LSDB does not have a specific LSP or an existing LSPs is not the latest one after the device has received a CSNP, the device will send a PSNP to request the corresponding LSP. Only a DIS sends CSNPs periodically. Therefore, the isis timer csnp command will take effect only on a broadcast interface of the DIS. This command can be used to set an interval for sending CSNPs in an area at a specified level. A router may be elected as a DIS in both Level-1 and Level-2 areas. Therefore, you can set different intervals at which the DIS sends CSNPs in Level-1 and Level-2 areas.
Precautions
The IS-IS route convergence speed depends on the LSDB synchronization speed. Therefore, reducing the interval for sending CSNPs can speed up LSDB synchronization and IS-IS route convergence. If the interval is set too small, however, the DIS will send CSNPs frequently. This causes high CPU, memory, and network bandwidth usage and affects services.
If the isis circuit-type command is run to emulate the interface as a P2P interface, the isis timer csnp command becomes invalid on the interface; after the undo isis circuit-type command is run to restore the broadcast interface, the interval for sending CSNPs is restored to the default setting.
Example
# Set the interval for sending Level-2 CSNPs to 15 seconds on VLANIF100.
<HUAWEI> system-view [HUAWEI] isis [HUAWEI-isis-1] network-entity 01.0000.0000.0001.00 [HUAWEI-isis-1] quit [HUAWEI] interface vlanif 100 [HUAWEI-Vlanif100] isis enable 1 [HUAWEI-Vlanif100] isis timer csnp 15 level-2
# Set the interval for sending Level-2 CSNPs to 15 seconds on GE1/0/1.
<HUAWEI> system-view [HUAWEI] isis [HUAWEI-isis-1] network-entity 01.0000.0000.0001.00 [HUAWEI-isis-1] quit [HUAWEI] interface gigabitethernet 1/0/1 [HUAWEI-GigabitEthernet1/0/1] undo portswitch [HUAWEI-GigabitEthernet1/0/1] isis enable 1 [HUAWEI-GigabitEthernet1/0/1] isis timer csnp 15 level-2
isis timer hello
Function
The isis timer hello command sets the interval for sending Hello packets on an IS-IS interface.
The undo isis timer hello command restores the default setting.
By default, the interval for sending Hello packets 10 seconds on an interface.
Format
isis timer hello hello-interval [ level-1 | level-2 ] [ conservative ]
undo isis timer hello [ hello-interval ] [ level-1 | level-2 ] [ conservative ]
Parameters
Parameter | Description | Value |
---|---|---|
hello-interval | Specifies the interval for sending Hello packets. | The value is an integer that ranges from 3 to 255, in seconds. The default value is 10 seconds. |
level-1 | Indicates the interval for sending Level-1 Hello packets. If the level is not specified, the interval for sending Level-1 and Level-2 Hello packets is set by default. |
- |
level-2 | Indicates the interval for sending Level-2 Hello packets. If the level is not specified, the interval for sending Level-1 and Level-2 Hello packets is set by default. NOTE:
Parameters level-1 and level-2 are configured only on a broadcast interface that is enabled with IS-IS. Level-1 and Level-2 Hello packets are sent separately and their intervals must be set respectively. There is only one Hello packet on a point-to-point link. Therefore, level-1 and level-2 parameters are not used. |
- |
conservative | Indicates the conservative mode of the dead timer. If the conservative mode is configured, the value configured for the dead timer takes effect even when the value is less than 10s. | - |
Usage Guidelines
IS-IS maintains neighbor relationships between neighbors by sending and receiving Hello packets. If the local device does not receive Hello packets from its neighbor within a specified period, the device considers the neighbor Down.
Prerequisites
IS-IS has been enabled on the interface using the isis enable command.
PrecautionsThe shorter the interval, the more system resources used to send Hello packets. The interval should therefore be set according to the actual conditions.
If a broadcast interface is emulated as a P2P interface through the isis circuit-type command or then restored to the broadcast interface through the undo isis circuit-type command, the interval for sending IS-IS Hello packets is restored to the default value.
Example
# Set the interval for sending Level-2 Hello packets to 20 seconds on VLANIF100.
<HUAWEI> system-view [HUAWEI] isis [HUAWEI-isis-1] network-entity 01.0000.0000.0001.00 [HUAWEI-isis-1] quit [HUAWEI] interface vlanif 100 [HUAWEI-Vlanif100] isis enable 1 [HUAWEI-Vlanif100] isis timer hello 20 level-2
# Set the interval for sending Level-2 Hello packets to 20 seconds on GE1/0/1.
<HUAWEI> system-view [HUAWEI] isis [HUAWEI-isis-1] network-entity 01.0000.0000.0001.00 [HUAWEI-isis-1] quit [HUAWEI] interface gigabitethernet 1/0/1 [HUAWEI-GigabitEthernet1/0/1] undo portswitch [HUAWEI-GigabitEthernet1/0/1] isis enable 1 [HUAWEI-GigabitEthernet1/0/1] isis timer hello 20 level-2
isis timer holding-multiplier
Function
The isis timer holding-multiplier command sets the multiplier of the interval for sending Hello packets to change the holdtime of IS-IS neighbor relationship.
The undo isis timer holding-multiplier command restores the default setting.
By default, the multiplier of the interval for sending Hello packets is 3, that is, the neighbor holdtime is three times the interval for sending Hello packets.
Format
isis timer holding-multiplier number [ level-1 | level-2 ]
undo isis timer holding-multiplier [ number ] [ level-1 | level-2 ]
Parameters
Parameter | Description | Value |
---|---|---|
number | Indicates that the neighbor holdtime is a multiplier of the interval for sending Hello packets. | The value is an integer that ranges from 3 to 1000. The default value is 3. |
level-1 | Indicates the holdtime of Level-1 neighbors. If the level is not specified, the holdtime is set for both Level-1 and Level-2 neighbors. | - |
level-2 | Indicates the holdtime of Level-2 neighbors. If the
level is not specified, the holdtime is set for both Level-1 and Level-2
neighbors. NOTE:
Parameters level-1 and level-2 are configured only on a broadcast interface that is enabled with IS-IS. Level-1 and Level-2 Hello packets are sent separately and their intervals must be set respectively. There is only one Hello packet on a point-to-point link. Therefore, level-1 and level-2 parameters are not used. |
- |
Usage Guidelines
Usage Scenario
Devices at both ends of a link establish a neighbor relationship by sending Hello packets to each other. After the neighbor relationship is established, both devices need to send Hello packets at a specified interval to maintain the neighbor relationship. If a device does not receive any Hello packet from its neighbor within a specified period of time, the device considers the neighbor to be Down. The specified time period is known as the neighbor holdtime.
For example, run the isis timer hello command on a local device to set the interval for sending Hello packets to 20s. Then, run the isis timer holding-multiplier 4 command. The holdtime is 80s (four times the interval for sending Hello packets). If the interval for sending Hello packets is changed using the isis timer hello 20 command, the holdtime will be changed accordingly.
Prerequisites
IS-IS has been enabled on the interface using the isis enable command.
Precautions
If the number value is set too large, the local device needs to wait a long time before detecting that the remote device has gone Down. This slows down IS-IS route convergence. If the value of number is set too small, the neighbor relationship will alternate between Up and Down when some Hello packets are lost due to transmission delays and errors on the network. This causes route flapping on the IS-IS network. Therefore, exercise caution when setting the value of number. Set the same interval for sending Hello packets and the same neighbor holdtime for all devices on the IS-IS network is recommended. This is to ensure that all devices detect link failures at the same time and guarantee timely IS-IS route convergence.
If a broadcast interface is emulated as a P2P interface through the isis circuit-type command or then restored to the broadcast interface through the undo isis circuit-type command, the number of Hello packets that IS-IS does not receive from a neighbor before the neighbor is declared Down is restored to the default value.
Example
# Set the number of Level-2 Hello packets that IS-IS does not receive from a neighbor before the neighbor is declared Down to 6 on VLANIF100.
<HUAWEI> system-view [HUAWEI] isis [HUAWEI-isis-1] network-entity 01.0000.0000.0001.00 [HUAWEI-isis-1] quit [HUAWEI] interface vlanif 100 [HUAWEI-Vlanif100] isis enable 1 [HUAWEI-Vlanif100] isis timer holding-multiplier 6 level-2
# Set the number of Level-2 Hello packets that IS-IS does not receive from a neighbor before the neighbor is declared Down to 6 on GE1/0/1.
<HUAWEI> system-view [HUAWEI] isis [HUAWEI-isis-1] network-entity 01.0000.0000.0001.00 [HUAWEI-isis-1] quit [HUAWEI] interface gigabitethernet 1/0/1 [HUAWEI-GigabitEthernet1/0/1] undo portswitch [HUAWEI-GigabitEthernet1/0/1] isis enable 1 [HUAWEI-GigabitEthernet1/0/1] isis timer holding-multiplier 6 level-2
isis timer lsp-retransmit
Function
The isis timer lsp-retransmit command sets the interval for retransmitting LSPs over a P2P link.
The undo isis timer lsp-retransmit command restores the default value.
By default, the interval for retransmitting LSPs over a P2P link is 5 seconds.
Parameters
Parameter | Description | Value |
---|---|---|
retransmit-interval | Specifies the interval for retransmitting LSPs. | The value is an integer that ranges from 1 to 300. |
Usage Guidelines
Usage Scenario
On a point-to-point network, devices at both ends of a link synchronize LSDBs with each other by flooding LSPs. The device at one end of the link sends an LSP. If the device at the other end receives this LSP, it replies with a PSNP. If the device that has sent an LSP does not receive a PSNP from the other end in a period of time, the device will retransmit the LSP.
The isis timer lsp-retransmit command is used to set an interval for retransmitting LSPs. Only the devices on a point-to-point network send PSNPs. Therefore, the isis timer lsp-retransmit command will take effect only when it is run on point-to-point interfaces.
Precautions
After the isis timer lsp-retransmit command is run on a device, the device will wait retransmit-interval after having sent an LSP. If the device receives a PSNP from the other end, the device will not retransmit the LSP. Otherwise, the device will retransmit the LSP.
If a broadcast interface is emulated as a P2P interface through the isis circuit-type command or restored a P2P interface to the broadcast interface through the undo isis circuit-type command, the interval for retransmitting LSP packets on a P2P link is restored to the default value.
Example
# Set the interval for retransmitting LSPs on VLANIF100 to 10 seconds.
<HUAWEI> system-view
[HUAWEI] isis
[HUAWEI-isis-1] network-entity 01.0000.0000.0001.00
[HUAWEI-isis-1] quit
[HUAWEI] interface vlanif 100
[HUAWEI-Vlanif100] isis enable 1
[HUAWEI-Vlanif100] isis circuit-type p2p
[HUAWEI-Vlanif100] isis timer lsp-retransmit 10
# Set the interval for retransmitting LSPs on GE1/0/1 to 10 seconds.
<HUAWEI> system-view [HUAWEI] isis [HUAWEI-isis-1] network-entity 01.0000.0000.0001.00 [HUAWEI-isis-1] quit [HUAWEI] interface gigabitethernet 1/0/1 [HUAWEI-GigabitEthernet1/0/1] undo portswitch [HUAWEI-GigabitEthernet1/0/1] isis enable 1 [HUAWEI-GigabitEthernet1/0/1] isis circuit-type p2p [HUAWEI-GigabitEthernet1/0/1] isis timer lsp-retransmit 10
isis timer lsp-throttle
Function
The isis timer lsp-throttle command sets the minimum interval for sending LSPs on an IS-IS interface and the maximum number of LSPs sent within the interval.
The undo isis timer lsp-throttle command restores the default setting.
By default, the minimum interval for sending LSPs on an IS-IS interface is 50 milliseconds and the maximum number of LSPs sent within the interval is 10.
Parameters
Parameter | Description | Value |
---|---|---|
throttle-interval | Specifies the minimum interval for sending LSPs. | The value is an integer that ranges from 1 to 10000, in milliseconds. |
count count | Specifies the maximum number of LSPs that are sent within the interval specified by throttle-interval. | The value is an integer that ranges from 1 to 1000. |
Usage Guidelines
The value specified by throttle-interval is the interval between two consecutive LSPs and is also the interval for sending multiple fragments of a CSNP.
Before running this command on an interface, run the isis enable command on the interface to enable IS-IS.
Example
# Set the interval for retransmitting LSPs on VLANIF100 to 500 ms.
<HUAWEI> system-view [HUAWEI] isis [HUAWEI-isis-1] network-entity 01.0000.0000.0001.00 [HUAWEI-isis-1] quit [HUAWEI] interface vlanif 100 [HUAWEI-Vlanif100] isis enable 1 [HUAWEI-Vlanif100] isis timer lsp-throttle 500
# Set the interval for retransmitting LSPs on GE1/0/1 to 500 ms.
<HUAWEI> system-view [HUAWEI] isis [HUAWEI-isis-1] network-entity 01.0000.0000.0001.00 [HUAWEI-isis-1] quit [HUAWEI] interface gigabitethernet 1/0/1 [HUAWEI-GigabitEthernet1/0/1] undo portswitch [HUAWEI-GigabitEthernet1/0/1] isis enable 1 [HUAWEI-GigabitEthernet1/0/1] isis timer lsp-throttle 500
is-level
Function
The is-level command sets the level of an IS-IS switch.
The undo is-level command restores the default setting.
By default, the level of an IS-IS switch is Level-1-2.
Parameters
Parameter | Description | Value |
---|---|---|
level-1 | Indicates that the level of the switch is Level-1. The switch calculates only intra-area routes and maintains the Level-1 LSDB. | - |
level-1-2 | Indicates that the level of the switch is Level-1-2. The switch calculates Level-1 and Level-2 routes and maintains Level-1 and Level-2 LSDBs. | - |
level-2 | Indicates that the level of the switch is Level-2. The switch calculates only Level-2 routes, and maintains the Level-2 LSDB. | - |
Usage Guidelines
Usage Scenario
- Level-1 switch: A Level-1 switch manages intra-area routing. It establishes neighbor relationships with only Level-1 and Level-1-2 switchs in the same area. Level-1 switchs can be connected to other areas through Level-1-2 switchs only.
- Level-2 switch: A Level-2 switch manages intra-area routing. It establishes neighbor relationships with Level-2 switchs in the same area and Level-1-2 switchs in other areas only. All Level-2 switchs form the backbone network of the routing domain. They are responsible for communications between areas. The Level-2 switchs in the routing domain must be reachable, and no switch of other levels is deployed between every two Level-2 switchs.
- Level-1-2 switch: A Level-1-2 switch can establish Level-1 neighbor relationships with Level-1 switchs and Level-1-2 switchs in the same area. It can also establish Level-2 neighbor relationships with Level-2 switchs and Level-1-2 switchs in other areas.
In most cases, Level-1 switchs are located within an area, Level-2 switchs are located between areas, and Level-1-2 switchs are located between Level-1 switchs and Level-2 switchs.
The level of an IS-IS switch and of an interface determine the level of a neighbor relationship. By default, neighbor relationships between two Level-1-2 switchs are Level-1 and Level-2. To establish a Level-1 or Level-2 neighbor relationship, run the isis circuit-level command to modify the level of interfaces.
If only one area exists, setting the level of switchs to Level-1 or Level-2 is recommended to prevent devices from maintaining two LSDBs that are the same. On an IP network, setting the level of all switchs to Level-2 for future extension is recommended.
Precautions
If the levels of IS-IS switchs are changed during network operation, the IS-IS process will be restarted and IS-IS neighbor relationships will be disconnected. Setting the levels of switchs when configuring IS-IS is recommended.
If the Level-1 and Level-2 is not specified, the switch works at Level-1-2. That is, the switch calculates Level-1 and Level-2 routes and maintains Level-1 and Level-2 LSDBs simultaneously.
is-name
Function
The is-name command enables the capability of identifying the host name in an LSP and configures the dynamic host name for the IS-IS system of the local switch. The dynamic hostname is advertised in an LSP packet.
The undo is-name command deletes the dynamic host name configured for the IS-IS system of the local switch.
By default, the IS-IS system of the local switch has no dynamic host name.
Parameters
Parameter | Description | Value |
---|---|---|
symbolic-name | Specifies a dynamic host name. | The value is a string of 1 to 64 case-sensitive characters without spaces.When double quotation marks are used around the string, spaces are allowed in the string. |
Usage Guidelines
In most cases, to check information about IS-IS neighbors and LSDBs on an IS-IS switch, you need to use a system ID of a 12-digit hexadecimal number, for example, aaaa.eeee.1234. This representation, however, is complicated and not easy to use. The dynamic host name mapping mechanism is introduced to facilitate maintenance and management of IS-IS networks. The is-name command is used to configure a simple host name for a local switch and enables the switch to advertise it in an LSP.
After the configuration is completed, you can run the display isis name-table command to check the configured hostname.
is-name map
Function
The is-name map command enables the local switch to identify the host name in LSPs, and sets a static host name for a remote IS-IS system on the local switch.
The undo is-name map command disables the local switch from identifying the host name in LSPs, and deletes the static host name for a remote IS-IS system set by the local switch.
By default, the local device does not have the static host name of a remote IS-IS system.
Parameters
Parameter | Description | Value |
---|---|---|
system-id | Specifies the ID of the remote mapped IS-IS system or pseudonode ID. | The format is XXXX.XXXX.XXXX[.XX]. |
symbolic-name | Specifies the static host name of the remote mapped IS-IS system. | The value is a string of 1 to 64 characters without spaces. It is case sensitive.When double quotation marks are used around the string, spaces are allowed in the string. |
Usage Guidelines
When checking information about IS-IS neighbors and LSDBs on the switch that runs IS-IS, each switch in the IS-IS routing domain is represented by a system ID with a 12-bit hexadecimal number, for example, aaaa.eeee.1234. This representation is complicated and not easy to use. To manage and maintain IS-IS networks conveniently, IS-IS uses the dynamic host name exchange mechanism. The is-name map command can configure a host name for the remote switch and does not advertise the host name through an LSP.
After running the is-name map command to map the remote switch to the host name, you can find that the system ID of the remote switch is replaced by the host name configured using the display isis name-table command.
PrecautionsThis configuration is static configuration and takes effect only on the local device. Therefore, the configured host name symbolic-name is not advertised through an LSP. If dynamic host name mapping is configured on an IS-IS device, dynamic host name mapping takes precedence over static host name mapping.
local-mt enable (IS-IS)
Function
The local-mt enable command enables IS-IS local MT.
The undo local-mt enable command disables IS-IS local MT.
By default, IS-IS local MT is not enabled.
local-mt filter-policy (IS-IS)
Function
The local-mt filter-policy command configures the policy of IS-IS local Multi Topology (MT).
The undo local-mt filter-policy command cancels the policy of IS-IS local MT.
By default, the policy of local MT is not configured.
Format
local-mt filter-policy { acl { acl-number | acl-name } | ip-prefix ip-prefix-name }
undo local-mt filter-policy
Parameters
Parameter | Description | Value |
---|---|---|
acl-number | Specifies the number of the basic ACL. | The value is an integer ranging from 2000 to 2999. |
acl-name acl-name | Specifies the name of a Named ACL. It is case-sensitive. | The value is a string of 1 to 64 case-sensitive characters without spaces. The value must start with a letter. |
ip-prefix ip-prefix-name | Specifies the name of the IP prefix list. | The name is a string of 1 to 169 case-sensitive characters, with spaces not supported. When double quotation marks are used around the string, spaces are allowed in the string. |
Usage Guidelines
Usage Scenario
After the policy of local MT is configured, only the routes to the multicast source addresses are added to the Multicast IGP (MIGP) routing table. This saves CPU and memory resources.
For an ACL, when the rule command is used to configure a filtering rule, the filtering rule is effective only with the source address range that is specified by the source parameter and with the time period that is specified by the time-range parameter.
Precautions
Creating an ACL before it is referenced is recommended. If a nonexistent ACL is referenced using the command, all IS-IS routes are added to the MIGP routing table.
Creating an IP prefix list before it is referenced is recommended. By default, nonexistent IP prefix lists cannot be referenced using the command. If the route-policy nonexistent-config-check disable command is run in the system view and a nonexistent IP prefix list is referenced using the current command, all IS-IS routes are added to the MIGP routing table.