5.1. Tunnel Commands

5.1.1. interface

Command Purpose

Use this command to create a new tunnel interface.

Use the no form of this command to destroy the tunnel interface.

Prerequisites

Platform

Software

License

Comments

AQ-N3000

7.0

Base

AQ-N5000

7.0

Base

AQ-N6000

7.0

Base

Command Syntax

interface tunnel TUNNEL-ID

no interface tunnel TUNNEL-ID

Parameter

Parameter Description

Parameter Value

TUNNEL-ID

The tunnel id

0-1023

Command Mode

Global Config

Default

None

Usage

Before connect 2 IPv6 networks by an IPv4 network, a tunnel interface is required. The tunnel is available after set some attributes. After IPv6 is enabled the tunnel interface can forward IPv6 packets.

Examples

This example shows how to create a tunnel interface:

Switch# configure terminal
Switch(config)# interface tunnel 1

5.1.2. tunnel mode

Command Purpose

Use this command to specify the IPv6 transition tunnel protocol.

Use the no form of this command to unset the tunnel protocol.

Prerequisites

Platform

Software

License

Comments

AQ-N3000

7.0

Base

AQ-N5000

7.0

Base

AQ-N6000

7.0

Base

Command Syntax

tunnel mode tunnel mode ( erspan ( ecmp-dst-gre | ) | gre | ipv6ip ) ( 6to4 | isatap | )

no tunnel mode

Parameter

Parameter Description

Parameter Value

6to4

Set the tunnel as automatic tunnel 6to4, which use 2002::/16 as its prefix

-

isatap

Set the tunnel as automatic tunnel ISATAP, which use ::5efe:a.b.c.d as its suffix

-

gre

When the destination of tunnel is single, the mode of the tunnel

-

ecmp-dst-gre

When the destinations of tunnel are multi, the mode of the tunnel

-

Command Mode

Interface Configuration

Default

None

Usage

This command specifies a tunnel encapsulation mode for IPv6 in IPv4. When the keywords “6to4” or “isatap” is not specified, then it is a manual tunnel. Tunnel mode is not allowed to change from 6to4 to ISATAP when 6to4 relay routes are configured. Users should unset the tunnel destination before change from manual tunnel to automatic tunnel.

Examples

This example shows how to create a 6to4 Tunnel:

Switch# configure terminal
Switch(config)# interface tunnel 1
Switch(config-if)# tunnel mode ipv6ip 6to4

Related Commands

tunnel source

tunnel destination

5.1.3. tunnel source

Command Purpose

Use this command to specify the tunnel source. Use the no form of this command to unset the tunnel source.

Prerequisites

Platform

Software

License

Comments

AQ-N3000

7.0

Base

AQ-N5000

7.0

Base

AQ-N6000

7.0

Base

Command Syntax

tunnel source ( IP_ADDR | IFNAME )

no tunnel source

Parameter

Parameter Description

Parameter Value

IP_ADDR

Specify a tunnel source in the IPv4 address format

IPv4 Address

IFNAME

Specify a tunnel source in the IFNAME format, the IFNAME should be layer3 interface

Support physical/aggregation/loopback/vlan/ ports

Command Mode

Interface Configuration

Default

None

Usage

Every tunnel must have a tunnel source. If users specify the IFNAME format, system will choose the primary address as tunnel source.

Examples

This example shows how to set the tunnel source:

Switch# configure terminal
Switch(config)# interface tunnel 1
Switch(config-if)# tunnel source 3.3.3.3

Related Commands

tunnel mode ipv6ip

tunnel destination

5.1.4. tunnel destination

Command Purpose

Use this command to specify a tunnel destination address in an IPv4 portion.

Use the no parameter to un-specify the address.

Prerequisites

Platform

Software

License

Comments

AQ-N3000

7.0

Base

AQ-N5000

7.0

Base

AQ-N6000

7.0

Base

Command Syntax

tunnel destination IP_ADDR

no tunnel destination

Parameter

Parameter Description

Parameter Value

IP_ADDR

Specify the tunnel destination IPv4 address

IPv4 Address

Command Mode

Interface Configuration

Default

None

Usage

Automatic tunnel such as 6to4 and ISATAP must not configure tunnel destination.

Examples

This example shows how to set the tunnel destination:

Switch# configure terminal
Switch(config)# interface tunnel 1
Switch(config-if)# tunnel destination 4.4.4.4

Related Commands

tunnel source

tunnel mode ipv6ip

5.1.5. tunnel enable

Command Purpose

Use this command to enable tunnel decapsulation for interfaces. Use the form of this command to restore the default configuration.

Prerequisites

Platform

Software

License

Comments

AQ-N3000

7.0

Base

AQ-N5000

7.0

Base

AQ-N6000

7.0

Base

Command Syntax

tunnel ( enable | disable )

Parameter

Parameter Description

Parameter Value

enable

Enable tunnel decapsulation

-

disable

Disable tunnel decapsulation

-

Command Mode

Interface Configuration

Default

By default, tunnel decapsulation is disabled on all interfaces.

Usage

None

Examples

This example shows how to enable tunnel decapsulation on interface eth-0-1:

Switch# configure terminal
Switch(config)# interface eth-0-1
Switch(config-if)# tunnel enable

Related Commands

interface

5.1.6. tunnel ecmp-destination

Command Purpose

Use this command to configure tunnel ECMP destinations IP address.

Use the form of this command to unset this configuration.

Prerequisites

Platform

Software

License

Comments

AQ-N3000

7.0

Base

AQ-N5000

7.0

Base

AQ-N6000

7.0

Base

Command Syntax

tunnel ecmp-destination IP_ADDR

no tunnel ecmp-destination IP_ADDR

Parameter

Parameter Description

Parameter Value

IP_ADDR

ECMPdestinations IP address

IPv4 Address

Command Mode

Interface Configuration

Default

None

Usage

Automatic tunnel such as 6to4 and ISATAP must not configure tunnel destination (multi destination).

Examples

This example shows how to enable tunnel decapsulation on interface tunnel 1:

Switch# configure terminal
Switch(config)# interface tunnel 1
Switch(config-if)# tunnel ecmp-destination 1.1.1.1
Switch(config-if)# tunnel ecmp-destination 2.2.2.2

Related Commands

tunnel source

tunnel mode (ecmp-dst-gre | ) | gre)

5.1.7. tunnel gre key

Command Purpose

Use this command to configure the tunnel gre key value.

Use the form of this command to unset this configuration

Prerequisites

Platform

Software

License

Comments

AQ-N3000

7.0

Base

AQ-N5000

7.0

Base

AQ-N6000

7.0

Base

Command Syntax

tunnel gre key KEY_VALUE

no tunnel gre key

Parameter

Parameter Description

Parameter Value

KEY_VALUE

gre key value

1-4294967295

Command Mode

Interface Configuration

Default

None

Usage

Improve the security of the gre tunnel, configure the gre key to do the checkout of point to point.

Examples

This example shows how to enable tunnel decapsulation on interface tunnel 1:

Switch# configure terminal
Switch(config)# interface tunnel 1
Switch(config-if)# tunnel gre key 100

Related Commands

show running-config interface tunnel

5.1.8. tunnel extend-header

Command Purpose

Before the mirror traffic passes through the tunnel, encapsulate the traffic with the extend header.

Use no the form of this command to unset this configuration.

Prerequisites

Platform

Software

License

Comments

AQ-N3000

7.0

Base

AQ-N5000

7.0

Base

AQ-N6000

7.0

Base

Command Syntax

tunnel extend-header

no tunnel extend-header

Command Mode

Interface Configuration

Default

None

Usage

  • spanExtendHeaderCopyHash, using the new hash or not;

  • PacketInfo.skipTimeInfoUpdate, fixed with 1;

  • if spanExtendHeaderCopyHash is 1, the filed consist with hash (8 bit) and 0 (8 bit); if spanExtendHeaderCopyHash is 0, the filed consist with source port of the mirror (16 bit).

Without dst-load-balance parameter, spanExtendHeaderCopyHash will be 0, and extend-header field does not contain the hash value;

with dst-load-balance parameter, spanExtendHeaderCopyHash will be 1, and extend-header field contain the hash value.

Examples

This example shows how to enable extend-header hash for load balance:

Switch# configure terminal
Switch(config)# interface tunnel 1
Switch(config-if)# tunnel extend-header
Switch(config-if)# tunnel extend-header dst-load-balance

Related Commands

show running-config interface tunnel

5.1.9. tunnel extend-header id

Command Purpose

Use this command to configure the extend header id.

Use the no form of this command to unset this configuration.

Prerequisites

Platform

Software

License

Comments

AQ-N3000

7.0

Base

AQ-N5000

7.0

Base

AQ-N6000

7.0

Base

Command Syntax

tunnel extend-header id ID_VALUE

no tunnel extend-header id ID_VALUE

Parameter

Parameter Description

Parameter Value

ID_VALUE

The extend header id value

1-1023

Command Mode

Interface Configuration

Default

0

Usage

None

Examples

This example shows how to enable tunnel decapsulation on interface tunnel 1:

Switch# configure terminal
Switch(config)# interface tunnel 1
Switch(config-if)# tunnel extend-header id 30

Related Commands

show running-config interface tunne

5.1.10. tunnel dscp

Command Purpose

Use this command to specify a value of Differentiated Services Code Point (DSCP) in the tunnel IPv4 encapsulation header.

Use the no parameter to inheriting the underlying physical interface value by default.

Prerequisites

Platform

Software

License

Comments

AQ-N3000

7.0

Base

AQ-N5000

7.0

Base

AQ-N6000

7.0

Base

Command Syntax

tunnel dscp DSCP

no tunnel dscp

Parameter

Parameter Description

Parameter Value

DSCP

The outer IPv4 header DSCP value

0-63

Command Mode

Interface Configuration

Default

By default, the DSCP value is inherited from original IPv6 packet.

Usage

None

Examples

This example shows how to set the outer IPv4 header DSCP value as 40:

Switch# configure terminal
Switch(config)# interface tunnel 1
Switch(config-if)# tunnel dscp 40

Related Commands

interface

5.1.11. tunnel ttl

Command Purpose

Use this command to specify a value of time to live (TTL) in the tunnel IPv4 encapsulation header.

Use the no parameter to inheriting the underlying physical interface value by default.

Prerequisites

Platform

Software

License

Comments

AQ-N3000

7.0

Base

AQ-N5000

7.0

Base

AQ-N6000

7.0

Base

Command Syntax

tunnel ttl TTL

no tunnel TTL

Parameter

Parameter Description

Parameter Value

TTL

The outer IPv4 header TTL value

1-254

Command Mode

Interface Configuration

Default

By default, the TTL value is inherited from original IPv6 packet.

Usage

None

Examples

This example shows how to set the outer IPv4 header TTL value as 254:

Switch# configure terminal
Switch(config)# interface tunnel 1
Switch(config-if)# tunnel ttl 254

Related Commands

interface

5.1.12. ipv6 mtu

Command Purpose

Use this command to specify the Tunnel interface MTU.

Use the no form of this command to restore to the default value.

Prerequisites

Platform

Software

License

Comments

AQ-N3000

7.0

Base

AQ-N5000

7.0

Base

AQ-N6000

7.0

Base

Command Syntax

ipv6 mtu MTU

no ipv6 mtu

Parameter

Parameter Description

Parameter Value

MTU

Set the tunnel interface MTU

1280-9500

Command Mode

Interface Configuration

Default

1480

Usage

System does not support Path MTU Discovery on tunnel interface. This command is only allowed on tunnel interface.

Examples

This example sets the tunnel interface MTU to 1280:

Switch# configure terminal
Switch(config)# interface tunnel 1
Switch(config-if)# ipv6 mtu 1280

Related Commands

tunnel ttl

5.1.13. show interface tunnel

Command Purpose

Use this command to display the tunnel information.

Prerequisites

Platform

Software

License

Comments

AQ-N3000

7.0

Base

AQ-N5000

7.0

Base

AQ-N6000

7.0

Base

Command Syntax

show interface tunnel TUNNEL-ID

Parameter

Parameter Description

Parameter Value

TUNNEL-ID

The tunnel id

0-1023

Command Mode

Privileged EXEC

Default

None

Usage

None

Examples

This example displays the tunnel information:

Switch# show interface tunnel1

Interface tunnel1
Interface current state: UP
Hardware is Tunnel
Index 8193 , Metric 1 , Encapsulation TUNNEL
VRF binding: not bound
Tunnel protocol/transport IPv6/IP, Status Valid
Tunnel source 1.1.1.1(eth-0-1), destination 2.2.2.2
Tunnel DSCP inherit, Tunnel TTL 64
Tunnel transport MTU 1480 bytes

Related Commands

show ipv6 interface tunnel

5.1.14. show resource tunnel

Command Purpose

Use this command to display the tunnel peers resource information.

Prerequisites

Platform

Software

License

Comments

AQ-N3000

7.0

Base

AQ-N5000

7.0

Base

AQ-N6000

7.0

Base

Command Syntax

show resource tunnel

Command Mode

Privileged EXEC

Default

None

Usage

None

Examples

This example displays the tunnel peers resource information:

Switch# show resource tunnel

Tunnel
Resource Used Capability
=============================================================
Peers 1 8

Related Commands

None