Creating an E-Trunk

Procedure

1. Run system-view

   The system view is displayed.

2. Run e-trunk e-trunk-id

   An E-Trunk is created.

3. Run security-key { simple simple-key | cipher { cipher-key1 | cipher-key2 | cipher-key3 } }

   A password for encrypting packets is configured for the E-Trunk.

   You can specify simple or cipher as required.

   • If simple is specified, the password is displayed in clear text in the configuration file.

   • If cipher is specified, the password is displayed as garbled characters in the configuration file.

     • cipher-key1: If the password is entered in ciphertext, the value must be a string of 32 to 432 consecutive characters.
     • cipher-key2: A 24-character ciphertext password configured in an earlier version is also supported in this version.
     • cipher-key3: If the password is entered in clear text, the value must be a string of 1 to 255 case-sensitive characters. It cannot contain spaces.
   

   If simple is specified, the password is displayed in clear text in the configuration file. In this case, other users can obtain the password by querying the configuration file, which poses a security risk. Therefore, cipher is recommended.

   Two devices in the same E-Trunk must have the same password for encrypting E-Trunk packets. After creating an E-Trunk, you need to manually configure a password. Otherwise, E-Trunk negotiation fails.

4. Run either of the following commands to configure local and peer IP addresses for the E-Trunk:

   • For an IPv4 network, run the peer-address peer-ip-address source-address source-ip-address [ vpn-instance vpn-instance-name ] command.

   • For an IPv6 network, run the peer-ipv6 peer-ipv6-address source-ipv6 source-ipv6-address [ vpn-instance vpn-instance-name ] command.

   The two IP addresses are peers for each other. For example, if an E-Trunk is created between Device A with IP address IP1 and Device B with IP address IP2, the peer IP address of Device A is IP2, and the peer IP address of Device B is IP1.

   

   Change the local and peer IP addresses, neither or both. Otherwise, E-Trunk packets are discarded.

   It is recommended that you configure the IP addresses for the local and peer devices in an E-Trunk as loopback interface addresses.

5. Run commit

   The configuration is committed.