evb vsi filter
Use evb vsi filter to configure a VSI filter.
Use undo evb vsi filter to remove a VSI filter.
Syntax
evb vsi filter [ group group-id ] vlan vlan-id [ mac mac-address ]
undo evb vsi filter [ group group-id ] [ vlan vlan-id [ mac mac-address ] ]
Default
No VSI filter exists.
Views
VSI interface view, VSI aggregate interface view
Predefined user roles
network-admin
Parameters
group group-id: Specifies a group ID that classifies VLAN IDs, in the range of 1 to 4094. When the number of VLANs exceeds 4094, the group ID and VLAN ID together identify a VLAN.
vlan vlan-id: Specifies the VLAN ID in the range of 1 to 4094. The VLAN must exist.
mac mac-address: Specifies the MAC address, which must be a valid unicast MAC address.
Usage guidelines
The EVB bridge uses a VSI filter to identify VSI traffic for a VM. Filters are usually assigned by a VSI manager. You can also manually create or remove a VSI filter by executing this command.
A VSI filter contains a set of VID values, MAC addresses, and group ID values. EVB supports the following filter info formats:
VLAN ID
VLAN ID + MAC
Group ID + VLAN ID
Group ID + VLAN ID + MAC
When you configure VSI filters on a VSI interface, follow these guidelines:
Before you configure a VSI filter on a VSI interface, make sure the S-channel interface to which the VSI interface belongs operates in trunk mode. Otherwise, the VSI filter configuration fails.
After you configure a VSI filter on a VSI interface, an S-channel interface automatically permits the VLAN that is configured in the VSI filter for the subordinate VSI interface. The same rule takes effect on Layer 2 interfaces associated with S-channels.
After you delete a VSI filter that contains information about a VLAN on a VSI interface, if other VSI filters on all VSI interfaces of an S-channel interface do not contain the VLAN, the S-channel interface automatically denies traffic from the VLAN that is configured on the VSI filter. The same rule takes effect on Layer 2 interfaces associated with S-channels.
When a filter configured on a VSI interface contains information about a VLAN, you must not configure the filter on the same VSI interface again or on other VSI interfaces of the S-channel interface. Otherwise, an error message appears.
If the VSI filter is a set of VID values, and the MAC address learning function for the corresponding S-channel is disabled, traffic for the VSI cannot be forwarded.
Activate a VSI interface after configuring a VSI filter, and deactivate a VSI interface before removing a VSI filter.
When you configure VSI filters on a VSI aggregate interface, follow these guidelines:
Before you configure a VSI filter on a VSI aggregate interface, make sure the S-channel aggregate interface to which the VSI aggregate interface belongs operates in trunk mode. Otherwise, the VSI filter configuration fails.
After you configure a VSI filter on a VSI aggregate interface, an S-channel aggregate interface automatically permits the VLAN that is configured in the VSI filter for the subordinate VSI aggregate interface. The same rule takes effect on Layer 2 aggregate interfaces associated with S-channels.
After you delete a VSI filter that contains information about a VLAN on a VSI aggregate interface, if other VSI filters on all VSI aggregate interfaces of an S-channel aggregate interface do not contain the VLAN, the S-channel aggregate interface automatically denies traffic from the VLAN that is configured on the VSI filter. The same rule takes effect on Layer 2 aggregate interfaces associated with S-channels.
When a filter configured on a VSI aggregate interface contains information about a VLAN, you must not configure the filter on the same VSI aggregate interface again or on other VSI aggregate interfaces of the S-channel aggregate interface. Otherwise, an error message appears.
Activate a VSI aggregate interface after configuring a VSI filter, and deactivate a VSI aggregate interface before removing a VSI filter.
Examples
# Configure a VSI filter for VLAN 1 on the VSI interface S-Channel 1/0/1:10.1.
<Sysname> system-view [Sysname] interface s-channel 1/0/1:10.1 [Sysname–S-Channel1/0/1:10.1] evb vsi filter vlan 1
# Configure a VSI filter for VLAN 1 on the VSI aggregate interface Schannel-Aggregation 1:10.1.
<Sysname> system-view [Sysname] interface schannel-aggregation 1:10.1 [Sysname–Schannel-Aggregation1:10.1] evb vsi filter vlan 1
Related commands
evb mac-learning forbidden
evb vsi active