Huawei CloudEngine 16800 Series Switches Command Reference (VPN and GRE)

• Version
• Download 0
• File Size 395.62 KB
• File Count 1
• Create Date May 19, 2025
• Last Updated May 19, 2025

The Huawei CloudEngine 16800 Series Switches Command Reference (VPN and GRE) provides detailed command-line instructions for configuring and managing GRE tunnels and VPN instances. Here's a summarized breakdown of the key sections and their purposes:

🔹 GRE Configuration Commands (Section 11.1)

These commands are used to create and manage GRE (Generic Routing Encapsulation) tunnels:

1. interface tunnel <id> – Creates or deletes a tunnel interface.
2. tunnel-protocol gre – Sets the tunnel encapsulation to GRE.
3. source / destination – Specifies the source and destination IP addresses or interfaces for the tunnel.
4. description – Adds a description to the tunnel interface.
5. mtu – Configures the Maximum Transmission Unit for the tunnel.
6. display interface tunnel – Displays detailed status and statistics of tunnel interfaces.

🔹 VPN Configuration Commands (Section 11.2)

These commands manage Layer 3 VPNs (L3VPNs) using BGP/MPLS:

VPN Instance Management

• ip vpn-instance <name> – Creates or deletes a VPN instance.
• ipv4-family / ipv6-family – Enables IPv4 or IPv6 address families for the VPN.
• route-distinguisher – Assigns a unique RD to distinguish overlapping routes.
• vpn-target – Sets import/export route targets for route control.

Interface Binding

• ip binding vpn-instance – Binds an interface to a VPN instance.

Routing and Policies

• import/export route-policy – Applies route policies for route filtering and attribute modification.
• import-rib – Imports routes between public and VPN instances.
• prefix limit / routing-table limit – Sets thresholds to prevent excessive route imports.

Fast Reroute (FRR)

• ip frr / ipv6 frr / vpn frr – Enables fast reroute for IPv4, IPv6, or VPN routes.

Monitoring and Diagnostics

• display ip vpn-instance – Shows VPN instance configurations.
• display tunnel – Displays tunnel information and statistics.
• display snmp-agent trap feature-name l3vpn all – Shows SNMP trap settings for L3VPN.

Advanced BGP Features

• peer soo – Configures Site of Origin to prevent routing loops.
• peer substitute-as – Enables AS number substitution.
• policy vpn-target – Enables/disables VPN target-based filtering.
• rr-filter – Applies reflection policies for route reflectors.

✅ Usage Guidelines

• Commands are categorized by view (system, interface, VPN instance).
• Many commands require preconditions (e.g., creating a tunnel or VPN instance first).
• Examples are provided for each command to illustrate usage.