H3C S5560X-EI Series Command Reference

45
Usage guidelines
By default, the device learns ND information of remote VMs from packets received on VXLAN tunnel
interfaces. To save resources on VTEPs in an SDN transport network, you can temporarily disable
remote ND learning when the controller and VTEPs are synchronizing entries. After the entry
synchronization is completed, use the
undo vxlan tunnel nd-learning disable command
to enable remote ND learning.
As a best practice, disable remote ND learning for VXLANs only when the controller and VTEPs are
synchronizing entries.
Examples
# Disable remote ND learning for VXLANs.
<Sysname> system
[Sysname] vxlan tunnel nd-learning disable
OVSDB commands
ovsdb server bootstrap ca-certificate
Use ovsdb server bootstrap ca-certificate to specify a CA certificate file for
establishing OVSDB SSL connections.
Use
undo ovsdb server bootstrap ca-certificate to restore the default.
Syntax
ovsdb server bootstrap ca-certificate ca-filename
undo ovsdb server bootstrap ca-certificate
Default
SSL uses the CA certificate file in the PKI domain.
Views
System view
Predefined user roles
network-admin
Parameters
ca-filename: Specifies the CA certificate file name, a case-insensitive string. The file name
cannot contain the
slot string.
Usage guidelines
For the specified certificate to take effect, you must execute the ovsdb server enable command
to enable the OVSDB server. You must disable and then re-enable the OVSDB server if it has been
enabled.
If the specified CA certificate file does not exist, the device obtains a self-signed certificate from the
controller. The obtained file uses the name specified for the
ca-filename argument.
Examples
# Specify CA certificate file ca-new for establishing OVSDB SSL connections.
<Sysname> system-view
[Sysname] ovsdb server bootstrap ca-certificate ca-new

H3C S5560X-EI Series Specifications

General

Brand	H3C
Model	S5560X-EI Series
Category	Switch
Language	English