VXLAN Commands

protocol nve
no protocol nve 

Enables NVE functionality and displays NVE commands.
The no form of the command hides the NVE commands and deletes its database.

switch (config) # protocol nve

interface nve <nve-id>
no interface nve <nve-id> 

Creates VXLAN tunnel.
The no form of the command destroys VXLAN tunnel.

switch (config) # interface nve 1
switch (config interface nve 1) #

nve bridge <vni-id> [name <bridge-name>]
no nve bridge <vni-id>

Creates an NVE bridge with a given VNI.
The no form of the command removes NVE bridge.

switch (config interface nve 1) # nve bridge 25

nve controller bgp
no nve controller bgp

Enables the NVE controller mode to BGP.
The no form disables the NVE controller mode from BGP to OVSDB mode.

switch (config interface nve 1) # nve controller mode

nve fdb flood bridge <vni-id> address <ip-address>
no nve fdb flood bridge <vni-id> address [ip-address] 

Adds an IP address of a remote VTEP to be used for BUM traffic.
The no form of the command has two input options:

• Entering an IP address removes a specific remote address
• No IP address removes all addresses

switch (config interface nve 1) # nve fdb flood bridge 7777 address 1.2.3.6

nve fdb flood load-balance
no nve fdb flood load-balance 

Configures service-node replication.
The no form of the command configures source-node replication.

switch (config interface nve 1) # nve fdb flood load-balance

nve fdb learning remote
no nve fdb learning remote 

Enables remote (controller-less) FDB learning.
The no form of the command disables remote FDB learning.

switch (config interface nve 1) # nve fdb learning remote

nve mode only [force]
no nve mode only [force] 

Sets physical interface to NVE mode.
The no form of the command removes physical interface from NVE mode.

switch (config interface ethernet 1/1) # nve mode only

nve neigh-suppression
no nve neigh-suppression

Enables neighbor suppression for all VLAN-VNI mappings.
The no form of the command disables neighbor suppression for all VLAN-VNI mappings.

switch (config interface nve 1) # nve neigh-suppression

• If VLAN mapping is already configured, then the user might run "disable nve vlan <vlan_id> neigh-suppression" to not use global configuration.
• BGP controller mode must be set prior to using this command

nve vlan <vlan-id> bridge <vni-id>
no nve vlan <vlan-id> bridge <vni-id> 

Maps a VLAN to a specific bridge on the interface (controller-less configuration).
The no form of the command unmaps a VLAN from a specific bridge on the interface.

switch (config interface ethernet 1/1) # nve vlan 10 bridge 7777

• Multiple VLANs cannot be mapped to a single bridge
• If you use VTEP light, VLAN 0 should be used for untagged traffic

nve vlan <vlan_id> neigh-suppression
[disable | no] nve vlan <vlan_id> neigh-suppression

Configures neigh-suppression for a specific VLAN mapping.
The no form of the command uses the global neigh-suppression configuration in this VLAN mapping.
The disable form of the command disables neigh-suppression in this VLAN mapping regardless of the global configuration.

switch (config interface nve 1) # nve vlan 5 neigh-suppression

protocol nve
nve controller bgp

nve neigh-suppression

• BGP controller mode must be set prior to using this command
• VLAN-VNI mapping needs to be set prior to running this command

nve vni <vni_value> vlan <vlan_id> [counter <encap/decap/both>]
no nve vni <vni_value> vlan <vlan_id>

Creates new VNI-to-VLAN manual mapping.
The no form of the command deletes VNI-to-VLAN manual mapping.

Possible values: 1-16777214

switch (config interface nve 1) # nve vni 5000 vlan 5

protocol nve
nve controller bgp
interface nve
interface nve auto-vlan-map
show interfaces counters vlan

• BGP controller mode must be set prior to using this command
• For complete configuration, this VLAN needs to be created and a VXLAN source loopback needs to be added

interface nve <nve> nve vni auto-vlan-map [base <base-number>]
interface nve <nve> no nve vni auto-vlan-map

Performs automatic mapping of all existing VLANs that are not manually mapped to VNI to a calculated VNI (Calculated VNI=base-number + VLAN).
The no form of the command disables automatic VLAN mapping.

(config interface nve 1) # nve vni auto-vlan-map
(config) # vlan 2-5
(config) # show interfaces nve 1 detail
--------------------------------------------------------------
Vlan         VNI          Neigh Suppression   Mapping type 
--------------------------------------------------------------
1            100001       Disabled               Auto
2            100002       Disabled               Auto
3            100003       Disabled               Auto
4            100004       Disabled               Auto
5            100005       Disabled               Auto

nve vni vlan
interface nve disable nve vni

• Base-number cannot be changed, user must unset auto-vlan-map and reconfigure it with a different base number
• While auto-vlan-map is enabled, user cannot add manual mappings (only deletion of a manual mapping is allowed)
• IPL VLAN will not be mapped to VNI.

interface nve <nve> disable nve vni any vlan <vlan/vlan-range>
interface nve <nve> no nve vni any vlan <vlan/vlan-range>

Excludes a VLAN from the auto-vlan-map operation.
The no form of the command deletes the exclusion.

(config interface nve 1) # disable nve vni any vlan 5

(config interface nve 1) # no nve vni any vlan 5

interface nve auto-vlan-map 

User can set/unset exclude VLANs while auto-vlan-map is enabled or disabled.

vxlan mlag-tunnel-ip <mlag_ipv4_address>
no vxlan mlag-tunnel-ip <mlag_ipv4_address>

Configures the MLAG tunnel IP.
The no form of the command unbinds VXLAN tunnel from the loopback interface.

Valid MLAG IPv4 address

switch (config interface nve 1) # vxlan mlag-tunnel-ip 1.2.3.4

protocol nve
nve controller bgp

BGP controller mode must be set prior to running this command

vxlan source interface loopback <loopback-id>
no vxlan source interface loopback <loopback-id> 

Binds VXLAN tunnel to a loopback interface.
The no form of the command unbinds VXLAN tunnel from the loopback interface.

Loopback interface ID
Range: 0-31

switch (config interface nve 1) # vxlan source interface loopback 14

• The configured loopback interface becomes the VXLAN tunnel endpoint (VTEP)
• The configured loopback interface must be in the 'default ' VRF

shutdown
no shutdown

Disables VXLAN tunnel.
The no form of the command enables VXLAN tunnel.

switch (config interface nve 1) # shutdown

clear mac-address-table nve [remote] 

Clears locally-learned NVE MAC addresses.

Clears remotely-learned NVE MAC addresses

switch (config interface nve 1) # clear mac-address-table nve

clear nve counters

Clears NVE counters.

N/A

switch (config interface nve 1) # clear nve counters

The command “clear counters all” also clears NVE counters

show interfaces nve [<nve-id>] 

Displays information about NVE interfaces.

nve-id

NVE ID
Range: 1-64

switch (config) # show interface nve 1

  Admin state                : enabled
  Source interface           : loopback 1
  Source interface ip        : 192.168.1.1
  Controller mode            : BGP
  Mlag tunnel ip             : not configured
  Effective tunnel ip        : 192.168.1.1
  Global neigh-suppression   : Disabled
  Auto-vlan-map              : Disabled
  

    Counters
    1840                 encapsulated (Tx) NVE packets
    1970                 decapsulated (Rx) NVE packets
    0                    dropped NVE-encapsulated packets
    0                    NVE-encapsulated packets with errors

show interfaces nve [<nve-id>] detail

Displays all the VNI-VLAN mappings for this NVE interface.

nve-id

NVE ID
Range: 1-64

switch (config)# show interfaces nve 1 detail

  Admin state                : enabled
  Source interface           : loopback 1
  Source interface ip        : 192.168.1.1
  Controller mode            : BGP
  Mlag tunnel ip             : not configured
  Effective tunnel ip        : 192.168.1.1
  Global neigh-suppression   : Disabled
  Auto-vlan-map              : Disabled

-------------------------------------------------------
Vlan      VNI        Neigh Suppression   Mapping Type
-------------------------------------------------------
6         60         Disabled            Manual
7         70         Disabled            Manual
8         80         Disabled            Manual
9         90         Disabled            Manual

show interfaces nve <nve-id> counters

Displays NVE counters.

nve-id

NVE ID
Range: 1-64

switch (config) # show interface nve 1 counters

encapsulated (Tx) NVE packets        :0
decapsulated (Rx) NVE packets        :0
dropped NVE-encapsulated packets     :0
NVE-encapsulated packets with errors :0               

show interfaces nve <nve_id>counters vlan <vlan_value> 

Displays NVE counters per VLAN.

nve-id

NVE ID
Range: 1-64

switch (config) # show interfaces nve 1 counters vlan 5

Encapsulated (Tx) NVE packets: 1
Decapsulated (Rx) NVE packets: 1
Encapsulated (Tx) NVE bytes : 102
Decapsulated (Rx) NVE bytes : 152

switch (config) #

.show interfaces nve <nve-id> flood [vni <vni-id>] 

Displays remote VTEP endpoints configured for BUM (broadcast, unknown unicast, multicast) flooding.

nve-id

NVE ID
Range: 1-64

switch (config) # show interface nve 1 flood

NVE Interface   Logical Switch         VNI ID     Flood IP Address
-------------   --------------         ------     ----------------
1               ls7777                 7777       1.2.3.5

switch (config) # show interfaces nve 1 flood

------------------------------------------------------
NVE Interface VLAN ID VNI ID Flood IP Addresses
------------------------------------------------------
1             6       60     192.168.1.2 
1             7       70     193.168.1.1
                             193.168.1.2

ovs ovsdb server
no ovs ovsdb server 

Runs OVSDB-server process and unhides OVS commands.
The no form of the command deactivates OVSDB-server process and hides OVS commands.

Syntax Description

N/A 

Default

N/A

Configuration Mode

config

History

3.6.3004

Example

switch (config) # ovs ovsdb server

Notes

 OVSDB server runs when “protocol openflow” or “protocol nve” are enabled, even when not enabled using this command

ovs ovsdb manager remote {tcp | ssl} ip-address <ip-address> port <tcp-port>
no ovs ovsdb manager remote {tcp | ssl} ip-address <ip-address> port <tcp-port> 

Configures OVSDB to actively connect to a remote manager at a given IP address and TCP port, using either TCP or SSL.
The no form of the command disconnects OVSDB from a remote manager.

Syntax Description

SSL

Connect with TCP protocol

TCP

Connect with SSL protocol

ip-address

IP address of remote manager

Default

N/A

Configuration Mode

config

History

3.6.3004

Example

switch (config) # ovs ovsdb manager remote tcp ip-address 10.10.10.10 port 20

Notes

ovs ovsdb server listen {tcp | ssl} port <tcp-port> local ip-address <ip-address>
no ovs ovsdb server listen {tcp | ssl} port <tcp-port> local ip-address <ip-address>

Configures OVSDB to listen at a given port of an interface with a given (local) IP address.
The no form of the command disconnects OVSDB from a remote manager.

Syntax Description

SSL

Connect with TCP protocol

TCP

Connect with SSL protocol

ip-address

IP address of a given port

Default

N/A

Configuration Mode

config

History

3.6.3004

Example

switch (config) # ovs ovsdb server listen tcp port 20 local ip-address 20.20.20.20

Notes

ovs {ovsdb | vswitchd | vtep} logging level {dbg | emer | err | info | off | warn}

Configures OVS logging levels for OVS related processes.

Syntax Description

ovsdb | vswitchd | vtep

OVS-related processes

dbg | emer | err | info | off | warn

Logging level severity

Default

N/A

Configuration Mode

config

History

3.8.1100

Example

switch (config) # ovs ovsdb logging level err
switch (config) # ovs ovsdb vswitchd level warn

Notes

show ovs

Displays OVS information.

Syntax Description

N/A

Default

N/A

Configuration Mode

config

History

3.8.1100

Example

switch (config) # show ovs

Logging level:
  ovsdb   : info
  vswitchd: info
  vtep    : warn

Notes