display ip vpn-instance

Function

The display ip vpn-instance command displays configurations of VPN instances.

Format

display ip vpn-instance [ verbose ] [ vpn-instance-name ]

display ip vpn-instance [ vpn-instance-name ] interface

display ip vpn-instance [ vpn-instance-name ] tunnel-info

Parameters

Parameter	Description	Value
verbose	Displays detailed information about VPN instances.	-
vpn-instance-name	Specifies the name of a VPN instance.	The value is the name of an existing VPN instance.
interface	Displays information about the interfaces bound to the VPN instance.	-
tunnel-info	Displays information about the LSP associated with the VPN instance.	-

Views

All views

Default Level

1: Monitoring level

Usage Guidelines

Usage Scenario

If you want to check the configurations of VPN instances, interfaces bound to them, and LSPs associated with them, run the display ip vpn-instance command. Since VPN instances support both IPv4 and IPv6 address families, the display ip vpn-instance command displays the information of different address families separately.

If vpn-instance-name is not specified, the display ip vpn-instance command displays information about all configured VPN instances on the device.

If interface is specified, the display ip vpn-instance command displays all interfaces bound to the specified VPN instance.

If tunnel-info is specified, the display ip vpn-instance command displays information about the LSPs to which the routes of the VPN instance enabled with the IPv4 or IPv6 address family are iterated (in other words, information about the LSPs between PEs). If the tunnels between PEs are not LSPs, the display ip vpn-instance command does not display tunnel information.

Precautions

If the VPN instance to be displayed is not created, the system prompts that the VPN instance does not exist.

Example

# Display brief information about all VPN instances.

<HUAWEI> display ip vpn-instance
 Total VPN-Instances configured      : 3                                        
 Total IPv4 VPN-Instances configured : 2                                        
 Total IPv6 VPN-Instances configured : 0                                        
                                                                                
  VPN-Instance Name               RD                    Address-family          
  vpn1                                                                          
  vpna                            100:1                 IPv4                    
  vpnb                            100:2                 IPv4

**Table 1** Description of the display ip vpn-instance command output
Item	Description
Total VPN-Instances configured	Total number of VPN instances configured on the local end.
Total IPv4 VPN-Instances configured	Total number of locally configured VPN instances for which IPv4 address families are enabled.
Total IPv6 VPN-Instances configured	Total number of locally configured VPN instances for which IPv6 address families are enabled.
VPN-Instance Name	Name of the VPN instance.
RD	RD of the VPN instance IPv4 address family or IPv6 address family.
Address-family	Address family enabled for the VPN instance. The address family can be: Null, if no address family is enabled. IPv4, if only the IPv4 address family is enabled. IPv6, if only the IPv6 address family is enabled.

# Display detailed information about all VPN instances.

<HUAWEI> display ip vpn-instance verbose
 Total VPN-Instances configured      : 1                                        
 Total IPv4 VPN-Instances configured : 1                                        
 Total IPv6 VPN-Instances configured : 1                                        
                                                                                
 VPN-Instance Name and ID : vpna, 6                                             
  Description : vpna-1                                                          
  Service ID : 12  
  Interfaces : Vlanif10                                             
 Address family ipv4                                                            
  Create date : 2013-03-06 15:20:43+08:00                                    
  Up time : 6 days, 04 hours, 41 minutes and 57 seconds                         
  Route Distinguisher : 100:1                                                   
  Export VPN Targets :  1:1                                                     
  Import VPN Targets :  1:1                                                     
  Label Policy : label per instance                                             
  Per-Instance Label : 1024                                                     
  IP FRR Route Policy : 20
  VPN FRR Route Policy : 12 
  Import Route Policy : 10                                                      
  Export Route Policy : 20                                                      
  Tunnel Policy : bindTE
  Maximum Routes Limit : 2000                                                   
  Threshold Routes Limit : 80%                                                  
  Maximum Prefixes Limit : 1024                                                 
  Threshold Prefixes Limit : 50%                                                
  Install Mode : route-unchanged 
  Log Interval : 10                                                             
 Address family ipv6                                                            
  Create date : 2013-03-06 15:20:43+08:00
  Up time : 6 days, 04 hours, 41 minutes and 57 seconds                         
  Log Interval : 5

**Table 2** Description of the display ip vpn-instance verbose command output
Item	Description
Total VPN-Instances configured	Total number of VPN instances configured on the local end.
Total IPv4 VPN-Instances configured	Total number of locally configured VPN instances for which IPv4 address families are enabled.
Total IPv6 VPN-Instances configured	Total number of locally configured VPN instances for which IPv6 address families are enabled.
VPN-Instance Name and ID	Name and ID of the VPN instance. The ID is assigned by the system, which facilitates indexing.
Description	Description of the VPN instance. This field is displayed in the command output only when the description (VPN instance view)command is used.
Service ID	Service ID of the VPN instance. This item is displayed only after the service-id (VPN instance view) command is run in the VPN instance view.
Interfaces	Interfaces bound to the VPN instance. This field is displayed only after the ip binding vpn-instance command is configured on these interfaces.
Address family ipv4	Information about the IPv4 address family enabled for the VPN instance.
Address family ipv6	Information about the IPv6 address family enabled for the VPN instance.
Create date	Time when the VPN instance is created.
Up time	Period during which the VPN instance maintains in the Up state.
Route Distinguisher	RD of the VPN instance IPv4 address family or IPv6 address family. To specify a RD, run the route-distinguisher command.
Export VPN Targets	Route Target list in the outbound direction. To set the VPN target, run the vpn-target command.
Import VPN Targets	Route Target list in the inbound direction. To set the VPN target, run the vpn-target command.
Label Policy	Label policy: label per instance: indicates that the same label is allocated to routes of a VPN instance. This field is displayed in the command output only when the apply-label per-instance command is run in the VPN instance view. label per route: indicates that each route of a VPN instance is assigned a label.
Per-Instance Label	Label value used when all VPN routes of the VPN instance address family share one label. This field is displayed only after the apply-label per-instance command is run in the VPN instance address family view.
IP FRR Route Policy	IP FRR route policy used for the address family. This item is displayed only after the ip frr command is run in the VPN instance IPv4 address family view.
VPN FRR Route Policy	VPN FRR route policy used for the address family. This item is displayed only after the vpn frr command is run in the VPN instance IPv4 address family view.
Import Route Policy	Import Route-Policy applied to the VPN instance. This field is displayed only after the import route-policy command is run in the VPN instance address family view.
Export Route Policy	Export Route-Policy applied to the VPN instance. This field is displayed only after the export route-policy command is run in the VPN instance address family view.
Tunnel Policy	Tunnel policy applied to the VPN instance. This field is displayed only after the tnl-policy command is run in the VPN instance address family view.
Maximum Routes Limit	Maximum number of routes supported by the current address family. This field is displayed only after the routing-table limit command is run in the VPN instance address family view.
Threshold Routes Limit	Percentage of the maximum number of routes specified for the current address family. When the maximum number of routes reaches the percentage threshold, an alarm is generated. This field is displayed only after the routing-table limit command is run in the VPN instance address family view.
Maximum Prefixes Limit	Maximum number of prefixes supported by the current address family of the VPN instance. This field is displayed only after the prefix limit command is run in the VPN instance address family view.
Threshold Prefixes Limit	Percentage of the maximum number of prefixes specified for the current address family of the VPN instance. When the maximum number of prefixes reaches the percentage threshold, an alarm is generated. This field is displayed only after the prefix limit command is run in the VPN instance address family view.
Install Mode	Method of processing routes. The prefix limit command can be used to specify the route processing method when the threshold is lowered due to the number of route prefixes exceeding the upper threshold. If route-unchanged is configured, routes in the routing information base (RIB) table remain unchanged. If route-unchanged is not configured, all routes in the RIB table are deleted and the routes are re-installed in the RIB table.
Log Interval	Interval for displaying log messages when the number of VPN instance routes exceeds the maximum value. The default interval is 5 seconds. The value can be set by the command limit-log-interval.

# Display information about the interface bound to the VPN instance named vrf1.

<HUAWEI> display ip vpn-instance vrf1 interface
 VPN-Instance Name and ID : vrf1, 1
  Interface Number : 1
  Interface list : Vlanif40

**Table 3** Description of the display ip vpn-instance interface command output
Item	Description
Interface Number	Number of interfaces bound to the VPN instance
Interface list	List of interfaces bound to the VPN instance

# Display information about the LSP associated with the vrf1 VPN instance.

<HUAWEI> display ip vpn-instance vrf1 tunnel-info
 VPN-Instance Name and ID : vrf1, 1
 Address family ipv4
  Nexthop Address                Tunnel ID
  1.1.1.1                        0x3  
 Address family ipv6   
  Nexthop Address                Tunnel ID
  1.1.1.1                        0x3

**Table 4** Description of the display ip vpn-instance tunnel-info command output
Item	Description
Nexthop Address	Indicates the next-hop address of the route learned by the VPN instance from the peer PE.
Tunnel ID	Indicates the ID of the LSP corresponding to the next-hop address of the route learned by the VPN instance from the peer PE.