打印

Decap Groups

These sections describe the Decap groups:

Decap Groups Description

The decap group is a data structure that receives encapsulated packets and extracts the payload. The switch then processes or forwards the extracted payload as required. Although packets cannot be transmitted through decap groups, nexthop groups can be used to create a packet's reverse path. Decap groups support payload extraction of packets received from Generic Routing Encapsulation (GRE) and IP-in-IP tunnels.

The decap capabilities are further enhanced to support the Generic UDP Encapsulation (GUE). GUE is a general method for encapsulating packets of random IP protocols within a UDP tunnel. GUE provides an extensible header format with optional data.

The switch identifies a GUE packet based on the outer UDP destination port. Then it terminates the tunnel based on the outer destination IP and removes the outer IP/UDP encapsulation. The outer UDP destination port is also used to determine if the inner payload is IP or MPLS. For IP payloads, the first nibble of the inner payload is used to distinguish between IPv4 vs IPv6. The decapsulated packet is then either IP or MPLS forwarded based on the inner payload.

Decap groups have these limitations:
  • Tunnels are terminated using destination IP address; source IP address has no influence.
  • Packets matching a decap group are not processed through their ingress interface and VLAN.
  • During a tunnel termination, ingress ACL filter each decap group packet’s inner header.
  • Packet counters are not available.
  • VRF is not supported.
The decap support over GUE has the following limitaions:
  • Outer UDP checksum validation is not supported.
  • Outer IP options handling is not supported.
  • Outer IP TTL check is not performed.
  • No exception handling on inner IP packet. Specifically, packets with inner IP TTL=1 or IP options will simply be attempted to be forwarded in HW.
  • VXLAN is not supported along with GUE decap option on DCS-7020, DCS-7280R, DCS-7280R2, DCS-7500R, and DCS-7500R2 switch series.
  • When GUE is enabled with outer IP hashing, inner IP fields are not included in the load balance key of MPLS over GRE packets in tc-counters TCAM profile on DCS-7020, DCS-7280R, DCS-7280R2, DCS-7500R, and DCS-7500R2 switch series.
Decap groups are defined by their tunnel type and decap IP address:
  • Tunnel type specifies the tunnel protocol that the switch uses to extract payload.
  • Decap IP address specifies the IP address where the switch receives decap group packets.

Decap groups support Generic Routing Encapsulation (GRE) and IP-in-IP tunnels.

Generic UDP Encapsulation (GUE) Decap Configuration

The ip decap-group configuration is used to specify GUE tunnel termination as follows:

switch(config)# ip decap-group test
switch(config-dg-test)# tunnel type UDP
switch(config-dg-test)# tunnel decap-ip 2.2.2.2
switch(config-dg-test)# tunnel decap-interface et1
The global UDP destination port to payload type mapping is configured as follows:
switch(config)# ip decap-group type udp destination port 6080 payload ip
switch(config)# ip decap-group type udp destination port 5555 payload mpls
Note: Note that each payload type can be mapped to only one UDP port. Otherwise, the following error will be shown:
switch(config)# ip decap-group type udp destination port 6081 payload ip
% There can be only one UDP destination port per payload type

MPLSoverGUE Decap-group Configuration

The MPLSoGUE decap-group requires the following platform configurations. First, the mpls-over-gre must be enabled since this supports the mpls-over-gre support in hardware:
switch(config)# platform fap mpls-over-gre
Second, outer IP hashing must be enabled as follows:
(config)# load-balance policies 
switch(config-load-balance-policies)# load-balance sand profile default 
! profile default is a reserved profile
! profile default is the current global profile
switch(config-sand-load-balance-profile-default)# packet-type gue outer-ip
Note: The above platform configurations are not required on DCS-7280R3, DCS-7500R3, and DCS-7800R3.

Decap Groups Configuration

Decap groups are configured in decap-group configuration mode. The decap-group configuration mode is not a group change mode; the running-config is changed immediately upon entering commands. However, when exiting, the decap-group configuration mode does not affect running-config. The exit command returns the switch to global configuration mode.

Decap groups do not define a default destination address or tunnel type and is not functional until both parameters are configured. A decap group can contain multiple tunnel decap-ip statements.

Examples
  • This command defines a static CLI entry for the incoming-label.
    switch(config)# mpls static top-label 3400 ethernet 3/3/3 10.14.4.4 pop payload-type ipv4
  • This command creates a decap group named DC-1 and configures the group to terminate packets from GRE tunnel packets with the destination IP address of 10.14.3.2.
    switch(config)# ip decap-group DC-1
    switch(config-dg-DC-1)# tunnel type gre
    switch(config-dg-DC-1)# tunnel decap-ip 10.14.3.2
    switch(config-dg-DC-1)# show active
     ip decap-group DC-1
       tunnel type gre
       tunnel decap-ip 10.14.3.2
    switch(config-dg-DC-1)# end
    switch(config)#

Decap Commands

ip decap-group

The ip decap-group command places the switch in decap-group configuration mode, through which decap groups are created or modified. A decap group is a data structure that defines a method of extracting the payload from an encapsulated packet that the switch receives on a specified IP address.

Decap groups do not specify a default IP address group or tunnel type. These parameters must be explicitly configured before a decap group can function.

The decap-group configuration mode is not a group change mode; the running-config is changed immediately upon entering commands. Exiting the decap-group configuration mode does not affect running-config. The exit command returns the switch to global configuration mode.

The no ip decap-group and default ip decap-group commands delete previously configured commands in the specified decap-group mode.

Command Mode

Global Configuration

Command Syntax

ip decap-group group_name

no ip decap-group group_name

default ip decap-group group_name

Parameters

group_name Decap group name.

Commands Available in Decap-group Configuration Mode
Examples
  • This command creates a decap group named DC-1.

    switch(config)# ip decap-group DC-1
    switch(config-dg-DC-1)#
  • This command exits the decap-group mode for the DC-1 decap group.

    switch(config-dg-DC-1)# exit
    switch(config)#
  • This command delete the decap group named DC-1.

    switch(config)# no ip decap-group DC-1
    switch(config)#

show ip decap-group

The show ip decap-group command displays the IP decap groups that are available in the switch.

Command Mode

Global Configuration

Command Syntax

show ip decap-group [decap-group name | dynamic]

Parameters
  • decap-group name      The decap group name.
  • dynamic Displays the dynamic entries only.
Examples
  • This command displays the IP decap groups that are available in a switch.
    switch(config)# show ip decap-group
    NOTE: "D" column indicates dynamic entries
    D | Name                | Type       | Info            | Version | Addr Type
    --|---------------------|------------|-----------------|---------|--------
    * | d1                  | GRE        | 1.2.3.4         |         |
    * | d2                  | IP-in-IP   | Ethernet12/3    | IPv4    | primary
      | gre-with-intf       | GRE        |                 |         |
      | ipip-with-decapall  | IP-in-IP   | all             | IPv4    | all
      | ipip-with-decapall  | IP-in-IP   | all             | IPv6    | all
      | ipip-with-intf      | IP-in-IP   | Ethernet11/3    | IPv6    | all
      | ipip-with-intf      | IP-in-IP   | Ethernet11/3    | IPv4    | primary
    * | ipip-with-ip        | IP-in-IP   | 1001::1         | IPv6    |
    * | ipip-with-ip        | IP-in-IP   | 1.1.1.1         | IPv4    |
      | p1                  | GRE        | 100.100.100.100 |         |
      | p2                  | UNKNOWN    |                 |         |
  • This command displays the UDP decap groups that are available in a switch.
    switch(config)# show ip decap-group
    NOTE: "D" column indicates dynamic entries
    D | Name    | Type  | Info       | Version | Address  | UDP Dest | Payload
      |         |       |            |         | Type     | Port     | Type
    --|---------|-------|------------|---------|----------|----------|-----------
      | foo     | UDP   | Ethernet1  | IPv4    |  primary | 6080     | ip
      |         |       |            |         |          | 5555     | mpls
      | bar     | UDP   | 2.2.2.2    | IPv4    |          | 6080     | ip
      |         |       |            |         |          | 5555     | mpls
  • The following command displays the decap-groups configured in HW:
    switch(config)# show platform fap decap-group
    DecapIp                                   	LIF
    -------------------------------------------   ---------
    2.2.2.2                                  	|  	0
    3.3.3.3                                  	|  	1

tunnel decap-interface (Decap Group)

The tunnel decap-interface command adds all locally configured IP addresses to the specific Layer 3 interface per decap group.

The no tunnel decap-interface command and the default tunnel decap-interface command restores the default state by removing the locally added IP addresses from the decap group.

Command Mode

Decap-Group Configuration

Command Syntax

tunnel decap-interface{ Ethernet | Loopback | Management | Port-Channel | Tunnel | Vlan | Vxlan | all}

no tunnel decap-interface {Ethernet | Loopback | Management | Port-Channel | Tunnel | Vlan | Vxlan | all}

default tunnel decap-interface{Ethernet | Loopback | Management | Port-Channel | Tunnel | Vlan | Vxlan | all}

Parameters
  • Ethernet e_num     Ethernet interface specified by e_num. The Ethernet port number ranges from 1 to 36.
  • Loopback l_num     Loopback interface specified by l_num. The loopback interface number ranges from 0 to 1000.
  • Management m_num     Management interface specified by m_num. The management port number ranges from 1 to 1.
  • Port-channel p_num     Port-channel interface specified by p_num. Options include:

    • Port-channel interface number. The port-channel interface number ranges from 1 to 2000.
    • Port-channel sub interface number. The port-channel sub interface number 1-2000,1-4094.
  • tunnel t_num     Tunnel interface specified by t_num. The tunnel interface number ranges from 0 to 255.
  • vlan v_num     VLAN interface specified by v_num. The VLAN interface number ranges from 1 to 4094.
  • vxlan vx_num     VXLAN interface specified by vx_num. The VXLAN tunnel interface number ranges from 1 to 1.
  • all address-family     This parameter configures all L3 interfaces as a decap interface.

Example

These commands add locally configured IP addresses to the interface ethernet 1/1 for the dg1 decap group.
switch(config)# ip decap-group dg1
switch(config-dg-dg1)# tunnel decap-interface Ethernet1/1

switch(config-dg-dg1)# show active
ip decap-group dg1
   tunnel type ipip
   tunnel decap-interface Ethernet1/1
   tunnel decap-interface all address-family ipv6 address all

tunnel decap-ip (Decap Group)

The tunnel decap-ip command specifies the IP address of packets that are handled by the configuration mode decap group. A decap group is a data structure that defines a method of extracting the payload from an encapsulated packet that the switch receives on a specified IP address.

Decap groups do not define a default decap-ip address. A decap group is not functional until an IP address is specified. Decap groups can contain only one tunnel decap-ip statement; subsequent commands replace any previously configured statements.

Command Mode

Decap-Group Configuration

Command Syntax

tunnel decap-ip ipv4_address

Parameters

ipv4_addr An IPv4 address.

Related Commands

Guidelines

A decap group does not specify a default IP address group or tunnel type. These parameters must be explicitly configured before a decap group can function.

Example

These commands configure 10.14.3.2 as the decap-IP address for the DC-1 decap group.
switch(config)# ip decap-group DC-1
switch(config-dg-DC-1)# tunnel decap-ip 10.14.3.2
switch(config-dg-DC-1)# show active
 ip decap-group DC-1
   tunnel decap-ip 10.14.3.2
switch(config-dg-DC-1)#

tunnel type (Decap Group)

The tunnel type command specifies the tunnel protocol for extracting payload from encapsulated packets that arrive on the IP address specified for the configuration mode decap group. Supported tunnel protocols include General Routing Encapsulation (GRE) and IP-in-IP.

Decap groups do not define a default tunnel type. A decap group is not functional until an IP address is specified. Decap groups can contain only one tunnel decap-ip statement; subsequent commands replace any previously configured statements.

Command Mode

Decap-group Configuration

Command Syntax

tunnel type gre

Related Commands

Guidelines

A decap group does not specify a default IP address group or tunnel type. These parameters must be explicitly configured before a decap group can function.

Example

This command configures decap group DC-1 to terminate packets from GRE tunnel packets.
switch(config)# ip decap-group DC-1
switch(config-dg-DC-1)# tunnel type gre
switch(config-dg-DC-1)# show active
 ip decap-group DC-1
   tunnel type gre
switch(config-dg-DC-1)#
..