flowspec match vxlan-packet enable

Function

The flowspec match vxlan-packet enable command enables BGP Flowspec for packets that have entered the IPv4 VXLAN tunnel.

The undo flowspec match vxlan-packet enable command disables BGP Flowspec for packets that have entered the IPv4 VXLAN tunnel.

By default, BGP Flowspec is disabled for packets that have entered the IPv4 VXLAN tunnel.

Format

flowspec match vxlan-packet enable

undo flowspec match vxlan-packet enable

Parameters

None

Views

System view

Default Level

2: Configuration level

Task Name and Operations

Task Name Operations
cpu-defend write

Usage Guidelines

Usage Scenario

When BGP Flowspec needs to be performed on a IPv4 VXLAN tunnel ingress, run the flowspec match vxlan-packet enable command to enable the BGP Flowspec function for packets that have entered the IPv4 VXLAN tunnel. If BGP Flowspec is not required for packets that have entered the IPv4 VXLAN tunnel, run the undo flowspec match vxlan-packet enable command.

Precautions

In VS mode, this command is supported only by the admin VS.

Example

# Enable BGP Flowspec for packets that have entered the IPv4 VXLAN tunnel.
<HUAWEI> system-view
[~HUAWEI] flowspec match vxlan-packet enable
Copyright © Huawei Technologies Co., Ltd.
Copyright © Huawei Technologies Co., Ltd.
< Previous topic Next topic >