45
Usage guidelines
By default, the device learns ND information of remote VMs from packets received on VXLAN tunnel
interfaces. To save resources on VTEPs in an SDN transport network, you can temporarily disable
remote ND learning when the controller and VTEPs are synchronizing entries. After the entry
synchronization is completed, use the
undo vxlan tunnel nd-learning disable
command
to enable remote ND learning.
As a best practice, disable remote ND learning for VXLANs only when the controller and VTEPs are
synchronizing entries.
Examples
# Disable remote ND learning for VXLANs.
<Sysname> system
[Sysname] vxlan tunnel nd-learning disable
OVSDB commands
ovsdb server bootstrap ca-certificate
Use
ovsdb server bootstrap ca-certificate
to specify a CA certificate file for
establishing OVSDB SSL connections.
Use
undo ovsdb server bootstrap ca-certificate
to restore the default.
Syntax
ovsdb server bootstrap ca-certificate
ca-filename
undo ovsdb server bootstrap ca-certificate
Default
SSL uses the CA certificate file in the PKI domain.
Views
System view
Predefined user roles
network-admin
Parameters
ca-filename
: Specifies the CA certificate file name, a case-insensitive string. The file name
cannot contain the
slot
string.
Usage guidelines
For the specified certificate to take effect, you must execute the
ovsdb server enable
command
to enable the OVSDB server. You must disable and then re-enable the OVSDB server if it has been
enabled.
If the specified CA certificate file does not exist, the device obtains a self-signed certificate from the
controller. The obtained file uses the name specified for the
ca-filename
argument.
Examples
# Specify CA certificate file
ca-new
for establishing OVSDB SSL connections.
<Sysname> system-view
[Sysname] ovsdb server bootstrap ca-certificate ca-new