protect tnl-policy

Function

The protect tnl-policy command configures a protection path between the master and slave devices for network-side traffic with the tunnel type (for public users).

The undo protect tnl-policy command cancels the configured protection path with the tunnel type (for public users).

By default, no protection path with the tunnel type (for public users) is configured for network-side traffic.

This command is supported only on the NetEngine 8000 F1A.

Format

protect tnl-policy policy-name peer-ip ip-address [ interface { interface-name | interface-type interface-num } ]

undo protect tnl-policy policy-name

Parameters

Parameter	Description	Value
peer-ip ip-address	Specifies the peer IP address.	The value is in dotted decimal notation.
interface interface-name	Specifies the interface name of an outbound interface.	-
interface interface-num	Specifies the interface number of an outbound interface.	-
interface interface-type	Specifies the interface type of an outbound interface.	-
tnl-policy policy-name	Specifies the name of a tunnel policy.	The value is a string of 1 to 39 case-sensitive characters, spaces not supported.

Views

Remote backup service view

Default Level

2: Configuration level

Task Name and Operations

Task Name	Operations
rui	write

Usage Guidelines

Usage Scenario

To configure a protection path between the master and slave devices for network-side traffic, run the protect command. In case of an access-side link fault, the network-to-user traffic can be switched to the slave device over the protection path and then forwarded to users.

In the remote backup service view, a protection path of tunnel type can be specified for public network users. For public network users, the available types of protection paths are MPLS LDP, MPLS LDP over TE, GRE, and SR-MPLS BE. The tunnel type can be specified based on the tunnel policy.

Prerequisites

The tunnel-policy command has been run in the system view.

Configuration Impact

After the protect tnl-policy peer-ip command is run, the system updates host routes of online public network users. If a large number of such users are online, the update takes some time. If the master device fails, the device does not need to advertise network segment routes, and user traffic can be quickly switched to the backup device.

Precautions

The Interface parameter specifies the outbound interface. the outbound interface is optional. If the outbound interface is not specified and the tunnel has multiple links for load balancing, a link is automatically selected by software. If the tunnel is of the TE type, this parameter is unavailable.

In VS mode, this command is supported only by the admin VS.

Example

# Configure a protection path for public users with the tunnel policy as a-b.

<HUAWEI> system-view
[~HUAWEI] remote-backup-service rbs
[*HUAWEI-rm-backup-srv-rbs] commit
[*HUAWEI-rm-backup-srv-rbs] protect tnl-policy a-b peer 2.2.2.2 interface GigabitEthernet 0/1/0