display ip vpn-instance

Function

The display ip vpn-instance command displays information about VPN instances on a PE.

Format

display ip vpn-instance [ verbose ] [ vpn-instance-name ]

display ip vpn-instance [ vpn-instance-name ] interface

display ip vpn-instance [ vpn-instance-name ] tunnel-info

Parameters

Parameter Description Value
verbose Displays detailed information of VPN instances and associated interfaces. -
vpn-instance-name Specifies the name of a VPN instance. A string of 1 to 31 case-sensitive characters without any spaces.

When double quotation marks are used around the string, spaces are allowed in the string.

interface Displays information about the interfaces bound to the VPN instance. -
tunnel-info Displays information about the LSP associated with the VPN instance. -

Views

All views

Default Level

1: Monitoring level

Usage Guidelines

Usage Scenario

If you want to check the configurations of VPN instances, interfaces bound to them, and LSPs associated with them, run the display ip vpn-instance command. Since VPN instances support both IPv4or IPv6 address families, the display ip vpn-instance command displays the information of different address families separately.

If vpn-instance-name is not specified, the display ip vpn-instance command displays information about all configured VPN instances on a PE.

If interface is specified, the display ip vpn-instance command displays all interfaces bound to the specified VPN instance.

If tunnel-info is specified, the display ip vpn-instance command displays information about the LSPs to which the routes of the VPN instance enabled with the IPv4 or IPv6 address family are iterated (in other words, information about the LSPs between PEs). If the tunnels between PEs are not LSPs, the display ip vpn-instance command does not display tunnel information.

Example

# Display brief information about all VPN instances.

<sysname> display ip vpn-instance
 Total VPN-Instances configured : 5                                             
 Total IPv4 VPN-Instances configured : 3 
 Total IPv6 VPN-Instances configured : 1

  VPN-Instance Name               RD                             Address family
  vrf1                            1:1                            ipv4
  vrf2                            2:2                            ipv4
  vrf3
  vrf4                                                           ipv4
  vrf5                                                           ipv6 
Table 1 Description of the display ip vpn-instance command output

Item

Description

Total VPN-Instances configured

Total number of VPN instances locally configured.

Total IPv4 VPN-Instances configured

Total number of locally configured VPN instances for which IPv4 address families are enabled.

Total IPv6 VPN-Instances configured

Total number of locally configured VPN instances for which IPv6 address families are enabled.

VPN-Instance Name

Name of the VPN instance created using the ip vpn-instance command.

RD

Route distinguisher configured using the route-distinguisher command in the VPN instance IPv4 address family or IPv6 address family.

Address-family

Address family enabled for the VPN instance. The address family can be:
  • Null, if no address family is enabled.
  • ipv4, if only the IPv4 address family is enabled.
  • ipv6, if only the IPv6 address family is enabled.
  • ipv4 ipv6, if both IPv4 address family and IPv6 address family are enabled.

# Display detailed information about all VPN instances.

<sysname> display ip vpn-instance verbose
Total VPN-Instances configured : 2  
Total IPv4 VPN-Instances configured : 2 
Total IPv6 VPN-Instances configured : 2

VPN-Instance Name and ID : vpn1, 1
  Description : vrf1
  Service ID : 123
  Interfaces : LoopBack1
Address family ipv4  
  Create date : 2010/03/05 16:26:27 UTC-08:00  
  Up time : 0 days, 00 hours, 09 minutes and 12 seconds
  Route Distinguisher : 100:1
  Export VPN Targets :  1:1
  Import VPN Targets :  1:1
  Label Policy : label per instance
  Per-Instance Label : 1029  
  IP FRR Route Policy : rp4
  VPN FRR Route Policy : rp3
  Import Route Policy : rp1
  The diffserv-mode Information is : uniform
  The ttl-mode Information is : uniform
  The VPN QoS configuration information : based on VPN  CIR: 10000000 PIR: 10000000 QoS-profile name: profile1
  Export Route Policy : rp2
  Tunnel Policy : tp1
  Maximum Routes Limit : 200
  Threshold Routes Limit : 10%
  Maximum Prefixes Limit : 200
  Threshold Prefixes Limit : 20%
  Install Mode : route-unchanged
  Log Interval : 30
Address family ipv6
  Create date : 2010/03/05 16:26:31 UTC-08:00
  Up time : 0 days, 00 hours, 09 minutes and 08 seconds 
  Route Distinguisher : 100:1
  Export VPN Targets :  1:1
  Import VPN Targets :  1:1
  Label Policy : label per instance
  Per-Instance Label : 123
  Import Route Policy : p1
  Export Route Policy : p2
  Tunnel Policy : tnlpolicy1
  Maximum Routes Limit : 100
  Threshold Routes Limit : 80%
  Maximum Prefixes Limit : 300
  Threshold Prefixes Limit : 80%
  Install Mode : route-unchanged
  Log Interval : 30
  
VPN-Instance Name and ID : vpn2, 2  
Address family ipv4  
  Create date : 2010/03/05 16:26:42 UTC-08:00
  Up time : 0 days, 00 hours, 08 minutes and 57 seconds
  Route Distinguisher : 1:2
  Label policy : label per route
  The VPN QoS configuration information : based on peer
  <1>CIR: 5000000 PIR: 10000000
     Peer List: 1.2.3.4
  The diffserv-mode Information is : uniform
  The ttl-mode Information is : pipe 
Address family ipv6
  Create date : 2010/03/05 16:26:43 UTC-08:00
  Up time : 0 days, 00 hours, 08 minutes and 56 seconds
  Route Distinguisher : 1:5
  Export VPN Targets :  1:1
  Import VPN Targets :  1:1
  Label Policy : label per instance
  Per-Instance Label : 1026
  Log Interval : 5
Table 2 Description of the display ip vpn-instance verbose command output

Item

Description

Total VPN-Instances configured

Total number of VPN instances locally configured.

VPN-Instance Name and ID

Name and ID of the VPN instance. The ID is assigned by the system.

Description

Description of the VPN instance. Note that the item can appear in the command output only when the description (VPN instance view) command is run in the VPN instance view.

Service ID

Service ID of the VPN instance. This item is displayed only after the service-id (VPN instance view) command is run in the VPN instance view.

Interfaces

Interfaces bound to the VPN instance. This item is displayed only after the ip binding vpn-instance command is configured on these interfaces.

Address family ipv4

Information about the IPv4 address family enabled for the VPN instance.

Address family ipv6

Information about the IPv6 address family enabled for the VPN instance.

Create date

Date when the VPN instance is created.

Up time

Period for which the VPN instance remains in the Up state.

Route Distinguisher

Route distinguisher configured using the route-distinguisher command in the VPN instance IPv4 address family or IPv6 address family view.

Export VPN Targets

Export route target list configured using the vpn-target vpn-target &<1-8> [ both | export-extcommunity ] command.

Import VPN Targets

Import route target list configured using the vpn-target vpn-target &<1-8> [ both | import-extcommunity ] command.

Label policy

Label policy.
  • "label per route" indicates that the label is allocated per route.
  • "label per instance" indicates that the label is allocated per VPN instance.

The label distribution policy can be configured using the apply-label per-instance command.

Per-Instance Label

Label value used when all VPN routes of the VPN instance IPv4 address family or IPv6 address family share one label. This item is displayed only after the apply-label per-instance command is run in the VPN instance IPv4 or IPv6 address family view.

IP FRR Route Policy

IP FRR route policy used for the address family.

VPN FRR Route Policy

VPN FRR route policy used for the address family.

Import Route Policy

Import routing policy applied to the VPN instance IPv4 or IPv6 address family. This item is displayed only after the import route-policy command is run.

Export Route Policy

Export routing policy applied to the VPN instance IPv4 or IPv6 address family. This item is displayed only after the export route-policy command is run.

The diffserv-mode Information is

Indicates the DiffServ mode, in which bandwidth resources are allocated in real time.

The ttl-mode Information is

Indicates the TTL mode.

The VPN QoS configuration information

Indicates the QoS configurations of a VPN instance.

Tunnel Policy

Tunnel policy applied to the VPN instance. This item is displayed only after the tnl-policy (VPN instance IPv4 address family view) or tnl-policy (VPN instance IPv6 address family view) command is run.

Maximum Routes Limit

Maximum number of routes supported by the current address family of the VPN instance. This item is displayed only after the routing-table limit command is run.

Threshold Routes Limit

Percentage of the maximum number of routes specified for the current address family of the VPN instance. When the maximum number of routes reaches the percentage threshold, an alarm is generated. This field is displayed only if the alert-percent parameter is specified in the routing-table limit command run in the VPN instance IPv4 address family or IPv6 address family view.

Maximum Prefixes Limit

Maximum number of prefixes supported by the current address family of the VPN instance. This item is displayed only after the prefix limit command is run.

Threshold Prefixes Limit

Percentage of the maximum number of prefixes specified for the current address family of the VPN instance. When the maximum number of prefixes reaches the percentage threshold, an alarm is generated. This field is displayed only if the alert-percent parameter is specified in the prefix limit command run in the VPN instance IPv4 address family or IPv6 address family view.

Install Mode

Method of processing routes. The prefix limit command can be used to specify the route processing method when the threshold is lowered due to the number of route prefixes exceeding the upper threshold.
  • If route-unchanged is configured, routes in the RIB table remain unchanged.
  • If route-unchanged is not configured, all routes in the RIB table are deleted and the routes are re-installed in the RIB table.

Log Interval

Interval for displaying log messages when the number of VPN instance routes exceeds the maximum value. The default interval is 5 seconds. The value can be set by the command limit-log-interval.

# Display information about the interface bound to the vrf1 VPN instance.

<sysname> display ip vpn-instance vrf1 interface
 VPN-Instance Name and ID : vrf1, 1
  Interface Number : 2
  Interface list : LoopBack2,
                   LoopBack3
Table 3 Description of the display ip vpn-instance interface command output

Item

Description

Interface Number

Number of interfaces bound to the VPN instance

Interface list

List of interfaces bound to the VPN instance

# Display information about the LSP associated with the vrf1 VPN instance.

<sysname> display ip vpn-instance vrf1 tunnel-info
 VPN-Instance Name and ID : vpn1, 1
 Address family ipv4
  Nexthop Address                Tunnel ID
  1.1.1.1                        0x3  
 Address family ipv6   
  Nexthop Address                Tunnel ID
  1.1.1.1                        0x3  
Table 4 Description of the display ip vpn-instance tunnel-info command output

Item

Description

Nexthop Address

Indicates the next-hop address of the route learned by the VPN instance from the peer PE.

Tunnel ID

Indicates the ID of the LSP corresponding to the next-hop address of the route learned by the VPN instance from the peer PE.


Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.