31500234 smartax ma5600 configuration guide (v300r003-64)

SmartAX MA5600 Multi-service Access ModuleV300R003

Conguration Guide

Issue 02

Date 2007-01-10

Part Number 31500234

Huawei Technologies Proprietary

Huawei Technologies Co., Ltd. provides customers with comprehensive technical support and service.Please contact our local ofce or company headquarters.

Huawei Technologies Co., Ltd.Address: Huawei Industrial Base

Bantian, LonggangShenzhen 518129People's Republic of China

Website: http://www.huawei.com

Email: [email protected]

Copyright © Huawei Technologies Co., Ltd. 2007. All rights reserved.No part of this document may be reproduced or transmitted in any form or by any means without priorwritten consent of Huawei Technologies Co., Ltd.

Trademarks and Permissions

and other Huawei trademarks are trademarks of Huawei Technologies Co., Ltd.

All other trademarks and trade names mentioned in this manual are the property of their respective holders.

NoticeThe information in this document is subject to change without notice. Every effort has been made in thepreparation of this document to ensure accuracy of the contents, but all statements, information, andrecommendations in this document do not constitute the warranty of any kind, express or implied.

Huawei Technologies Proprietary

http://www.huawei.com

SmartAX MA5600 Multi-service Access ModuleConguration Guide Contents

Contents

About This Document.....................................................................................................................11 Maintenance Terminal Conguration................................................................................... 1-1

1.1 Overview.............................................................................................................................. 1-21.2 Conguring the Terminal Through the Local Serial Port ............................................................ 1-31.3 Conguring the Terminal Through the Remote Serial Port ......................................................... 1-61.4 Conguring the Terminal Through the Outband Management Channel ...................................... 1-101.5 Conguring the Terminal Through the Inband Management Channel ......................................... 1-141.6 Conguring the Terminal Through SSH................................................................................. 1-17

2 Getting Started With CLI ........................................................................................................ 2-12.1 Overview.............................................................................................................................. 2-22.2 CLI Characteristics................................................................................................................ 2-2

2.2.1 Command Modes .......................................................................................................... 2-22.2.2 Intelligent Matching....................................................................................................... 2-42.2.3 Edit Characteristics........................................................................................................ 2-52.2.4 Interaction Characteristics............................................................................................... 2-62.2.5 Parameter Prompt .......................................................................................................... 2-62.2.6 Display Characteristics................................................................................................... 2-72.2.7 Saving and Showing History Commands.......................................................................... 2-72.2.8 CLI Error Prompts......................................................................................................... 2-8

2.3 Basic Operations Through CLI ............................................................................................... 2-92.3.1 Obtaining Online Help Information ............................................................................... 2-102.3.2 Enabling Interactive Command Execution ...................................................................... 2-112.3.3 Enabling CLI Trap Reporting........................................................................................ 2-122.3.4 Switching Terminal Language....................................................................................... 2-132.3.5 Setting System Time.................................................................................................... 2-132.3.6 Setting System Name................................................................................................... 2-142.3.7 Setting Terminal Type.................................................................................................. 2-142.3.8 Setting Timeout Exit Time ........................................................................................... 2-152.3.9 Locking the Terminal................................................................................................... 2-152.3.10 Clearing Terminal Screen ........................................................................................... 2-162.3.11 Showing Version........................................................................................................ 2-162.3.12 Showing CPU Usage.................................................................................................. 2-172.3.13 Showing the Memory Usage ....................................................................................... 2-182.3.14 Testing Network State ................................................................................................ 2-18

Issue 02 (2007-01-10) Huawei Technologies Proprietary i

ContentsSmartAX MA5600 Multi-service Access Module

Conguration Guide

3 Network Management Conguration................................................................................... 3-13.1 Overview.............................................................................................................................. 3-23.2 Basic Concepts ..................................................................................................................... 3-23.3 Conguration Example of an Outband NMS ............................................................................ 3-33.4 Conguration Example of an Inband NMS............................................................................... 3-53.5 SNMP Agent Conguration.................................................................................................... 3-7

3.5.1 Setting the SNMP Version.............................................................................................. 3-83.5.2 Adding a Community Name and Setting Its Read/Write Authorities..................................... 3-93.5.3 Enabling Traps Sending ............................................................................................... 3-103.5.4 Setting the IP address of a Destination Host of Traps....................................................... 3-103.5.5 Setting the Source Interface for Sending Traps................................................................ 3-113.5.6 Setting the System Contact Information ......................................................................... 3-123.5.7 Setting the System Location Information........................................................................ 3-123.5.8 Conguring an SNMP V3 User..................................................................................... 3-133.5.9 Conguring an SNMP V3 Group .................................................................................. 3-143.5.10 Conguring an SNMP MIB View................................................................................ 3-153.5.11 Conguring the Local SNMP Engine ID ...................................................................... 3-153.5.12 Enabling the Handshake Function between the MA5600 and the N2000 ........................... 3-163.5.13 Setting the Handshake Interval .................................................................................... 3-17

3.6 Conguring the IP Address of the Outband NMS Interface ...................................................... 3-183.7 Conguring an NMS Route .................................................................................................. 3-193.8 Conguring the IP Address of the Inband NMS Interface......................................................... 3-20

4 Log Host Conguration ........................................................................................................... 4-14.1 Overview.............................................................................................................................. 4-24.2 Conguration Example of a Log Host ..................................................................................... 4-24.3 Conguring a Log Host ......................................................................................................... 4-34.4 Deleting a Log Host .............................................................................................................. 4-44.5 Deactivating a Log Host ........................................................................................................ 4-44.6 Querying Logs ...................................................................................................................... 4-5

5 User Management ..................................................................................................................... 5-15.1 Overview.............................................................................................................................. 5-25.2 Adding a User ...................................................................................................................... 5-25.3 Modifying the User Attributes ................................................................................................ 5-4

5.3.1 Modifying a User Level ................................................................................................. 5-45.3.2 Changing a User Password ............................................................................................. 5-55.3.3 Modifying the Permitted Reenter Number ........................................................................ 5-65.3.4 Modifying the Append Information ................................................................................. 5-7

5.4 Disconnecting an Online User ................................................................................................ 5-85.5 Deleting a User..................................................................................................................... 5-8

6 Device Management ................................................................................................................. 6-16.1 Overview.............................................................................................................................. 6-26.2 Setting the Description of a Shelf............................................................................................ 6-26.3 Resetting a Service Board ...................................................................................................... 6-36.4 Adding a Service Board Ofine .............................................................................................. 6-36.5 Conrming a Service Board ................................................................................................... 6-4

ii Huawei Technologies Proprietary Issue 02 (2007-01-10)


6.6 Deleting a Service Board ....................................................................................................... 6-56.7 Resetting the Control Boards .................................................................................................. 6-56.8 Prohibiting a Service Board.................................................................................................... 6-66.9 Managing a Subboard ............................................................................................................ 6-7

7 Remote User Authentication Conguration ........................................................................ 7-17.1 Overview.............................................................................................................................. 7-27.2 Related Concepts................................................................................................................... 7-2

7.2.1 Introduction to AAA...................................................................................................... 7-27.2.2 Introduction to RADIUS ................................................................................................ 7-37.2.3 Introduction to SSH....................................................................................................... 7-3

7.3 Conguration Example of Remote User Authentication ............................................................. 7-47.4 Conguring AAA.................................................................................................................. 7-6

7.4.1 Conguring an Authentication Scheme ............................................................................ 7-67.4.2 Creating a Domain ........................................................................................................ 7-77.4.3 Specifying the Authentication Scheme ............................................................................. 7-87.4.4 Specifying the RADIUS Server Template......................................................................... 7-9

7.5 Conguring RADIUS .......................................................................................................... 7-107.5.1 Overview.................................................................................................................... 7-117.5.2 Specifying the RADIUS Server Template ....................................................................... 7-117.5.3 Setting the IP Address and Port Number of a RADIUS Server .......................................... 7-127.5.4 Setting the Shared Key of the RADIUS Server ............................................................... 7-137.5.5 Setting the Response Timeout Interval of a RADIUS Server ............................................. 7-147.5.6 Setting the Maximum Retransmit Count of RADIUS Request Packets................................ 7-157.5.7 Setting the RADIUS Server Type .................................................................................. 7-167.5.8 Conguring an NAS Port and Its ID Format ................................................................... 7-167.5.9 Setting the Format of User Name Sent to a RADIUS Server ............................................. 7-17

7.6 Conguring SSH................................................................................................................. 7-187.6.1 Creating the Local RSA Key Pair.................................................................................. 7-187.6.2 Conguring the SSH User Public Key ........................................................................... 7-207.6.3 Conguring an SSH User ............................................................................................. 7-21

8 VLAN Conguration ................................................................................................................ 8-18.1 Overview.............................................................................................................................. 8-38.2 Conguration Example of Standard VLAN .............................................................................. 8-48.3 Conguration Example of a Smart VLAN................................................................................ 8-48.4 Conguration Example of a MUX VLAN................................................................................ 8-68.5 Conguration Example of the Super VLAN ............................................................................. 8-88.6 Creating a VLAN................................................................................................................ 8-118.7 Conguring the VLAN Attribute........................................................................................... 8-138.8 Setting the Inner and Outer Ethernet Protocols Type of a Stacking VLAN .................................. 8-138.9 Setting the Inner VLAN Priority of the Service Port in a Stacking VLAN .................................. 8-148.10 Adding an Upstream Port to a VLAN.................................................................................. 8-148.11 Adding a Service Port to a VLAN....................................................................................... 8-158.12 Adding Service Ports in Batches ......................................................................................... 8-178.13 Setting the Description of a Service Port .............................................................................. 8-18

9 DHCP Relay Conguration..................................................................................................... 9-1

Issue 02 (2007-01-10) Huawei Technologies Proprietary iii


Conguration Guide

9.1 Overview.............................................................................................................................. 9-29.2 Conguration Example of DHCP Standard Mode...................................................................... 9-29.3 Conguration Example of DHCP Option60 Mode..................................................................... 9-59.4 Conguration Example of DHCP MAC Address Segment Mode................................................. 9-79.5 Creating a DHCP Server Group ............................................................................................ 9-109.6 Setting Working Mode of a DHCP Server .............................................................................. 9-119.7 Setting DHCP Relay Mode .................................................................................................. 9-129.8 Binding a DHCP Server Group with a VLAN Interface ........................................................... 9-129.9 Creating an Option60 Domain .............................................................................................. 9-139.10 Binding a DHCP Server Group with a DHCP Option60 Domain ............................................. 9-149.11 Conguring the Gateway of a DHCP Option60 Domain......................................................... 9-159.12 Creating a DHCP MAC Address Segment............................................................................ 9-159.13 Setting the Range of a DHCP MAC Address Segment ........................................................... 9-169.14 Binding a DHCP Server Group with a DHCP MAC Address Segment ..................................... 9-179.15 Conguring the Gateway of a DHCP MAC Address Segment................................................. 9-18

10 ARP & ARP Proxy Conguration...................................................................................... 10-110.1 Overview.......................................................................................................................... 10-210.2 ARP Proxy Conguration Example ..................................................................................... 10-210.3 Adding a Static ARP Entry................................................................................................. 10-410.4 Enabling the ARP Proxy .................................................................................................... 10-5

11 Routing Protocol Conguration ......................................................................................... 11-111.1 Routing Protocol Conguration ........................................................................................... 11-211.2 Conguration Example of the Static Route ........................................................................... 11-211.3 Conguration Example of RIP ............................................................................................ 11-511.4 Conguration Example of OSPF ......................................................................................... 11-711.5 Conguration Example of a Route Policy ............................................................................ 11-1111.6 Adding a Static Route .......................................................................................................11-1311.7 Conguring RIP ...............................................................................................................11-14

11.7.1 Enabling RIP Process ................................................................................................11-1511.7.2 Setting the RIP Version .............................................................................................11-1611.7.3 Conguring Zero Field Check for RIP-I Packets...........................................................11-1711.7.4 Setting the Cost of the Default Route ..........................................................................11-1811.7.5 Enabling Route Summarization ..................................................................................11-1911.7.6 Specifying Default Routing Metric..............................................................................11-2011.7.7 Importing Routes of Other Protocols ...........................................................................11-2011.7.8 Disabling Receiving Host Routes................................................................................11-2111.7.9 Conguring the RIP Preference ..................................................................................11-2211.7.10 Conguring the Route Filtering Policy.......................................................................11-2311.7.11 Verifying the Source IP Address of a RIP Route Update ..............................................11-2411.7.12 Resetting RIP .........................................................................................................11-2411.7.13 Clearing RIP Process Statistics .................................................................................11-2511.7.14 Disabling RIP Packet Transmission on an Interface .....................................................11-2511.7.15 Conguring the IP Address of a Peer Router ..............................................................11-2611.7.16 Conguring a Summary Route IP Address .................................................................11-2711.7.17 Enabling an Interface to Receive/Transmit RIP Packets ...............................................11-28

iv Huawei Technologies Proprietary Issue 02 (2007-01-10)


11.7.18 Enabling the Split Horizon Function..........................................................................11-2811.7.19 Enabling the Poison Reverse Function .......................................................................11-2911.7.20 Conguring the RIP-2 Authentication Mode...............................................................11-3011.7.21 Conguring the Additional Metric of a Route.............................................................11-3011.7.22 Conguring the RIP Timer .......................................................................................11-3111.7.23 Enabling the Transparent Transmission function of the RIP Packet Based on the VLAN ...11-32

11.8 Conguring OSPF ............................................................................................................11-3211.8.1 Enabling OSPF Process .............................................................................................11-3311.8.2 Conguring DR Priority ............................................................................................11-3411.8.3 Setting an OSPF Router ID........................................................................................11-3411.8.4 Entering OSPF Area Cong Mode..............................................................................11-3511.8.5 Conguring Subnets for an Area ................................................................................11-3611.8.6 Conguring the OSPF Stub Area ................................................................................11-3611.8.7 Conguring an NBMA Adjacent Router ......................................................................11-3711.8.8 Setting OSPF Preference............................................................................................11-3811.8.9 Disabling OSPF Packet Transmission on an Interface....................................................11-3811.8.10 Conguring the Maximum OSPF Route Count ...........................................................11-3911.8.11 Enabling OSPF Logging Function .............................................................................11-40

11.9 Conguring OSPF on a VLAN Interface .............................................................................11-4011.9.1 Conguring the Network Type on an OSPF Interface ....................................................11-4011.9.2 Conguring OSPF Cost .............................................................................................11-4111.9.3 Conguring OSPF Packet Authentication ....................................................................11-4211.9.4 Conguring the MTU of the DD Packet ......................................................................11-42

11.10 Conguring OSPF Timer .................................................................................................11-4311.10.1 Setting the Interval for Sending the Hello Packets .......................................................11-4311.10.2 Setting the Dead Time Between Adjacent Routers.......................................................11-4411.10.3 Conguring OSPF Packet Authentication...................................................................11-4511.10.4 Setting the Hello Packet Poll Interval ........................................................................11-4511.10.5 Setting the LSA Transmit Delay ...............................................................................11-4611.10.6 Setting the LSA Retransmit Interval between Adjacent Routers ....................................11-4711.10.7 Setting the SPF Calculation Interval for OSPF............................................................11-47

11.11 Conguring Route Summarization ....................................................................................11-4811.11.1 Conguring Route Summarization Between Areas ......................................................11-4811.11.2 Conguring the Summarization of Routes Imported by OSPF.......................................11-49

11.12 Conguring OSPF Route Import.......................................................................................11-5011.12.1 Importing Routes from Other Protocols into OSPF......................................................11-5011.12.2 Setting the Default Parameters of OSPF Imported Routes ............................................11-50

11.13 Conguring Route Filtering Policy....................................................................................11-5111.14 Showing and Debugging OSPF ........................................................................................11-5211.15 Conguring an Address Prex List ...................................................................................11-5311.16 Conguring a Route Policy ..............................................................................................11-54

11.16.1 Dening a Route Policy...........................................................................................11-5411.16.2 Dening the if-match Clause of a Route Policy ..........................................................11-5511.16.3 Dening the apply Clause of a Route Policy ..............................................................11-56

12 MSTP Conguration............................................................................................................. 12-112.1 Overview.......................................................................................................................... 12-212.2 Enabling the MSTP Function.............................................................................................. 12-2

Issue 02 (2007-01-10) Huawei Technologies Proprietary v


Conguration Guide

12.3 Setting the Working Mode of MSTP.................................................................................... 12-312.4 Setting the MST Region Parameters .................................................................................... 12-5

12.4.1 Setting the MD5-Key for the MD5 Encryption Algorithm Congured on the MST Region... 12-512.4.2 Conguring the MST Region Name............................................................................. 12-612.4.3 Mapping the Specied VLAN to the Specied MSTP Instance........................................ 12-712.4.4 Mapping All VLANs to the MSTP Instances by Modular Arithmetic ............................... 12-812.4.5 Setting the MSTP Revision Level................................................................................ 12-912.4.6 Restoring the Defaults for All Parameters of the MST Region ........................................12-10

12.5 Activating the Conguration of the MST Region..................................................................12-1112.6 Specifying the Device as a Root Bridge or a Backup Root Bridge ..........................................12-1212.7 Setting the Priority of the Device in the Specied Spanning Tree Instance ...............................12-1312.8 Setting the Maximum Hop of the MST Region ....................................................................12-1412.9 Setting the Diameter of the Switching Fabric .......................................................................12-1512.10 Setting the Calculation Standard for the Path Cost ..............................................................12-1612.11 Setting the Time Parameters of the Specic Network Bridge ................................................12-17

12.11.1 Setting the Forward Delay of the Specied Network Bridge .........................................12-1712.11.2 Setting the Hello Time of the Specied Network Bridge ..............................................12-1912.11.3 Setting the Max Age of the Specied Network Bridge .................................................12-2012.11.4 Setting the Timeout Time Factor of the Specied Network Bridge.................................12-21

12.12 Setting the Parameters of the Specied Port .......................................................................12-2212.12.1 Setting the Maximum Transmission Rate of the Specied Port......................................12-2212.12.2 Setting the Specied Port as an Edge Port..................................................................12-2312.12.3 Setting the Path Cost of the Port in the Specied Spanning Tree Instance .......................12-2412.12.4 Setting the Priority of the Specied Port ....................................................................12-2512.12.5 Setting the Point-to-Point Link Connection of the Specied Port...................................12-27

12.13 Setting the mCheck Variable ............................................................................................12-2712.14 Conguring the Device Protection Function.......................................................................12-28

12.14.1 Enabling the BPDU Protection Function of the Device ................................................12-2812.14.2 Enabling the Loop Protection Function of the Device ..................................................12-2912.14.3 Enabling the Root Protection Function of the Device...................................................12-30

12.15 Clear the MSTP Protocol Statistics ...................................................................................12-31

13 NTP Conguration................................................................................................................ 13-113.1 Overview.......................................................................................................................... 13-213.2 Conguration Example of NTP Broadcast Mode ................................................................... 13-213.3 Conguration Example of NTP Multicast Mode.................................................................... 13-413.4 Conguration Example of NTP Server/Client Mode .............................................................. 13-713.5 Conguration Example of NTP Peer Mode..........................................................................13-1013.6 Conguring the NTP ID Authentication ..............................................................................13-1213.7 Conguring the NTP Master Clock ....................................................................................13-1413.8 Conguring NTP Broadcast Mode......................................................................................13-15

13.8.1 Conguring NTP Broadcast Server Mode ....................................................................13-1513.8.2 Conguring NTP Broadcast Client Mode ....................................................................13-17

13.9 Conguring the NTP Multicast Mode .................................................................................13-1713.10 Conguring NTP Server/Client Mode ...............................................................................13-1913.11 Conguring NTP Peer Mode............................................................................................13-2013.12 Conguring the Authority of Access to a Local Device’s NTP Service ................................13-21

vi Huawei Technologies Proprietary Issue 02 (2007-01-10)


13.13 Conguring an Interface for Transmitting/Receiving NTP Packets ........................................13-22

14 MAC Address Conguration.............................................................................................. 14-114.1 Overview.......................................................................................................................... 14-214.2 Adding a Static MAC Address............................................................................................ 14-214.3 Setting the Maximum MAC Address Number Learned by a Service Port.................................. 14-314.4 Conguring the Aging Time of a Dynamic MAC Address...................................................... 14-414.5 Binding the MAC Address ................................................................................................. 14-414.6 Conguring MAC Address Filtering .................................................................................... 14-514.7 Conguring the MAC Address Pool .................................................................................... 14-6

15 TCP/IP Connection Conguration..................................................................................... 15-115.1 Overview.......................................................................................................................... 15-215.2 Basic Concepts.................................................................................................................. 15-215.3 Conguring the Synwait Timer ........................................................................................... 15-215.4 Conguring the Finwait Timer ............................................................................................ 15-315.5 Conguring the socket Buffer ............................................................................................. 15-315.6 Enabling the TCP Debugging ............................................................................................. 15-415.7 Enabling the IP Packets Debugging ..................................................................................... 15-4

16 ACL & QoS Conguration.................................................................................................. 16-116.1 Overview.......................................................................................................................... 16-316.2 Conguring the Basic ACL ................................................................................................ 16-516.3 Conguring the Advanced ACL .......................................................................................... 16-616.4 Conguring the Layer 2 ACL ............................................................................................. 16-816.5 Conguration Example of the Customized ACL.................................................................... 16-916.6 Creating an ACL ..............................................................................................................16-1116.7 Conguring a Time Range.................................................................................................16-1216.8 Setting the Step ................................................................................................................16-1316.9 Creating a Basic ACL Rule ...............................................................................................16-1316.10 Creating an Advanced ACL Rule .....................................................................................16-1416.11 Creating a Layer 2 ACL Rule ..........................................................................................16-1516.12 Creating a Customized ACL Rule.....................................................................................16-1616.13 Activating an ACL..........................................................................................................16-1816.14 Conguring the Trafc Entry ...........................................................................................16-1816.15 Enabling Trafc Limit .....................................................................................................16-2116.16 Adding Priority Tag to Packets.........................................................................................16-2216.17 Enabling Trafc Mirroring ...............................................................................................16-2316.18 Enabling Trafc Redirection ............................................................................................16-2416.19 Enabling Trafc Statistics ................................................................................................16-2516.20 Enabling Line Rate Limitation on a Port ...........................................................................16-2516.21 Conguring Queue Scheduling .........................................................................................16-26

17 User Security Conguration................................................................................................ 17-117.1 Overview.......................................................................................................................... 17-217.2 Enabling the PITP ............................................................................................................. 17-217.3 Setting the RAIO Working Mode ........................................................................................ 17-317.4 Setting the Ethernet Encapsulation Type............................................................................... 17-4

Issue 02 (2007-01-10) Huawei Technologies Proprietary vii


Conguration Guide

17.5 Enabling the DHCP Option82 Function................................................................................ 17-517.6 Setting the Maximum Length of DHCP Packets .................................................................... 17-517.7 Binding the IP Address ...................................................................................................... 17-617.8 Binding the MAC Address ................................................................................................. 17-7

18 System Security Conguration........................................................................................... 18-118.1 Overview.......................................................................................................................... 18-318.2 Enabling Anti DoS Attack .................................................................................................. 18-318.3 Enabling Anti MAC Spoong............................................................................................. 18-418.4 Enabling Anti IP Spoong.................................................................................................. 18-518.5 Enabling Anti IP Attack ..................................................................................................... 18-518.6 Enabling Anti ICMP Attack................................................................................................ 18-618.7 Enabling Source Route Filtering.......................................................................................... 18-718.8 Conguring MAC Address Filtering .................................................................................... 18-718.9 Setting the Time to Detect Exceptional Disconnection of the PPPoE/DHCP Users ..................... 18-818.10 Conguring the Black List................................................................................................ 18-918.11 Conguring the Firewall Function.....................................................................................18-1018.12 Conguring an Accessible Address Segment......................................................................18-1218.13 Conguring the Inaccessible Address Segment ...................................................................18-13

19 ADSL2+ Service Conguration .......................................................................................... 19-119.1 Overview.......................................................................................................................... 19-319.2 Conguration Example of the ADSL2+ IPoA Service............................................................ 19-319.3 Conguration Example of the ADSL2+ PPPoA Service ......................................................... 19-719.4 Conguration Example of the ADSL2+ PPPoE/IPoE Service.................................................19-1019.5 Adding an ADSL2+ Line Prole ........................................................................................19-1419.6 Adding an Extended ADSL2+ Line Prole..........................................................................19-1919.7 Adding an ADSL2+ Alarm Prole .....................................................................................19-2119.8 Activating an ADSL2+ Port...............................................................................................19-2419.9 Conguring the Port Rate Measurement Thresholds for an ADSL2+ Port ................................19-2719.10 Conguring IPoA/IPoE Protocol Conversion......................................................................19-27

19.10.1 Enabling IPoA Protocol Conversion ..........................................................................19-2819.10.2 Setting the Aging time of IPoA Forwarding Entry.......................................................19-2819.10.3 Setting the Default Gateway of the IPoA User............................................................19-2919.10.4 Conguring the Encapsulation Type of the IPoA User .................................................19-30

19.11 Conguring PPPoA/PPPoE Protocol Conversion ................................................................19-3119.11.1 Enabling PPPoA Protocol Conversion .......................................................................19-3119.11.2 Conguring the Encapsulation Type of the PPPoA User...............................................19-3219.11.3 Enabling PPPoA/PPPoE MRU Negotiation ................................................................19-33

19.12 Querying an ADSL2+ Port ..............................................................................................19-34

20 SHDSL Service Conguration............................................................................................ 20-120.1 Overview.......................................................................................................................... 20-220.2 Conguration Example of the SHDSL IPoA Service.............................................................. 20-220.3 Conguration Example of the SHDSL PPPoA Service ........................................................... 20-720.4 Conguration Example of the SHDSL IPoE/PPPoE Service ..................................................20-1220.5 Adding an SHDSL Line Prole..........................................................................................20-1620.6 Adding an SHDSL Alarm Prole .......................................................................................20-19

viii Huawei Technologies Proprietary Issue 02 (2007-01-10)


20.7 Binding an SHDSL Alarm Prole ......................................................................................20-2220.8 Activating an SHDSL Port ................................................................................................20-2220.9 Querying an SHDSL Port ..................................................................................................20-2320.10 Conguring the Clock Mode ............................................................................................20-24

21 VDSL2 Service Conguration ............................................................................................ 21-121.1 Overview.......................................................................................................................... 21-221.2 Conguration Example of the VDSL2 IPoA Service.............................................................. 21-221.3 Conguration Example of the VDSL2 PPPoA Service ........................................................... 21-821.4 Conguration Example of the VDSL2 PPPoE/IPoE Service...................................................21-1421.5 Adding a VDSL2 Line Prole............................................................................................21-2021.6 Adding a VDSL2 Channel Prole ......................................................................................21-2721.7 Adding a VDSL2 Line Template ........................................................................................21-3021.8 Adding a VDSL2 Line Alarm Prole..................................................................................21-3221.9 Adding a VDSL2 Channel Alarm Prole.............................................................................21-3521.10 Adding a VDSL2 Alarm Template....................................................................................21-3721.11 Activating a VDSL2 Port.................................................................................................21-3921.12 Querying a VDSL2 port ..................................................................................................21-41

22 Protection Conguration for Upstream Link .................................................................. 22-122.1 Overview.......................................................................................................................... 22-222.2 Conguration Example of the Upstream Link Protection ........................................................ 22-222.3 Conguring a Protection Group........................................................................................... 22-4

23 Device Subtending Conguration..................................................................................... 23-123.1 Overview.......................................................................................................................... 23-223.2 Conguration Example of the Subtended Network Through the SCU Board.............................. 23-223.3 Conguration Example of Subtending Device Through the ETHA Board ................................. 23-423.4 Conguring the Physical Attributes of an Ethernet Port.......................................................... 23-6

23.4.1 Setting the Auto-negotiation Mode of an Ethernet Port................................................... 23-623.4.2 Setting the Duplex Mode of an Ethernet Port ................................................................ 23-723.4.3 Setting the Rate of an Ethernet Port ............................................................................. 23-723.4.4 Setting the Network Cable Type of an Ethernet Port ...................................................... 23-8

23.5 Enabling the Flow Control on an Ethernet Port ..................................................................... 23-923.6 Enabling the Trafc Suppression ........................................................................................23-1023.7 Enabling the Ethernet Port Aggregation ..............................................................................23-1123.8 Mirroring an Ethernet Port.................................................................................................23-1223.9 Adding an Ethernet Port to a VLAN...................................................................................23-1323.10 Setting the Native VLAN for an Ethernet Port ...................................................................23-14

24 ATM-DSLAM Access Conguration ............................................................................... 24-124.1 Overview.......................................................................................................................... 24-224.2 Conguration Example of the ATM-DSLAM Access ............................................................. 24-224.3 Setting the OPTIC Port Mode ............................................................................................. 24-624.4 Setting the OPTIC Port Type .............................................................................................. 24-724.5 Adding an IMA Group....................................................................................................... 24-724.6 Setting the IMA Group Mode ............................................................................................. 24-924.7 Adding an IMA Link ........................................................................................................24-11

Issue 02 (2007-01-10) Huawei Technologies Proprietary ix


Conguration Guide

24.8 Setting the Line Type for an E3 Port ..................................................................................24-1224.9 Setting the E3 Port Type ...................................................................................................24-1324.10 Setting the Tx Clock of an E3 Port ...................................................................................24-1424.11 Clearing the Statistics of an E3 Port..................................................................................24-15

25 MPLS Access Conguration................................................................................................ 25-125.1 Overview.......................................................................................................................... 25-225.2 Conguration Example of MPLS - Based on Binding the PVC with the PW Prole ................... 25-225.3 Conguration Example of MPLS- Based on Binding the VLAN with the PW Prole ................. 25-625.4 Basic Conguration of MPLS ............................................................................................. 25-9

25.4.1 Conguring the LSR ID ............................................................................................. 25-925.4.2 Enabling MPLS........................................................................................................25-10

25.5 Static LSP Conguration ...................................................................................................25-1125.5.1 Overview .................................................................................................................25-1125.5.2 Conguring the Ingress LSR of the Static LSP.............................................................25-1125.5.3 Conguring the Egress LSR of the Static LSP..............................................................25-1225.5.4 Conguring the LSP CAR .........................................................................................25-13

25.6 MPLS LDP Conguration .................................................................................................25-1325.6.1 Overview .................................................................................................................25-1425.6.2 Enabling the MPLS LDP...........................................................................................25-1425.6.3 Conguring Parameters of the LDP Basic Discovery ....................................................25-1525.6.4 Conguring Parameters of the LDP Extended Discovery ...............................................25-1725.6.5 Conguring Parameters of the LDP Basic Session ........................................................25-1825.6.6 Conguring Parameters of the LDP Extended Session...................................................25-1925.6.7 Conguring the LDP LSP Triggering Policy ................................................................25-1925.6.8 Conguring the LDP Label Retention Mode ................................................................25-2025.6.9 Conguring the LDP Loopback Detection ...................................................................25-2125.6.10 Conguring the LDP MD5 Authentication .................................................................25-2225.6.11 Enable the LDP MTU Signaling Function..................................................................25-24

25.7 PW Conguration.............................................................................................................25-2525.7.1 Enable the MPLS L2VPN..........................................................................................25-2525.7.2 Conguring a PW Template .......................................................................................25-2625.7.3 Binding a PVC with a PW Template...........................................................................25-2625.7.4 Binding a VLAN with a PW Template ........................................................................25-27

26 MPLS RSVP-TE Conguration .......................................................................................... 26-126.1 Overview.......................................................................................................................... 26-226.2 Conguration Example for Establishing an MPLS TE Tunnel by Using RSVP-TE..................... 26-226.3 Conguring Basic MPLS TE Capability............................................................................... 26-5

26.3.1 Enabling MPLS TE Feature ........................................................................................ 26-526.3.2 Creating an MPLS TE Tunnel ..................................................................................... 26-7

26.4 Conguring an MPLS TE Tunnel by Using Dynamic Signaling .............................................. 26-826.4.1 Conguring Bandwidth of Links ................................................................................. 26-826.4.2 Enabling OSPF TE ...................................................................................................26-1026.4.3 Conguring the MPLS TE Explicit Path......................................................................26-1026.4.4 Conguring Constraints of an MPLS TE Tunnel...........................................................26-1226.4.5 Conguring CSPF.....................................................................................................26-1226.4.6 Establishing an MPLS TE Tunnel by Using RSVP-TE ..................................................26-13

x Huawei Technologies Proprietary Issue 02 (2007-01-10)


26.5 Conguring Advanced RSVP-TE Features ..........................................................................26-1426.5.1 Conguring RSVP Hello Extension ............................................................................26-1526.5.2 Conguring RSVP Resource Reservation Style ............................................................26-1626.5.3 Conguring RSVP Timers .........................................................................................26-1726.5.4 Enabling RSVP Message Transmission Reliability........................................................26-1926.5.5 Enabling RSVP-TE Srefresh Function.........................................................................26-2026.5.6 Enabling RSVP-TE Reservation Conrmation Mechanism ............................................26-2126.5.7 Enabling RSVP Authentication...................................................................................26-22

26.6 Tuning the Establishment of CR-LSP..................................................................................26-2326.6.1 Conguring Tie-Breaking of CSPF .............................................................................26-2326.6.2 Conguring Route Pinning of CSPF ...........................................................................26-2526.6.3 Conguring Administrative Group and Afnity Property ...............................................26-2626.6.4 Conguring Reoptimization for CR-LSP .....................................................................26-27

26.7 Tuning the Establishment of an MPLS TE Tunnel ................................................................26-2826.7.1 Conguring Loop Detection.......................................................................................26-2926.7.2 Conguring the Route Record and the Label Record.....................................................26-2926.7.3 Conguring Parameters of Tunnel Reestablishment.......................................................26-3026.7.4 Conguring Tunnel Priority .......................................................................................26-31

27 Multi-ISP Wholesale Access Conguration..................................................................... 27-127.1 Overview.......................................................................................................................... 27-227.2 Conguration Example....................................................................................................... 27-2

28 Leased Line Access Conguration..................................................................................... 28-128.1 Overview.......................................................................................................................... 28-228.2 Conguration Example....................................................................................................... 28-228.3 Enabling Transparent Transmission of BPDUs ...................................................................... 28-4

29 Multicast Service Conguration ........................................................................................ 29-129.1 Overview.......................................................................................................................... 29-229.2 Conguration Example of IGMP Proxy................................................................................ 29-229.3 Conguration Example of IGMP Snooping........................................................................... 29-529.4 Conguration Example of Multicast Service in Subtending Mode............................................ 29-729.5 Conguring Multicast Service in MSTP Networking ............................................................29-1229.6 Setting the IGMP Mode ....................................................................................................29-1929.7 Conguring an IGMP Upstream Port ..................................................................................29-2029.8 Specifying a Subtending Port .............................................................................................29-2129.9 Conguring a Program for a Static Subtending Port..............................................................29-2229.10 Conguring IGMP Global Parameters ...............................................................................29-23

29.10.1 Enabling the IGMP Proxy Authorization....................................................................29-2429.10.2 Setting the Robustness Variable ................................................................................29-2529.10.3 Setting the General Query Interval ............................................................................29-2629.10.4 Setting the Maximum Response Time to the General Query .........................................29-2629.10.5 Setting the Number of Specic Queries .....................................................................29-2829.10.6 Setting the Specic Query Interval............................................................................29-2929.10.7 Setting the Maximum Response Time to the Specic Query .........................................29-2929.10.8 Setting the Unsolicited Report Interval ......................................................................29-3029.10.9 Setting the TTL for a V1 Router...............................................................................29-3129.10.10 Setting the Preview Recognition Time .....................................................................29-32

Issue 02 (2007-01-10) Huawei Technologies Proprietary xi


Conguration Guide

29.10.11 Enabling the User Action Report Function ...............................................................29-3329.10.12 Enabling the Proxy of the IGMP Report Packet ........................................................29-3429.10.13 Enabling the Proxy of the IGMP Leave Packet .........................................................29-3529.10.14 Set the Permitted Encapsulation Mode of IGMP Packets ............................................29-3629.10.15 Enabling IGMP Echo Function ...............................................................................29-37

29.11 Adding a Program...........................................................................................................29-3829.12 Managing Multicast Bandwidth ........................................................................................29-40

29.12.1 Enabling the Bandwidth Management Function ..........................................................29-4029.12.2 Setting Upstream Port Bandwidth .............................................................................29-4229.12.3 Setting User Bandwidth ...........................................................................................29-4229.12.4 Setting Program Bandwidth......................................................................................29-43

29.13 Conguring an Authority Prole.......................................................................................29-4329.13.1 Setting the Authority Mode......................................................................................29-4329.13.2 Modifying an Authority Prole.................................................................................29-4429.13.3 Renaming an Authority Prole .................................................................................29-45

29.14 Conguring Multicast Users.............................................................................................29-4529.14.1 Adding a BTV User ................................................................................................29-4629.14.2 Modifying the Attributes of a User ...........................................................................29-4729.14.3 Blocking a BTV User..............................................................................................29-4829.14.4 Binding a User with an Authority Prole ...................................................................29-4929.14.5 Granting Program Authorities to a User.....................................................................29-5029.14.6 Enabling the Function of Monitoring the BTV User ....................................................29-50

29.15 Conguring the Preview Function.....................................................................................29-5129.15.1 Enabling the Preview Function .................................................................................29-5129.15.2 Setting the Preview Parameters.................................................................................29-5229.15.3 Setting the Preview Auto Reset Time ........................................................................29-5329.15.4 Clearing the Preview Logout Time Records Manually .................................................29-54

29.16 Conguring the Logging Function ....................................................................................29-5429.16.1 Enabling the Logging Function.................................................................................29-5529.16.2 Setting the Logging Interval .....................................................................................29-5629.16.3 Conguring Log Reporting ......................................................................................29-5729.16.4 Collecting Log Statistics ..........................................................................................29-57

30 Triple Play Service Conguration ..................................................................................... 30-130.1 Overview.......................................................................................................................... 30-230.2 Conguration Example of Triple Play - Multiple PVCs for Multiple Services............................ 30-230.3 Conguration Example of Triple Play - Based on the User-Side VLAN.................................... 30-730.4 Conguration Example of Triple Play - Based on 802.1p ......................................................30-11

31 Built-in ISU Service Conguration ................................................................................... 31-131.1 Overview.......................................................................................................................... 31-231.2 Conguration Example of a Single ISU ............................................................................... 31-231.3 Conguration Example of Dual ISUs................................................................................... 31-4

32 Ethernet OAM Conguration ............................................................................................. 32-132.1 Overview.......................................................................................................................... 32-332.2 Conguration Example of Ethernet OAM............................................................................. 32-332.3 Creating an MD ................................................................................................................ 32-632.4 Creating an MA ................................................................................................................ 32-7

xii Huawei Technologies Proprietary Issue 02 (2007-01-10)


32.5 Creating an MEP............................................................................................................... 32-832.6 Creating an RMEP ............................................................................................................ 32-932.7 Enabling the CFM Globally...............................................................................................32-1032.8 Enabling the CFM Alarm Globally .....................................................................................32-1032.9 Enabling the Administration Function of an MEP.................................................................32-1132.10 Enabling the CC Transmission of a MEP...........................................................................32-1232.11 Enabling RMEP Detection Function..................................................................................32-1332.12 Conguring Priorities for Transmitting CCMs/LTMs ..........................................................32-1432.13 Conguring the Interval for an MA to Transmit a CC .........................................................32-1432.14 Conguring the Base Address of Multicast Destination MAC Addresses of CCMs/LTMs.........32-1532.15 Conguring Loop Detection Function ...............................................................................32-1632.16 Conguring Linktrace Function ........................................................................................32-17

33 MPLS OAM Conguration ................................................................................................. 33-133.1 Overview.......................................................................................................................... 33-233.2 Conguration Example of Detection of MPLS OAM for Static LSP Connectivity ...................... 33-233.3 Conguration Example of MPLS OAM Protection Switchover ............................................... 33-633.4 Conguring the MPLS OAM Function of the Ingress ...........................................................33-1133.5 Conguring the MPLS OAM Function of the Egress ............................................................33-1233.6 Conguring the Tunnel Protection Group ............................................................................33-1333.7 Switching Over Protection Group Manually.........................................................................33-1433.8 Enabling the Protection Group to Output the Debugging Information ......................................33-15

34 Environment Monitoring Conguration ......................................................................... 34-134.1 Overview.......................................................................................................................... 34-234.2 Conguration Example of an EMU ..................................................................................... 34-3

34.2.1 Data Plan.................................................................................................................. 34-434.2.2 Conguration Flowchart ............................................................................................. 34-434.2.3 Procedure for Conguring an H303ESC ....................................................................... 34-534.2.4 Verication for Conguring an H303ESC..................................................................... 34-534.2.5 Procedure for Conguring POWER4845 EMU.............................................................. 34-6

34.3 Adding an EMU................................................................................................................ 34-634.4 Conguring the H303ESC/H304ESC EMU .......................................................................... 34-734.5 Conguring an H561ESC EMU .........................................................................................34-1034.6 Conguring a POWER4845 EMU......................................................................................34-1134.7 Conguring the FAN Alarm Report ...................................................................................34-1234.8 Setting the FAN Speed Adjustment Mode ...........................................................................34-1334.9 Conguring the FAN Speed...............................................................................................34-14

35 MSTP Networking Example ............................................................................................... 35-135.1 Networking ....................................................................................................................... 35-235.2 Data Plan.......................................................................................................................... 35-235.3 Conguring MA5600-1 ...................................................................................................... 35-435.4 Conguring MA5600-2 .....................................................................................................35-1035.5 Conguring MA5600-3 .....................................................................................................35-1635.6 Conguring MA5600-4 .....................................................................................................35-2135.7 Conguring MA5600-5 .....................................................................................................35-26

Issue 02 (2007-01-10) Huawei Technologies Proprietary xiii


Conguration Guide

35.8 Verication ......................................................................................................................35-28

36 Subtending Networking Example ..................................................................................... 36-136.1 Networking ....................................................................................................................... 36-236.2 Data Plan.......................................................................................................................... 36-336.3 Conguring MA5600-1 ...................................................................................................... 36-436.4 Conguring MA5600-2 .....................................................................................................36-1036.5 Conguring MA5600-3 .....................................................................................................36-1636.6 Conguring MA5600-4 .....................................................................................................36-2136.7 Verication ......................................................................................................................36-23

A Acronyms and Abbreviations............................................................................................... A-1Index ................................................................................................................................................. i-1

xiv Huawei Technologies Proprietary Issue 02 (2007-01-10)

SmartAX MA5600 Multi-service Access ModuleConguration Guide Figures

Figures

Figure 1-1 Networking for conguring the MA5600 through the local serial port ......................................... 1-3Figure 1-2 Flowchart for conguring the MA5600 through the local serial port............................................ 1-3Figure 1-3 Setting parameters of the terminal .......................................................................................... 1-4Figure 1-4 Setting the terminal emulation type ........................................................................................ 1-5Figure 1-5 Setting ASCII Code.............................................................................................................. 1-6Figure 1-6 Networking for conguring the MA5600 through the remote serial port ...................................... 1-7Figure 1-7 Flowchart for conguring the MA5600 through the remote serial port......................................... 1-7Figure 1-8 Setting the parameters of the HyperTerminal ........................................................................... 1-9Figure 1-9 Networking for local conguration through a LAN................................................................. 1-11Figure 1-10 Connection between a WAN and the ETH port of the control board ........................................ 1-12Figure 1-11 Flowchart for conguring the MA5600 through the outband management channel..................... 1-13Figure 1-12 Running telnet application ................................................................................................. 1-13Figure 1-13 Networking for the maintenance through the GE port over a LAN .......................................... 1-14Figure 1-14 Networking for the maintenance through the GE port over a WAN ......................................... 1-15Figure 1-15 Flowchart for conguring the MA5600 through the inband management channel ...................... 1-16Figure 1-16 Running telnet application ................................................................................................. 1-17Figure 1-17 Setting up the SSH conguration environment in LAN outband mode ..................................... 1-18Figure 1-18 Setting up the SSH conguration environment in WAN outband mode .................................... 1-18Figure 1-19 Setting up the SSH conguration environment in LAN inband mode....................................... 1-19Figure 1-20 Setting up the SSH conguration environment in WAN inband mode ...................................... 1-20Figure 1-21 Flowchart for conguring in SSH mode .............................................................................. 1-21Figure 1-22 Interface of the key generator............................................................................................. 1-23Figure 1-23 Generating the client key................................................................................................... 1-24Figure 1-24 Interface of converting the client public key into the RSA public key ...................................... 1-25Figure 1-25 Interface of the SSH client software.................................................................................... 1-26Figure 1-26 Interface for connecting to the system. ................................................................................ 1-27Figure 1-27 Interface for logging in the SSH client ................................................................................ 1-27Figure 2-1 Switching over among the command modes ............................................................................ 2-3Figure 3-1 Sample network for conguring the outband NMS ................................................................... 3-3Figure 3-2 Flowchart for conguring the outband NMS............................................................................ 3-4Figure 3-3 Sample network for conguring the inband NMS..................................................................... 3-5

Issue 02 (2007-01-10) Huawei Technologies Proprietary xv

FiguresSmartAX MA5600 Multi-service Access Module

Conguration Guide

Figure 3-4 Flowchart for conguring the inband NMS.............................................................................. 3-6Figure 4-1 Sample network of the log host conguration .......................................................................... 4-2Figure 7-1 Sample network for conguring the remote user authentication .................................................. 7-4Figure 7-2 Flowchart for conguring the remote user authentication........................................................... 7-5Figure 7-3 Flowchart for conguring the SSH user public key................................................................. 7-20Figure 8-1 Sample network for conguring a smart VLAN ....................................................................... 8-5Figure 8-2 Flowchart for conguring a smart VLAN. ............................................................................... 8-6Figure 8-3 Sample network for conguring a MUX VLAN....................................................................... 8-7Figure 8-4 Flowchart for conguring a MUX VLAN................................................................................ 8-8Figure 8-5 Sample network for conguring a super VLAN ....................................................................... 8-9Figure 8-6 Flowchart for conguring a super VLAN .............................................................................. 8-10Figure 9-1 MA5600 DHCP relay ........................................................................................................... 9-2Figure 9-2 Sample network for conguring DHCP standard mode.............................................................. 9-3Figure 9-3 Flowchart for conguring DHCP standard mode ...................................................................... 9-4Figure 9-4 Sample network for conguring DHCP option60 mode ............................................................. 9-5Figure 9-5 Flowchart for conguring the DHCP option60 mode ................................................................ 9-6Figure 9-6 Sample network for conguring MAC address segment mode.................................................... 9-8Figure 9-7 Flowchart for conguring MAC address segment mode ............................................................ 9-9Figure 10-1 Sample network for conguring the ARP proxy ................................................................... 10-3Figure 11-1 Sample network of conguring the static route ..................................................................... 11-2Figure 11-2 Flowchart for conguring the static route............................................................................. 11-4Figure 11-3 Sample network of conguring RIP .................................................................................... 11-5Figure 11-4 Flowchart for conguring RIP ............................................................................................ 11-6Figure 11-5 Sample network of conguring OSPF ................................................................................. 11-8Figure 11-6 Flowchart for conguring OSPF ......................................................................................... 11-9Figure 11-7 Sample network of conguring the route policy................................................................... 11-11Figure 11-8 Flowchart for conguring the route policy ..........................................................................11-12Figure 13-1 Sample network for conguring the NTP broadcast mode...................................................... 13-2Figure 13-2 Flowchart for conguring NTP broadcast mode.................................................................... 13-3Figure 13-3 Sample network for conguring NTP multicast mode............................................................ 13-5Figure 13-4 Flowchart for conguring NTP multicast mode .................................................................... 13-6Figure 13-5 Sample network for conguring NTP server/client mode ....................................................... 13-7Figure 13-6 Flowchart for conguring NTP server/client mode................................................................ 13-8Figure 13-7 Sample network for conguring NTP peer mode .................................................................13-10Figure 13-8 Flowchart for conguring NTP peer mode ..........................................................................13-11Figure 13-9 Flowchart for conguring the NTP server/client mode with ID authentication..........................13-13Figure 16-1 Flowchart for conguring a basic ACL ............................................................................... 16-6Figure 16-2 Flowchart for conguring an advanced ACL. ....................................................................... 16-7Figure 16-3 Flowchart for conguring a layer 2 ACL............................................................................. 16-9Figure 16-4 Flowchart for conguring a customized ACL......................................................................16-10Figure 16-5 First 64 bytes of a layer 2 frame........................................................................................16-16Figure 18-1 Flowchart for conguring the rewall function....................................................................18-11

xvi Huawei Technologies Proprietary Issue 02 (2007-01-10)

SmartAX MA5600 Multi-service Access ModuleConguration Guide Figures

Figure 19-1 Sample network for conguring the ADSL2+ IPoA service.................................................... 19-4Figure 19-2 Flowchart for conguring the ADSL2+ IPoA service ............................................................ 19-5Figure 19-3 Sample network of the ADSL2+ PPPoA service................................................................... 19-7Figure 19-4 Flowchart for conguring the ADSL2+ PPPoA service ......................................................... 19-8Figure 19-5 Sample network for conguring the ADSL2+ PPPoE/IPoE service ........................................19-10Figure 19-6 Flowchart for conguring the ADSL2+ PPPoE/IPoE service .................................................19-12Figure 19-7 Flowchart for conguring an ADSL2+ line prole-1 ............................................................19-15Figure 19-8 Flowchart for conguring an ADSL2+ line prole-2 ............................................................19-16Figure 19-9 Flowchart for adding an ADSL2+ alarm prole...................................................................19-22Figure 19-10 Inter-conversion between ADSL2+ port states ...................................................................19-34Figure 20-1 Sample network for conguring the SHDSL IPoA service ..................................................... 20-3Figure 20-2 Flowchart for conguring the SHDSL IPoA service.............................................................. 20-4Figure 20-3 Sample network for conguring the SHDSL PPPoA service................................................... 20-7Figure 20-4 Flowchart for conguring the SHDSL PPPoA service ........................................................... 20-9Figure 20-5 Sample network of the SHDSL IPoE/PPPoE service ............................................................20-12Figure 20-6 Flowchart for conguring the SHDSL IPoE/PPPoE service...................................................20-14Figure 20-7 Flowchart for adding an SHDSL line prole .......................................................................20-17Figure 20-8 Flowchart for adding an SHDSL alarm prole ....................................................................20-20Figure 20-9 Inter-conversion between the SHDSL port states .................................................................20-23Figure 21-1 Sample network of the VDSL2 IPoA service ....................................................................... 21-3Figure 21-2 Flowchart for conguring the VDSL2 IPoA Service ............................................................. 21-4Figure 21-3 Sample network of the VDSL2 PPPoA service..................................................................... 21-9Figure 21-4 Flowchart for conguring the VDSL2 PPPoA service ..........................................................21-10Figure 21-5 Sample network for conguring the VDSL2 PPPoE/IPoE service ..........................................21-15Figure 21-6 Flowchart for conguring the VDSL2 PPPoE/IPoE service ...................................................21-16Figure 21-7 Flowchart for adding a VDSL2 line prole .........................................................................21-21Figure 21-8 Flowchart for adding a VDSL2 channel prole....................................................................21-28Figure 21-9 Flowchart for adding a VDSL2 line alarm prole ................................................................21-33Figure 21-10 Flowchart for adding a VDSL2 channel alarm prole .........................................................21-36Figure 21-11 Inter-conversion between these states................................................................................21-41Figure 22-1 Sample network for conguring the upstream link protection ................................................. 22-3Figure 22-2 Flowchart for conguring the upstream link protection.......................................................... 22-3Figure 23-1 Sample network for conguring the subtended network ......................................................... 23-3Figure 23-2 Flowchart for conguring the subtended network.................................................................. 23-3Figure 23-3 Sample network for subtending devices............................................................................... 23-5Figure 23-4 Flowchart for conguring subtending devices....................................................................... 23-5Figure 24-1 Sample network of the ATM-DSLAM access ....................................................................... 24-2Figure 24-2 Sample network for conguring the ATM-DSLAM access ..................................................... 24-3Figure 24-3 Flowchart for conguring the ATM-DSLAM access.............................................................. 24-4Figure 25-1 Sample network of MPLS based on binding the PVC with the PW prole................................ 25-3Figure 25-2 Flowchart for conguring the MPLS based on binding the PVC with the PW template............... 25-4Figure 25-3 Sample network of the MPLS based on binding the VLAN with the PW template ..................... 25-6

Issue 02 (2007-01-10) Huawei Technologies Proprietary xvii

FiguresSmartAX MA5600 Multi-service Access Module

Conguration Guide

Figure 25-4 Flowchart for conguring the MPLS based on binding the VLAN with the PW prole............... 25-7Figure 26-1 Sample network for establishing an MPLS TE tunnel by using RSVP-TE ................................ 26-3Figure 26-2 Flowchart for establishing an MPLS TE tunnel .................................................................... 26-4Figure 27-1 Sample network for conguring the multi-ISP wholesale access ............................................. 27-2Figure 27-2 Flowchart for conguring the multi-ISP wholesale access ...................................................... 27-4Figure 28-1 Sample network for conguring the leased line access........................................................... 28-3Figure 28-2 Flowchart for conguring leased line access ........................................................................ 28-4Figure 29-1 Sample network of the IGMP proxy application ................................................................... 29-3Figure 29-2 Flowchart for conguring IGMP proxy ............................................................................... 29-4Figure 29-3 Sample network for conguring the IGMP snooping ............................................................. 29-5Figure 29-4 Flowchart for conguring the IGMP snooping...................................................................... 29-6Figure 29-5 Sample network for conguring the subtended multicast service ............................................. 29-8Figure 29-6 Flowchart for conguring multicast service in subtending mode (MA5600_A).........................29-10Figure 29-7 Flowchart for conguring multicast service in subtending mode (MA5600_B).........................29-10Figure 29-8 Sample network of the multicast service in MSTP networking...............................................29-13Figure 29-9 Flowchart for conguring multicast service in MSTP networking on MA5600_A,

MA5600_B and MA5600_C ..............................................................................................29-15Figure 29-10 Flowchart for conguring multicast service in MSTP networking on MA5600_D ...................29-16Figure 30-1 Sample network for conguring the triple play service -multiple PVCs for multiple services ....... 30-3Figure 30-2 Flowchart for conguring the triple play service-multiple PVCs for multiple services ................ 30-4Figure 30-3 Sample network for conguring the triple play service - single PVC for multiple services........... 30-7Figure 30-4 Flowchart for conguring the triple play service - single PVC for multiple services ................... 30-8Figure 30-5 Sample network for conguring the triple play service by means of single PVC for

multiple services ...............................................................................................................30-11Figure 30-6 Flowchart for conguring the triple play service-single-PVC for multi-service.........................30-13Figure 31-1 Sample network for conguring a single ISU ....................................................................... 31-3Figure 31-2 Flowchart for conguring a single ISU................................................................................ 31-4Figure 31-3 Sample network for conguring dual ISUs .......................................................................... 31-5Figure 31-4 Flowchart for conguring dual ISUs. .................................................................................. 31-6Figure 32-1 Sample network for conguring Ethernet OAM.................................................................... 32-3Figure 32-2 Flowchart for conguring Ethernet OAM ............................................................................ 32-5Figure 33-1 Sample network of detection of MPLS OAM for static LSP connectivity ................................. 33-2Figure 33-2 Flowchart for detection of MPLS OAM for static LSP connectivity ........................................ 33-4Figure 33-3 Sample network of MPLS OAM protection switchover ......................................................... 33-6Figure 33-4 Flowchart for conguring MPLS OAM protection switchover ................................................ 33-8Figure 34-1 Flowchart for conguring an EMU ..................................................................................... 34-4Figure 35-1 Sample MSTP network of the MA5600............................................................................... 35-2Figure 36-1 Sample subtended network of the MA5600.......................................................................... 36-2

xviii Huawei Technologies Proprietary Issue 02 (2007-01-10)

SmartAX MA5600 Multi-service Access ModuleConguration Guide Tables

Tables

Table 1-1 Features of the different maintenance modes ............................................................................. 1-2Table 1-2 Data plan for the network .................................................................................................... 1-11Table 1-3 Data plan for the network ..................................................................................................... 1-12Table 1-4 Data plan for the network ..................................................................................................... 1-14Table 1-5 Data plan for the network ..................................................................................................... 1-15Table 1-6 Data plan for the network ..................................................................................................... 1-18Table 1-7 Data plan for the network ..................................................................................................... 1-19Table 1-8 Data plan for the network ..................................................................................................... 1-20Table 1-9 Data plan for the network .................................................................................................... 1-20Table 2-1 Features of the interface cong modes...................................................................................... 2-4Table 2-2 Edit functions ........................................................................................................................ 2-5Table 2-3 Meaning of the CLI characters supported by the MA5600........................................................... 2-6Table 2-4 Options for viewing information displayed on multiple screens.................................................... 2-7Table 2-5 Common CLI error prompts .................................................................................................... 2-9Table 2-6 Related operation for obtaining online help information............................................................ 2-11Table 2-7 Related operation for enabling or disabling interactive command execution ................................. 2-12Table 2-8 Related operation for enabling or disabling CLI trap reporting................................................... 2-13Table 2-9 Related operation for switching the terminal language .............................................................. 2-13Table 2-10 Related operation for setting the timeout exit time.................................................................. 2-15Table 2-11 Related operation for locking the terminal ............................................................................. 2-16Table 3-1 Data plan for conguring the outband NMS.............................................................................. 3-3Table 3-2 Data plan for conguring the inband NMS................................................................................ 3-6Table 3-3 Related operations for setting the SNMP version ....................................................................... 3-9Table 3-4 Related operations for adding a community and setting its read/write authorities ............................ 3-9Table 3-5 Related operations for enabling traps sending .......................................................................... 3-10Table 3-6 Related operations for setting the IP address of a destination host of traps ................................... 3-11Table 3-7 Related operations for setting the source interface for traps sending............................................ 3-11Table 3-8 Related operations for setting the system contact information .................................................... 3-12Table 3-9 Related operations for setting the system location information ................................................... 3-13Table 3-10 Related operations for conguring an SNMP V3 user ............................................................. 3-14Table 3-11 Related operations for conguring an SNMP V3 group ........................................................... 3-15

Issue 02 (2007-01-10) Huawei Technologies Proprietary xix

TablesSmartAX MA5600 Multi-service Access Module

Conguration Guide

Table 3-12 Related operations for conguring an SNMP MIB view.......................................................... 3-15Table 3-13 Related operations for conguring the local SNMP engine ID.................................................. 3-16Table 3-14 Related operations for enabling the handshake function between the MA5600 and the N2000....... 3-17Table 3-15 Related operations for setting the handshake interval .............................................................. 3-18Table 3-16 Related operation for conguring the IP address of the outband NMS interface .......................... 3-19Table 3-17 Related operation for conguring an NMS route. ................................................................... 3-20Table 3-18 Related operation of conguring the IP address of the inband NMS interface ............................. 3-20Table 4-1 Data plan for conguring a log host ......................................................................................... 4-3Table 4-2 Related operations for conguring a log host............................................................................. 4-4Table 4-3 Related operations for conguring a log host............................................................................. 4-4Table 4-4 Related operations for deactivating a log host............................................................................ 4-5Table 5-1 User authorities...................................................................................................................... 5-2Table 5-2 User Attributes ...................................................................................................................... 5-3Table 5-3 Related operation for adding a user .......................................................................................... 5-4Table 5-4 Related operations for modifying a user level ............................................................................ 5-5Table 5-5 Related operations for changing a user password ....................................................................... 5-6Table 5-6 The related operations for modifying the permitted reenter number............................................... 5-7Table 5-7 Related operations for modifying the append information ........................................................... 5-7Table 5-8 Related operation for disconnection an online user..................................................................... 5-8Table 5-9 Related operations for deleting a user....................................................................................... 5-9Table 6-1 Service board status ............................................................................................................... 6-2Table 6-2 Related operation for setting the description of a shelf................................................................ 6-3Table 6-3 Related operation for adding a service board ofine ................................................................... 6-4Table 6-4 Related operations for conrming a service board ...................................................................... 6-5Table 6-5 Related operations for resetting the control boards ..................................................................... 6-6Table 6-6 Related operation for prohibiting a service board ....................................................................... 6-7Table 6-7 Related operation for managing a subboard............................................................................... 6-8Table 7-1 Data plan for conguring the remote user authentication............................................................. 7-4Table 7-2 Related operations for conguring an authentication scheme ....................................................... 7-7Table 7-3 Related operations for creating a domain .................................................................................. 7-8Table 7-4 Related operations for specifying the authentication scheme........................................................ 7-9Table 7-5 Related operation for specifying the RADIUS server template ................................................... 7-10Table 7-6 Related operation for specifying the RADIUS server template ................................................... 7-12Table 7-7 Related operation for setting the IP address and port number of a server ..................................... 7-13Table 7-8 Related operation for setting the response timeout interval of a RADIUS server ........................... 7-15Table 7-9 Related operation for setting the maximum retransmit count of the RADIUS request packets ......... 7-16Table 7-10 Related operation for creating a local RSA key pair ............................................................... 7-19Table 7-11 Related operations for conguring an SSH user...................................................................... 7-21Table 8-1 VLAN types and applications.................................................................................................. 8-3Table 8-2 VLAN attributes .................................................................................................................... 8-4Table 8-3 Data plan for conguring a smart VLAN.................................................................................. 8-5Table 8-4 Data plan for conguring a MUX VLAN.................................................................................. 8-7

xx Huawei Technologies Proprietary Issue 02 (2007-01-10)


Table 8-5 Data plan for conguring a super VLAN .................................................................................. 8-9Table 8-6 Related operations for creating a VLAN ................................................................................. 8-12Table 8-7 Related operation for conguring the VLAN attribute .............................................................. 8-13Table 8-8 Related operation for adding an upstream port to a VLAN ........................................................ 8-15Table 8-9 Related operations for adding a service port to a VLAN ........................................................... 8-16Table 8-10 Related operations for adding service ports in batches............................................................. 8-18Table 8-11 Related operation for setting the description of a service port................................................... 8-19Table 9-1 Data plan for conguring DHCP standard mode ........................................................................ 9-3Table 9-2 Data plan for conguring DHCP option60 mode........................................................................ 9-5Table 9-3 Data plan for conguring MAC address segment mode .............................................................. 9-8Table 9-4 Related operation for creating a DHCP server group ................................................................ 9-11Table 9-5 Related operations for setting working mode of a DHCP server ................................................. 9-11Table 9-6 Related operations for binding a DHCP server group with a VLAN interface............................... 9-13Table 9-7 Related operations for creating a DHCP option60 domain ......................................................... 9-14Table 9-8 Related operations for binding a DHCP server group with a DHCP option60 domain .................... 9-14Table 9-9 Related operation for conguring the gateway of a DHCP option60 domain ................................ 9-15Table 9-10 Related operations for creating a DHCP MAC address segment ............................................... 9-16Table 9-11 Related operation for setting the range of a DHCP MAC address segment ................................. 9-17Table 9-12 Related operations for binding a DHCP server group with a DHCP MAC address segment .......... 9-18Table 9-13 Related operations for conguring the gateway of a DHCP MAC address segment ..................... 9-19Table 10-1 Data plan for conguring the ARP proxy .............................................................................. 10-3Table 10-2 Related operations for adding a static ARP entry.................................................................... 10-5Table 10-3 Related operation for enabling the ARP proxy ....................................................................... 10-6Table 11-1 Data plan for conguring the static route at the user side......................................................... 11-3Table 11-2 Data plan for conguring RIP .............................................................................................. 11-5Table 11-3 Data plan for conguring OSPF ........................................................................................... 11-8Table 11-4 Data plan for conguring the route policy ............................................................................ 11-11Table 11-5 Related operation for adding a static route............................................................................11-14Table 11-6 Related operation for enabling RIP process...........................................................................11-16Table 11-7 Related operation for setting the RIP version ........................................................................11-17Table 11-8 Related operation for conguring zero eld check for RIP-1 packets........................................11-18Table 11-9 Related operation for setting the cost of the default route .......................................................11-19Table 11-10 Related operation for enabling route summarization .............................................................11-20Table 11-11 Related operation for specifying default routing metric .........................................................11-20Table 11-12 Related operation for importing routes of other protocols......................................................11-21Table 11-13 Related operation for disabling receiving host routes............................................................11-22Table 11-14 Related operation for conguring the RIP preference ...........................................................11-23Table 11-15 Related operation for conguring the route ltering policy....................................................11-23Table 11-16 Related operation for verifying the source IP address of a RIP route update.............................11-24Table 11-17 Related operation for disabling RIP packet transmission on an interface..................................11-26Table 11-18 Related operation for conguring the IP Address of a Peer router ..........................................11-27Table 11-19 Related operation for conguring a summary route IP address...............................................11-28

Issue 02 (2007-01-10) Huawei Technologies Proprietary xxi


Conguration Guide

Table 11-20 Related operation for enabling an interface to receive and transmit RIP packets .......................11-28Table 11-21 Related operation for enabling the split horizon function ......................................................11-29Table 11-22 Related operation for enabling the poison reverse function....................................................11-30Table 11-23 Related operation for conguring the RIP-2 authentication mode ...........................................11-30Table 11-24 Related operation for conguring the additional metric of a route ..........................................11-31Table 11-25 Related operation for conguring the RIP timer...................................................................11-32Table 11-26 Related operation for enabling OSPF .................................................................................11-34Table 11-27 Related operation for setting an OSPF router ID..................................................................11-35Table 11-28 Related operation for entering OSPF area cong mode.........................................................11-36Table 11-29 Related operation for conguring subnets for an area ...........................................................11-36Table 11-30 Related operations for conguring a Stub area.....................................................................11-37Table 11-31 Related operation for conguring an NBMA adjacent router .................................................11-38Table 11-32 Related operation for setting OSPF preference ....................................................................11-38Table 11-33 Related operation for prohibiting an interface from transmitting OSPF packets ........................11-39Table 11-34 Related operation for conguring the maximum OSPF route count.........................................11-40Table 11-35 Related operation for enabling the OSPF logging function ....................................................11-40Table 11-36 Description of the network types .......................................................................................11-41Table 11-37 Related operation for conguring the network type on an OSPF interface................................11-41Table 11-38 Related operation for conguring OSPF cost.......................................................................11-42Table 11-39 Related operation for conguring OSPF packet authentication...............................................11-42Table 11-40 Related operation for conguring the MTU of the DD packet................................................11-43Table 11-41 Related operation for setting the interval for sending Hello packets ........................................11-44Table 11-42 Related operation for setting the dead time between adjacent routers ......................................11-45Table 11-43 Related operation for conguring OSPF packet authentication...............................................11-45Table 11-44 Related operation for setting the Hello packet poll interval....................................................11-46Table 11-45 Related operation for setting the LSA transmit delay............................................................11-47Table 11-46 Related operation for setting LSA retransmit interval between adjacent routers ........................11-47Table 11-47 Related operation for setting the SPF calculation interval for OSPF........................................11-48Table 11-48 Related operation for conguring route summarization between areas.....................................11-49Table 11-49 Related operation for conguring summarization of routes imported by OSPF .........................11-50Table 11-50 Related operation for importing routes from other protocols into OSPF...................................11-50Table 11-51 Related operations for setting parameters for OSPF to import external routes...........................11-51Table 11-52 Related operation for conguring route ltering...................................................................11-52Table 11-53 Commands for showing and debugging OSPF.....................................................................11-52Table 11-54 Related operation for conguring an address prex list.........................................................11-54Table 11-55 Parameters for dening a route policy ................................................................................11-55Table 11-56 Related operation for conguring a route policy ..................................................................11-55Table 11-57 Related operation for dening the route policy matching rule ................................................11-56Table 11-58 Related operation for modifying the attributes of the ltered route .........................................11-57Table 12-1 Related operations for enabling the MSTP function ................................................................ 12-3Table 12-2 Related operation for setting the working mode of MSTP........................................................ 12-5

xxii Huawei Technologies Proprietary Issue 02 (2007-01-10)


Table 12-3 Related operation for setting the MD5-Key for the MD5 encryption algorithm conguredon the MST region............................................................................................................. 12-6

Table 12-4 Related operations for conguring the MST region name ........................................................ 12-7Table 12-5 Related operations for mapping the specied VLAN to the specied MSTP instance................... 12-8Table 12-6 Related operations for mapping all VLANs to the MSTP instances........................................... 12-9Table 12-7 Related operations for setting the MSTP revision level of the device........................................12-10Table 12-8 Related operation for activating the conguration of the MST region .......................................12-12Table 12-9 Related operation for specifying the device as a root bridge or a backup root bridge ...................12-13Table 12-10 Related operations for setting the priority of the device in the specied spanning tree instance....12-14Table 12-11 Related operation for setting the maximum hop of the MST region ........................................12-15Table 12-12 Related operation for setting the diameter of the switching fabric ..........................................12-16Table 12-13 Related operation for setting the calculation standard for the path cost....................................12-17Table 12-14 Related operations for setting the Forward Delay of the specied network bridge.....................12-18Table 12-15 Related operations for setting the Hello Time of the specied network bridge..........................12-20Table 12-16 Related operations for setting the Max Age of the specied network bridge.............................12-21Table 12-17 Related operation for setting the timeout time factor of the specied network bridge.................12-22Table 12-18 Related operations for setting the maximum transmission rate of the specied port...................12-23Table 12-19 Related operation for setting the specied port as an edge port ..............................................12-24Table 12-20 Related operation for setting the path cost of the port in the specied spanning tree instance. .....12-25Table 12-21 Related operation for setting the priority of the specied port................................................12-26Table 12-22 Related operation for setting the point-to-point link connection of the specied port .................12-27Table 12-23 Related operation for enabling the BPDU protection function of the device .............................12-29Table 12-24 Related operations for enabling the loop protection function of the device...............................12-30Table 12-25 Related operations for enabling the root protection function of the device ...............................12-31Table 13-1 Data plan for conguring NTP broadcast mode...................................................................... 13-3Table 13-2 Data plan for conguring NTP multicast mode ...................................................................... 13-5Table 13-3 Data plan for conguring NTP server/client mode .................................................................. 13-8Table 13-4 Data plan for conguring NTP peer mode ............................................................................13-10Table 13-5 Related operations for conguring NTP ID authentication ......................................................13-14Table 13-6 Related operation for conguring the NTP master clock.........................................................13-15Table 13-7 Related operations for conguring NTP broadcast server mode ...............................................13-16Table 13-8 Related operations for conguring NTP broadcast client mode................................................13-17Table 13-9 Related operations for conguring the NTP multicast mode....................................................13-19Table 13-10 Related operations for conguring NTP server/client mode...................................................13-20Table 13-11 Related operation for conguring NTP peer mode ...............................................................13-21Table 13-12 Related operations for conguring the authority of access to a local device’s NTP service .......13-22Table 13-13 Related operations for conguring an interface for transmitting or receiving NTP packets .........13-23Table 14-1 Related operation for adding a static MAC address ................................................................ 14-3Table 14-2 Related operation for conguring MAC address ltering ......................................................... 14-6Table 15-1 Related operation for conguring the synwait timer................................................................ 15-3Table 15-2 Related operation for conguring the nwait timer ................................................................. 15-3Table 15-3 Related operation for conguring the socket buffer................................................................. 15-4

Issue 02 (2007-01-10) Huawei Technologies Proprietary xxiii


Conguration Guide

Table 15-4 Related operations for enabling the IP packets debugging........................................................ 15-4Table 15-5 Related operations for enabling the IP packets debugging........................................................ 15-5Table 16-1 ACL types......................................................................................................................... 16-3Table 16-2 Data plan for conguring the basic ACL............................................................................... 16-5Table 16-3 Data plan for conguring the advanced ACL......................................................................... 16-7Table 16-4 Data plan for conguring the layer 2 ACL ............................................................................ 16-8Table 16-5 Data plan for conguring the customized ACL .....................................................................16-10Table 16-6 ACL number range............................................................................................................16-11Table 16-7 Related operations for creating an ACL ...............................................................................16-12Table 16-8 Related operation for setting the step ...................................................................................16-13Table 16-9 Related operation for creating a basic ACL rule ....................................................................16-14Table 16-10 Related operation for creating an advanced ACL rule...........................................................16-15Table 16-11 Related operation for creating a layer 2 ACL rule................................................................16-16Table 16-12 Description of letters and their offset values .......................................................................16-16Table 16-13 Related operation for creating a used dened ACL rule ........................................................16-17Table 16-14 Related operation for activating the ACL of a port...............................................................16-18Table 16-15 Related operation for conguring the trafc entry................................................................16-21Table 16-16 Related operation for enabling trafc limit..........................................................................16-22Table 16-17 Related operation for adding a priority tag to packets...........................................................16-23Table 16-18 Related operation for enabling trafc mirroring ...................................................................16-24Table 16-19 Related operation for redirecting trafc ..............................................................................16-25Table 16-20 Related operations for enabling trafc statistics ...................................................................16-25Table 16-21 Related operation for enabling line rate limitation on a port ..................................................16-26Table 16-22 Related operation for conguring queue scheduling .............................................................16-27Table 17-1 Related operation for setting the Ethernet encapsulation type ................................................... 17-4Table 17-2 Related operations for enabling the DHCP option82 ............................................................... 17-5Table 17-3 Related operation for binding the IP address.......................................................................... 17-7Table 18-1 Related operations for enabling anti DoS attack ..................................................................... 18-4Table 18-2 Related operations for enabling anti MAC spoong................................................................ 18-4Table 18-3 Related operations for enabling anti MAC spoong................................................................ 18-5Table 18-4 Related operation for enabling the function of anti IP attack .................................................... 18-6Table 18-5 Related operation for enabling the function of anti ICMP attack............................................... 18-7Table 18-6 Related operation for enabling the function of source route ltering.......................................... 18-7Table 18-7 Related operation for conguring MAC address ltering ......................................................... 18-8Table 18-8 Related operations for conguring the rewall black list function ............................................18-10Table 18-9 Related operation for conguring the rewall function...........................................................18-11Table 18-10 Related operations for conguring an accessible address segment ..........................................18-12Table 18-11 Related operations for conguring the inaccessible address segment.......................................18-13Table 19-1 Encapsulation mode mapping between the MA5600 and the modem......................................... 19-3Table 19-2 Data plan for conguring the ADSL2+ IPoA service .............................................................. 19-4Table 19-3 Data plan for conguring the ADSL2+ PPPoA service............................................................ 19-7Table 19-4 Data plan for conguring the ADSL2+ PPPoE/IPoE service ...................................................19-11

xxiv Huawei Technologies Proprietary Issue 02 (2007-01-10)


Table 19-5 Parameters of an ADSL2+ line prole .................................................................................19-17Table 19-6 Related operations for adding an ADSL2+ line prole ...........................................................19-19Table 19-7 Related operations for adding an extended ADSL2+ line prole..............................................19-21Table 19-8 Parameters of an ADSL2+ alarm prole...............................................................................19-23Table 19-9 Related operations for adding an ADSL2+ alarm prole ........................................................19-24Table 19-10 Related operations for activating an ADSL2+ port...............................................................19-26Table 19-11 Related operations for enabling IPoA protocol conversion ....................................................19-28Table 19-12 Related operation for setting the aging time of IPoA forwarding entry ....................................19-29Table 19-13 Related operations for setting the default gateway of the IPoA user........................................19-29Table 19-14 Related operations for enabling PPPoA protocol conversion..................................................19-32Table 19-15 Related operation for conguring the encapsulation type of the PPPoA user ............................19-33Table 19-16 Related operation for enabling PPPoA/PPPoE MRU negotiation............................................19-34Table 19-17 Related operations for querying an ADSL2+ port ................................................................19-35Table 20-1 Encapsulation type mapping between the MA5600 and the Modem .......................................... 20-2Table 20-2 Data plan for conguring the SHDSL IPoA service ................................................................ 20-3Table 20-3 Data plan for conguring the SHDSL PPPoA service ............................................................. 20-7Table 20-4 Data plan for the SHDSL IPoE/PPPoE service......................................................................20-12Table 20-5 Parameters of an SHDSL line prole ...................................................................................20-18Table 20-6 Parameters of an SHDSL alarm prole ................................................................................20-21Table 20-7 Related operations for adding an SHDSL alarm prole ..........................................................20-21Table 20-8 Related operations for activating an SHDSL port ..................................................................20-23Table 21-1 Data plan for conguring the VDSL2 IPoA service ................................................................ 21-5Table 21-2 Data plan for conguring the VDSL2 PPPoA service ............................................................21-11Table 21-3 Data plan for owchart for conguring the VDSL2 PPPoE/IPoE service ..................................21-17Table 21-4 Parameters of a VDSL2 line prole.....................................................................................21-24Table 21-5 Related operations for adding a VDSL2 line prole...............................................................21-26Table 21-6 Parameters of a VDSL2 channel prole ...............................................................................21-29Table 21-7 Related operations for adding a VDSL2 channel prole .........................................................21-30Table 21-8 Parameters of a VDSL2 line template ..................................................................................21-31Table 21-9 Related operations for conguring a VDSL2 line template .....................................................21-32Table 21-10 Parameters of a VDSL2 line alarm prole ..........................................................................21-34Table 21-11 Related operations for adding a VDSL2 line alarm prole ....................................................21-35Table 21-12 Parameters of VDSL2 channel alarm prole .......................................................................21-37Table 21-13 Related operations for adding a VDSL2 channel alarm prole...............................................21-37Table 21-14 Parameters for conguring a VDSL2 alarm template............................................................21-38Table 21-15 Related operations for add a VDSL2 alarm template ............................................................21-39Table 21-16 Related operations for activating a VDSL2 port ..................................................................21-41Table 21-17 Related operations for querying a VDSL2 port....................................................................21-42Table 22-1 Data plan for conguring the upstream link protection ............................................................ 22-4Table 22-2 Related operations for conguring the protection group .......................................................... 22-5Table 23-1 Ethernet ports of the MA5600 ............................................................................................. 23-2Table 23-2 Related operation for enabling the ow control of an Ethernet port ..........................................23-10

Issue 02 (2007-01-10) Huawei Technologies Proprietary xxv


Conguration Guide

Table 23-3 Related operations for enabling trafc suppression ................................................................23-11Table 23-4 Related operation for enabling the Ethernet port aggregation ..................................................23-12Table 23-5 Related operation for enabling the mirroring function of an Ethernet port .................................23-13Table 23-6 Related operation for adding an Ethernet Port to a VLAN ......................................................23-14Table 24-1 Data plan for conguring the ATM-DSLAM access................................................................ 24-3Table 24-2 Related operation for setting the OPTIC port mode ................................................................ 24-6Table 24-3 Related operation for setting the OPTIC port type .................................................................. 24-7Table 24-4 Parameters of an IMA group ............................................................................................... 24-9Table 24-5 Related operations for adding an IMA group ......................................................................... 24-9Table 24-6 Related operations for setting the IMA group mode...............................................................24-11Table 24-7 Related operations for adding an IMA link...........................................................................24-12Table 24-8 Related operations for setting the line type of an E3 port........................................................24-13Table 24-9 Related operation for setting the E3 port type .......................................................................24-14Table 24-10 Related operations for setting the Tx clock of an E3 port......................................................24-14Table 25-1 Data plan for conguring the MPLS based on binding the PVC with the PW prole.................... 25-3Table 25-2 Data plan for conguring the MPLS based on binding the VLAN with the PW prole ................. 25-6Table 25-3 Related operations for conguring the LSR ID .....................................................................25-10Table 25-4 Related operations for enabling MPLS.................................................................................25-11Table 25-5 Related commands for conguring the static LSP..................................................................25-11Table 25-6 Related operations for conguring ingress LSR of the static LSP.............................................25-12Table 25-7 Related operations for conguring egress LSR of the static LSP..............................................25-13Table 25-8 Related operations for conguring LSP CAR........................................................................25-13Table 25-9 Related operations for enabling the MPLS LDP ....................................................................25-15Table 25-10 Related operations for conguring parameters of LDP basic discovery ...................................25-17Table 25-11 Related operations for conguring the parameters of the LDP extended discovery ....................25-18Table 25-12 Related operations for conguring parameters of the LDP basic session..................................25-19Table 25-13 Related operations for conguring parameters of the LDP extended session ............................25-19Table 25-14 Related operations for conguring the LDP LSP triggering policy .........................................25-20Table 25-15 Related operations for conguring the LDP label retention mode...........................................25-21Table 25-16 Related operations for conguring the LDP loopback detection .............................................25-22Table 25-17 Related operations for conguring the LDP MD5 authentication............................................25-24Table 25-18 Related operation for enabling the LDP MD5 MTU signaling function ...................................25-25Table 25-19 Related operation for enabling the MPLS L2VPN ...............................................................25-26Table 25-20 Related operations for conguring a PW template ...............................................................25-26Table 25-21 Related operations for binding a PVC with a PW template....................................................25-27Table 25-22 Related operations for binding a VLAN with a PW template.................................................25-28Table 26-1 Data plan for establishing an MPLS TE tunnel by using RSVP-TE........................................... 26-3Table 26-2 Related operation for enabling MPLS TE feature ................................................................... 26-7Table 26-3 Related operation for creating an MPLS TE tunnel................................................................. 26-8Table 26-4 Related operations for conguring bandwidth of links............................................................. 26-9Table 26-5 Related operations for enabling OSPF TE ............................................................................26-10Table 26-6 Related operations for conguring the MPLS TE explicit path ................................................26-11

xxvi Huawei Technologies Proprietary Issue 02 (2007-01-10)


Table 26-7 Related operations for conguring constraints for an MPLS TE tunnel .....................................26-12Table 26-8 Related operations for conguring CSPF of an MPLS............................................................26-13Table 26-9 Related operation for establishing an MPLS TE tunnel by using RSVP-TE ...............................26-14Table 26-10 Related operations for conguring RSVP Hello extension.....................................................26-16Table 26-11 Related operation for conguring the resource reservation style .............................................26-17Table 26-12 Related operations for conguring RSVP timers..................................................................26-19Table 26-13 Related operations for conguring RSVP message transmission reliability .............................26-20Table 26-14 Related operation for enabling RSVP-TE Srefresh ...............................................................26-21Table 26-15 Related operation for enabling RSVP-TE reservation conrmation mechanism ........................26-22Table 26-16 Related operation for enabling RSVP authentication ............................................................26-23Table 26-17 Related operation for conguring tie-breaking of CSPF........................................................26-25Table 26-18 Related operation for conguring route pining ....................................................................26-26Table 26-19 Related operations for conguring administrative group and afnity property ..........................26-27Table 26-20 Related operation for conguring reoptimization of CR-LSP.................................................26-28Table 26-21 Related operation for conguring loop detection..................................................................26-29Table 26-22 Related operation for conguring route record and label record .............................................26-30Table 26-23 Related operations for conguring parameters of tunnel establishment....................................26-31Table 26-24 Related operation for conguring tunnel priority .................................................................26-32Table 27-1 Data plan for conguring the multi-ISP wholesale access ........................................................ 27-3Table 28-1 Data plan for conguring the leased line access ..................................................................... 28-3Table 28-2 Related operation for enabling transparent transmission of BPDUs ........................................... 28-5Table 29-1 Data plan for conguring IGMP proxy ................................................................................. 29-3Table 29-2 Data plan for conguring IGMP snooping............................................................................. 29-6Table 29-3 Data plan for conguring the subtended multicast service........................................................ 29-9Table 29-4 Data plan for the sample network of the multicast service in MSTP networking.........................29-14Table 29-5 Related operations for conguring the IGMP upstream port....................................................29-21Table 29-6 Related operation for conguring a subtending port ...............................................................29-22Table 29-7 Related operation for conguring a program for a static subtending port...................................29-23Table 29-8 Related operation for enabling the IGMP proxy authorization .................................................29-24Table 29-9 Related operation for setting the robustness variable ..............................................................29-25Table 29-10 Related operation for setting the general query interval ........................................................29-26Table 29-11 Related operation for setting the maximum response time to the general query.........................29-27Table 29-12 Related operation for setting the number of specic queries ..................................................29-28Table 29-13 Related operation for setting the specic query interval ........................................................29-29Table 29-14 Related operation for setting the maximum response time for the specic query.......................29-30Table 29-15 Related operation for setting the unsolicited report interval ...................................................29-31Table 29-16 Related operation for setting the TTL for a V1 router ..........................................................29-32Table 29-17 Related operation for setting the preview recognition time ....................................................29-33Table 29-18 Related operation for enabling the user action report function ...............................................29-34Table 29-19 Related operation for enabling the proxy of the IGMP report packet.......................................29-35Table 29-20 Related operation for enabling the proxy of the IGMP leave packet .......................................29-36Table 29-21 Related operations for adding a program ............................................................................29-39

Issue 02 (2007-01-10) Huawei Technologies Proprietary xxvii


Conguration Guide

Table 29-22 Related operation for enabling the bandwidth management function.......................................29-42Table 29-23 Related operation for modifying an authority prole ............................................................29-45Table 29-24 Related operation for adding a BTV user............................................................................29-47Table 29-25 Related operations for modifying the attributes of a user ......................................................29-48Table 29-26 Related operation for blocking a BTV user .........................................................................29-49Table 29-27 Related operation for binding a user with an authority prole................................................29-50Table 29-28 Related operation for enabling the function of monitoring BTV users.....................................29-51Table 29-29 Related operation for enabling the preview function.............................................................29-52Table 29-30 Related operation for setting the preview auto reset time ......................................................29-54Table 29-31 Related operations for enabling the logging function............................................................29-56Table 29-32 Related operation for setting the logging interval.................................................................29-57Table 29-33 Related operations for conguring log reporting ..................................................................29-57Table 30-1 Modes to provide the triple play service................................................................................ 30-2Table 30-2 Data plan for conguring the triple play service -multiple PVCs for multiple services.................. 30-3Table 30-3 Data plan for conguring the triple play service - single PVC for multiple services ..................... 30-7Table 30-4 Data plan for conguring the triple play service by means of single PVC for multiple services .....30-11Table 31-1 Data plan for conguring a single ISU.................................................................................. 31-3Table 31-2 Data plan for conguring dual ISUs ..................................................................................... 31-5Table 32-1 Data plan for conguring Ethernet OAM .............................................................................. 32-4Table 32-2 Related operation for creating an MD................................................................................... 32-7Table 32-3 Related operations for creating an MA.................................................................................. 32-8Table 32-4 Related operation for creating an MEP ................................................................................. 32-9Table 32-5 Related operation for creating an RMEP ..............................................................................32-10Table 32-6 Related operation for enabling the CFM globally ..................................................................32-10Table 32-7 Related operation for enabling CFM alarm globally...............................................................32-11Table 32-8 Related operation for enabling the administration function of an MEP......................................32-12Table 32-9 Related operation for enabling the CC transmission of an MEP...............................................32-13Table 32-10 Related operation for enabling detection function of the RMEP.............................................32-14Table 32-11 Related operation for conguring the priorities for transmitting CCMs/LTMs of an MEP...........32-14Table 32-12 Related operation for conguring the interval for an MA to transmit a CC ..............................32-15Table 32-13 Related operations for conguring loop detection function....................................................32-17Table 32-14 Related operations for conguring Linktrace function ..........................................................32-18Table 33-1 Data plan for detection of MPLS OAM for static LSP connectivity .......................................... 33-3Table 33-2 Data plan for the MPLS OAM protection switchover.............................................................. 33-7Table 33-3 Related operations for conguring the MPLS OAM function of the ingress...............................33-12Table 33-4 Related operations for conguring the MPLS OAM function of the egress................................33-13Table 33-5 Related operations for conguring the tunnel protection group ................................................33-14Table 33-6 Related operation for switching over the protection group manually.........................................33-14Table 33-7 Related operations for enabling the protection group to output the debugging information ...........33-15Table 34-1 Correspondence between the POWER4845 DIP switch and the slave node number ..................... 34-3Table 34-2 Correspondence between the H801ESC DIP switch and the slave node number .......................... 34-3Table 34-3 Correspondence between the FAN DIP switch and the slave node number ................................. 34-3

xxviii Huawei Technologies Proprietary Issue 02 (2007-01-10)


Table 34-4 Data plan for EMU conguration ......................................................................................... 34-4Table 34-5 Related operations for adding an EMU ................................................................................. 34-7Table 34-6 Commands for conguring the H303ESC/H304ESC EMU. ..................................................... 34-8Table 34-7 Related operations for conguring the H303ESC/H304ESC EMU............................................ 34-9Table 34-8 Commands for conguring an H561ESC EMU.....................................................................34-10Table 34-9 Related operations for conguring an H561ESC EMU...........................................................34-10Table 34-10 Commands for conguring a POWER4845 EMU ................................................................34-11Table 34-11 Related operations for conguring a POWER4845 EMU ......................................................34-12Table 34-12 Related operations for conguring the FAN alarm report ......................................................34-13Table 34-13 Related operations for setting the fan speed adjustment mode................................................34-14Table 34-14 Related operations for setting the FAN speed ......................................................................34-15Table 35-1 Data plan for the sample MSTP network............................................................................... 35-3Table 36-1 Data plan for the sample subtended network.......................................................................... 36-3

Issue 02 (2007-01-10) Huawei Technologies Proprietary xxix

SmartAX MA5600 Multi-service Access ModuleConguration Guide About This Document

About This Document

PurposeThis document describes conguration of various services supported by the MA5600. Thedetails of conguration cover the following aspects:n Purposen Networkingn Data plann Prerequisite(s)n Noten Conguration owchartn Conguration proceduren ResultThis document helps users to know the conguration of various services on the MA5600.

Related VersionsThe following table lists the product versions related to this document.

Product Name VersionMA5600 V300R003N2000 BMS V200R010

Intended AudienceThe intended audience of this document is:n Commissioning engineersn Technical support engineersn Data conguration engineers

OrganizationThis document consists of the following chapters and is organized as follows.

Issue 02 (2007-01-10) Huawei Technologies Proprietary 1

About This DocumentSmartAX MA5600 Multi-service Access Module

Conguration Guide

Chapter… Describes…1 Maintenance TerminalConguration

How to congure the maintenance terminal

2 Getting Started With CLI The basic CLI operations on the MA56003 Network ManagementConguration

How to congure the network management system

4 Log Host Conguration How to congure the log host5 User Management User levels and user management operations6 Device Management How to congure the hardware of the MA56007 Remote User AuthenticationConguration

How to congure the remote users authentication

8 VLAN Conguration How to congure various VLANs, including standardVLAN, smart VLAN, MUX VLAN and super VLAN

9 DHCP Relay Conguration How to congure DHCP relay to obtain IP addressesdynamically

10 ARP & ARP ProxyConguration

How to congure ARP and ARP proxy

11 Routing ProtocolConguration

How to congure the static and dynamic routing protocolssupported by the MA5600

12 MSTP Conguration How to congure MSTP13 NTP Conguration How to congure the four NTP modes14 MAC AddressConguration

How to congure MAC addresses and the MAC addresspool

15 TCP/IP ConnectionConguration

How to congure TCP and IP connections

16 ACL & QoS Conguration ACL and QoS and how to congure them on the MA560017 User SecurityConguration

How to congure user security on the MA5600

18 System SecurityConguration

How to congure system security on the MA5600

19 ADSL2+ ServiceConguration

The ADSL2+ technology and how to congure theADSL2+ access service on the MA5600

20 SHDSL ServiceConguration

The SHDSL technology and how to congure the SHDSLaccess service on the MA5600

21 VDSL2 ServiceConguration

The VDSL2 technology and how to congure the VDSL2access service on the MA5600

22 Protection Congurationfor Upstream Link

The service protection on the upstream port of the MA5600

23 Device SubtendingConguration

The Ethernet technology and how to subtend MA5600devices

25 MPLS AccessConguration

MPLS applications to the MA5600.

26 MPLS RSVP-TEConguration

MPLS RSVP-TE applications to the MA5600

27 Multi-ISP WholesaleAccess Conguration

How to congure the wholesale service on the MA5600

2 Huawei Technologies Proprietary Issue 02 (2007-01-10)


Chapter… Describes…28 Leased Line AccessConguration

How to congure the private line service on the MA5600

29 Multicast ServiceConguration

How to congure the multicast service on the MA5600

30 Triple Play ServiceConguration

How to congure the triple play service on the MA5600

31 Built-in ISU ServiceConguration

How to congure the built-in ISU on the MA5600

32 Ethernet OAMConguration

Applications of Ethernet OAM to the MA5600

33MPLS OAMConguration Applications of MPLS OAM to the MA560034 Environment MonitoringConguration

The EMUs supported by the MA5600 and how to congurethem

35 MSTP NetworkingExample

The conguration example of MSTP networking

36 Subtending NetworkingExample

The conguration example of subtending networking

A Acronyms andAbbreviations

Acronyms and abbreviations used in the document

Conventions

Symbol ConventionsThe symbols that may be found in this document are dened as follows.

Symbol DescriptionIndicates a hazard with a high level of risk which, if notavoided, will result in death or serious injury.

Indicates a hazard with a medium or low level of risk which, ifnot avoided, could result in minor or moderate injury.

Indicates a potentially hazardous situation that, if not avoided,could cause equipment damage, data loss, and performancedegradation, or unexpected results.

Indicates a tip that may help you solve a problem or saveyou time.Provides additional information to emphasize or supplementimportant points of the main text.

General ConventionsConvention DescriptionTimes New Roman Normal paragraphs are in Times New Roman.


About This DocumentSmartAX MA5600 Multi-service Access Module

Conguration Guide

Convention DescriptionBoldface Names of les, directories, folders, and users are in boldface.

For example, log in as user root.Italic Book titles are in italics.Courier New Terminal display is in Courier New.

Command ConventionsConvention DescriptionBoldface The keywords of a command line are in boldface.Italic Command arguments are in italic.[ ] Items (keywords or arguments) in square brackets [ ] are

optional.{ x | y | ... } Alternative items are grouped in braces and separated by

vertical bars. One is selected.[ x | y | ... ] Optional alternative items are grouped in square brackets and

separated by vertical bars. One or none is selected.{ x | y | ... } * Alternative items are grouped in braces and separated by

vertical bars. A minimum of one or a maximum of all canbe selected.

GUI ConventionsConvention DescriptionBoldface Buttons, menus, parameters, tabs, window, and dialog titles

are in Boldface. For example, click OK.> Multi-level menus are in boldface and separated by the“>”

signs. For example, choose File > Create > Folder.

Keyboard OperationFormat DescriptionKey Press the key. For example, press Enter and press Tab.Key 1+Key 2 Press the keys concurrently. For example, pressing

Ctrl+Alt+A means the three keys should be pressedconcurrently.

Key 1, Key 2 Press the keys in turn. For example, pressing Alt, A means thetwo keys should be pressed in turn.

Mouse OperationAction DescriptionClick Select and release the primary mouse button without moving

the pointer.Double-click Press the primary mouse button twice continuously and

quickly without moving the pointer.Drag Press and hold the primary mouse button and move the pointer

to a certain position.

4 Huawei Technologies Proprietary Issue 02 (2007-01-10)


Update HistoryUpdates between document versions are cumulative. Therefore, the latest document versioncontains all updates made to previous versions.

Updates in Issue 02 (2007-01-10)This is the second release.

The following chapters are modied or added:n MSTP Congurationn VDSL2 Service Congurationn Protection Conguration for Upstream Linkn MPLS RSVP-TE Congurationn MPLS OAM Congurationn Ethernet OAM Conguration

Updates in Issue 01 (2006-10-25)This is the rst release.


SmartAX MA5600 Multi-service Access ModuleConguration Guide 1 Maintenance Terminal Conguration

1 Maintenance Terminal Conguration

About This ChapterThe following lists the contents of this chapter.

1.1 OverviewThis section describes the different maintenance modes of the MA5600 through themaintenance terminal and features of the different maintenance modes.1.2 Conguring the Terminal Through the Local Serial PortThis operation enables you to log in to and congure the MA5600 using the HyperTerminalof the Windows operating system.1.3 Conguring the Terminal Through the Remote Serial PortThis operation enables you to log in to and congure the MA5600 through the remote serialport.1.4 Conguring the Terminal Through the Outband Management ChannelThis operation enables you to connect the maintenance terminal to the MA5600 over a localarea network (LAN) or a wide area network (WAN), and congure the MA5600 throughthe outband management channel.1.5 Conguring the Terminal Through the Inband Management ChannelThis operation enables you to congure the MA5600 through the inband management channel.1.6 Conguring the Terminal Through SSHThis operation enables you to connect the maintenance terminal to the MA5600 over a LAN ora WAN and congure the MA5600 through SSH.

Issue 02 (2007-01-10) Huawei Technologies Proprietary 1-1

1 Maintenance Terminal CongurationSmartAX MA5600 Multi-service Access Module

Conguration Guide

1.1 OverviewThis section describes the different maintenance modes of the MA5600 through themaintenance terminal and features of the different maintenance modes.

You can maintain the SmartAX MA5600 Multi-service Access Module (the MA5600 for short)through a maintenance terminal in command line interface (CLI) mode. The conguration ofa maintenance terminal involves:n 1.2 Conguring the Terminal Through the Local Serial Portn 1.3 Conguring the Terminal Through the Remote Serial Portn 1.4 Conguring the Terminal Through the Outband Management Channeln 1.5 Conguring the Terminal Through the Inband Management Channeln 1.6 Conguring the Terminal Through SSHTable 1-1 lists the features of the different maintenance modes.

Table 1-1 Features of the different maintenance modes

Maintenance mode Description FeatureLocal serial port Uses the HyperTerminal

of the operating system forconguration.

No network management softwareis needed.

Remote serial port Uses the HyperTerminalof the operating system forconguration.

It connects modems at both theMA5600 side and the maintenanceterminal side.

Inband managementchannel

Uses the service channelof the MA5600 to managethe network device.

n Advantages: It adopts exiblenetworking, without needingextra networking device, thussaving networking cost

n Disadvantages: Themaintenance work cannotbe carried out if the servicechannel fails.

Outband managementchannel

Uses the maintenancenetwork port (ETH) of thecontrol board (SCU) of theMA5600 to manage thesystem.

n Advantages: It providesreliable device managementchannel. The fault can belocated in time even if themanaged device fails.

n Disadvantage: An extranetwork device is required toset up the maintenance channel.

SSH mode Uses the service channel ofthe MA5600, or the ETHport of the SCU board tomanage the system.

Secure Shell (SSH) ensuresnetwork security by theauthentication, encryption andidentication functions. Whena user telnets to the MA5600from an insecure network, SSHprotects the MA5600 frommalicious events such as IPaddress spoong and clear textpassword interception.

1-2 Huawei Technologies Proprietary Issue 02 (2007-01-10)


1.2 Conguring the Terminal Through the Local Serial PortThis operation enables you to log in to and congure the MA5600 using the HyperTerminalof the Windows operating system.

NetworkingFigure 1-1 shows the networking for conguring the MA5600 through the local serial port.

Figure 1-1 Networking for conguring the MA5600 through the local serial port

Conguration FlowchartFigure 1-2 shows the owchart for conguring the MA5600 through the local serial port.

Figure 1-2 Flowchart for conguring the MA5600 through the local serial port

Procedure

Step 1 Connect the serial port cable.



Conguration Guide

Use a RS-232 serial port cable to connect the serial port of the PC to the CON port of theSCU board, as shown in Figure 1-1.

Step 2 Start the HyperTerminal.1. Set up a connection.

Choose Start > Programs > Accessories > Communication > HyperTerminal tostart the HyperTerminal and set up a serial port connection. Input the name that is tobe connected to the MA5600. Click OK.

2. Congure the serial port.

Select the standard character terminal or PC terminal serial port that is actually connectedto the MA5600 (assuming it to be serial COM2). Click OK.

Step 3 Set parameters of the terminal.

In Step 2, click OK. Then, set the serial port parameters in the dialog box as shown in Figure1-3. The parameters are set as follows:n Bits per second: 9600n Data bits: 8n Parity: Nonen Stop bits: 1n Flow control: None

NOTE

n When setting the baud rate, make sure the baud rate of the HyperTerminal is consistent with that ofthe serial port. By default, the baud rate of the serial port is 9600 bit/s.

n There may be illegible characters in the input information after you log in to the system. This isusually due to baud rate inconsistency between the HyperTerminal and the system. In this case, use adifferent baud rate to log in to the system. The system supports the baud rates of 9600 bit/s, 19200bit/s, 38400 bit/s, 57600 bit/s and 115200 bit/s.

Figure 1-3 Setting parameters of the terminal

Click OK.

Step 4 Dene the terminal emulation type.



Select File > Properties in the HyperTerminal interface. Click the Settings tab. Select VT100or Auto Detection as the type of terminal emulation, as shown in Figure 1-4.

Figure 1-4 Setting the terminal emulation type

Step 5 Set ASCII code.

Click ASCII Setup. Set the line delay and character delay as 200 ms, as shown in Figure 1-5.

NOTE

When you paste texts to the HyperTerminal, character delay controls the character transmit speed, andline delay controls the interval of sending every line. A too short delay leads to the loss of characters.When the pasted text is displayed abnormally, you can modify the setting.



Conguration Guide

Figure 1-5 Setting ASCII Code

—-End

Result

In the HyperTerminal interface, press Enter. The system displays a message, requesting youto enter the user name. Enter the user name and password for user registration (by default,the super user name is root and password is admin), and wait till the command line prompt(MA5600>) appears.

If the login fails, click the Hang-up icon rst, and then the Dial icon. If you still fail to login, return to the previous steps to check the parameter settings and physical connections,and then try again.

1.3 Conguring the Terminal Through the Remote SerialPort

This operation enables you to log in to and congure the MA5600 through the remote serialport.

Prerequisites

Before using a serial port for remote maintenance, connect a modem at both the MA5600and the PC sides. In this way, you can set up a remote connection between the PC and theMA5600 through modem dialup.

The modem at the MA5600 side is referred to as the called modem. The modem at the PC sideis referred to as the calling modem. The modems shall meet the following requirements:n Both the calling and called modems comply with the related standards, and support

AT command set.n The called modem must be an external modem.n The calling modem can be either a built-in modem or an external modem. For better

compatibility and the ease of status monitoring, you are recommended to adopt anexternal modem made by the vendor of the called modem.



n The following conguration is based on modems of the same type. In actual applications,you can congure the modem by referring to the related AT command set.

NetworkingFigure 1-6 shows the networking for conguring the MA5600 through the remote serial port.

Figure 1-6 Networking for conguring the MA5600 through the remote serial port

Conguration FlowchartFigure 1-7 shows the owchart for conguring the MA5600 through the remote serial port.

Figure 1-7 Flowchart for conguring the MA5600 through the remote serial port

Procedure

Step 1 Set the called modem parameters.



Conguration Guide

Only three signal lines, namely SD, RD and SG, are used for connecting the MA5600 and themodem. Therefore, before connecting the modem with the MA5600, shield the handshakesignals and ow control signals of the modem.

The conguration of a modem needs an intelligent terminal. The following modemconguration is based on the HyperTerminal operating under Windows.1. Connect the serial port of the modem with that of the maintenance terminal using the

dedicated cable for the modem, and power on the system. Installing a driver is notrequired at this step.

2. Assume that the modem is connected to COM2 port. Start the HyperTerminal, and selectDirect to COM2 in the column of Connect using in the dialog box that appears. Setthe serial port parameters as follows: 9600 bit/s for baud rate, 8 for data bits, 1 for stopbits, None for parity, None for ow control.

NOTE

After the connection, you may nd that the terminal cannot display anything. This is because thedisplay function of the modem is disabled at the previous conguration operation. To enable theterminal to display input and output information, run the AT&F command to restore the defaultsettings and press Enter.

3. Check the modem.

In the HyperTerminal, enter the AT&F command to restore the default settings of themodem. Observe if the screen displays "OK". If yes, the modem is normal.

4. In the HyperTerminal, enter the following commands:ATS0=1 //Enable the auto replay function (ringing sound).AT&D //Ignore DTR signals.AT&K0 //Disable the flow control function.

AT&R1 //Ignore the RTS signals.AT&S0 //Set DSR as high level.ATEQ1&W //Disable the modem’s response to the command while

executing the command and saving the configurations.

NOTE

After the execution of the last command, entering the AT command disables the echo function ofthe terminal and prohibits it from displaying the execution results. Due to the limitation of the bitrate of the modem, a baud rate of 9600 bit/s or 19200 bit/s is recommended for the serial port of theMA5600. If necessary, you can run the baudrate command to modify the baud rate of the serialport of the MA5600. To prevent an extremely high bit rate on the line between the two modems,you can set AT$MB=9600 (or another value) before running the ATEQ1&W command.

Step 2 Set the calling modem parameters.

After power-on, the calling modem can function in the normal state without any conguration.However, if you connect the maintenance terminal with the modem using a standard cable,shield the handshake signals and ow control signals of the modem before the connection. Fordetails of this shield operation, refer to the settings of the called modem parameters.

Step 3 Set up the conguration environment.

Figure 1-6 shows the conguration environment.1. Connect the called modem.

Plug the telephone line into the LINE port of the called modem. Connect the serial port ofthe called modem with the maintenance port CON of SCU board on the MA5600 usingthe dedicated serial port cable for the MA5600, and power on the modem.

2. Connect the calling modem.

For an external modem, plug the telephone line into the LINE port of the calling modem,connect the serial port of the calling modem with that of the maintenance terminal usingdedicated cable for the modem, and power on the modem.



For a built-in modem, you only need to plug the telephone line into the LINE port ofthe calling modem.

Step 4 Start the HyperTerminal for dialup.1. Set up a new connection.

Choose Start > Programs > Accessories > Communication > HyperTerminal to startthe HyperTerminal and input the name. Click OK.

2. Congure the serial port.

Select the standard character terminal or PC terminal serial port that is actually connectedto the MA5600 (assuming serial port COM2). Click OK.

Step 5 Set the parameters of the HyperTerminal.

In the above Step 2, click OK. Then, set the serial port parameters in the dialog box as shownin Figure 1-8. The parameters are set as follows:n Baud rate: 9600 bit/sn Data bits: 8n Parity: Nonen Stop bits: 1n Flow control: None

NOTE

n When setting the baud rate, make sure the baud rate of the HyperTerminal is consistent with that ofthe serial port. By default, the baud rate of the serial port is 9600 bit/s.

n After login, illegible characters may occur among the input information. This is usually caused bybaud rate inconsistency between the HyperTerminal and the system. In this case, try to use anotherbaud rate to log in to the system. The system supports the baud rates of 9600 bit/s, 19200 bit/s, 38400bit/s, 57600 bit/s and 115200 bit/s.

Figure 1-8 Setting the parameters of the HyperTerminal

Click OK. The HyperTerminal interface appears.

Step 6 Start the HyperTerminal for dialup.1. For an external modem, follow the steps below:



Conguration Guide

To set up a connection with an external modem, select a serial port, rather than a modem,from the Connect using drop down list in the HyperTerminal.

In the HyperTerminal interface, you can enter the AT command for dialup, for exampleATDTXXXXXXXX. XXXXXXXX represents the telephone number of the lineconnected with the remote modem.

For details about the dialup commands, refer to the AT command set. ATDT0 W020XXXXXXXX means to dial "0" for connection with the external line. Wait for thedialing tone from the exchange, and then dial the telephone number of 020XXXXXXXX.

2. For a built-in modem, the procedure is as follows:

Run the HyperTerminal. Set the called number. Select the modem from the Connectusing drop down list. Click Congure in the properties setting interface to set the modemproperties. Select Bring up terminal window after dialing in the Options tab of theproperties setting interface. Click OK to conrm the setting. Click Dial to proceed withthe dialing. You need not use any ATDT commands for dialing.

—-End

Result

After dialup, the "OH" and "RI" LEDs on the modem connecting to the PC turn on. Themodem generates a kind of sound, which indicates the progress of the connection. Afterthe connection is set up, the two modem CD LEDs (for carrier detection) turn on, and theHyperTerminal interface displays "CONNECT9600 (or 19200)". This indicates that theinter-modem connection is set up successfully.

If "NO CARRIER" is displayed, the connection fails. Check the hardware connections and thetelephone line. Press Enter until the login interface appears.

After conguring the MA5600, run the hang-up command of the HyperTerminal to breakthe connection.

WARNING

n In the process of modem connection setup, pressing any key in the keyboard will interruptthe ongoing call.

n After a remote maintenance operation, you need to disconnect the line, rather than merelyshutting down the HyperTerminal. Otherwise, modems of a certain model may remainonline all the time, causing failure in the next dialup connection.

1.4 Conguring the Terminal Through the OutbandManagement Channel

This operation enables you to connect the maintenance terminal to the MA5600 over a localarea network (LAN) or a wide area network (WAN), and congure the MA5600 throughthe outband management channel.

Networking-LANFigure 1-9 shows the networking for local conguration through a LAN.



Figure 1-9 Networking for local conguration through a LAN

Use a straight through cable to connect the MA5600 with the LAN. Make sure that the IPaddress of the ETH port of the control board and that of the PC used for maintaining theMA5600 are located in the same subnet.

NOTE

You can also use a crossover cable to connect the network port of the maintenance terminal with the ETHport of the control board to maintain the MA5600.

Data Plan-LANTable 1-2 lists the data plan for the network.

Table 1-2 Data plan for the network

Item DataIP address: 10.10.20.2ETH port of the MA5600Subnet mask: 255.255.255.0IP address:10.10.20.1PC used for maintaining the MA5600Subnet mask: 255.255.255.0

NOTE

You can also use a crossover cable to connect the network port of the maintenance terminal with the ETHport of the control board to maintain the MA5600.

Networking-WANFigure 1-10 shows the connection between a WAN and the ETH port of the control board.



Conguration Guide

Figure 1-10 Connection between a WAN and the ETH port of the control board

Data Plan-WANTable 1-3 lists the data plan for the network.


Item DataIP address: 10.10.20.1ETH port if the MA5600Subnet mask: 255.255.255.0IP address: 10.10.21.1PC used for maintaining the MA5600Subnet mask: 255.255.255.0IP address: 10.10.20.254Router port connecting to the MA5600Subnet mask: 255.255.255.0

Conguration FlowchartFigure 1-11 shows the owchart for conguring the MA5600 through the outband managementchannel.



Figure 1-11 Flowchart for conguring the MA5600 through the outband management channel

Procedure


Figure 1-9 and Figure 1-10 show the sample networks of conguring the MA5600 through theoutband management channel. You can set up the environment as required.

Step 2 Set the IP address of the ETH port.huawei(config)#interface meth 0huawei(config-if-meth0)#ip address 10.10.20.1

Step 3 Add a route for the network management system (NMS).n If you set up the WAN conguration environment as shown in Figure 1-9, no route

needs to be added.n If you set up the WAN conguration environment as shown in Figure 1-10, add a next

hop route to the NMS.huawei(config)#ip route-static 10.10.21.0 24 10.10.20.254

Step 4 Run telnet.

Choose Start > Run on the PC. Enter the telnet command, followed by the IP address of theETH port of the MA5600 in the Open eld. Click OK to run telnet, as shown in Figure 1-12.

Figure 1-12 Running telnet application



Conguration Guide

Step 5 Log in to the system.

By default, the super user uses root as the user name and admin as the password.Huawei MA5600 Multi-service Access Module.Copyright(C) 1998-2006 by Huawei Technologies Co., Ltd.

>>User name:root>>User password:

—-End

Result

After you log in to the system, you can perform the conguration successfully.

1.5 Conguring the Terminal Through the InbandManagement Channel

This operation enables you to congure the MA5600 through the inband management channel.

Networking-LANFigure 1-13 shows the networking for the maintenance through the GE port over a LAN.

Figure 1-13 Networking for the maintenance through the GE port over a LAN



Item DataInband management interface of the MA5600 IP address: 10.10.20.1

Subnet mask: 255.255.255.0PC used for maintaining the MA5600 IP address: 10.10.20.3

Subnet mask: 255.255.255.0



Networking-WANFigure 1-14 shows the networking for the maintenance through the GE port over a WAN.

Figure 1-14 Networking for the maintenance through the GE port over a WAN



Item DataGE port of the MA5600 IP address: 10.10.20.1

Subnet Mask: 255.255.255.0PC used for maintaining theMA5600

IP address: 10.10.21.1Subnet Mask: 255.255.255.0

Router port connecting to theMA5600

IP address:10.10.20.254Subnet Mask: 255.255.255.0

Conguration FlowchartFigure 1-15 shows the owchart for conguring the MA5600 through the inband managementchannel.



Conguration Guide

Figure 1-15 Flowchart for conguring the MA5600 through the inband management channel

Procedure


Figure 1-13 and Figure 1-14 show the sample network for conguring the MA5600 through theinband management channel. You can set up the environment based on your own conditions.

Step 2 Create an NMS VLAN and add the upstream port to it.

Run the vlan command to create an NMS VLAN.huawei(config)#vlan 30 standardhuawei(config)#port vlan 30 0/7/0

Step 3 Set the IP address of the VLAN layer 3 interface.

Run the ip address command to set the IP address and subnet mask of the MA5600 VLANlayer 3 interface.huawei(config)#interface vlanif 30huawei(config-if-vlanif30)#ip address 10.10.20.1 255.255.255.0

Step 4 Set inband NMS route.

If the conguration environment is set up as shown in Figure 1-13, no route needs to becongured.

If the conguration environment is set up as shown in Figure 1-14, add the route of next hop.huawei(config-if-vlanif30)#quithuawei(config)#ip route-static 10.10.21.0 24 10.10.20.254

Step 5 Run telnet.

Choose Start > Run on the PC. Enter the telnet command, followed by the IP address of theETH port of the SCU board in the Open eld. Click OK to run telnet as shown in Figure 1-16.



Figure 1-16 Running telnet application

Step 6 Log in the system.

By default, the Super user uses root and admin as the user name and password. When you login, the system prompts the followingHuawei MA5600 Multi-service Access Module.Copyright(C) 1998-2006 by Huawei Technologies Co., Ltd.

>>User name:root>>User password:

—-End

Result

After login, you can congure the terminal for maintenance.

1.6 Conguring the Terminal Through SSHThis operation enables you to connect the maintenance terminal to the MA5600 over a LAN ora WAN and congure the MA5600 through SSH.

Networking-LANFigure 1-17 shows the connection for setting up the SSH conguration environment in LANoutband mode.



Conguration Guide

Figure 1-17 Setting up the SSH conguration environment in LAN outband mode



Item DataMA5600 IP address of the ETH port: 10.10.20.2

Subnet mask of the ETH port: 255.255.255.0User name: huaweiUser authentication mode: RSA public key authentication

PC used for maintaining theMA5600

IP address: 10.10.20.1Subnet mask: 255.255.255.0Client software: PuTTY.exe, PuTTYGen.exe, sshkey.exe

Networking-WANFigure 1-18 shows the connection for setting up the SSH conguration environment in WANoutband mode.

Figure 1-18 Setting up the SSH conguration environment in WAN outband mode





Item DataMA5600 IP address of the ETH port: 10.10.20.1

Subnet mask of the ETH port: 255.255.255.0User name: huaweiUser authentication mode: RSA public key authentication


IP address: 10.10.21.1Subnet mask: 255.255.255.0Client software: PuTTYClient software: PuTTY.exe, PuTTYGen.exe, sshkey.exe

Router port connecting tothe MA5600

IP address: 10.10.20.254

Networking-LANFigure 1-19 shows the connection for setting up the SSH conguration environment in LANinband mode.

Figure 1-19 Setting up the SSH conguration environment in LAN inband mode




Conguration Guide


Item DataMA5600 IP address of the VLAN layer 3 interface: 10.10.20.2

Subnet mask of the VLAN layer 3 interface: 255.255.255.0User name: huaweiUser authentication mode: RSA public key authentication


IP address: 10.10.20.1Subnet mask: 255.255.255.0Client software: PuTTY.exe, PuTTYGen.exe, sshkey.exe

Networking-WANFigure 1-20 shows the connection for setting up the SSH conguration environment in WANinband mode.

Figure 1-20 Setting up the SSH conguration environment in WAN inband mode



Item DataMA5600 IP address of VLAN layer-3 interface: 10.10.20.1

Subnet mask of VLAN layer-3 interface:255.255.255.0User name: huaweiUser authentication mode: RSA public keyauthentication

PC used for maintaining the MA5600 IP address: 10.10.21.1Subnet mask: 255.255.255.0Client software: PuTTYPassword conversion tool: PuTTY.exe,PuTTYGen.exe, sshkey.exe

Router port connecting to the MA5600 IP address: 10.10.20.254

Conguration FlowchartFigure 1-21 shows the owchart for conguring the SSH environment.



Figure 1-21 Flowchart for conguring in SSH mode

Procedure


You can set up the conguration environment shown in Figure 1-17, Figure 1-18, Figure1-19 and Figure 1-20.

Step 2 Set the IP address of the ETH port/VLAN layer 3 interface.n To set the IP address of the ETH port, do as follows:

huawei(config)#interface meth 0huawei(config-if-meth0)#ip address 10.10.20.2 255.255.255.0

n To set the IP address of the VLAN layer 3 interface, do as follows:huawei(config)#interface vlanif 30huawei(config-if-vlanif30)#ip address 10.10.20.2 255.255.255.0

Step 3 Add a route for the NMS.

To set up a LAN conguration environment based on Figure 1-17 or Figure 1-19, you need notadd any route for the NMS.

To set up a WAN conguration environment based on Figure 1-18 or Figure 1-20, you mustadd a route of next hop for the NMS as follows:



Conguration Guide

huawei(config)#ip route-static 10.10.21.0 24 10.10.20.254

Step 4 Create a user.

To create a user of operator level with password huawei and reenter log times 4, do as follows:huawei(config)#terminal user nameUser Name(<=15 chars):huaweiUser Password(<=15 chars):huawei //not visible on the command line interfaceConfirm Password(<=15 chars): huawei // not visible on the command line interfaceUser’s Level:

1. Common User 2. Operator 3. Administrator:2Permitted Reenter Number(0--4):4User’s Appended Info(<=30 chars):This user has been addedRepeat this operation? (y/n)[n]:n

Step 5 Set authentication mode for the SSH user.

Select the rsa authentication mode.huawei(config)#ssh user huawei authentication-type rsa

Step 6 Create the key pair for the SSH server.

CAUTION

The rst step after you succeed in logging in to the SSH is to congure and create the localRSA key pair. Be sure to complete the "rsa local-key-pair create" operation and create thelocal key pair before further SSH congurations.

huawei(config)#rsa local-key-pair createThe key name will be: huawei_HostThe range of public key size is (512 ~ 2048).NOTES: If the key modulus is greater than 512,

It will take a few minutes.Input the bits in the modulus[default = 512]:Generating keys....++++++++++++..++++++++++++............++++++++...............................++++++++

Step 7 Generate the RSA public key.1. Run the key generator PUTTYGEN.EXE

Open the key generator PUTTYGEN.EXE, as shown in Figure 1-22.



Figure 1-22 Interface of the key generator

2. Generate the client key.

Select SSH-2 RSA as the key type under Parameters. Click Generate. Move the mouseover the blank area to generate the client key, as shown in Figure 1-23.



Conguration Guide

Figure 1-23 Generating the client key

After generating the client key, save public key and private key.3. Generating the RSA public key.

Run sshkey.exe, the client software for converting keys, to convert the client public keyinto the RSA public key, as shown in Figure 1-24.



Figure 1-24 Interface of converting the client public key into the RSA public key

Step 8 Generate the public key for SSH user.

To generate the public key for the SSH user, copy the RSA public key to the server incong-rsa-key-code command line mode.huawei(config)#rsa peer-public-key keyhuawei(config-rsa-public-key)#public-key-code beginEnter "RSA key code" view, return last view with "public-key-code end".huawei(config-rsa-key-code)#30818602 81805A01 625279EF 5E4CD503 916C9DB5 0233CF58huawei(config-rsa-key-code)#C901D4CA 207C77D3 4EF25B04 9897BD24 997BF61B DFB9A73Chuawei(config-rsa-key-code)#F82B6F06 55ACCDB9 F7DC1474 9E6518EE B1A543FF 9147150Bhuawei(config-rsa-key-code)#111BD11C 683A023B A4295550 DA13F6BE 3190A2A8 3BFCB158huawei(config-rsa-key-code)#4FBAA365 F6E796A0 B02CB6F9 8491A373 9B4A0876 4B3189B4huawei(config-rsa-key-code)#BBA2C7BA E1974104 AD165E98 18CF0201 25huawei(config-rsa-key-code)#public-key-code endhuawei(config-rsa-public-key)#peer-public-key end

Step 9 Authorize the public key to the SSH user.

In global cong mode, to authorize the public key to the SSH user huawei, do as follows:huawei(config)#ssh user huawei assign rsa-key key

Step 10 Log in to the System.1. Run the client software.

Run the SSH client software PUTTY.EXE. Click Auth in the directory tree and assigna le for the RSA private key, as shown in Figure 1-25. Click Browse. Select the lefor the private key and click OK.



Conguration Guide

Figure 1-25 Interface of the SSH client software

2. Log in to the system.

Click Session in the directory tree. Type in the IP address of the MA5600 in the HostName (or IP address) text box. Click Open to log in to the system.



Figure 1-26 Interface for connecting to the system.

Because the user authentication mode is RSA, the system will prompt message, as shownin Figure 1-27.

Figure 1-27 Interface for logging in the SSH client

Enter the correct user name to log in to the system according to the prompt.



Conguration Guide

—-End

Result

After you log in to the system, you can perform the conguration successfully.


SmartAX MA5600 Multi-service Access ModuleConguration Guide 2 Getting Started With CLI

2 Getting Started With CLI


2.1 OverviewThis chapter describes the CLI operation mode and how to apply it for maintaining theMA5600.2.2 CLI CharacteristicsThis section describes the CLI characteristics of the MA5600.2.3 Basic Operations Through CLIThis section describes how to perform the basic operations on the MA5600 through the CLI.


2 Getting Started With CLISmartAX MA5600 Multi-service Access Module

Conguration Guide

2.1 OverviewThis chapter describes the CLI operation mode and how to apply it for maintaining theMA5600.

Service DescriptionYou can maintain the MA5600 through the CLI or the NMS .n The NMS provides a graphical user interface (GUI) for easy operations, and the CLI

provides the command line interface for the same purpose.n You can maintain the MA5600 through the CLI easily. For this purpose, you can run the

HyperTerminal or the telnet program of the Windows operating system to log in to theMA5600 to maintain it through the CLI.

Service SpecicationThis chapter describes some basic CLI operations. After reading this chapter, you can performthe basic congurations for the MA5600 through the CLI.

2.2 CLI CharacteristicsThis section describes the CLI characteristics of the MA5600.

2.2.1 Command ModesThis section describes the CLI command mode, the feature and the switchover amongcommand modes.2.2.2 Intelligent MatchingThis section describes the intelligent matching of the CLI.2.2.3 Edit CharacteristicsThis section describes the edit characteristics of the CLI.2.2.4 Interaction CharacteristicsThis section describes the interaction function of the CLI.2.2.5 Parameter PromptThis section describes the parameter prompt function of the CLI.2.2.6 Display CharacteristicsThis section describes the display characteristics of the CLI.2.2.7 Saving and Showing History CommandsThe CLI provides a function like Doskey to automatically save history commands. By thisfunction, you can obtain history commands saved in the CLI and execute them repeatedly.2.2.8 CLI Error PromptsThis section describes the CLI error prompts.

2.2.1 Command ModesThis section describes the CLI command mode, the feature and the switchover amongcommand modes.

ClassicationThe MA5600 provides various modes to realize hierarchical protection and avoid unauthorizedaccess.

The MA5600 provides the following command modes:n User mode



n Privilege moden Global cong moden Interface cong Moden OSPF moden RIP moden MPLS-LDP moden Tunnel moden BTV mode

Featuresn Downward compatibility

All commands in user mode can be run in privilege mode.

All commands in user mode and privilege mode can be run in global cong mode.n Hierarchical protectionBased on different command modes, the system can prevent any

unauthorized access. For users at different levels, the command modes involved aredifferent, and the executable commands for these users are also different even thoughthey can enter the same mode.

Modes SwitchingFigure 2-1 shows how to switch over among the command modes.

Figure 2-1 Switching over among the command modes



Conguration Guide

Table 2-1 lists the features of the interface cong modes.

Table 2-1 Features of the interface cong modes

CommandMode

Function Prompt Entry

SCU Congure thecontrol board.

huawei(cong-if-scu-0/7)#

huawei(cong)#in-terface scu

ADSL Congure ADSLport parameters.

huawei(cong-if-adsl-0/2)#

huawei(cong)#in-terface adsl

SHDSL Congure SHDSLport parameters.

huawei(cong-if-shl-0/5)# huawei(cong)#in-terface shl

VDSL Congure VDSLport parameters.

huawei(cong-if-vdsl-0/2)#

huawei(cong)#in-terface vdsl

MPLS Congure MPLSparameters.

huawei(cong-mpls)# huawei(cong)#in-terface mpls

MPLS-LDP Congure MPLSLDP parameters.

huawei(cong-mpls-ldp)# huawei(cong)#mplsldp

EIU Congure EIU portparameters.

huawei(cong-if-eiu-0/15)#

huawei(cong)#in-terface eiu

Meth Congure theparameters ofthe maintenancenetwork port.

huawei(cong-if-meth0)# huawei(cong)#in-terface meth 0

EMU Congure EMU portparameters.

huawei(cong-if-power4845/fan/h303esc/h304esc/h561esc-0)#

huawei(cong)#interface emu

NULL CongureNULL interfaceparameters.

huawei(cong-if-null0)# huawei(cong)#in-terface null

vlanif Congure VLANparameters.

huawei(cong-if-vlanif2)#

huawei(cong)#interface vlanif

Tunnel Conguretunnel interfaceparameters.

huawei(cong-if-tunnel10)#

huawei(cong)#in-terface tunnel

OAM Congure OAMport parameters.

huawei(cong-if-oam-0/4)#

huawei(cong)#interface oam

NOTE

n To exit from a command mode, run the quit command.n To exit from the current mode to privilege mode, run the return command.n To exit from the privilege mode to user mode, run the disable command.n By default, the command line prompt uses "MA5600" as its prex. You can modify the prompt by

using the sysname command. The information in the bracket describes the current mode.

2.2.2 Intelligent MatchingThis section describes the intelligent matching of the CLI.

FunctionFor ease of operation, you can type in an incomplete keyword, and then press the space bar.The system returns a list of matching keywords.



For example, for the command enable, just type in en or ena.

NotesOn pressing the space bar, if the system does not return the commands, it indicates that:n You have entered a wrong command. In this case, check the command and enter the

correct one.

For example, when you enter dip (for display), entering a space does not display thecommands.huawei#dip

n The entered keyword conicts with others.

For example, when you enter dis in privilege mode, the system cannot nd a matchedkeyword for it. This is because there are two commands that start with dis: disable anddisplay.

2.2.3 Edit Characteristics

This section describes the edit characteristics of the CLI.

FunctionThe CLI provides basic command edit functions. It allows multi-line editing, with up to 255bytes for each command.

SpecicationTable 2-2 lists the edit functions.

Table 2-2 Edit functions

Key FunctionCommon key If the edit buffer is not full, pressing such a key will move the

cursor rightwards from its current position.<Backspace> Pressing this key will delete the character before the cursor and

move the cursor backwards. When reaching the beginning ofthe command, the cursor stops.

Left arrow key <←> or<Ctrl+A>

Move the cursor leftwards for the length of one character.

Right arrow key <→> or<Ctrl+D>

Move the cursor rightwards for the length of one character.

Up/Down arrow key<↑><↓>

Display history commands. For some terminals which do notsupport up/down arrow keys, you can use <Ctrl+P> to selectthe previous history command.

<Ctrl+U> Delete the characters before the current cursor and move thecursor to the beginning of the line.

<Ctrl+K> Delete the characters after the current cursor and move thecursor to the end of the line.

<Ctrl+F> Search a string.<Ctrl+B> Move the cursor to the end of the line.<ESCAPE> Pressing this key twice will delete the current input.



Conguration Guide

NOTE

Common keys refer to letter keys, number keys and mark keys.

2.2.4 Interaction CharacteristicsThis section describes the interaction function of the CLI.

FunctionIn interactive mode, when you type in an incomplete command, the system prompts youwith the next keyword and its parameter type.

Examplesn To run the load program command in interactive mode, do as follows:

huawei#load program{ xmodem<K>|tftp<K>|ftp<K> }: tftp{ ServerIpAddress<X.X.X.X> }: 10.10.10.1{ frameid<0,1>|frameid/slotid<S><3,15> }: 0/3

When interactive mode is disabled, if you type in an incomplete command and pressEnter, the system will prompt error.

n To run the load program command after interactive mode is disabled, do as follows:huawei#undo smarthuawei#load program tftp

^% Incomplete command, and error detected at ’^’

To query the command help after entering the switch command keyword by "?", do asfollows:huawei#switch?---------------------------------------------Command of user Mode:

---------------------------------------------language-mode Set language parameter

2.2.5 Parameter PromptThis section describes the parameter prompt function of the CLI.

FunctionIn interactive mode, the CLI characters such as <K> and are used to express the parametertypes of a keyword.

SpecicationTable 2-3 lists the meaning of the CLI characters supported by the MA5600.

Table 2-3Meaning of the CLI characters supported by the MA5600

Character Meaning<K> Keyword<E> Enumeration. Items following it are the available options. ULONG. Information following it is the range of the value to be

entered.<L> LONG. Information following it is the range of the value to be

entered.



Character Meaning<S> Character string. Information following it is the range of the

character string to be entered. IP address<M> MASK, such as the mask of an IP address. MMAC address<H> Hexadecimal number. The system shall support the input of "0x".

The default setting is decimal number.<D><yyyy-mm-dd> Date

<T><hh:mm:ss> Time

NOTE

The CLI supports the input of the hexadecimal number. However, if you do not type in "0x" whenentering a hexadecimal number, the system considers the input number as a decimal one.

2.2.6 Display Characteristics

This section describes the display characteristics of the CLI.

FunctionWhen you query information, sometimes the CLI will fail to display the information on onescreen because it is too much. In this case, you can use the pause function to view informationdisplayed on multiple screens.n One screen here refers to the one screen displayed by the HyperTerminal software of

a PC, which contains 24 lines.n The system supports that the screen scrolls upward automatically, that is, the displayed

information cannot pause. Run the scroll command to enable the auto-scroll function, runthe undo scroll command to disable the auto-scroll function. By default, the auto-scrollfunction is disabled.

SpecicationTable 2-4 lists the options for viewing information displayed on multiple screens.

Table 2-4 Options for viewing information displayed on multiple screens

Key FunctionPress Q or Ctrl+Cwhen the display is frozen.

Suspend the display and execution of the commands.

Press Space when the displayis frozen

Continue to display the information on the next screen.

press Enter when the displayis frozen

Continue to display the information of the next line.

2.2.7 Saving and Showing History Commands

The CLI provides a function like Doskey to automatically save history commands. By thisfunction, you can obtain history commands saved in the CLI and execute them repeatedly.



Conguration Guide

Background InformationTo set the maximum number of history commands saved in the buffer, run thehistory-command max-size command.

To restore the default setting, run the undo history-command max-size command.

By default, up to 10 history commands can be saved for every user in the CLI.

The display history-command command can only show the commands executed by thecurrent user. After re-login, the history commands are cleared.

Procedure

Step 1 Run the history-command max-size command to set the number of history commands thatcan be saved in the command buffer.

Step 2 Run the display history-command command to show history commands.

—-End

Example

To set the number of history commands that can be saved in the command buffer to 20, doas follows:huawei(config)#history-command max-size 20huawei#display history-command--------------------------------------------------No. Command--------------------------------------------------10 interface ?9 history-command max-size8 mac-pool ?7 display current-configuration6 ?5 quit4 quit3 radius-server ?2 ?1 ?

--------------------------------------------------

2.2.8 CLI Error Prompts

This section describes the CLI error prompts.

FunctionThe system checks the syntax of each command you type in, and executes the command if itpasses the check. If the command fails to pass the check, the system prompts an error.

SpecicationTable 2-5 shows the common CLI error prompts.



Table 2-5 Common CLI error prompts

Error Prompt CauseUnknown command n Such a command cannot be found.

n Such a keyword cannot be found.n The parameter type is not correct.n The parameter value exceeds the threshold.

Incomplete command The command input is incomplete.Too many parameters The parameters input are too many.Ambiguous command The command input is ambiguous.

2.3 Basic Operations Through CLIThis section describes how to perform the basic operations on the MA5600 through the CLI.

2.3.1 Obtaining Online Help InformationThis operation enables you to obtain online help information. If no help information is found,the help list is empty.2.3.2 Enabling Interactive Command ExecutionThis operation enables interactive command execution.2.3.3 Enabling CLI Trap ReportingThis operation enables you to enable CLI trap reporting when displaying alarm or progressinformation is needed during the execution of a command.2.3.4 Switching Terminal LanguageThis operation enables you to select a preferred language as the terminal display language.2.3.5 Setting System TimeThis operation enables you to set the system time, the start and end time of Daylight SavingTime (DST), and the timestamp between the NMS and the network element.2.3.6 Setting System NameTo differentiate various MA5600s, the administrator can rename the system by using thesysname command.2.3.7 Setting Terminal TypeThis operation enables you to set terminal type of the CLI system according to the type of thein-service terminal, so as to ensure correct command line editing.2.3.8 Setting Timeout Exit TimeThis operation enables you to set timeout exit time. During the time, if the user fails to type inany information on the terminal, the system will let the user exit from the system.2.3.9 Locking the TerminalThis operation enables you to lock the terminal to prevent others from accessing the terminalby using the current user name.2.3.10 Clearing Terminal ScreenThis operation enables you to clear the terminal screen.2.3.11 Showing VersionThis operation enables you to show the system or board version.2.3.12 Showing CPU UsageThis operation enables you to show the CPU usage of a board.2.3.13 Showing the Memory UsageThis operation enables you to check the memory usage of the control board.



Conguration Guide

2.3.14 Testing Network StateThis operation enables you to check the network connectivity and whether the host isreachable, and check all gateways passed by data packets sent from a host to the destination,and locate network faults.

2.3.1 Obtaining Online Help InformationThis operation enables you to obtain online help information. If no help information is found,the help list is empty.

Background InformationThe CLI offers two ways for you to obtain online help:n Full help

When you input ? following the prompt, you can obtain help information about thecurrent available commands.

When you input a complete keyword followed by a space and a question mark, such asdisplay ?, you can obtain help information about all commands matching the keyword.

n Partial help

When you input an incomplete keyword followed by a question mark, such as display l?,you can obtain help information about the commands matching the incomplete keyword.

Proceduren Run the ? command to display help information about the current available commands.

n Run the d? command to display help information about the commands matching theincomplete keyword.

n Run the display ? command to display help information about all commands matchingthe complete keyword.

—-End

ExamplesTo show the help information about all available commands in global cong mode, do asfollows:huawei(config)#?---------------------------------------------Command of config Mode:

---------------------------------------------aaa AAA(Authentication,Authorization,Accounting) viewacl Specify ACL configuration informationadsl <Group> adsl command grouparp <Group> ARP command groupbind Bind IP/MACboard <Group> board command groupbpdu BPDU tunnel functionbtv Broadband TVdefault Configure default MAC pooldefaultvlan Configure default VLAN typedhcp <Group> dhcp command groupdhcp-server Add DHCP server IP addressesemu <Group> EMU command groupencapsulation Set encapsulation typefirewall <Group> firewall command groupframe <Group> frame command groupinfo-center <Group> info-center command groupinterface <Group> interface command groupip <Group> ip command groupipoa IPoA config



---- More ( Press ’Q’ to break ) ----

To show help information about the commands matching an incomplete keyword d, doas follows:huawei(config)#d?---------------------------------------------Command of config Mode:

---------------------------------------------default Configure default MAC pooldefaultvlan Configure default VLAN typedhcp <Group> dhcp command groupdhcp-server Add DHCP Server IP Addresses---------------------------------------------Command of privilege Mode:

---------------------------------------------debugging <Group> debugging command groupdiagnose Change command mode into diagnose modedisable Turn off privileged EXEC mode commandsdisplay Display informationduplicate <Group> duplicate command group---------------------------------------------Command of user Mode:

---------------------------------------------display Display information

To show help information about the commands matching a complete display, do as follows:

Related Operation

Table 2-6 lists the related operation for obtaining online help information.

Table 2-6 Related operation for obtaining online help information

To… Run the Command...Know how to obtain system help information help

2.3.2 Enabling Interactive Command ExecutionThis operation enables interactive command execution.

Background Informationn With interactive command execution enabled, if you type in a complete command and

press Enter, the system gives prompts to prevent wrong operations.For example, if you type in the reboot system command and then press Enter, thesystem prompts the following:Please check whether data has saved, the unsaved data will lose if reboot system, are yousure to reboot system? (y/n)[n]:

n With interactive command execution disabled, if you type in a command and press Enter,the system executes the command directly.

n By default, the interactive command execution is enabled.

Procedure

Step 1 Run the interactive command to disable interactive command execution.

Step 2 Run the display interactive command to and you can nd that the interactive commandexecution is enabled.

—-End



Conguration Guide

Example

To enable the interactive command execution, do as follows:huawei>interactivehuawei>display interactiveCommand confirmed function is enabled

Related Operation

Table 2-7 lists the related operation for enabling or disabling interactive command execution.

Table 2-7 Related operation for enabling or disabling interactive command execution

To… Run the Command…Disable interactive command execution undo interactive

2.3.3 Enabling CLI Trap ReportingThis operation enables you to enable CLI trap reporting when displaying alarm or progressinformation is needed during the execution of a command.

Procedure

Step 1 Run the info-center enable command to enable the CLI trap reporting function.

Step 2 Run the display info-center command and you can nd that the CLI trap reporting is enabled.

—-End

Example

To enable the CLI trap reporting function, do as follows:huawei(config)#info-center enable

huawei(config)#display info-centerInformation Center:enabledLog host:Console:

channel number : 0, channel name : consoleMonitor:

channel number : 1, channel name : monitorSNMP Agent:

channel number : 5, channel name : snmpagentLog buffer:

enabled,max buffer size 1024, current buffer size 512,current messages 36, channel number : 4, channel name : logbufferdropped messages 0, overwrote messages 0Trap buffer:

enabled,max buffer size 1024, current buffer size 256,current messages 0, channel number:3, channel name:trapbufferdropped messages 0, overwrote messages 0Information timestamp setting:

log - date, trap - date, debug - boot

Sent messages = 37, Received messages = 37

IO Reg messages = 0 IO Sent messages = 0

Related Operation

Table 2-8 lists the related operation for enabling or disabling CLI trap reporting.



Table 2-8 Related operation for enabling or disabling CLI trap reporting

To… Run the Command…Disable CLI trap reporting undo info-center enable

2.3.4 Switching Terminal LanguageThis operation enables you to select a preferred language as the terminal display language.

Background InformationThe MA5600 supports the general language and the local language, including English andChinese. English is the default language.

Procedure

Run the switch language-mode command to switch from one language to another.

—-End

Example

To switch from one language to another, run the switch language-mode command:huawei(config)#switch language-mode

Related Operation

Table 2-9 lists the related operation for switching the terminal language.

Table 2-9 Related operation for switching the terminal language

To… Run the Command… RemarksDisplay the terminal language display language In user mode, this

command is notavailable for thecommon user.

2.3.5 Setting System TimeThis operation enables you to set the system time, the start and end time of Daylight SavingTime (DST), and the timestamp between the NMS and the network element.

Background Informationn The time format is hh:mm:ss yyyy-mm-dd, that is, hour: minute: second year-month-day.n The setting takes effect at once.n During the setting, the system checks the validity of the time. Special attention shall be

paid to the settings of leap year and leap month.

Procedure

Step 1 Run the time command to set the system time.

Step 2 Run the display time command and you can nd that the current system time has been setsuccessfully.



Conguration Guide

—-End

Example

To set the current system time, do as follows:huawei#time 09:00:00 2006-02-28huawei(config)#display time

{ <cr>|dst<K>|time-stamp<K> }:

command:display time

2006-02-28 09:00:06+08:00

2.3.6 Setting System Name

To differentiate various MA5600s, the administrator can rename the system by using thesysname command.

Background Informationn By default, the device name is MA5600.n The new system name takes effect immediately after it is set.n After the system is changed, the command line prompt will change to the new name

accordingly.

Procedure

Run the sysname command to set the system name.

—-End

Example

To name the rst MA5600 at the New York ofce in U.S.A, do as follows:huawei(config)#sysname NY_MA5600_A

2.3.7 Setting Terminal Type

This operation enables you to set terminal type of the CLI system according to the type of thein-service terminal, so as to ensure correct command line editing.

Background Informationn Different terminals feature different edit characteristics. To make most terminals become

mutually compatible, the system divides terminals into two types, namely:

-Standard terminals (ANSI)

-VT series terminalsn The default terminal type is ANSI.n Some terminal tools, such as HyperTerminal, telnet and neterm, allow you to set the

terminal types. You can use the associated menu to set the terminal emulation type so thatthe type of the terminal tool is consistent with that of the terminal in the system.



Procedure

Step 1 Run the terminal type command to set the terminal type.

Step 2 Run the display terminal type command and you can nd that the terminal type has been setcorrectly.

—-End

Example

To set the terminal type as VT 100, do as follows:huawei#terminal type vt100huawei>display terminal typeThe terminal type: VT100

2.3.8 Setting Timeout Exit TimeThis operation enables you to set timeout exit time. During the time, if the user fails to type inany information on the terminal, the system will let the user exit from the system.

Background InformationBy default, the system will let the user exit from the system as long as the user fails to type inany information on the terminal for 5 minutes.

Procedure

Step 1 Run the idle-timeout command to set the timeout exit time.

Step 2 Run the display idle-timeout command and you can nd the timeout exit time has been setcorrectly.

—-End

Example

To set the timeout exit time to 23 minutes, do as follows:huawei>idle-timeout 23huawei>display idle-timeoutThe timeout value is set to 23 minutes currently. If there is no input fromterminal during this time, the user will be disconnected

Related Operation

Table 2-10 lists the related operation for setting the timeout exit time.

Table 2-10 Related operation for setting the timeout exit time

To… Run the Command…To set the timeout exit time to 120minutes

undo idle-timeout

2.3.9 Locking the TerminalThis operation enables you to lock the terminal to prevent others from accessing the terminalby using the current user name.



Conguration Guide

Background InformationOnce a terminal is locked, if you press any button on the terminal, the system will prompts youto enter the password. After entering the correct password, you can operate the terminal.

Procedure

Run the terminal hold command to lock the terminal.

—-End

Example

To lock the current CLI terminal and then unblock it, do as follows:huawei(config)#terminal holdHold Password(<=15 chars):Confirm Password(<=15 chars):The user terminal has been heldHold Password(<=15 chars)://Press any key and the system will prompt you to enter

the unblocking password.

huawei(config)# //Input the correct password.

Related Operation

Table 2-11 lists the related operation for locking the terminal.

Table 2-11 Related operation for locking the terminal

To… Run the Command…Unlock the terminal undo terminal hold

2.3.10 Clearing Terminal ScreenThis operation enables you to clear the terminal screen.

Background InformationThe command will clear the screen output, and display the command prompt on the upperleft of the screen. This command only clears what is displayed on the screen rather thanthose in the buffer.

Procedure

Run the cls command to clear the terminal screen.

—-End

Example

To clear the screen, do as follows:huawei>cls

The current screen output is cleared, and the command prompt is displayed on the upperleft of the screen.

2.3.11 Showing VersionThis operation enables you to show the system or board version.



Background InformationThe command cannot show the version of a faulty board.

Procedure

Run the display version command to display the system or board version.

—-End

Examples

To display the version information on the system, do as follows:huawei>display version{ spm<K>|<cr>|frameid/slotid<S><1,15> }:

Command:display version

MA5600V300R003 RELEASE SOFTWARECopyright (c) 1998-2006 by Huawei Technologies Co., Ltd.Uptime is 0 day(s), 17 hour(s), 21 minute(s), 57 second(s)

To display the version information on the board in slot 7 of shelf 0, do as follows:huawei(config)#display version 0/7Main Board: H561SCU---------------------------------------PCB Version: H561SCU VER DBase BIOS Version: 151Extended BIOS Version: 152Software Version: MA5600V300R003Logic Version: (U13)103(U57)103(U66)104MAB Version: 0005SubBoard[0]:PCB Version: H561M2GA VER AMAB Version: 0001SubBoard[1]:PCB Version: H531O2GS VER AMAB Version: 0001SubBoard:PCB Version: H511L24GA VER ACPLD Version: (U3)103MAB Version: B0

2.3.12 Showing CPU Usage

This operation enables you to show the CPU usage of a board.

Procedure

Run the display cpu command to display the CPU usage of a board.

—-End

Example

To show the CPU usage of the control board, do as follows:huawei>display cpu 0/7CPU occupancy: 12%



Conguration Guide

2.3.13 Showing the Memory UsageThis operation enables you to check the memory usage of the control board.

Background InformationYou can query the memory usage of the control board only.

Procedure

Run the display mem command to show the memory usage of the control board.

—-End

Example

To query the memory usage of the control board, do as follows:huawei>display mem 0/7Memory occupancy: 47%

2.3.14 Testing Network StateThis operation enables you to check the network connectivity and whether the host isreachable, and check all gateways passed by data packets sent from a host to the destination,and locate network faults.

Background InformationThe commands used to test network state include ping and tracert.n ping

To check the network connectivity and the host reachability, run the ping command.n tracert

To send test packets from the transmit host to the destination host, run the tracertcommand. With this command, you can check the connectivity of a network and locatefaults in the network.

The following gives the execution process of the tracert command:– The host sends a packet with the Time to Live (TTL) of 1 to the destination.– During the rst hop, the system returns an Internet Control Message Protocol (ICMP)

packet to indicate the failure in sending the packet due to TTL timeout.– The host sends a packet with the TTL of 2. The system also returns TTL timeout

in the second hop.The process continues in this way until the packet reaches the destination.

By doing so, the system can record the source address of each ICMP TTL timeoutmessage, and provide a path along which an IP packet goes all the way to the destination.

Procedure

n Run the ping command to test the network state.

n Run the tracert command to test the network state.

—-End



Examples

To test the network connectivity using the ping command, do as follows:huawei(config)#ping 10.11.52.240PING 10.11.52.240: 56 data bytes, press CTRL_C to breakReply from 10.11.52.240: bytes=56 Sequence=0 ttl=64 time = 10 msReply from 10.11.52.240: bytes=56 Sequence=1 ttl=64 time = 10 msReply from 10.11.52.240: bytes=56 Sequence=2 ttl=64 time = 13 msReply from 10.11.52.240: bytes=56 Sequence=3 ttl=64 time = 10 msReply from 10.11.52.240: bytes=56 Sequence=4 ttl=64 time = 10 ms--- 10.11.52.240 Ping statistics ---5 packets transmitted5 packets received0.00% packet lossround-trip min/avg/max = 10/10/13 ms

To test the network connectivity using the tracert command, do as follows:huawei#tracert 10.11.106.133traceroute to 10.11.106.133 max hops 30 ,packet 40 bytespress CTRL_C to break1 253 ms 476 ms 508 ms 10.11.120.622 * * * Request timed out.3 * * * Request timed out.4 4 ms 4 ms 5 ms 10.11.106.133


SmartAX MA5600 Multi-service Access ModuleConguration Guide 3 Network Management Conguration

3 Network Management Conguration


3.1 OverviewThis section describes the network management protocols, the NMS that the MA5600supports, and the purpose of this chapter.3.2 Basic ConceptsThis section describes the concepts involved in the network conguration.3.3 Conguration Example of an Outband NMSThis operation enables you to connect the MA5600 to the N2000 through the ETH port. Then,you can maintain the MA5600 through an outband management channel.3.4 Conguration Example of an Inband NMSThis operation enables you to connect the MA5600 to the N2000 through the GE port. Then,you can maintain the MA5600 through an inband management channel.3.5 SNMP Agent CongurationThis operation enables you to congure an SNMP agent when you want to maintain theMA5600 through the manager.3.6 Conguring the IP Address of the Outband NMS InterfaceThis operation enables you to congure the IP address of the outband NMS interface(maintenance network port).3.7 Conguring an NMS RouteThis operation enables you to create a static route between the MA5600 and the manager.3.8 Conguring the IP Address of the Inband NMS InterfaceThis operation enables you to congure the IP address of the inband NMS interface.


3 Network Management CongurationSmartAX MA5600 Multi-service Access Module

Conguration Guide

3.1 OverviewThis section describes the network management protocols, the NMS that the MA5600supports, and the purpose of this chapter.

Service DescriptionBased on SNMP, the MA5600 communicates with the NMS through its network managementinterface. Here, the iManager N2000 Fixed Network Integrated Management System (N2000)is used as the NMS.

Service SpecicationThis chapter describes the network conguration performed on the MA5600 to realize normalcommunication between the MA5600 and the N2000, including outband NMS congurationand inband NMS conguration.

NOTE

To realize normal communication between the MA5600 and the N2000, you must also performcongurations on the N2000. For details, refer to the SmartAX MA5600 Multi-service Access ModuleCommissioning Guide.

3.2 Basic ConceptsThis section describes the concepts involved in the network conguration.

SNMPSimple Network Management Protocol (SNMP) is a prevailing network management protocol.It includes two parts:n Network management station (manager)n Agent

ManagerA manager runs the client software. It can send GetRequest, GetNextRequest and SetRequestmessages to the agent.

AgentAn agent is the server software running on a network device.

When receiving request messages from the manager, the agent:n Reads or writes the management variables based on the message type.n Generates and sends the response messages to the manager.On the other hand, in case of device cold start, warm start, failure and fault recovery, the agentsends traps to report such events to the manager.

TrapTraps refer to the unsolicited messages sent from a managed device to the manager to reportsome asynchronous events.



3.3 Conguration Example of an Outband NMSThis operation enables you to connect the MA5600 to the N2000 through the ETH port. Then,you can maintain the MA5600 through an outband management channel.

NetworkingFigure 3-1 shows the sample network for conguring the outband NMS.

Figure 3-1 Sample network for conguring the outband NMS

Data PlanTable 3-1 lists the data plan for conguring the outband NMS.

Table 3-1 Data plan for conguring the outband NMS

Item DataMaintenance network port (ETH) of theMA5600

IP address: 10.10.20.1Subnet mask: 255.255.255.0

NMS IP address: 10.10.21.1Subnet mask: 255.255.255.0

Router port connecting to the MA5600 IP address: 10.10.20.254Subnet mask: 255.255.255.0

Conguration FlowchartFigure 3-2 shows the owchart for conguring the outband NMS.



Conguration Guide

Figure 3-2 Flowchart for conguring the outband NMS

NOTE

n This section describes how to congure the MA5600 only. To set up the network connection, you alsoneed to congure the router.

n If the telnet environment has been set up according to "1.4 Conguring a Terminal for MaintenanceThrough the Outband Management Interface" in Chapter "1 Maintenance Terminal Conguration",skip steps 1 and 2.

Procedure

Step 1 Set the IP address of the ETH port.huawei(config)#interface meth 0huawei(config-if-meth0)#ip address 10.10.20.1 255.255.255.0

Step 2 Add a route for the outband NMS.huawei(config)#ip route-static 10.10.21.0 24 10.10.20.254

Step 3 Set the SNMP parameters.n Creating the community name

huawei(config)#snmp-agent community read publichuawei(config)#snmp-agent community write private

n Setting the system contacthuawei(config)#snmp-agent sys-info contact HW-075528780808

n Setting the system locationhuawei(config)#snmp-agent sys-info location Shenzhen China

n Setting the SNMP version



NOTE

The setting of the MA5600 shall accord with that in the N2000. Assume that the N2000 adoptsSNMP V1.

huawei(config)#snmp-agent sys-info version v1

Step 4 Enable traps sending.huawei(config)#snmp-agent trap enable standard

Step 5 Set the IP address of the target host for traps.huawei(config)#snmp-agent target-host trap address 10.10.21.1 securityname private

Step 6 Set the IP address of the ETH port as the source address for traps sending.huawei(config)#snmp-agent trap source meth 0

Step 7 Save the data.huawei(config)#save

—-End

Result

After the conguration, you can manage the MA5600 through the N2000.

3.4 Conguration Example of an Inband NMSThis operation enables you to connect the MA5600 to the N2000 through the GE port. Then,you can maintain the MA5600 through an inband management channel.

NetworkingFigure 3-3 shows the sample network for conguring the inband NMS.

Figure 3-3 Sample network for conguring the inband NMS

Data PlanTable 3-2 lists the data plan for conguring the inband NMS.



Conguration Guide

Table 3-2 Data plan for conguring the inband NMS

Item DataInband NMS port of the MA5600 IP address: 10.10.20.2

Subnet mask: 255.255.255.0NMS IP address: 10.10.21.1

Subnet mask: 255.255.255.0Router port connecting to the MA5600 IP address: 10.10.20.254

Subnet mask: 255.255.255.0SNMP Agent Version: V3

User name: user1Group name: group1View name: hardy

Conguration FlowchartFigure 3-4 shows the owchart for conguring the inband NMS.

Figure 3-4 Flowchart for conguring the inband NMS



NOTE

n This section describes how to congure the MA5600 only. To set up the network connection, youalso need to congure the router.

n If the telnet environment has been set up according to "1.5 Conguring a Terminal for MaintenanceThrough the Inband Management Interface" in Chapter "1 Maintenance Terminal Conguration",skip steps 1 and 2.

Procedure

Step 1 Set the IP address of the inband NMS port (GE port).n Create an NMS VLAN

huawei(config)#vlan 1000 standard

n Add the upstream port to the VLANhuawei(config)#port vlan 1000 0/7 0

n Enter the VLAN interface modehuawei(config)#interface vlanif 1000

n Set the IP address of the VLAN interfacehuawei(config-if-vlanif1000)#ip address 10.10.20.2 255.255.255.0

Step 2 Add a route for the inband NMS.huawei(config)#ip route-static 10.10.21.0 24 10.10.20.254

Step 3 Set the SNMP parameters.n Set the community name and the access authority


n Set the system contacthuawei(config)#snmp-agent sys-info contact HW-075528780808

n Set the system locationhuawei(config)#snmp-agent sys-info location Shenzhen China

n Set the SNMP version

NOTE

The setting of the MA5600 shall accord with that in the N2000. Assume that the N2000 adoptsSNMP V1.

huawei(config)#snmp-agent sys-info version v1

Step 4 Enable traps sending.huawei(config)#snmp-agent trap enable standard

Step 5 Set the IP address of the target host for traps.huawei(config)#snmp-agent target-host trap address 10.10.21.1 securityname private

Step 6 Set the IP address of the inband NMS as the source address for traps sending.huawei(config)#snmp-agent trap source vlanif 1000


—-End

Result

After the conguration you can manage the MA5600 successfully through the N2000.

3.5 SNMP Agent CongurationThis operation enables you to congure an SNMP agent when you want to maintain theMA5600 through the manager.



Conguration Guide

3.5.1 Setting the SNMP VersionThis operation enables you to set the version of the SNMP running in the system.3.5.2 Adding a Community Name and Setting Its Read/Write AuthoritiesThis operation enables you to add a community name and set its read/write authorities.3.5.3 Enabling Traps SendingThis operation enables the MA5600 to send traps to the N2000.3.5.4 Setting the IP address of a Destination Host of TrapsThis operation enables you to set the IP address of a destination host of traps.3.5.5 Setting the Source Interface for Sending TrapsThis operation enables you to set the source interface for sending traps.3.5.6 Setting the System Contact InformationThis operation enables you to system contact information.3.5.7 Setting the System Location InformationThis operation enables you to set the system location information.3.5.8 Conguring an SNMP V3 UserThis operation enables you to add or modify an SNMP V3 user.3.5.9 Conguring an SNMP V3 GroupThis operation enables you to congure an SNMP V3 group. After a group is congured, youcan control the access authorities of all the users in the group.3.5.10 Conguring an SNMP MIB ViewThis operation enables you to congure an SNMP MIB view.3.5.11 Conguring the Local SNMP Engine IDThis operation enables you to congure an engine ID that uniquely identies an SNMP entity.3.5.12 Enabling the Handshake Function between the MA5600 and the N2000This operation enables you to enable the handshake function between the MA5600 and theN2000.3.5.13 Setting the Handshake IntervalThis operation enables you to set the handshake interval.

3.5.1 Setting the SNMP Version

This operation enables you to set the version of the SNMP running in the system.

Procedure

Step 1 Run the snmp-agent sys-info version command to set the SNMP version.

Step 2 Run the display snmp-agent sys-info version command to query the congured SNMPversion.

—-End

Example

To set the SNMP version as V1 and V2C, do as follows:huawei(config)#snmp-agent sys-info version v1 v2chuawei(config)#display snmp-agent sys-info version{ <cr>|contact<K>|location<K> }:

Command:display snmp-agent sys-info version

SNMP version running in the system:SNMPv1 SNMPv2c



Related Operations

Table 3-3 lists the related operations for setting the SNMP version.

Table 3-3 Related operations for setting the SNMP version

To… Run the Command…Cancel the set SNMP versioninformation

undo snmp-agent sys-info location

Display the SNMP version display snmp-agent sys-info version

3.5.2 Adding a Community Name and Setting Its Read/WriteAuthorities

This operation enables you to add a community name and set its read/write authorities.

Background Informationn The default read-only community name in the Huawei iManager N2000 BMS is public,

and the read-write community name in the N2000 is private.n The MA5600 supports up to 10 community names.n The read and write community names set in the MA5600 shall accord with those in the

manager.

Procedure

Step 1 Run the snmp-agent community command to add a community name and set its read/writeauthorities.

Step 2 Run the display snmp-agent community command to query a community name.

—-End

Example

To add a read-only community named public, do as follows:huawei(config)#snmp-agent community read publichuawei(config)#display snmp-agent community read

Community name: publicStorage type: nonVolatileView name: ViewDefault

Total number is 1

Related Operations

Table 3-4 lists the related operations for adding a community and setting its read/writeauthorities.

Table 3-4 Related operations for adding a community and setting its read/write authorities

To… Run the Command…Delete a community name undo snmp-agent communityDisplay a community name display snmp-agent community read



Conguration Guide

3.5.3 Enabling Traps SendingThis operation enables the MA5600 to send traps to the N2000.

Background InformationBy default, the MA5600 is prohibited from sending traps to the N2000.

ProcedureStep 1 Run the snmp-agent trap enable standard command to enable traps sending.

Step 2 Run the display snmp-agent trap enable command to check if traps sending is enabled.

—-End

ExampleTo enable the MA5600 to send traps to the N2000, do as follows:huawei(config)#snmp-agent trap enable standardhuawei(config)#display snmp-agent trap enable

Trap is enabled

Related OperationsTable 3-5 lists the related operations for enabling traps sending.

Table 3-5 Related operations for enabling traps sending

To… Run the Command…Disable traps sending undo snmp-agent trap enable standard

Check if traps sending is enabled display snmp-agent trap enable

3.5.4 Setting the IP address of a Destination Host of TrapsThis operation enables you to set the IP address of a destination host of traps.

Background InformationThe N2000 can receive traps only when the IP address of a destination host of traps is setcorrectly.

ProcedureStep 1 Run the snmp-agent target-host trap command to set the IP address of a destination host of

traps.

Step 2 Run the display snmp-agent target-host command to query the destination host of traps.

—-End

ExampleTo set the IP address of the destination host of traps as 10.71.53.108, and run the communityname “private”, do as follows:huawei(config)#snmp-agent target-host trap address 10.71.53.108securityname private v3huawei(config)#display snmp-agent target-host



Traphost list:Traphost address: 10.71.53.108Traphost portnumber: 162Traphost securityname: privateTraphost trapversion: v3

Total number is 1

Related Operations

Table 3-6 lists the related operations for setting the IP address of a destination host of traps.

Table 3-6 Related operations for setting the IP address of a destination host of traps

To… Run the Command…Delete the IP address of the destinationhost of traps

undo snmp-agent target-host

Display the list of destination hosts oftraps

display snmp-agent target-host

3.5.5 Setting the Source Interface for Sending TrapsThis operation enables you to set the source interface for sending traps.

Background InformationThe IP address of the interface for traps sending is the source IP address of the traps.

Procedure

Step 1 Run the snmp-agent trap source command to set the source interface for sending traps.

Step 2 Run the display snmp-agent trap-source command to query the source interface for sendingtraps.

—-End

Example

To set the source interface for traps sending as the layer 3 interface of VLAN 1000, doas follows:huawei(config)#snmp-agent trap source vlanif 1000huawei(config)#display snmp-agent trap-source

Trap source interface name: vlanif1000

Related Operations

Table 3-7 lists the related operations for setting the source interface for traps sending.

Table 3-7 Related operations for setting the source interface for traps sending

To… Run the Command…Delete the source interface for sendingtraps

undo snmp-agent trap source

Display the source interface for sendingtraps

display snmp-agent trap-source



Conguration Guide

3.5.6 Setting the System Contact InformationThis operation enables you to system contact information.

Background InformationBy default, system contact information is R&D Shenzhen, Huawei Technologies Co., Ltd.

Procedure

Step 1 Run the snmp-agent sys-info contact command to set the system contact information.

Step 2 Run the display snmp-agent sys-info contact command to query the system contactinformation.

—-End

Example

To set the system contact information as HW-075528780808, do as follows:huawei(config)#snmp-agent sys-info contact HW-075528780808huawei(config)#display snmp-agent sys-info contact{ <cr>|location<K>|version<K> }:

Command:display snmp-agent sys-info contact

The contact person for this managed node:HW-075528780808

Related Operations

Table 3-8 lists the related operations for setting the system contact information.

Table 3-8 Related operations for setting the system contact information

To… Run the Command…Restore the default system contactinformation

undo snmp-agent sys-info contact

Display the system contact information display snmp-agent sys-info contact

3.5.7 Setting the System Location InformationThis operation enables you to set the system location information.

Background InformationBy default, the system location information is Shenzhen China.

Procedure

Step 1 Run the snmp-agent sys-info location command to set the system location information.

Step 2 Run the display snmp-agent sys-info location command to display the system locationinformation.

—-End



Example

To set the system location information as Shanghai China, do as follows:huawei(config)#snmp-agent sys-info location Shanghai Chinahuawei(config)#display snmp-agent sys-info location{ <cr>|contact<K>|version<K> }:

Command:display snmp-agent sys-info location

The physical location of this node:Shanghai China

Related Operations

Table 3-9 lists the related operations for setting the system location information.

Table 3-9 Related operations for setting the system location information

To… Run the Command…Restore the default system locationinformation

undo snmp-agent sys-info location

Display the system location information display snmp-agent sys-info location

3.5.8 Conguring an SNMP V3 User

This operation enables you to add or modify an SNMP V3 user.

Background Informationn The MA5600 supports up to 20 SNMP users.n If the entered user name is an existing one, the system will update the conguration of

the user.n If you do not enter the user authentication and encryption modes, the user can access the

equipment without authentication or encryption.

Procedure

Step 1 Run the snmp-agent usm-user command to congure an SNMP V3 user.

Step 2 Run the display snmp-agent usm-user command to query the SNMP V3 user.

—-End

Example

To add an SNMP V3 user named user, belonging to a group named group, with theauthentication mode of md5, the authentication password of 1, the encryption mode of des56,and the encryption password of 2, do as follows:huawei(config)#snmp-agent usm-user v3 user group authentication-modemd5 1 privacy-mode des56 2huawei(config)#display snmp-agent usm-user userUser name: user

Engine ID: 800007DB0300E0FC995050Group name: groupAuthentication mode: md5, Privacy mode: des56Storage type: nonVolatileUser status: active



Conguration Guide

Related Operations

Table 3-10 lists the related operations for conguring an SNMP V3 user.

Table 3-10 Related operations for conguring an SNMP V3 user

To… Run the Command…Delete an SNMP V3 user undo snmp-agent usm-user v3Display the SNMP V3 user information display snmp-agent usm-user

3.5.9 Conguring an SNMP V3 Group

This operation enables you to congure an SNMP V3 group. After a group is congured, youcan control the access authorities of all the users in the group.

Background Informationn The MA5600 supports up to 20 SNMP V3 groups.n By default, the system has a read view named viewDefault with the range of internet

sub-tree; the write view and notify view are blank.n If the entered group name is an existing one, the system will update the conguration

of the group.n A specied view can be a non-existing view. In this case, the users in the group fail

to access anywhere.n A user can access views in three modes:

– With authentication and encryption– With authentication but no encryption– With no authentication or encryption

n If the access mode level is lower than the security level of the congured group, the userwill fail to access. If the corresponding groups have multiple security levels, the user canselect the group with the highest security level, and then access the view correspondingto the group.

Procedure

Step 1 Run the snmp-agent group v3 command to congure an SNMP V3 group.

Step 2 Run the display snmp-agent group command to query the SNMP V3 group.

—-End

Example

To congure a group named group, with authentication but no encryption, with the read viewof internet, and with blank write and notify views, do as follows:huawei(config)#snmp-agent group v3 group authentication read-view internethuawei(config)#display snmp-agent group group

Group name: groupSecurity model: v3 AuthnoPrivReadview: internetWriteview: <no specified>Notifyview: <no specified>Storage type: nonvolatile



Related Operations

Table 3-11 lists the related operations for conguring an SNMP V3 group.

Table 3-11 Related operations for conguring an SNMP V3 group

To… Run the Command…Delete an SNMP V3 group undo snmp-agent group v3Display the SNMPV3 group information display snmp-agent group

3.5.10 Conguring an SNMP MIB ViewThis operation enables you to congure an SNMP MIB view.

Background Informationn The number of sub-trees of all the views cannot exceed 20.n By default, the system has a read view named ViewDefault, with the range of internet

sub-tree view.n The view named ViewDefault cannot be deleted or updated.

Procedure

Step 1 Run the snmp-agent mib-view command to congure an SNMP MIB view.

Step 2 Run the display snmp-agent mib-view command to query the SNMP MIB view.

—-End

Example

To congure a view named view1, including ip sub-tree, do as follows:huawei(config)#snmp-agent mib-view view1 include iphuawei(config)#display snmp-agent mib-view view1

View name: view1MIB subtree: ipSubtree mask:Storage type: nonVolatileView type: includeView status: active

Related Operations

Table 3-12 lists the related operations for conguring an SNMP MIB view.

Table 3-12 Related operations for conguring an SNMP MIB view

To… Run the Command…Delete an SNMP MIB view undo snmp-agent mib-viewDisplay the SNMP MIB viewinformation

display snmp-agent mib-view

3.5.11 Conguring the Local SNMP Engine IDThis operation enables you to congure an engine ID that uniquely identies an SNMP entity.



Conguration Guide

Background InformationWith no manually congured ID, the MA5600 will automatically initialize one at startup.

Procedure

Step 1 Run the snmp-agent local-engineid command to congure the local SNMP engine ID.

Step 2 Run the display snmp-agent local-engineid command to query the local SNMP engine ID.

—-End

Example

To congure the engine ID of the local SNMP entity as 0101010110000, do as follows:huawei(config)#snmp-agent local-engineid 0101010110000huawei(config)#display snmp-agent local-engineid

SNMP local EngineID: 010101011000

Related Operations

Table 3-13 lists the related operations for conguring the local SNMP engine ID.

Table 3-13 Related operations for conguring the local SNMP engine ID

To… Run the Command…Restore the default local SNMP engineID

undo snmp-agent local-engineid

Display the local SNMP engine IDinformation

display snmp-agent local-engineid

Display the remote SNMP engine IDinformation

display snmp-agent remote-engineid

3.5.12 Enabling the Handshake Function between the MA5600and the N2000

This operation enables you to enable the handshake function between the MA5600 and theN2000.

Background InformationBy default, the handshake function between the MA5600 and the N2000 is disabled.

Procedure

Step 1 Run the system handshake enable command to enable the handshake function between theMA5600 and the N2000.

Step 2 Run the display system handshake command to query the handshake function between theMA5600 and the N2000.

—-End

Example

To enable the handshake function between the MA5600 and the N2000, do as follows:huawei(config)#system handshake enable



huawei(config)#display system handshakesystem handshake : enablesystem handshake interval : 300s----------------------------------------------IP of NMS Status between NMS and device----------------------------------------------10.71.53.108 in register----------------------------------------------

Related OperationsTable 3-14 lists the related operations for enabling the handshake function between theMA5600 and the N2000.

Table 3-14 Related operations for enabling the handshake function between the MA5600and the N2000

To… Run the Command…Disable the handshake function betweenthe MA5600 and the N2000

system handshake disable

Set the handshake interval system handshake intervalDisplay the information about handshakebetween the MA5600 and the N2000

display system handshake

3.5.13 Setting the Handshake IntervalThis operation enables you to set the handshake interval.

Background Informationn By default, the handshake interval between the MA5600 and the N2000 is zero second.n The handshake interval between the MA5600 and the N2000 determines the handshake

frequency.– When the interval is short, and the number of network elements under the N2000 is

large, the N2000 will be over-tasked to handle increasing handshake packets.– When the interval is long, and the MA5600 and the N2000 are disconnected, the

N2000 will fail to nd the fault in time.n You can set an appropriate handshake interval according to actual conditions.

ProcedureStep 1 Run the system handshake interval command to set the handshake interval.

Step 2 Run the display system handshake command to query he handshake interval.

—-End

ExampleTo set the handshake interval to 10 seconds, do as follows:huawei(config)#system handshake interval 10huawei(config)#display system handshakesystem handshake : enablesystem handshake interval : 10s----------------------------------------------IP of NMS Status between NMS and device----------------------------------------------10.71.53.108 in register



Conguration Guide

----------------------------------------------

Related Operations

Table 3-15 lists the related operations for setting the handshake interval.

Table 3-15 Related operations for setting the handshake interval

To… Run the Command…Congure the handshake functionbetween the MA5600 and the N2000

system handshake { enable | disable }

Display the handshake informationbetween the MA5600 and the N2000

display system handshake

3.6 Conguring the IP Address of the Outband NMSInterface

This operation enables you to congure the IP address of the outband NMS interface(maintenance network port).

Background Informationn By default, the IP address of the maintenance network port (ETH port on the control

board) is 10.11.104.1, and the subnet mask is 255.255.0.0.n Make sure that the IP address of the ETH port is located in the same subnet as that of

the gateway or the PC used for maintaining the MA5600.n After setting the IP address, keep the record for future reference.

Procedure

Step 1 Run the interface meth command to enter meth mode.

Step 2 Run the ip address command to set the IP address of the ETH port on the control board.

Step 3 Run the display interface meth command to query the IP address of the ETH port on thecontrol board.

—-End

Example

To the IP address of the ETH port as 10.10.10.1 and the subnet mask as 255.255.255.0, doas follows:huawei(config)#interface meth 0huawei(config-if-meth0)#ip address 10.10.10.1 255.255.255.0huawei(config)#display interface meth 0meth0 current state : UPLine protocol current state : UPDescription : HUAWEI, Quidway Series, meth0 InterfaceThe Maximum Transmit Unit is 1500 bytesInternet Address is 10.10.10.1/24IP Sending Frames’ Format is PKTFMT_ETHNT_2, Hardware address is 00e0-fcaa-8516Auto-duplex(Full), Auto-speed(100M)

5 minutes input rate 1549 bytes/sec, 14 packets/sec5 minutes output rate 168 bytes/sec, 1 packets/sec10508484 packets input, 1472712535 bytes2213003 packets output, 712283310 bytes



Related Operation

Table 3-16 lists the related operation for conguring the IP address of the outband NMSinterface.

Table 3-16 Related operation for conguring the IP address of the outband NMS interface

To… Run the Command… RemarksDelete the IP addressof the outband NMSinterface

undo ip address In meth mode.

3.7 Conguring an NMS RouteThis operation enables you to create a static route between the MA5600 and the manager.

Background Informationn The system supports up to 4096 static routes.n When the MA5600 and the N2000 are located in different subnets, a route shall be

congured for the gateway to forward IP packets.

Procedure

Step 1 Run the ip route-static command to congure a static route.

Step 2 Run the display ip routing-table command to query the current routing conguration.

—-End

Example

To create a route to subnet 10.71.8.0 (where the manager is located), and the gateway as10.71.53.1, do as follows:huawei(config)#ip route-static 10.71.8.0 255.255.255.0 10.71.53.1huawei(config)#display ip routing-table verboseRouting Table : Public

Destinations : 3 Routes : 3

Destination: 10.0.0.0/8Protocol: Static Process ID: 0

Preference: 60 Cost: 0NextHop: 10.71.62.1 Interface: meth0

RelayNextHop: 0.0.0.0 Neighbour: 0.0.0.0Label: NULL Tunnel ID: 0x0

SecTunnel ID: 0x0BkNextHop: 0.0.0.0 BkInterface:BkLabel: NULL Tunnel ID: 0x0

SecTunnel ID: 0x0State: Active Adv GotQ Age: 7d06h27m42sTag: 0

Destination: 10.71.62.0/24Protocol: Direct Process ID: 0

Preference: 0 Cost: 0NextHop: 10.71.62.36 Interface: meth0

RelayNextHop: 0.0.0.0 Neighbour: 0.0.0.0Label: NULL Tunnel ID: 0x0

SecTunnel ID: 0x0BkNextHop: 0.0.0.0 BkInterface:BkLabel: NULL Tunnel ID: 0x0

SecTunnel ID: 0x0State: Active Adv Age: 7d06h27m42sTag: 0



Conguration Guide

Related Operation

Table 3-17 lists the related operation for conguring an NMS route.

Table 3-17 Related operation for conguring an NMS route.

To... Run the Command...Delete an existing route undo ip route-static

3.8 Conguring the IP Address of the Inband NMSInterface

This operation enables you to congure the IP address of the inband NMS interface.

Background Informationn The MA5600 realizes inband NMS through the Ethernet port on the control board .n To prevent login and access to the MA5600 from the user end, it is recommended that the

standard VLAN be used as the NMS VLAN.

Procedure

Step 1 Run the vlan command to create an NMS VLAN.

Step 2 Run the interface vlanif command to enter VLAN interface mode.

Step 3 Run the ip address command to set the IP address of the VLAN interface.

Step 4 Run the display interface vlanif command to query the IP address of the VLAN interface.

—-End

To set the IP address of the inband NMS interface as 10.10.10.2 and the subnet mask as255.255.255.0, do as follows:huawei(config)#vlan 1000 standardhuawei(config)#interface vlanif 1000huawei(config-if-vlanif1000)#ip address 10.10.10.2 255.255.255.0huawei(config)#display interface vlanif 1000Vlanif1000 current state : upLine protocol current state : upDescription : HUAWEI, Quidway Series, Vlanif1000 InterfaceThe Maximum Transmit Unit is 1500 bytesInternet Address is 10.10.10.2/24IP Sending Frames’ Format is PKTFMT_ETHNT_2, Hardware address is 00e0.fc11.223c

Related Operation

Table 3-18 lists the related operation of conguring the IP address of the inband NMS interface.

Table 3-18 Related operation of conguring the IP address of the inband NMS interface

To… Run the Command… RemarksDelete the IP address ofthe existing inband NMSinterface

undo ip address In VLAN interface mode.


SmartAX MA5600 Multi-service Access ModuleConguration Guide 4 Log Host Conguration

4 Log Host Conguration


4.1 OverviewThis section describes the functions of the log and the application of the log to the MA5600.4.2 Conguration Example of a Log HostThis example shows how to congure a log host. After the conguration, the logs reported bythe MA5600 can be displayed on the log lost.4.3 Conguring a Log HostThis operation enables you to congure a log host, that is, add and activate the log host.4.4 Deleting a Log HostThis operation enables you to delete a log host.4.5 Deactivating a Log HostThis operation enables you to deactivate a log host.4.6 Querying LogsThis operation enables you to query logs.


4 Log Host CongurationSmartAX MA5600 Multi-service Access Module

Conguration Guide

4.1 OverviewThis section describes the functions of the log and the application of the log to the MA5600.

Logs can serve as important references for system maintenance and troubleshooting.

In the MA5600, you can query the executed commands and other important informationrecorded in logs.

4.2 Conguration Example of a Log HostThis example shows how to congure a log host. After the conguration, the logs reported bythe MA5600 can be displayed on the log lost.

Prerequisites

n The related inband NMS conguration has been complete. You can telnet to the MA5600to maintain it through PC 1 and PC 2.

n PC 3 is installed with FTP or TFTP software, and can receive and save the logs reportedby the MA5600.

NetworkingFigure 4-1 shows a sample network of the log host conguration.

In the networking, PCs 1, 2 and 3 connect to the GE port of the MA5600 over a LAN. PC 3works as the log host of the MA5600.

Figure 4-1 Sample network of the log host conguration

Data PlanTable 4-1 lists the data plan for conguring a log host.



Table 4-1 Data plan for conguring a log host

Item DataInband management interface (GEport) of the MA5600

IP address: 10.10.10.2Subnet mask: 255.255.255.0

PC 3 IP address: 10.10.10.1Subnet mask: 255.255.255.0

Procedure

Step 1 Add a log host.huawei(config)#loghost add 10.10.10.1 huawei

Step 2 Activate the log host.huawei(config)#loghost activate name huawei

Step 3 Check the connectivity between the MA5600 and the log host to verify that the MA5600can communicate with the log host smoothly.

Step 4 Congure the TFTP software of the log host.1. Enable the syslog server function.2. Set the directory for saving the reported logs.

—-End

Result

After the conguration:n You can query the logs in the directory for saving the logs.n The logs record the operation commands executed on PCs 1 and 2 to the system. They are

the same as those queried on the MA5600.

4.3 Conguring a Log HostThis operation enables you to congure a log host, that is, add and activate the log host.

Background Informationn The MA5600 can log important operations in the UNIX host (also referred to as the log

server) of the internal network through the syslog mechanism.n After conguring a log host, you need to enable the log host service of the log server,

and congure the directory for saving logs and the log le name to enable real-timereporting of logs.

Procedure

Step 1 Run the loghost add command to add a log host.

Step 2 Run the loghost activate command to activate the log host.

Step 3 Run the display loghost list command to display the log host.

—-End

Example

To add log host named huawei with IP address of 10.10.10.1, and activate it, do as follows:



Conguration Guide

huawei(config)#loghost add 10.10.10.1 huaweihuawei(config)#loghost activate name huaweihuawei(config)#display loghost list name huaweiLog server configuration:IP address : 10.10.10.1Host name : huaweiTerminal state : Normal

Related Operations

Table 4-2 lists the related operations for conguring a log host.

Table 4-2 Related operations for conguring a log host

To… Run the Command…Deactivate a log host loghost deactivateDelete a log host loghost delete

Set the source interface sending log syslog source

4.4 Deleting a Log HostThis operation enables you to delete a log host.

Procedure

Step 1 Run the loghost delete command to delete a log host


—-End

Example

To delete the log host with IP address 10.10.10.1, do as follows:huawei#loghost delete ip 10.10.10.1huawei(config)#display loghost list ip 10.10.10.1Failure: The log server not exist

Related Operations

Table 4-3 lists the related operations for conguring a log host.

Table 4-3 Related operations for conguring a log host

To… Run the Command…Display the conguration of a log host display loghost listAdd a log host loghost add

Activate a log host loghost activateDeactivate a log host loghost deactivate

4.5 Deactivating a Log HostThis operation enables you to deactivate a log host.



Background InformationThe system sends log information only to the activated log hosts.

Procedure

Step 1 Run the loghost deactivate command to deactivate a log host.


—-End

Example

To deactivate the log host with IP address 10.10.10.1, do as follows:huawei#loghost deactivate ip 10.10.10.1huawei#display loghost list ip 10.10.10.1Log server configuration:IP address : 10.10.10.1Host name : huaweiTerminal state : Deactivate

Related Operations

Table 4-4 lists the related operations for deactivating a log host.

Table 4-4 Related operations for deactivating a log host

To… Run the Command…Display the conguration of a log host display loghost listActivate a log host loghost activateAdd a log host loghost add

Delete a log host loghost delete

4.6 Querying LogsThis operation enables you to query logs.

Background Informationn The MA5600 can keep logs of the latest 512 operations. System administrators can query

the latest executed operation commands through logs. The executed query commandscannot be recorded in the logs.

n Up to 512 logs can be stored in the system. When there are more than 512 records, theold records will be overwritten.

n Query and record the system logs at once in the case of system failure, to avoid lossof logs that are helpful for fault locating.

n To record the operation correctly, make sure that the system time is correct before serviceconguration.

Procedure

Run the display log command to query logs.

—-End



Conguration Guide

Example

To query the logs of operations performed by user "root" on July 18, 2005, do as follows:huawei(config)#display log name root 2005-07-18-------------------------------------------------------------------------No. UserName Domain Date&Time IP-Address357 root -- 2005-07-18 20:20:50 10.11.0.213Cmd: log off-------------------------------------------------------------------------No. UserName Domain Date&Time IP-Address356 root -- 2005-07-18 20:11:42 10.11.0.213Cmd: quit-------------------------------------------------------------------------No. UserName Domain Date&Time IP-Address355 root -- 2005-07-18 20:11:39 10.11.0.213Cmd: ip address 1.1.4.1 24 sub-------------------------------------------------------------------------No. UserName Domain Date&Time IP-Address354 root -- 2005-07-18 20:11:27 10.11.0.213Cmd: ip address 1.1.4.1 32 sub-------------------------------------------------------------------------No. UserName Domain Date&Time IP-Address353 root -- 2005-07-18 20:11:04 10.11.0.213



SmartAX MA5600 Multi-service Access ModuleConguration Guide 5 User Management

5 User Management


5.1 OverviewThis section describes the denition of users and user levels and authorities supported by theMA5600.5.2 Adding a UserThis operation enables you to add a user who can log in to the MA5600 to maintain it.5.3 Modifying the User AttributesYou can modify the user attributes, such as authority, password, the permitted reenter numberand the append information.5.4 Disconnecting an Online UserThis operation enables you to disconnect an online user to prevent the user from loggingin to the MA5600.5.5 Deleting a UserThis operation enables you to delete a user which is not permitted to log in to the MA5600.


5 User ManagementSmartAX MA5600 Multi-service Access Module

Conguration Guide

5.1 OverviewThis section describes the denition of users and user levels and authorities supported by theMA5600.

Service DescriptionUsers herein refer to persons who congure and maintain the MA5600 through CLI.

Service SpecicationIn terms of authority, MA5600 users can be divided into four levels:n Common usern Operatorn Administratorn Super userUsers at all levels can only add a user with lower levels than theirs.

Table 5-1 lists the authorities for users at all levels.

Table 5-1 User authorities

User Level AuthorityCommon user Common users perform basic system operation and simple query

operation.Operator Operator can congure the MA5600 and services.Administrator andsuper user

Common:

n Perform all operations.n Maintain the MA5600 user accounts and user authority.

Difference:

n Only one super user exists in the system, while multi administratorsin the system.

n The super user is of the highest level in the system.n Super user can create the administrator level account, whileadministrator has no authority to add a super user.

5.2 Adding a UserThis operation enables you to add a user who can log in to the MA5600 to maintain it.

Background Informationn The super user and the administrator can add a user with a lower level than theirs. That is:

– The super user can add an administrator, operators and common users.– The administrator can only add a operator and a common user.

n A user name is unique, cannot be all or online.n The super user or administrator can add multiple users to the system at a time. Up to 127

users can be added to the system. If the root user counts, up to 128 users can be added.n The system supports up to 10 terminal users online simultaneously.



When adding a user, you need to congure the user attributes, including the user account,password, permitted reenter number, authority and append information.

Table 5-2 lists the user attributes.

Table 5-2 User Attributes

User attribute DescriptionUser name A user name (or a user account) consists of 1-15 printable characters.

A user name is unique, case sensitive and cannot contain any space.Password A password consists of 0-15 characters. It is case sensitive and cannot

be null.Permitted reenternumber

The permitted reenter number means the concurrent logon count ofa user account. Whether a user name can be used to log in to theMA5600 from several terminals at the same time depends on thepermitted reenter number. It is in the range of 0–4, and is generallyset to 1.

Authority In terms of authority, users can be divided into four levels:

n Common usern Operatorn Administratorn Super user

AppendInformation

Append information is a kind of optional and supplementaryinformation. It consists of a chain of characters and its total length islimited to 30. It can be telephone number or address of a user.

Procedure

Step 1 Run the terminal user name command to add a user.

Step 2 Run the display terminal user command to query a user.

—-End

Example

To add a common user named huawei with password of huawei, reenter number of 3 andappend information user do as follows:huawei(config)#terminal user name

User Name(<=15 chars):huaweiUser Password(<=15 chars):huawei

Confirm Password(<=15 chars):huawei

User’s Level:1. Common User 2. Operator 3. Administrator:1

Permitted Reenter Number(0--4):3User’s Appended Info(<=30 chars):userThis user has been addedRepeat this operation? (y/n)[n]:n

huawei(config)#display terminal user allName Level Status ReenterNum AppendInfo--------------------------------------------------------------------root Super Online 1 nonehuawei User Offline 3 user--------------------------------------------------------------------Total record(s) number: 2



Conguration Guide

Related Operation

Table 5-3 lists the related operation for adding a user.

Table 5-3 Related operation for adding a user

To... Run the Command... RemarksDelete a user undo terminal user name n Only the super user and administrators

can delete users at lower levels.n Users cannot delete themselves.n User root cannot be deleted.n An online user cannot be deleted. Todelete an online user , you need todisconnect the user rst.

n Multi users can be deleted at a time.

5.3 Modifying the User AttributesYou can modify the user attributes, such as authority, password, the permitted reenter numberand the append information.

5.3.1 Modifying a User LevelThis operation enables you to modify a user authority.5.3.2 Changing a User PasswordThis operation enables you to change a user password to guarantee equipment security.5.3.3 Modifying the Permitted Reenter NumberThis operation enables you to modify the permitted reenter number of a user to ensure theuser authority.5.3.4 Modifying the Append InformationThis operation enables you to modify the append information of a user so as to update userinformation in time.

5.3.1 Modifying a User Level

This operation enables you to modify a user authority.

Background InformationOnly the super user and administrators can perform the operation for users at lower levels.n The super user can modify the level of a user to that of a common user, an operator,

or an administrator.n Administrators can modify the level of a user to that of a common user, or an operator.

Procedure

Step 1 Run the terminal user level command to modify a user level.

Step 2 Run the display terminal user command to query a user level.

—-End



Example

To change a common user huawei to an operator, do as follows:huawei(config)#terminal user levelUser Name(<=15 chars):huawei

1. Common User 2. Operator 3.Administrator:2User’s Level:2Confirm Level: 2Information will take effect when this user logs on next timeRepeat this operation? (y/n)[n]:n

huawei(config)#display terminal user all---------------------------------------------------------------------------Name Level Status ReenterNum AppendInfo---------------------------------------------------------------------------root Super Online 1 nonehuawei Operator Offline 3 user---------------------------------------------------------------------------Total record(s) number: 2

Related Operations

Table 5-4 lists the related operations for modifying a user level.

Table 5-4 Related operations for modifying a user level

To... Run the Command...Change the user password terminal user passwordModify the permitted reenter number of auser

terminal user reenter

Modify the append information of a user terminal user apdinfo

5.3.2 Changing a User PasswordThis operation enables you to change a user password to guarantee equipment security.

Background Informationn The super user and the administrator can change the passwords of users at lower levels

(including themselves). When changing the passwords of users at lower levels, the superuser and the administrator need not to input the old password.

n The common user and the operator can only change their own password, and need toinput the old password.

Procedure

Step 1 Run the terminal user password command to change a user password.

Step 2 Log on to the equipment with the user old name and old password.

—-End

Example

To change the password of a common user huawei, do as follows:huawei(config)#terminal user passwordUser name (<=15 chars):huaweiNew password(<=15 chars):huawei



Conguration Guide

Confirm Password(<=15 chars):huawei

Information takes effectRepeat this operation? (y/n)[n]:n

Related Operations

Table 5-5 lists the related operations for changing a user password.

Table 5-5 Related operations for changing a user password

To... Run the Command...Modify user level terminal user levelModify the permitted reenter number of auser


Modify the append information of a user terminal user apdinfo

5.3.3 Modifying the Permitted Reenter NumberThis operation enables you to modify the permitted reenter number of a user to ensure theuser authority.

Background Informationn The super user and administrators can modify the permitted reenter number of users

at lower levels.n It is not allowed to modify the permitted reenter number of the super user.

Procedure

Step 1 Run the terminal user reenter command to modify the permitted reenter number of a user.

Step 2 Run the display terminal user command to query the permitted reenter number of a user.

—-End

Example

To modify the permitted reenter number of the common user huawei to 1, do as follows:huawei(config)#terminal user reenterUser name (<=15 chars):huaweiPermitted reenter number(0--4):1Confirm Reenter Number(0--4):1Information takes effectRepeat this operation? (y/n)[n]:n

huawei(config)#display terminal user all---------------------------------------------------------------------------Name Level Status ReenterNum AppendInfo---------------------------------------------------------------------------root Super Online 1 nonehuawei Operator Offline 1 user---------------------------------------------------------------------------Total record(s) number: 2

Related Operations

Table 5-6 lists the related operations for modifying the permitted reenter number.



Table 5-6 The related operations for modifying the permitted reenter number.

To... Run the Command...Modify the prole bound with a user terminal user user-proleModify user level terminal user levelChange user password terminal user passwordModify the append information of user terminal user apdinfo

5.3.4 Modifying the Append InformationThis operation enables you to modify the append information of a user so as to update userinformation in time.

Background Informationn The super user and administrators can modify their own append information and that

of users at lower levels.n Common users and operators can modify their own append information.

Procedure

Step 1 Run the terminal user apdinfo command to modify the append information of a user.

Step 2 Run the display terminal user command to query the append information of a user.

—-End

Example

To modify the append information of the common user huawei, do as follows:huawei(config)#terminal user apdinfoUser name (<=15 chars):huaweiUser’s Appended Info(<=30 chars):[email protected] takes effectRepeat this operation? (y/n)[n]:n

huawei(config)#display terminal user all---------------------------------------------------------------------------Name Level Status ReenterNum AppendInfo---------------------------------------------------------------------------root Super Online 1 nonehuawei Operator Offline 1 support@huawei.com---------------------------------------------------------------------------Total record(s) number: 2

Related Operations

Table 5-7 lists the related operations for modifying the append information.

Table 5-7 Related operations for modifying the append information

To... Run the Command...Modify the user level terminal user levelChange the user password terminal user passwordModify the permitted reenter number of auser




Conguration Guide

5.4 Disconnecting an Online UserThis operation enables you to disconnect an online user to prevent the user from loggingin to the MA5600.

Background InformationOnly the super user and administrators can disconnect an online user at lower levels.

Procedure

Step 1 Run the client kickoff command to disconnect an online user.

Step 2 Run the display client command to query an online user.

—-End

Example

To disconnect user 2, and then run the display client command to nd the user has beendisconnected, do as follows:huawei#client kickoff 2huawei#display client-----------------------------------------------------------------------------ID Client name Domain name IP Address Login Time-----------------------------------------------------------------------------1 root -- 10.71.60.100 2006-02-08 12:26:53-----------------------------------------------------------------------------

Related Operation

Table 5-8 lists the related operation for disconnecting an online user.

Table 5-8 Related operation for disconnection an online user

To... Run the Command...Delete a user undo terminal user name

5.5 Deleting a UserThis operation enables you to delete a user which is not permitted to log in to the MA5600.

Background Informationn Only the super user and administrators can delete the users at lower levels than themselves.n Users cannot delete themselves.n User root cannot be deleted.n An online user cannot be deleted. To delete an online user, you need to disconnect the

user rst.n Multiple users can be deleted at a time.

Procedure

Step 1 Run the undo terminal user name command to delete users.

Step 2 Run the display terminal user command to verify that a user is deleted successfully.



—-End

Example

To delete a user named huawei, do as follows:huawei(config)#undo terminal user nameUser Name(<=15 chars):huaweiAre you sure to delete the user?(y/n)[n]:yThis user has been deletedRepeat this operation? (y/n)[n]:n

huawei(config)#display terminal user all---------------------------------------------------------------------------Name Level Status ReenterNum AppendInfo---------------------------------------------------------------------------root Super Online 1 none---------------------------------------------------------------------------Total record(s) number: 1

Related Operations

Table 5-9 lists the related operations for deleting a user

Table 5-9 Related operations for deleting a user

To... Run the Command...Disconnect an online user client kickoffAdd a user terminal user name


SmartAX MA5600 Multi-service Access ModuleConguration Guide 6 Device Management

6 Device Management


6.1 OverviewThis section describes the contents of the chapter and the board status.6.2 Setting the Description of a ShelfThis operation enables you to set the description for a shelf to differentiate it from other shelves.6.3 Resetting a Service BoardThis operation enables you to reset a service board when it is unstable.6.4 Adding a Service Board OfineThis operation enables you to add and congure an expected service board in an idle slotofine. After a corresponding service board is inserted into the slot, the service board canrun immediately.6.5 Conrming a Service BoardThis operation enables you to conrm a service board that has been discovered automatically.6.6 Deleting a Service BoardThis operation enables you to delete a service board that is no longer in need.06.7 Resetting the Control BoardsThis operation enables you to reset the control boards. When you need to reset the controlboards to run the newly-loaded program and database, use this command.6.8 Prohibiting a Service BoardThis operation enables you to prohibit a service board.6.9 Managing a SubboardThis section describes the operation purpose and specication of device management, the rulesof subboard combination and replacement.


6 Device ManagementSmartAX MA5600 Multi-service Access Module

Conguration Guide

6.1 OverviewThis section describes the contents of the chapter and the board status.

Service DescriptionDevice management involves:n Shelf management

– Setting description of a shelf– Querying description of a shelf– Querying attributes of a shelf

n Control board management– Resetting a control board– Querying a control board

n Service board management– Adding a service board ofine– Conrming a service board– Deleting a service board– Resetting a service board– Prohibiting/Unprohibiting a service board– Querying a service board

n Subboard management– Replacing a subboard– Querying a subboard

Board StatusTable 6-1 lists the service board status.

Table 6-1 Service board status

State English name RemarksNormal Normal It indicates that the board is running

in the normal state.Failed Failed It indicates that the board is faulty.Cong Cong It indicates that the board is being

congured.Auto-nd Auto_nd It indicates that the board is just

inserted, but not conrmed yet.Prohibited Prohibited It indicates that the board is

prohibited.

6.2 Setting the Description of a ShelfThis operation enables you to set the description for a shelf to differentiate it from other shelves.

Procedure

Step 1 Run the frame set command to set the description of a shelf.



Step 2 Run the display frame desc command to query the description of a shelf.

—-End

Example

To set the description of shelf 0, do as follows:huawei(config)#frame set 0 desc adlhuawei(config)#display frame desc 0--------------------------------------------------------FrameID Frame description--------------------------------------------------------0 adl--------------------------------------------------------

Related Operation

Table 6-2 lists the related operation for setting the description of a shelf.

Table 6-2 Related operation for setting the description of a shelf

To... Run the Command...Query the description of a shelf display frame info

6.3 Resetting a Service BoardThis operation enables you to reset a service board when it is unstable.

Background Informationn The system will generate a fault alarm after the reset operation and a recovery alarm

after the board recovers.n When the service boards are enabled after the board reset operation succeeds, the service

boards report registration information to the control board so that the control board cancongure their data to restore the services.

Procedure

Run the board reset command to reset a service board.

—-End

Example

To reset service board 0/1, do as follows:huawei(config)#board reset 0/1Are you sure to reset board? (y/n)[n]:y0 frame 1 slot reset board message sent successfully...

6.4 Adding a Service Board OfineThis operation enables you to add and congure an expected service board in an idle slotofine. After a corresponding service board is inserted into the slot, the service board canrun immediately.



Conguration Guide

Background Informationn Added to an idle slot ofine, a service board is in failed state. It will return to normal state

after a board of the same type is inserted in the slot. If the inserted board is not of thesame type, the service board cannot work.

n You can add a service board into an idle slot.

Procedure

Step 1 Run the board add command to add a service board.

Step 2 Run the display board command to query the board.

—-End

Example

To add a service board in slot 2, do as follows:huawei(config)#board add 0/2 h561SHEAhuawei(config)#display board 0-------------------------------------------------------------------------SlotID BoardName Status SubType0 SubType1-------------------------------------------------------------------------0 H561SHEA Failed12 H561SHEA Failed34567 H561SCU Active_normal M2GA E4GFA891011 H561ETHA Failed O4GS1213 H561SHEA Failed1415-------------------------------------------------------------------------

Related Operation

Table 6-3 lists the related operation for adding a service board ofine.

Table 6-3 Related operation for adding a service board ofine

To... Run the Command... RemarksConrm a serviceboard

board conrm The automatically identied board isin auto-nd state. It can be used onlyafter it is conrmed.

6.5 Conrming a Service BoardThis operation enables you to conrm a service board that has been discovered automatically.

Background InformationAfter you insert a service board into an idle slot, the system automatically identies the boardand its subboard. The automatically identied service board is in the auto-nd state. To enablethe board for normal service transmission, you need to conrm this board.



Procedure

Step 1 Run the board conrm command to conrm a service board.

Step 2 Run the display board command to query the conrmed service board.

—-End

Example

To conrm board 0/2, do as follows:huawei(config)#board confirm 0/20 frame 2 slot board confirm successfully

Related Operations

Table 6-4 lists the related operations for conrming a service board.

Table 6-4 Related operations for conrming a service board

To... Run theCommand...

Remarks

Query a board display board You can run the command to query theboard type, status and port information.

Add a service boardofine

board add You can add a service board only to anidle slot.

6.6 Deleting a Service BoardThis operation enables you to delete a service board that is no longer in need.0

Background Informationn You cannot delete a service board with ongoing service.n You can not delete a service board that is in the auto-nd state.

Procedure

Step 1 Run the board delete command to delete a service board.

Step 2 Run the display board command to query service board list.

—-End

Example

To delete service board 0/2, do as follows:huawei(config)#board delete 0/2

are you sure to delete this board? (y/n)[n]:yBoard delete successfully

6.7 Resetting the Control BoardsThis operation enables you to reset the control boards. When you need to reset the controlboards to run the newly-loaded program and database, use this command.



Conguration Guide

Background Informationn The control boards include active control board and standby control board.n Resetting an active control board leads to two results:

– In the case of an active/standby conguration, the operation has no adverse impacton the ongoing services.

– In the case there is no standby control board, the operation disconnects the controlboard from all the service boards, that is, all service boards in the system are reset.

n The reset operation may cause loss to unsaved data. Therefore, before the operation, runthe save command to save the system data.

n Reset the system only when necessary. In general, the system is reset after newapplication or database is loaded.

n The board reset command cannot be used to reset the control boards.n The reboot active command and the reboot standby command can be used to reset the

active control board and standby control board respectively.

Procedure

Run the reboot command to reset the control board.

—-End

Examples

To reset the active control board, do as follows:huawei#reboot activePlease check whether data has saved, the unsaved data may lose if reboot

active board, are you sure to reboot active board? (y/n)[n]:yStandby board failure or not exist, reboot active will cause system reboot,

are you sure to reboot active board? (y/n)[n]:y

To reset the standby control board, do as follows:huawei#reboot standbyPlease check whether data has saved, are you sure to reboot standby board? (y/

n)[n]:y

Related Operations

Table 6-5 lists the related operations for resetting the control boards.

Table 6-5 Related operations for resetting the control boards

To... Run the Command... RemarksQuery a board display board You can query the board type, board

status and port information.Reboot system reboot system This command is used to reset the

active and standby control boards atthe same time. As a result, the serviceboards reset simultaneously.

6.8 Prohibiting a Service BoardThis operation enables you to prohibit a service board.



Background Informationn Through the operation, you can:

– Suspend (but not delete) the service of the board.– Release resources dynamically.

n You cannot prohibit a control board.n You cannot prohibit a service board that is in auto-nd state but has not been conrmed.n Prohibiting a service board interrupts the services of the board.

Procedure

Step 1 Run the board prohibit command to prohibit a service board.

Step 2 Run the display board command to query the service board status.

—-End

Example

To prohibit service board 0/2, do as follows:huawei(config)#board prohibit 0/2Prohibiting board will interrupt all services on this board, are you sure to

prohibit board? (y/n)[n]:yProhibited board successfully

Related Operation

Table 6-6 lists the related operation for prohibiting a service board.

Table 6-6 Related operation for prohibiting a service board

To... Run the Command...Unprohibit a service board undo board prohibit

6.9 Managing a SubboardThis section describes the operation purpose and specication of device management, the rulesof subboard combination and replacement.

SpecicationThe MA5600 supports inserting subboards on the multiple boards to provide multiple upstreaminterfaces. The boards include:n SCUn ISUn AIUGAmong them, the AIUG board can provide E3 and IMA subtending function.

Rules of Subboard Combination and Replacementn Rules for inserting a subboard

– The SCU board offers two subslots for the subboards. The upper subslot is numbered0, and the lower subslot is numbered 1.

– On a board, both optical and electrical subboards can be used at the same time.



Conguration Guide

n Rules for replacing a subboard– Upgrading an FE electrical subboard to a GE electrical subboard is allowed.

Degrading a GE electrical subboard to an FE electrical subboard is prohibited.– Upgrading an FE optical subboard to a GE optical subboard is allowed. Degrading a

GE optical subboard to an FE optical subboard is prohibited.– Degrading a GE optical subboard to an FE electrical subboard is allowed.– It is only allowed to change port type between a GE electrical port and a GE optical

port. Other exchanges between an electrical port and an optical port, such as theexchange between an FE electrical port and an FE optical port, an FE electrical portand a GE optical port, and a GE electrical port and an FE optical port, are prohibited.

n Rule for modifying a subboard– After the subboard is modied, the subboards shall meet the above mentioned rules.

n Rules for deleting a subboard– Service ports to be removed cannot carry any data.– After the subboard is deleted, the left subboard shall meet the above mentioned rules.

NOTE

If you do not follow the mentioned rules when replacing the subboard, the system reports the alarm,indicating the operation failure. In addition, when you run the command to query the subboard, thesystem shows the information about the original subboard, and indicates the subboard is in the faulty state.

Related OperationTable 6-7 lists the related operation for managing a subboard.

Table 6-7 Related operation for managing a subboard

To... Run the Command... RemarksQuerying a serviceboard

display board You can query the subboards used bythe board.


SmartAX MA5600 Multi-service Access ModuleConguration Guide 7 Remote User Authentication Conguration

7 Remote User Authentication Conguration


7.1 OverviewThis section describes service description and service specication of remote userauthentication on the MA5600.7.2 Related ConceptsThis section describes concepts related to remote user authentication, including AAA,RADIUS and SSH.7.3 Conguration Example of Remote User AuthenticationThis example shows how to congure the remote user authentication to prevent illegal accessto the MA5600.7.4 Conguring AAAThis section describes AAA conguration, including conguring an authentication scheme,creating a domain, specifying the authentication scheme and specifying the RADIUS servertemplate.7.5 Conguring RADIUSThis section describes RADIUS conguration, including creating a RADIUS server template,setting the IP address and port number of a RADIUS server, setting the shared key of theRADIUS server, setting the response timeout interval of a RADIUS server, setting themaximum retransmit count of RADIUS request packets, setting the RADIUS server type,conguring an NAS port and its ID format, and setting the format of user name sent to aRADIUS server.7.6 Conguring SSHThis section describes the SSH conguration, including creating the local RSA key pair,conguring the SSH user public key and conguring an SSH user.


7 Remote User Authentication CongurationSmartAX MA5600 Multi-service Access Module

Conguration Guide

7.1 OverviewThis section describes service description and service specication of remote userauthentication on the MA5600.

Service DescriptionRemote user authentication refers to the process of examining the remote users who wantto log in to the MA5600. Only authenticated users can log in to the MA5600 to manageand maintain it.

Service SpecicationsThe MA5600 authenticates remote users in the following two ways:n AAA/RADIUS

– In an authentication, authorization and accounting (AAA)/RADIUS frame, theMA5600 serves as a network access server (NAS). As for the RADIUS server, theMA5600 is a Remote Authentication Dial-In User Service (RADIUS) client.

– When the AAA/RADIUS function is enabled, the MA5600 forwards the user nameand password of the login user to the RADIUS server for authentication.

n SSH– The SSH protocol is based on a server-client mode, using TCP for interconnection

to realize secure remote access to insecure networks.

7.2 Related ConceptsThis section describes concepts related to remote user authentication, including AAA,RADIUS and SSH.

7.2.1 Introduction to AAAThis section introduces what is AAA and advantages of AAA.7.2.2 Introduction to RADIUSThis section describes what is RADIUS and principles of RADIUS.7.2.3 Introduction to SSHThis section describes what is SSH and advantages of the SSH protocol.

7.2.1 Introduction to AAAThis section introduces what is AAA and advantages of AAA.

What Is AAAAuthentication, Authorization and Accounting (AAA) is a framework for network securitymanagement.

Advantages of AAAOperating in the server-client model, the AAA framework uses the clients as managed objectsand the server for storing user information.

The AAA framework has the following advantages:n Excellent expansibilityn Standard authentication schemesn Centralized user management



n Multi-system based security mechanism

7.2.2 Introduction to RADIUSThis section describes what is RADIUS and principles of RADIUS.

What Is RADIUSAs a management framework, AAA can be carried out by a number of protocols. RADIUS is acommon one among them.

RADIUS is an information exchange protocol with the distributed server-client model. It isused to manage a large number of distributed dialup users.

An RADIUS server manages a simple user database to provide AAA function for users andmodify users’ service information according to the service types and authorities.

The users forward their AAA requests to the RADIUS server through a NAS.

Principles of RADIUSn When you receive a request from a user to access other network (or use some network

resources), the NAS forwards the user data to the RADIUS server in line with the relatedmechanism dened by the RADIUS protocol.

n The RADIUS server authenticates the user account and password contained in the userdata, and returns the data required data to the NAS.

NOTE

n The NAS and the RADIUS server also use a key to encrypt the data exchanged between them.In this case, the data such as the password can be avoided being intercepted or stolen.

n The RADIUS conguration only denes the parameters related to the connections between theNAS and the RADIUS server. To make these parameters take effect, you must enter domainmode rst, specify a RADIUS scheme, and then select the RADIUS AAA mode.

7.2.3 Introduction to SSHThis section describes what is SSH and advantages of the SSH protocol.

What Is SSHSSH provides authentication, encryption, and identication to guarantee networkcommunication security. When users telnet the router through an insecure network, SSH offerssecurity guarantee and powerful authentication to protect the route against attacks such as IPaddress spoong and interception of plain text password.

SSH RFCIETF dened SSH RFC document. There are two versions of the SSH protocol:n SSHv1.5: SSHv1.5 was issued earlier than SSHv2. At present, a majority of SSHs

support it.n SSHv2: SSHv2 is more standard and precise than SSHv1.5. It enhances security and adds

the le transfer function.

AdvantagesThe SSH protocol is based on a client/server mode. It uses TCP for interconnection torealize secure remote access through insecure networks. Compared with telnet, SSH has thefollowing features:



Conguration Guide

n SSH supports the methods of using the password and RSA public key to authenticateclients.

n SSH supports Data Encryption Standard (DES), 3DES, and AES to encrypt session data.n When the SSH server communicates with the SSH client, both the user name and the

password are encrypted to prevent the password from being intercepted.n SSH encrypts the data to guarantee the security and reliability during the transmission.n SSH supports authentication of a server.n SSH supports the MD5 and SHA algorithms to identify the integrity of the session data

to guarantee authenticity of the session data and prevent the data from being alteredmaliciously during the transfer process.

n SSH supports RSA authentication mode. In this mode, SSH implements secure keyexchange and authentication of the server by generating public and private keys. Thesekeys are generated according to the encryption principle of the asymmetric encryptionsystem. This guarantees the whole secure process of sessions.

7.3 Conguration Example of Remote User AuthenticationThis example shows how to congure the remote user authentication to prevent illegal accessto the MA5600.

NetworkingFigure 7-1 shows a sample network for conguring the remote user authentication.

Figure 7-1 Sample network for conguring the remote user authentication

Data PlanTable 7-1 lists the data plan for conguring the remote user authentication.

Table 7-1 Data plan for conguring the remote user authentication

Item DataIP address of the primary RADIUS server 10.10.10.1



Item DataIP address of the secondary RADIUSserver

10.10.10.2

Authentication port ID of the RADIUSserver

1812

NOTE

This chapter introduces conguration of the MA5600 only. For conguration of the RADIUS server,refer to related documents. The RADIUS conguration prole contains the IP address and port numberof the RADIUS server. Congure other parameters such as RADIUS shared key and RADIUS servertype according to the practice.

Conguration FlowchartFigure 7-2 shows the owchart for conguring the remote user authentication.

Figure 7-2 Flowchart for conguring the remote user authentication

Procedure

Step 1 Create a RADIUS server virtual prole.huawei(config)#radius-server template radius2005

Step 2 Bind the RADIUS server virtual prole with the authentication server.huawei(config-radius-radius2005)#radius-server authentication 10.10.10.1 1812huawei(config-radius-radius2005)#radius-server authentication10.10.10.2 1812 secondary



Conguration Guide

Step 3 Create the authentication scheme.huawei(config-radius-radius2005)#quithuawei(config)#aaahuawei(config-aaa)#authentication-scheme huawei

Step 4 Select authentication mode.huawei(config-aaa-authen-huawei)#authentication-mode radius

Step 5 Create a domain.huawei(config-aaa-authen-huawei)#quithuawei(config-aaa)#domain radius1

Step 6 Bind the domain with the authentication scheme.huawei(config-aaa-domain-radius1)#authentication-scheme huawei

Step 7 Bind the domain with the RADIUS server virtual prole.huawei(config-aaa-domain-radius1)#radius-server radius2005

—-End

Result

After the conguration on the RADIUS server is complete, log on to the MA5600 and type inthe user name in the format of "userid@domain-name". If the RADIUS server contains theuser name and domain conguration, the user can log on to it and manage the devices.

7.4 Conguring AAAThis section describes AAA conguration, including conguring an authentication scheme,creating a domain, specifying the authentication scheme and specifying the RADIUS servertemplate.

7.4.1 Conguring an Authentication SchemeThis operation enables you to congure an authentication scheme to dene the policy toauthenticate users requesting for login.7.4.2 Creating a DomainThis operation enables you to create a domain.7.4.3 Specifying the Authentication SchemeThis operation enables you to specify the authentication scheme for all the users of an ISP.7.4.4 Specifying the RADIUS Server TemplateThis operation enables you to specify the RADIUS server template for a domain.

7.4.1 Conguring an Authentication Scheme

This operation enables you to congure an authentication scheme to dene the policy toauthenticate users requesting for login.

Background Informationn The MA5600 supports the authentication through the RADIUS server.n After conguring an authentication scheme, reference it for setting a domain to bring it

into play.n After an authentication scheme is created and before you reference the scheme, you

need to congure RADIUS for the MA5600 and congure the related user informationon the remote RADIUS server.



Procedure

Step 1 Run the aaa command to enter AAA mode.

Step 2 Run the authentication-scheme command to add an authentication scheme.

Step 3 Run the display authentication-scheme command to query the newly conguredauthentication scheme.

—-End

Example

To add the authentication scheme "huawei", with the authentication mode of RADIUS,do as follows:huawei(config)#aaahuawei(config-aaa)#authentication-scheme huaweihuawei(config-aaa-authen-huawei)#authentication-mode radiushuawei(config)#display authentication-scheme---------------------------------------------------------------------------Authentication-scheme-name Authentication-method---------------------------------------------------------------------------default localhuawei radius---------------------------------------------------------------------------Total 2,2 printed

Related Operations

Table 7-2 lists the related operations for conguring an authentication scheme.

Table 7-2 Related operations for conguring an authentication scheme

To… Run the Command… RemarksDelete anauthentication scheme

undo authentication-scheme You cannot delete the defaultauthentication scheme of thesystem.

Show AAAconguration

display aaa conguration You can query the usage ofthe resources congured onthe authentication schemetable.

7.4.2 Creating a DomainThis operation enables you to create a domain.

Background Informationn A domain is a group of users with the same attributes.n For a user name in the form of "userid@domain-name", such as

[email protected], the "huawei.net" following "@" is thedomain name, and the "userid" is used as the user name for identity authentication.

Procedure


Step 2 Run the domain command to create a domain.

Step 3 Run the quit command to quit domain mode.

Step 4 Run the quit command to quit AAA mode.



Conguration Guide

Step 5 Run the display domain command to query the domain.

—-End

Example

To create a domain named huawei.net, do as follows:huawei(config)#aaahuawei(config-aaa)#domain huawei.nethuawei(config-aaa-domain-huawei.net)#quithuawei(config-aaa)#quithuawei(config)#display domain{<cr>|string<S><1,20> }:

Command:display domain

-----------------------------------------------------------------------DomainName State CAR Access-limit Online-----------------------------------------------------------------------default Active 0 384 0huawei.net Active 0 384 0-----------------------------------------------------------------------Total 2,2 printed

Related Operations

Table 7-3 lists the related operations for creating a domain.

Table 7-3 Related operations for creating a domain

To… Run the Command… RemarksDelete a domain undo domain You cannot delete the default

domain.Query AAAconguration

display aaaconguration

You can query the usage ofresources congured on thedomain.

7.4.3 Specifying the Authentication Scheme

This operation enables you to specify the authentication scheme for all the users of an ISP.

Background Informationn An authentication scheme denes the policy to authenticate all the users of an ISP.n Before specifying a scheme, you need to create it.

Procedure


Step 2 Run the domain command to specify huawei as the current domain and enter domain mode.

Step 3 Run the authentication-scheme command to specify the authentication scheme.



Step 6 Run the display domain command to query the information of the domain.

—-End



Example

To specify "huawei" as the authentication scheme of domain "huawei.net", do as follows:huawei(config)#aaahuawei(config-aaa)#domain huawei.nethuawei(config-aaa-domain-huawei.net)#authentication-scheme huaweihuawei(config-aaa-domain-huawei.net)#quithuawei(config-aaa)#quithuawei(config)#display domain huawei.net-------------------------------------------------------------------Domain-name : huawei.netDomain-state : ActiveAuthentication-scheme-name : huaweiAccounting-scheme-name : defaultAuthorization-scheme-name : defaultUser-CAR : -Next-Hop : -Primary-DNS-IP-address : -Second-DNS-IP-address : -Primary-NBNS-IP-address : -Second-NBNS-IP-address : -Acl-Number : -Idle-data-attribute (time,flow) : 0, 60User-priority : -User-access-limit : 384Online-number : 0RADIUS-server-template : --------------------------------------------------------------------

Related Operations

Table 7-4 lists the related operations for specifying the authentication scheme.

Table 7-4 Related operations for specifying the authentication scheme

To… Run the Command… RemarksDelete the speciedauthenticationscheme

undo authentication-scheme Delete the speciedauthentication scheme in domainmode.

Query AAAconguration

display aaa conguration You can query the usage ofresources congured on thedomain.

7.4.4 Specifying the RADIUS Server TemplateThis operation enables you to specify the RADIUS server template for a domain.

Background InformationBefore this setting, you need to congure a RADIUS server template. For details, see 7.5Conguring RADIUS.

Procedure


Step 2 Run the domain command to specify huawei as the current domain and enter domain mode.

Step 3 Run the radius-server template command to create a RADIUS server template and enterthe corresponding RADIUS cong mode.





Conguration Guide

Step 6 Run the display domain command to query the information of the domain.

—-End

Example

To specify "radius1" as the RADIUS server template of domain "huawei.net", do as follows:huawei(config)#aaahuawei(config-aaa)#domain huawei.nethuawei(config-aaa-domain-huawei.net)#radius-server template radius1huawei(config-aaa-domain-huawei.net)#quithuawei(config-aaa)#quithuawei(config)#display domain huawei.net-------------------------------------------------------------------Domain-name : huawei.netDomain-state : ActiveAuthentication-scheme-name : huaweiAccounting-scheme-name : defaultAuthorization-scheme-name : defaultUser-CAR : -Next-Hop : -Primary-DNS-IP-address : -Second-DNS-IP-address : -Primary-NBNS-IP-address : -Second-NBNS-IP-address : -Acl-Number : -Idle-data-attribute (time,flow) : 0, 60User-priority : -User-access-limit : 384Online-number : 0RADIUS-server-template : radius1-------------------------------------------------------------------

Related Operation

Table 7-5 lists the related operation for specifying the RADIUS server template.

Table 7-5 Related operation for specifying the RADIUS server template

To… Run the Command… RemarksCancel the reference of aRADIUS server template

undo radius-server Run the command in domainmode, and then you candelete the reference of theRADIUS server template.

7.5 Conguring RADIUSThis section describes RADIUS conguration, including creating a RADIUS server template,setting the IP address and port number of a RADIUS server, setting the shared key of theRADIUS server, setting the response timeout interval of a RADIUS server, setting themaximum retransmit count of RADIUS request packets, setting the RADIUS server type,conguring an NAS port and its ID format, and setting the format of user name sent to aRADIUS server.

7.5.1 OverviewThis section introduces RADIUS specication and notes for conguring RADIUS.7.5.2 Specifying the RADIUS Server TemplateThis operation enables you to specify the RADIUS server template for a domain.7.5.3 Setting the IP Address and Port Number of a RADIUS ServerThis operation enables you to set the IP address and the port number of a new RADIUS server.



7.5.4 Setting the Shared Key of the RADIUS ServerThis operation enables you to set the shared key of the RADIUS server to verify the legalityof the packets from the peer end.7.5.5 Setting the Response Timeout Interval of a RADIUS ServerThis operation enables you to set the response timeout interval of a RADIUS server.7.5.6 Setting the Maximum Retransmit Count of RADIUS Request PacketsThis operation enables you to set the maximum retransmit count of RADIUS request packetsto guarantee that server responds to the packets.7.5.7 Setting the RADIUS Server TypeThis operation enables you to set the RADIUS server type.7.5.8 Conguring an NAS Port and Its ID FormatThis operation enables you to congure an NAS port and its ID format to guaranteeinteroperability between the devices of Huawei.7.5.9 Setting the Format of User Name Sent to a RADIUS ServerThis operation enables you to set the format of user name sent to a RADIUS server to specifyif the user name contains the domain name.

7.5.1 OverviewThis section introduces RADIUS specication and notes for conguring RADIUS.

SpecicationFor the MA5600, the RADIUS is congured on each RADIUS server group.

In actual networking, a RADIUS server group can be:n An independent RADIUS servern A pair of primary/secondary RADIUS servers with the same conguration but different

IP addressesThe attributes of each RADIUS server prole include:n IP addresses of primary and secondary serversn Shared keyn RADIUS server type

NoteThe RADIUS conguration only denes the parameters used for data exchange betweenthe MA5600 and the RADIUS server. To validate these parameters, you need to quote theRADIUS server group in a domain. For details, see 7.4 Conguring AAA.

7.5.2 Specifying the RADIUS Server TemplateThis operation enables you to specify the RADIUS server template for a domain.

Background Informationn Before this setting, you need to congure a RADIUS server template.n One RADIUS server template can be used by multiple domains.

Procedure

Step 1 Run the radius-server template command to create RADIUS server template and enterthe corresponding mode.

Step 2 Run the display radius-server command to query the created RADIUS server template.



Conguration Guide

—-End

Example

To specify "radius1" as the RADIUS server template of domain "huawei.net", do as follows:huawei(config)#radius-server template radius1huawei(config-radius-radius1)#quithuawei(config)#display radius-server configuration template radius1-------------------------------------------------------------------Server-template-name : radius1Protocol-version : standardTraffic-unit : BShared-secret-key : huaweiTimeout-interval(in second) : 5Primary-authentication-server : 0.0.0.0:0:LoopBack0Primary-accounting-server : 0.0.0.0:0:LoopBack0Secondary-authentication-server : 0.0.0.0:0:LoopBack0Secondary-accounting-server : 0.0.0.0:0:LoopBack0Retransmission : 3Domain-included : YES-------------------------------------------------------------------

Related Operation

Table 7-6 lists the related operation for specifying the RADIUS server template

Table 7-6 Related operation for specifying the RADIUS server template

To… Run the Command…Cancel the reference of a RADIUSserver template

undo radius-server template

7.5.3 Setting the IP Address and Port Number of a RADIUS ServerThis operation enables you to set the IP address and the port number of a new RADIUS server.

Background Informationn The servers may include the primary and secondary servers. By default, the IP address of

the primary or the secondary server is 0.0.0.0.n To ensure the normal communication between the MA5600 and the RADIUS server,

before setting the IP address and port number of the server, make sure that the routebetween the MA5600 and the RADIUS server is normal.

n Make sure that the port settings between the MA5600 and the server are consistent.

Procedure


Step 2 Run the radius-server authentication command to congure the primary authenticationserver.

Step 3 Run the radius-server authentication secondary command to congure the secondary server.

Step 4 Run the quit command to quit from the RADIUS cong mode.

Step 5 Run the display radius-server conguration command to query the IP address and portnumber of a RADIUS server.

—-End



Example

To set the IP address and port number of the primary server as 10.10.10.1 and 1812, and the IPaddress and port number of the secondary server as 10.10.10.2 and 1812, do as follows:huawei(config)#radius-server template radius1huawei(config-radius-radius1)#radius-server authentication 10.10.10.1 1812huawei(config-radius-radius1)#radius-server authentication10.10.10.2 1812 secondaryhuawei(config-radius-radius1)#quithuawei(config)#display radius-server configuration template radius1-------------------------------------------------------------------Server-template-name : radius1Protocol-version : standardTraffic-unit : BShared-secret-key : huaweiTimeout-interval(in second) : 5Primary-authentication-server : 10.10.10.1:1812:LoopBack-1Primary-accounting-server : 0.0.0.0:0:LoopBack0Secondary-authentication-server : 10.10.10.2:1812:LoopBack-1Secondary-accounting-server : 0.0.0.0:0:LoopBack0Retransmission : 3Domain-included : YES-------------------------------------------------------------------

Related Operation

Table 7-7 lists the related operation for setting the IP address and port number of a server.

Table 7-7 Related operation for setting the IP address and port number of a server

To… Run the Command…Delete the congured RADIUSserver

undo radius-server authentication

7.5.4 Setting the Shared Key of the RADIUS ServerThis operation enables you to set the shared key of the RADIUS server to verify the legalityof the packets from the peer end.

Background Informationn By default, the key is "huawei".n The RADIUS client (namely the MA5600) and the RADIUS server use MD5 algorithm

to encrypt the packets exchanged between them. They respond to the received packetsonly when the keys at both ends are identical.

Procedure


Step 2 Run the radius-server shared-key command to set the shared key of the RADIUS server.


Step 4 Run the display radius-server conguration command to query the shared key of theRADIUS server.

—-End

Example

To set the shared key of a RADIUS server as "radius2004", do as follows:



Conguration Guide

huawei(config)#radius-server template radius1huawei(config-radius-radius1)#radius-server shared-key radius2004huawei(config-radius-radius1)#quithuawei(config)#display radius-server configuration template radius1-------------------------------------------------------------------Server-template-name : radius1Protocol-version : standardTraffic-unit : BShared-secret-key : radius2004Timeout-interval(in second) : 5Primary-authentication-server : 10.10.10.1:1812:LoopBack-1Primary-accounting-server : 0.0.0.0:0:LoopBack0Secondary-authentication-server : 10.10.10.2:1812:LoopBack-1Secondary-accounting-server : 0.0.0.0:0:LoopBack0Retransmission : 3Domain-included : YES-------------------------------------------------------------------

7.5.5 Setting the Response Timeout Interval of a RADIUS Server

This operation enables you to set the response timeout interval of a RADIUS server.

Background Informationn After the MA5600 sends RADIUS request packets to the RADIUS server, if no response

from the RADIUS server is received for a period of time, the MA5600 needs to resendthese packets to the RADIUS server to make sure that the users can really obtain RADUSservice.

n By default, the timeout interval is 5s.

Procedure

Step 1 Run the radius-server template command to create a RADIUS template and entercorresponding RADIUS cong mode.

Step 2 Run the radius-server timeout command to set the response timeout interval of a RADIUSserver.


Step 4 Run the display radius-server conguration command to query the response timeout intervalof a RADIUS server.

—-End

Example

To set the timeout interval of a RADIUS server as 10s, do as follows:huawei(config)#radius-server template radius1huawei(config-radius-radius1)#radius-server timeout 10huawei(config-radius-radius1)#quithuawei(config)#display radius-server configuration template radius1-------------------------------------------------------------------Server-template-name : radius1Protocol-version : standardTraffic-unit : BShared-secret-key : radius2004Timeout-interval(in second) : 10Primary-authentication-server : 10.10.10.1:1812:LoopBack-1Primary-accounting-server : 0.0.0.0:0:LoopBack0Secondary-authentication-server : 10.10.10.2:1812:LoopBack-1Secondary-accounting-server : 0.0.0.0:0:LoopBack0Retransmission : 3Domain-included : YES-------------------------------------------------------------------



Related Operation

Table 7-8 lists the related operation for setting the response timeout interval of a RADIUSserver.

Table 7-8 Related operation for setting the response timeout interval of a RADIUS server

To… Run the Command…Restore the default response timeout interval ofa RADIUS server

undo radius-server timeout

7.5.6 Setting the Maximum Retransmit Count of RADIUS RequestPackets

This operation enables you to set the maximum retransmit count of RADIUS request packetsto guarantee that server responds to the packets.

Background Informationn If no response has been received from the RADIUS server within the timeout time

specied by the timeout timer, the MA5600 resends the request packets to the RADIUSserver. When the retransmit count exceeds the specied maximum value, the MA5600considers its connection with the RADIUS server as interrupted, and turns to otherRADIUS servers for requesting services.

n By default, the maximum retransmit count of RADIUS request packets is 3.n You can modify the conguration only when the RADIUS prole is not referenced.

Procedure


Step 2 Run the radius-server retransmit command to congure the retransmit time of the conguredserver.


Step 4 Run the display radius-server conguration command to query the maximum count ofRADIUS request packets.

—-End

Example

To set the maximum retransmit count of RADIUS request packets as 5, do as follows:huawei(config)#radius-server template radius1huawei(config-radius-radius1)#radius-server retransmit 5huawei(config-radius-radius1)#quithuawei(config)#display radius-server configuration template radius1-------------------------------------------------------------------Server-template-name : radius1Protocol-version : standardTraffic-unit : BShared-secret-key : radius2004Timeout-interval(in second) : 10Primary-authentication-server : 10.10.10.1:1812:LoopBack-1Primary-accounting-server : 0.0.0.0:0:LoopBack0Secondary-authentication-server : 10.10.10.2:1812:LoopBack-1Secondary-accounting-server : 0.0.0.0:0:LoopBack0Retransmission : 5Domain-included : YES-------------------------------------------------------------------



Conguration Guide

Related Operation

Table 7-9 lists the related operation for setting the maximum retransmit count of the RADIUSrequest packets.

Table 7-9 Related operation for setting the maximum retransmit count of the RADIUS requestpackets

To… Run the Command…Recover the maximum retransmitcount of RADIUS request packets tothe default value

undo radius-server retransmit

7.5.7 Setting the RADIUS Server Type

This operation enables you to set the RADIUS server type.

Background InformationThe MA5600 supports both standard RADIUS protocol and Portal of Huawei.

Procedure


Step 2 Run the radius-server type portal command to set the RADIUS server type.


Step 4 Run the display radius-server conguration command to query the RADIUS server type.

—-End

Example

To set the RADIUS server type as "portal", do as follows:huawei(config)#radius-server template radius1huawei(config-radius-radius1)#radius-server type portalhuawei(config-radius-radius1)#quithuawei(config)#display radius-server configuration template radius1-------------------------------------------------------------------Server-template-name : radius1Protocol-version : portalTraffic-unit : BShared-secret-key : radius2004Timeout-interval(in second) : 10Primary-authentication-server : 10.10.10.1:1812:LoopBack-1Primary-accounting-server : 0.0.0.0:0:LoopBack0Secondary-authentication-server : 10.10.10.2:1812:LoopBack-1Secondary-accounting-server : 0.0.0.0:0:LoopBack0Retransmission : 5Domain-included : YES-------------------------------------------------------------------

7.5.8 Conguring an NAS Port and Its ID Format

This operation enables you to congure an NAS port and its ID format to guaranteeinteroperability between the devices of Huawei.



Background InformationThe NAS port and its ID format are internal extended attributes of Huawei.

Procedure

Step 1 Run the radius-server template command to create a RADIUS server prole and enterRADIUS cong mode.

Step 2 Run the radius-server nas-port-format command to congure an NAS port of the RADIUSserver.

Step 3 Run the radius-server nas-port-id-format command to congure the ID format of the NASport of the RADIUS server.

—-End

Example

To set the format of NAS ports as "new", and that of NAS port IDs as "new" for RADIUSserver template "radius1", do as follows:huawei(config)#radius-server template radius1huawei(config-radius-radius1)#radius-server nas-port-format newhuawei(config-radius-radius1)#radius-server nas-port-id-format new

7.5.9 Setting the Format of User Name Sent to a RADIUS ServerThis operation enables you to set the format of user name sent to a RADIUS server to specifyif the user name contains the domain name.

Background Informationn By default, the user name of a RADIUS server has the domain name.n The access users are generally named in the format of "userid@domain-name". The part

following "@" is the domain name. The MA5600 assigns users to different ISP domainsbased on their respective domain names.

n Some earlier RADIUS servers reject user names with domain names. In this case, youcan run the command to specify that the user name to be sent to a RADIUS servercarries no domain name.

n If a RADIUS server group does not allow user names carrying domain names, theRADIUS server group shall not be used at the same time in two or more domains.Otherwise, when receiving the same user names, the RADIUS server will mistake theusers in different domains as the same user.

n You can modify the conguration only when the RADIUS server prole is not referenced.

Procedure


Step 2 Run the (undo) radius-server user-name domain-included command to set whether the username sent to RADIUS server carries domain name.

Step 3 Run the quit command to quit RADIUS cong mode.

Step 4 Run the display radius-server conguration command to query format of the user namethat is sent to the RADIUS server.

—-End



Conguration Guide

Examples

To specify that a user name to be sent to a RADIUS server carries no domain name, doas follows:huawei(config)#radius-server template radius1huawei(config-radius-radius1)#undo radius-server user-name domain-includedhuawei(config-radius-radius1)#quithuawei(config)#display radius-server configuration template radius1-------------------------------------------------------------------Server-template-name : radius1Protocol-version : portalTraffic-unit : BShared-secret-key : radius2004Timeout-interval(in second) : 10Primary-authentication-server : 10.10.10.1:1812:LoopBack-1Primary-accounting-server : 0.0.0.0:0:LoopBack0Secondary-authentication-server : 10.10.10.2:1812:LoopBack-1Secondary-accounting-server : 0.0.0.0:0:LoopBack0Retransmission : 5Domain-included : NO-------------------------------------------------------------------

To specify that a user name to be sent to a RADIUS server carries domain name, do as follows:huawei(config)#radius-server template radius1huawei(config-radius-radius1)#radius-server user-name domain-includedhuawei(config-radius-radius1)#quithuawei(config)#display radius-server configuration template radius1-------------------------------------------------------------------Server-template-name : radius1Protocol-version : portalTraffic-unit : BShared-secret-key : radius2004Timeout-interval(in second) : 10Primary-authentication-server : 10.10.10.1:1812:LoopBack-1Primary-accounting-server : 0.0.0.0:0:LoopBack0Secondary-authentication-server : 10.10.10.2:1812:LoopBack-1Secondary-accounting-server : 0.0.0.0:0:LoopBack0Retransmission : 5Domain-included : YES-------------------------------------------------------------------

7.6 Conguring SSHThis section describes the SSH conguration, including creating the local RSA key pair,conguring the SSH user public key and conguring an SSH user.

7.6.1 Creating the Local RSA Key PairThis operation enables you to create the local RSA key pair.7.6.2 Conguring the SSH User Public KeyThis operation enables you to congure the SSH user public key.7.6.3 Conguring an SSH UserThis operation enables you to congure an SSH user.

7.6.1 Creating the Local RSA Key PairThis operation enables you to create the local RSA key pair.

Background Informationn The key size ranges from 512 bits to 2048 bits. You can change it to 512, 1024, or 2048

bits as required. By default, it is 512 bits.n Before using the SSH service for the rst time, you must run the rsa local-key-pair

create command.



n If you destroy the SSH server host public key pair and service key pair, you must createthe new SSH server host key pair and service key pair.

Procedure

Step 1 Run the rsa local-key-pair create command to create the local RSA key pair.

Step 2 Run the display rsa local-key-pair public command to query the local RSA key pair.

—-End

Example

To create a local RSA key pair, do as follows:huawei(config)#rsa local-key-pair createThe key name will be: huawei_Host% RSA keys defined for MA5600_Host already exist.Confirm to replace them? [y/n]:yThe range of public key size is (512 ~ 2048).NOTES: If the key modulus is greater than 512,

It will take a few minutes.Input the bits in the modulus[default = 512]:1024Generating keys.........................++++++..++++++............................................++++++++.++++++++huawei(config)#display rsa local-key-pair public=====================================================Time of Key pair created: 13:39:58 2006/2/10Key name: huawei_HostKey type: RSA encryption Key=====================================================Key code:30470240BF2B1846 14543312 785ABA61 595B1FA6 9B6D2A6DD0C5A771 07FE3692 CDEE3C8D 11EFB290 7247BC5B6F28BBB0 8F0B9DC0 4247F4F0 0A38A5B3 A7E5BD5F7330CB1D

0203010001

=====================================================Time of Key pair created: 13:40:0 2006/2/10Key name: huawei_ServerKey type: RSA encryption Key=====================================================Key code:30670260B4830A71 7974B485 1365431A 0504081E C9D5A8AF17AE7F6B A7E07227 3260B5DB 722F42F4 B1BD03D8E6C527F3 B4403736 29E1A954 17AA56F9 50B3857B21354F07 95F421C7 9468D159 75B72B27 EA79E33E68C9D35C BF98B56D 9B880598 095EAB0D

0203010001

Related Operation

Table 7-10 lists the related operation for creating a local RSA key pair.

Table 7-10 Related operation for creating a local RSA key pair

To… Run the Command…Destroy the local RSA keypair

rsa local-key-pair destroy



Conguration Guide

7.6.2 Conguring the SSH User Public KeyThis operation enables you to congure the SSH user public key.

Conguration FlowchartFigure 7-3 shows the owchart for conguring the SSH user public key.

Figure 7-3 Flowchart for conguring the SSH user public key

Procedure

Step 1 Run the rsa peer-public-key command to enter cong-rsa-public-key mode.

Step 2 Run the public-key-code begin command to enter public key edit mode.

Step 3 Input the user public key.

Step 4 Quit public key edit mode.

—-End

Example

To paste the conversed user public key in the current system, do as follows:huawei(config)#rsa peer-public-key keyhuawei(config-rsa-public-key)#public-key-code beginhuawei(config-rsa-key-code)#30450240 B9FCE18E DA769883 7680F2B7 CE35415A 9AB5E63Ehuawei(config-rsa-key-code)#FD00ED66 B8B5E954 2B053A82 131B967C 8DDC1176 0746A8BBhuawei(config-rsa-key-code)#C30DF3F0 83F6EA5A EF97E26B 783C940F 2791710F 020125huawei(config-rsa-key-code)#public-key-code endhuawei(config-rsa-public-key)#peer-public-key endhuawei(config)#display rsa peer-public-key{ <cr>|brief<K>|name<K> }:

Command:display rsa peer-public-key

=====================================Key name: key

=====================================Key Code:30450240



B9FCE18E DA769883 7680F2B7 CE35415A 9AB5E63E FD00ED66 B8B5E954 2B053A82131B967C 8DDC1176 0746A8BB C30DF3F0 83F6EA5A EF97E26B 783C940F 2791710F

020125

7.6.3 Conguring an SSH User

This operation enables you to congure an SSH user.

Background InformationSSH user authentication falls into the following types:n password: indicates the common password authentication mode. It is the default

authentication type.n rsa: indicates the RSA public key authentication.n all: indicates the password and RSA authentication.n password-publickey: indicates the password and public key authentication, which is

applicable for SSHv2.0.

Procedure

Step 1 Run the ssh user assign rsa-key command to set the RSA public key of SSH user.

Step 2 Run the ssh user authentication-type rsa command to set the RSA authentication mode ofSSH user.

Step 3 Run the display ssh user-information command to query the authentication mode of SSH user.

—-End

Example

To set the RSA public key of the SSH user huawei as key, and the authentication mode asRSA, do as follows:huawei(config)#ssh user huawei assign rsa-key keyhuawei(config)#ssh user huawei authentication-type rsahuawei(config)#display ssh user-information{ <cr>|string<S><1,16> }:Command:

display ssh user-informationUsername Authentication-type User-public-key-name Service-typehuawei rsa key stelnet

Related Operations

Table 7-11 lists the related operations for conguring an SSH user.

Table 7-11 Related operations for conguring an SSH user

To… Run the Command…Delete the RSA public key of anSSH user

undo ssh user user_name assign rsa-key

Set the SSH user authenticationmode

ssh user user_name authentication-type


SmartAX MA5600 Multi-service Access ModuleConguration Guide 8 VLAN Conguration

8 VLAN Conguration


8.1 OverviewThis section describes VLAN technology, as well as count, types and attributes of VLANsupported by the MA5600.8.2 Conguration Example of Standard VLANThis example shows how to subtend two MA5600 devices through a standard VLAN. Fordetails, see 23.2 Conguration Example of the Subtended Network Through the SCU Board or23.3 Conguration Example of Subtending Device Through the ETHA Board.8.3 Conguration Example of a Smart VLANThis example shows how to congure a smart VLAN to realize ADSL2+ access.8.4 Conguration Example of a MUX VLANThis example shows how to congure a MUX VLAN to realize ADSL2+ access.8.5 Conguration Example of the Super VLANThis example shows how to congure the super VLAN to enable users whose services areisolated at layer 2 to communicate with each other at layer 3.8.6 Creating a VLANThis operation enables you to create a VLAN or VLANs of the same type in batches.8.7 Conguring the VLAN AttributeThis operation enables you to lter data packets that meet the source IP address conditionswithin a certain period of time.8.8 Setting the Inner and Outer Ethernet Protocols Type of a Stacking VLANThis operation enables you to set the inner and outer Ethernet protocol type a stacking VLANsupports.8.9 Setting the Inner VLAN Priority of the Service Port in a Stacking VLANThis operation enables you to set the inner VLAN priority of the service port in a stackingVLAN.8.10 Adding an Upstream Port to a VLANThis operation enables you to add an upstream port to a VLAN.8.11 Adding a Service Port to a VLANThis operation enables you to add a service port to a VLAN.8.12 Adding Service Ports in BatchesThis operation enables you to add service ports in batches: To run the multi-service-portvlan command to add multiple service ports on an asymmetric digital subscriber line 2 plus(ADSL2+)/single-pair high-speed digital subscriber line (SHDSL) board to a smart VLAN;To run the multi-service-port from-vlan command to add multiple service ports on one ormultiple ADSL2+/SHDSL boards to different MUX VLANs at a time.


8 VLAN CongurationSmartAX MA5600 Multi-service Access Module

Conguration Guide

8.13 Setting the Description of a Service PortThis operation enables you to set the description of a service port.



8.1 OverviewThis section describes VLAN technology, as well as count, types and attributes of VLANsupported by the MA5600.

Service DescriptionVirtual local area network (VLAN) is a technology used to form virtual workgroups bylogically grouping the devices of a LAN. The Institute of Electrical and Electronics Engineers(IEEE) issued draft IEEE 802.1q in 1999, aiming at standardizing VLAN implementations.

Service SpecicationThe MA5600 supports up to 4000 VLANs.

The MA5600 supports the following four types of VLANs:n Standard VLANn MUX VLANn Smart VLANn Super VLANTable 8-1 lists the VLAN types and applications.

Table 8-1 VLAN types and applications

Type Description ApplicationStandardVLAN

n Ethernet ports in a standard VLAN cancommunicate with each other.

n An Ethernet port in a standard VLAN isisolated from an Ethernet port in anotherstandard VLAN.

Only used for Ethernetports for networkmanagement andsubtending.

Smart VLAN A smart VLAN can contain multiple xDSLservice ports. Trafc streams of these portsin a smart VLAN are isolated from eachother. Trafc streams of different VLANsare also isolated from each other. A smartVLAN can serve multiple xDSL users, thussaving VLAN resources.

Applied to xDSL access,such as residential areasto provide access to theInternet.

MUX VLAN A MUX VLAN can contain only one serviceport. Trafc streams of different VLANsare isolated from each other. One-to-onemapping can be set up between a MUXVLAN and an access user. So, a MUXVLAN can uniquely identify an access user.

Applied when users aredistinguished by VLANs.

Super VLAN A super VLAN is a layer 3 based VLAN.It consists of multiple sub VLANs. A subVLAN can be a smart VLAN or a MUXVLAN. By using ARP Proxy, a super VLANcan realize the layer 3 interconnection forthese sub VLANs.

Applied to save IPaddresses resources.

The following lists the attributes of VLANs:n Commonn QinQn Stacking



Conguration Guide

n Super VLANTable 8-2 lists the attributes of VLANs.

Table 8-2 VLAN attributes

VLANattribute

Application

Common A VLAN with this attribute can be used as a layer 2 VLAN. You cancreate a layer 3 virtual interface for it if necessary.

QinQ When a packet is added with the tag of a VLAN with QinQ attribute, thepacket contains two VLAN tags:

n Inner VLAN tag from the private networkn Outer VLAN tag from the MA5600

Through the outer VLAN tag, a layer 2 VPN tunnel can be set upto transparently transmit service data among private networks. Fordetails about the QinQ VLAN, see the chapter 28 Leased Line AccessConguration.

Stacking When a packet is added with the tag of a VLAN with Stacking attribute,the packet contains two VLAN tags: inner VLAN tag and outer VLANtag allocated by the MA5600. With this attribute, the upper layer BRAScan authenticate users based on the double VLAN tags, thus increasingthe number of access users. The upper layer network working in layer 2mode can forward packets based on the outer "VLAN+MAC" to providethe multi-ISP wholesale service. For details about the stacking VLAN,see the chapter 27 Multi-ISP Wholesale Access Conguration.

8.2 Conguration Example of Standard VLANThis example shows how to subtend two MA5600 devices through a standard VLAN. Fordetails, see 23.2 Conguration Example of the Subtended Network Through the SCU Board or23.3 Conguration Example of Subtending Device Through the ETHA Board.

8.3 Conguration Example of a Smart VLANThis example shows how to congure a smart VLAN to realize ADSL2+ access.

NetworkingFigure 8-1 shows a sample network for conguring a smart VLAN.



Figure 8-1 Sample network for conguring a smart VLAN

Data PlanTable 8-3 lists the data plan for conguring a smart VLAN.

Table 8-3 Data plan for conguring a smart VLAN

Item DataADSL2+ board ADSL2+ port: 0/2/0

VPI/VCI: 0/35

ADSL2+ board ADSL2+ port: 0/3/0VPI/VCI: 0/35

Smart VLAN VLAN ID: 10Upstream port 0/7/0

Prerequisiten The network devices and lines are normal.n All boards of the MA5600 are normal.n The VPI/VCI of the modem is 0/35.

Conguration FlowchartFigure 8-2 shows the owchart for conguring a smart VLAN.



Conguration Guide

Figure 8-2 Flowchart for conguring a smart VLAN.

Procedure

Step 1 Create a MUX VLAN.huawei(config)#vlan 10 smart

Step 2 Add an upstream port to the VLAN.huawei(config)#port vlan 10 0/7 0

Step 3 Add a service port to the VLAN.The service port uses the default trafc prole 2.huawei(config)#service-port vlan 10 adsl 0/2/0 vpi 0 vci 35 rx-cttr 2 tx-cttr 2huawei(config)#service-port vlan 10 adsl 0/3/0 vpi 0 vci 35 rx-cttr 2 tx-cttr 2

Step 4 Save the data.huawei#save

—-End

Result

Both PC 1 and PC 2 should be able to get access to the IP network, but they cannot pingeach other.

8.4 Conguration Example of a MUX VLANThis example shows how to congure a MUX VLAN to realize ADSL2+ access.

NetworkingFigure 8-3 shows a sample network for conguring a MUX VLAN.



Figure 8-3 Sample network for conguring a MUX VLAN

Data PlanTable 8-4 lists the data plan for conguring a MUX VLAN.

Table 8-4 Data plan for conguring a MUX VLAN


VPI/VCI: 0/35VLAN ID: 20

ADSL2+ board ADSL2+ port: 0/2/1VPI/VCI: 0/35VLAN ID: 21

Upstream port 0/7/0

Prerequisiten The network devices and lines are normal.n All the boards of the MA5600 are normal.n The VPI/VCI of the modem is 0/35.

Conguration FlowchartFigure 8-4 shows the owchart for conguring a MUX VLAN.



Conguration Guide

Figure 8-4 Flowchart for conguring a MUX VLAN

Procedure

Step 1 Create a MUX VLAN.huawei(config)#vlan 20 muxhuawei(config)#vlan 21 mux

Step 2 Add an upstream port to the VLAN.huawei(config)#port vlan 20 0/7 0huawei(config)#port vlan 21 0/7 0

Step 3 Add a service port to the VLAN.The service port uses the default trafc prole 2.huawei(config)#service-port vlan 20 adsl 0/2/0 vpi 0 vci 35 rx-cttr 2 tx-cttr 2huawei(config)#service-port vlan 21 adsl 0/2/1 vpi 0 vci 35 rx-cttr 2 tx-cttr 2


—-End

Result

After the conguration, PC 1 can access the Internet.

8.5 Conguration Example of the Super VLANThis example shows how to congure the super VLAN to enable users whose services areisolated at layer 2 to communicate with each other at layer 3.

NetworkingFigure 8-5 shows a sample network for conguring a super VLAN.



Figure 8-5 Sample network for conguring a super VLAN

Data PlanTable 8-5 lists the data plan for conguring a super VLAN.

Table 8-5 Data plan for conguring a super VLAN


VPI/VCI: 0/35Sub VLAN ID: 20

ADSL2+ board ADSL2+ port: 0/3/0VPI/VCI: 0/35Sub VLAN ID: 21

Super VLAN VLAN ID: 100IP address of layer 3 interface: 10.0.0.254subnet mask: 255.255.255.0VLAN ID: 30IP address of layer 3 interface: 10.0.1.254Subnet mask: 255.255.255.0

Standard VLAN

Upstream port: 0/7/0

Prerequisiten The network devices and lines are normal.n All the service boards are normal.n The VPI/VCI of the modem is 0/35.n PC 1 and PC 2 can obtain their IP addresses dynamically in DHCP mode.n The sub VLAN must exist already. The VLAN can be a smart VLAN or a MUX VLAN.

In this procedure, it is a MUX VLAN.



Conguration Guide

Conguration FlowchartFigure 8-6 shows the owchart for conguring a super VLAN.

Figure 8-6 Flowchart for conguring a super VLAN

Procedure

Step 1 Create a super VLAN.huawei(config)#vlan 100 super

Step 2 Create sub VLANs and add them to the super VLAN.huawei(config)#vlan 20 muxhuawei(config)#vlan 21 muxhuawei(config)#port vlan 20 0/7 0huawei(config)#port vlan 21 0/7 0huawei(config)#supervlan 100 subvlan 20huawei(config)#supervlan 100 subvlan 21

Step 3 Congure the service port of the sub VLAN.The service port uses the default trafc prole 2.huawei(config)#service-port vlan 100 adsl 0/2/0 vpi 0 vci 35 rx-cttr 2 tx-cttr 2



huawei(config)#service-port vlan 100 adsl 0/3/0 vpi 0 vci 35 rx-cttr 2 tx-cttr 2

Step 4 Enable the global ARP Proxy.huawei(config)#arp proxy enable

Step 5 Congure the layer 3 interface of the super VLAN.huawei(config)#interface vlanif 100huawei(config-if-Vlanif100)#ip address 10.0.0.254 24

NOTE

The IP address of the layer 3 interface of the super VLAN must be in the same subnet as the IP addressobtained by the PC.

Step 6 Enable ARP Proxy for the layer 3 interface of the super VLAN.huawei(config-if-Vlanif100)#arp proxy enable

Step 7 Create the standard VLAN and add the upstream port to the VLAN.huawei(config)#vlan 30 standardhuawei(config)#port vlan 30 0/7 0

Step 8 Add the layer 3 interface of the standard VLAN.huawei(config)#interface vlanif 30huawei(config-if-Vlanif30)#ip address 10.0.1.254 24

Step 9 Save the data.huawei(config-if-Vlanif30)#quithuawei(config)#save

—-End

Result

After the conguration, both PC 1 and PC 2 can communicate with each other and accessthe Internet.

8.6 Creating a VLANThis operation enables you to create a VLAN or VLANs of the same type in batches.

Prerequisite

The ID of the VLAN to be added does not exist in the system.

Background InformationThe MA5600 supports up to 4000 VLANs and some VLANs are reserved for the system.

NOTE

n By default, 15 VLANs are reserved for the system their VLAN IDs range 4079-4093.n You can run the vlan reserve command to set the start number of the reserved VLANs.

Procedure

Step 1 Run the vlan command to add a VLAN.

Step 2 Run the display vlan command to query VLAN information.

—-End

Examples

To add a standard VLAN with the VLAN IDs of 2, do as follows:



Conguration Guide

huawei(config)#vlan 2 standardhuawei(config)#display vlan 2{ <cr>|to<K> }:

Command:display vlan 2

VLAN ID: 2VLAN type: standardVLAN attribute: commonStandard port number: 0Service virtual port number: 0

To add 10 standard VLANs with VLAN IDs ranging from 1000 to 1009, do as follows:huawei(config)#vlan 1000 to 1009 standardIt will take several minutes, and console may be timeout, please use command

idle-timeout to set time limitAre you sure to add VLANs? (y/n)[n]:y

huawei#display vlan all{ <cr>|vlantype<E><mux,standard,smart,super>|vlanattr<K> }:

Command:display vlan all

---------------------------------------------------------VLAN Type Attribute STND-Port NUM SERV-Port NUM---------------------------------------------------------

1 MUX common 8 02 standard common 0 0

1000 standard common 0 01001 standard common 0 01002 standard common 0 01003 standard common 0 01004 standard common 0 01005 standard common 0 01006 standard common 0 01007 standard common 0 01008 standard common 0 01009 standard common 0 0---------------------------------------------------------Total: 12Note : STND-Port--standard port, SERV-Port--service virtual port

Related Operations

Table 8-6 lists the related operations for creating a VLAN.

Table 8-6 Related operations for creating a VLAN

To… Run the Command… RemarksDelete a VLAN undo vlan To delete a VLAN, make sure:

n There is no upstream port, L3interface, or service port in theVLAN.

n There is no sub VLAN is the VLANif the VLAN is a super VLAN.

n The VLAN is not the default VLAN(VLAN 1)

Display VLAN count display vlan number -

Display VLANstatistics

display statistics vlan The trafc of VLAN service ports ismeasured.

Congure the startnumber of thereserved VLANs

vlan reserve -



8.7 Conguring the VLAN AttributeThis operation enables you to lter data packets that meet the source IP address conditionswithin a certain period of time.

Prerequisite

The VLAN with its attribute to be congured already exists.

Background InformationYou can congure the common attribute of a VLAN to QinQ or Stacking only.

Procedure

Step 1 Run the vlan attrib command to congure the VLAN attribute.

Step 2 Run the display vlan command to display the VLAN attribute.

—-End

Example

To congure the attribute of smart VLAN 10 QinQ, do as follows:huawei(config)#vlan attrib 10 q-in-qhuawei(config)#display vlan 10

{ <cr>|to<K> }:Command:display vlan 10VLAN ID: 10VLAN type: smartVLAN attribute: QinQStandard port number: 0Service virtual port number: 0

Related Operation

Table 8-7 lists the related operation for conguring the VLAN attribute.

Table 8-7 Related operation for conguring the VLAN attribute

To... Run the Command… RemarksRestore the VLANattribute

undo vlan attrib By default, the VLAN attribute iscommon.

8.8 Setting the Inner and Outer Ethernet Protocols Typeof a Stacking VLAN

This operation enables you to set the inner and outer Ethernet protocol type a stacking VLANsupports.

Background Informationn By default, the inner and outer Ethernet protocol type of a stacking VLAN is 0x8100.

That is, the Ethernet frame has a 802.1q VLAN Tag.n The protocol type to be set cannot be set as a value for other protocols, such as 0x8200

(IP packets) or 0x0806 (ARP packets).



Conguration Guide

Procedure

Step 1 Run the stacking { inner-ethertype | outer-ethertype } command to set the inner and outerEthernet protocol type of a Stacking VLAN.

Step 2 Run the display stacking { inner-ethertype | outer-ethertype } command to display the innerand outer Ethernet protocol type of a stacking VLAN.

—-End

Examples

To set the inner Ethernet protocol type the stacking VLAN supports as 0x8100, do as follows:huawei(config)#stacking inner-ethertype 0x8100huawei(config)#display stacking inner-ethertypeThe inner Ethernet type in the system: 0x8100

To set the outer Ethernet protocol type the stacking VLAN supports as 0x8100, do as follows:huawei(config)#stacking outer-ethertype 0x8100huawei(config)#display stacking outer-ethertypeThe outer Ethernet type in the system: 0x8100

8.9 Setting the Inner VLAN Priority of the Service Port in aStacking VLAN

This operation enables you to set the inner VLAN priority of the service port in a stackingVLAN.

Procedure

Run the stacking inner-priority vlan command to set the inner VLAN priority of the serviceport.

—-End

Example

To set the inner VLAN priority of the service port in stacking VLAN 4000 as 5, do as follows:huawei(config)#stacking inner-priority vlan 4000 5

8.10 Adding an Upstream Port to a VLANThis operation enables you to add an upstream port to a VLAN.

Prerequisite

The VLAN to which an upstream port is to be added already exists.

Background InformationThe upstream port of a VLAN must be an Ethernet port.

Procedure

Step 1 Run the port vlan command to add an upstream port.

Step 2 Run the display vlan command to query the upstream port number.



—-End

Example

To add upstream port 0/7/0 to VLAN 10, do as follows:huawei(config)#port vlan 10 0/7 0huawei(config)#display vlan 10{<cr>|to<K>}:

Command:display vlan 10

VLAN ID: 10VLAN type: MUXVLAN attribute: stacking------------------------------F/S /P Native VLAN State------------------------------0/7/0 1 up------------------------------Standard port number: 1Service virtual port number: 0

Related Operation

Table 8-8 lists the related operation for adding an upstream port to a VLAN.

Table 8-8 Related operation for adding an upstream port to a VLAN

To… Run the Command…Delete the upstream port of aVLAN

undo port vlan

8.11 Adding a Service Port to a VLANThis operation enables you to add a service port to a VLAN.

Prerequisites

n The VLAN to which the service port is to be added already exists.n The suitable trafc item already exists.

Background Informationn An xDSL port can support up to eight service ports.n The VPI/VCI of the service port must be the same as that of the xDSL modem connected

to the port.n The smart VLAN supports multiple service ports on the same port, and the VPIs/VCIs of

the service ports are different. If the VPI/VCI of the service port is auto-sensing, onlyone service port can be created on a port.

Procedure

Step 1 Run the service-port vlan command to add a service port.

Step 2 Run the display service-port vlan command to query service ports.

—-End



Conguration Guide

Example

To add service port 0/2/0 to VLAN 3, with VPI/VCI of 0/35 and the trafc prole of 2, doas follows:huawei(config)#service-port vlan 10 adsl 0/2/0 vpi 0 vci 35 rx-cttr 2 tx-cttr 2huawei(config)#display service-port vlan 10{ <cr>|autosense<K> }:

Command:display service-port vlan 10

----------------------------------------------------------------------------VLANID VLANATTR PORT F/ S/ P VPI VCI FLOWTYPE FLOWPARA RX TX STATE LABEL----------------------------------------------------------------------------10 stacking adl 0/2/0 0 35 - - 2 2 down 1----------------------------------------------------------------------------Total: 1 (Up/Down : 0/1)

Note : F--Frame, S--Slot, P--Port(or Virtual Port, such as IMA GROUP,VLAN ID etc.), the VPI is access-end VLAN ID in vdsl/eau portor PON ID in epon port

In single-PVC service mode, to add service port 0/2/0 to VLAN 10, with VPI/VCI of 0/35, thetrafc prole of 2 and the user-end VLAN of 41, do as follows:huawei(config)#service-port vlan 10 adsl 0/2/0 vpi 0 vci 35 multi-serviceuser-vlan 41 rx-cttr 2 tx-cttr 2huawei(config)#display service-port vlan 10{ <cr>|autosense<K> }:Command:

display service-port vlan 10----------------------------------------------------------------------------VLANID VLANATTR PORT F/ S/ P VPI VCI FLOWTYPE FLOWPARA RX TX STATE LABEL----------------------------------------------------------------------------10 common adl 0/2/0 0 35 byVlan 41 2 2 down -----------------------------------------------------------------------------Total: 1 (Up/Down : 0/1)Note : F--Frame, S--Slot, P--Port(or Virtual Port, such as IMA GROUP,VLAN ID etc.), the VPI is access-end VLAN ID in vdsl/eau portor PON ID in epon port

Related Operations

Table 8-9 lists the related operations for adding a service port to a VLAN.

Table 8-9 Related operations for adding a service port to a VLAN

To… Run the Command… RemarksDelete a service port undo service-port The service port cannot be deleted in

the following cases:

n The port is encapsulated in PPPoA,IPoA or Auto mode.

n The port serves for a BTV user.n The port is bound with an IP addressor a MAC address.

n The port is congured with a staticMAC address.

Display VLANinformation

display vlan -

Display VLANstatistics

display statistics vlan -



8.12 Adding Service Ports in BatchesThis operation enables you to add service ports in batches: To run the multi-service-portvlan command to add multiple service ports on an asymmetric digital subscriber line 2 plus(ADSL2+)/single-pair high-speed digital subscriber line (SHDSL) board to a smart VLAN;To run the multi-service-port from-vlan command to add multiple service ports on one ormultiple ADSL2+/SHDSL boards to different MUX VLANs at a time.

Background Informationn The VPI/VCI of the service port must be the same as that of the xDSL modem connected

to the port.n To run the multi-service-port from-vlan command, create the required MUX VLANs

rst.n The smart VLAN supports multiple service ports on the same port, and the VPIs/VCIs of

the service ports are different. If the VPI/VCI of the service port is auto-sensing, onlyone service port can be created on a port.

n An xDSL port can be congured with up to eight service ports.n The VLAN(s) to which the service ports are to be added already exist.n The suitable trafc item already exists.

ProcedureStep 1 Run the multi-service-port vlan command to add service ports.

Step 2 Run the display service-port vlan command to query service ports.

—-End

ExampleTo add service ports 0/2/0–0/2/31 to smart VLAN 10, do as follows:huawei(config)#multi-service-port vlan 10 adsl 0/2 0-31 vpi0 vci 35 rx-cttr 2 tx-cttr2huawei(config)#display service-port vlan 10-------------------------------------------------------------------------VLAN ID VLAN-ATTR PORT-TYPE F/S /P VPI VCI RX TX STATE LABEL-------------------------------------------------------------------------

10 common adl 0/2/0 0 35 2 2 up -10 common adl 0/2/1 0 35 2 2 up -10 common adl 0/2/2 0 35 2 2 up -10 common adl 0/2/3 0 35 2 2 up -10 common adl 0/2/4 0 35 2 2 up -10 common adl 0/2/5 0 35 2 2 up -10 common adl 0/2/6 0 35 2 2 up -10 common adl 0/2/7 0 35 2 2 up -10 common adl 0/2/8 0 35 2 2 up -10 common adl 0/2/9 0 35 2 2 up -10 common adl 0/2/10 0 35 2 2 up -10 common adl 0/2/11 0 35 2 2 up -10 common adl 0/2/12 0 35 2 2 up -10 common adl 0/2/13 0 35 2 2 up -10 common adl 0/2/14 0 35 2 2 up -10 common adl 0/2/15 0 35 2 2 up -10 common adl 0/2/16 0 35 2 2 up -10 common adl 0/2/17 0 35 2 2 up -10 common adl 0/2/18 0 35 2 2 up -10 common adl 0/2/19 0 35 2 2 up -10 common adl 0/2/20 0 35 2 2 up -10 common adl 0/2/21 0 35 2 2 up -10 common adl 0/2/22 0 35 2 2 up -10 common adl 0/2/23 0 35 2 2 up -10 common adl 0/2/24 0 35 2 2 up -10 common adl 0/2/25 0 35 2 2 up -10 common adl 0/2/26 0 35 2 2 up -10 common adl 0/2/27 0 35 2 2 up -



Conguration Guide

10 common adl 0/2/28 0 35 2 2 up -10 common adl 0/2/29 0 35 2 2 up -10 common adl 0/2/30 0 35 2 2 up -10 common adl 0/2/31 0 35 2 2 up -

-------------------------------------------------------------------------Total : 32 (Up/Down : 32/0)

Note : F--Frame, S--Slot, P--Port(or Virtual Port, such as IMA GROUP,VLAN ID etc.), the VPI is access-end VLAN ID in vdsl port

To add all ADSL2+ and SHDSL ports to MUX VLANs (to add port 1 to VLAN 2, port 2 toVLAN 3, and so on), do as follows:huawei(config)#multi-service-port from-vlan 2 board 1-18 vpi0 vci 35 rx-cttr 2 tx-cttr 2

NOTE

Here only 90 service ports are added successfully. Other service ports have existed so they fail to beadded.

Related Operations

Table 8-10 lists the related operations for adding service ports in batches.

Table 8-10 Related operations for adding service ports in batches

To… Run the Command... RemarksDelete a service port undo service-port The service port cannot be deleted in

the following cases:

n The port is encapsulated in PPPoA,IPoA or Auto mode.

n The port serves for a BTV user.n The port is bound with the IP addressor MAC address.

n The port is congured with a staticMAC address.

Display VLAN trafcstatistics

display statistics vlan -

8.13 Setting the Description of a Service PortThis operation enables you to set the description of a service port.

Procedure

Step 1 Run the service-port desc command to set the description of a service port.

Step 2 Run the display service-port desc command to query the description of the service port.

—-End

Example

To set the description of service port 0/2/0 with VPI/VCI of 0/35, do as follows:huawei(config)#service-port desc 0/2/0 vpi 0 vci 35 description user0/2/0huawei(config)#display service-port desc 0/2/0{<cr>|autosense<K>|vpi<K>|user-vlan<K>|user-encap<K>}:Command:

display service-port desc 0/2/0------------------------------------------------------------------------------PORT : adlF/S/P : 0/2/0



VPI : 0VCI : 35FLOWTYPE : -FLOWPARA : -DESCRIPTION : user0/2/0------------------------------------------------------------------------------

Related Operation

Table 8-11 lists the related operation for setting the description of a service port.

Table 8-11 Related operation for setting the description of a service port

To… Run the Command…Delete the description of a service port undo service-port desc


SmartAX MA5600 Multi-service Access ModuleConguration Guide 9 DHCP Relay Conguration

9 DHCP Relay Conguration


9.1 OverviewThis section describes DHCP relay function and its application to the MA5600.9.2 Conguration Example of DHCP Standard ModeThis example shows how to congure DHCP standard mode to obtain the IP addressautomatically.9.3 Conguration Example of DHCP Option60 ModeThis example shows how to enable the PC to obtain the IP address automatically in DHCPoption60 mode.9.4 Conguration Example of DHCP MAC Address Segment ModeThis example shows how to enable the PC to obtain the IP address automatically in DHCPMAC address segment mode.9.5 Creating a DHCP Server GroupThis operation enables you to create a DHCP server group.9.6 Setting Working Mode of a DHCP ServerThis operation enables you to set working mode of a DHCP server.9.7 Setting DHCP Relay ModeThis operation enables you to set DHCP relay mode.9.8 Binding a DHCP Server Group with a VLAN InterfaceThis operation enables you to bind a DHCP server group with a VLAN interface.9.9 Creating an Option60 DomainThis operation enables you to create an option60 domain.9.10 Binding a DHCP Server Group with a DHCP Option60 DomainThis operation enables you to bind a DHCP server group with a DHCP option60 domain.9.11 Conguring the Gateway of a DHCP Option60 DomainThis operation enables you to congure the gateway of a DHCP option60 domain.9.12 Creating a DHCP MAC Address SegmentThis operation enables you to create a DHCP MAC address segment.9.13 Setting the Range of a DHCP MAC Address SegmentThis operation enables you to set the range of a DHCP MAC address segment.9.14 Binding a DHCP Server Group with a DHCP MAC Address SegmentThis operation enables you to bind a DHCP server group with a DHCP MAC address segment.9.15 Conguring the Gateway of a DHCP MAC Address SegmentThis operation enables you to congure the gateway of a DHCP MAC address segment.


9 DHCP Relay CongurationSmartAX MA5600 Multi-service Access Module

Conguration Guide

9.1 OverviewThis section describes DHCP relay function and its application to the MA5600.

Service DescriptionThe Dynamic Host Conguration Protocol (DHCP) works in the client/server mode. TheDHCP client can dynamically request conguration data and the DHCP server can provide thedata for the client conveniently. DHCP adopts IP address renting management and IP addresstime division multiplexing, greatly saving IP address resources.

Initially, the DHCP was only suitable for applications where the DHCP client and server werelocated on the same subnet and could not work across a network segment. If the early DHCP isused to dynamically congure the host, each subnet shall be equipped with a DHCP server.That is obviously uneconomical.

The introduction of DHCP relay solves the mentioned problem. The DHCP relay serves asrelay between the DHCP client and the server located on different subnets. The DHCP packetscan be relayed to the destination DHCP server (or client) across network segments. In this way,the DHCP clients on different networks can use the same DHCP server. This is economicaland convenient for centralized management. Figure 9-1 shows the principle of DHCP relay.

Figure 9-1 MA5600 DHCP relay

Service SpecicationThe MA5600 supports layer 2 and layer 3 DHCP relay as well as DHCP Option82 to guaranteeDHCP security.

NOTE

For the conguration of the DHCP Option82, see 17.5 Enabling the DHCP Option82 Function and 17.6Setting the Maximum Length of DHCP Packets.

The MA5600 supports the following DHCP relay working modes:n Standard moden Option60 moden MAC address segment mode

9.2 Conguration Example of DHCP Standard ModeThis example shows how to congure DHCP standard mode to obtain the IP addressautomatically.



Prerequisite

The primary IP address of the layer 3 interface of VLAN 2 shall be in the same networksegment as that of the upper layer router. There shall be routing between the device and theDHCP server.

NetworkingFigure 9-2 shows a sample network for conguring DHCP standard mode.

Figure 9-2 Sample network for conguring DHCP standard mode

In this network:n DHCP server group 1 assigns IP addresses for the two PCs in VLAN 2.n DHCP server group 2 assigns IP addresses for the two PCs in VLAN 3.

Data PlanTable 9-1 lists the data plan for conguring DHCP standard mode.

Table 9-1 Data plan for conguring DHCP standard mode

Item Data RemarksPrimary IP address: 10.1.1.1/24 -DHCP server group 1

Secondary IP address: 10.1.1.2 -

Primary IP address: 10.2.1.1/24 -DHCP server group 2

Secondary IP address: 10.2.1.2/24 -

VLAN 2 Layer 3 IP address: 2.2.2.1/24 VLAN 2 binds DHCPserver group 1.

VLAN 3 Layer 3 IP address: 2.2.2.2/24 VLAN 3 binds DHCPserver group 2.

Upstream port 0/7/0 -

Service ports 0/2/0, 0/2/1 -



Conguration Guide

Conguration FlowchartNOTE

The conguration on VLAN 3 is the same as that on VLAN 2. This example only shows how congurePC of VLAN 2 to obtain IP address.

Figure 9-3 shows the owchart for conguring DHCP standard mode.

Figure 9-3 Flowchart for conguring DHCP standard mode

Procedure

Step 1 Add a DHCP server group.huawei(config)#dhcp-server 1 ip 10.1.1.1 10.1.1.2

Step 2 Create a DHCP server.huawei(config)#dhcp-server 1 ip 10.1.1.1 10.1.1.2

Step 3 Set working mode of the DHCP server.The default load-sharing mode is applied and no separate conguration is needed.

NOTE

For details of setting working mode of the DHCP server, see 9.6 SettingWorking Mode of a DHCP Server.

Step 4 Congure the VLAN upstream port and the service port.huawei(config)#vlan 2 smarthuawei(config)#port vlan 2 0/7 0huawei(config)#service-port vlan 2 adsl 0/2/0 vpi 0 vci 35 rx-cttr 6 tx-cttr 6huawei(config)#service-port vlan 2 adsl 0/2/1 vpi 0 vci 35 rx-cttr 6 tx-cttr 6

Step 5 Congure the IP address of the layer 3 interface.huawei(config)#interface vlanif 2huawei(config-if-Vlanif2)#ip address 2.2.2.1 24



Step 6 Select DHCP relay mode.huawei(config)#dhcp mode layer-3 standard

Step 7 Bind the interface with the DHCP server group.huawei(config-if-Vlanif2)#dhcp-server 1huawei(config-if-Vlanif2)#quit

Step 8 Save the data.huawei(cong)#save

—-End

Result

The PCs can obtain IP addresses dynamically.

9.3 Conguration Example of DHCP Option60 ModeThis example shows how to enable the PC to obtain the IP address automatically in DHCPoption60 mode.

Prerequisite

The primary IP address of the layer 3 of VLAN 2 shall be in the same network segment as thatof the upper layer router. There shall be routing between the device and the DHCP server.

NetworkingFigure 9-4 shows a sample network for conguring DHCP option60 mode.

Figure 9-4 Sample network for conguring DHCP option60 mode

Data PlanTable 9-2 lists the data plan for conguring DHCP option60 mode.

Table 9-2 Data plan for conguring DHCP option60 mode

Item Data RemarksPrimary IP address: 10.10.10.10/24 -DHCP server group 2

Secondary IP address:10.10.10.11/24

-

VLAN 2 Layer 3 interface IP address:10.1.2.1/24

-


Service ports 0/2/0 -



Conguration Guide

Item Data RemarksDomain: msftDHCP server group: DHCP servergroup 2

Domain

Gateway IP address: 10.1.2.1/24

The gateway IPaddress is the same asthe IP address of thelayer 3 interface.

Background Informationn The name of option60 domain must be congured according to the type of connected

terminal device.n If the DHCP client is Windows 98/2000/XP/NT series, the domain name must be msft.n The system selects the domain based on the option60 eld in the packet. If there is no

appropriate domain matched, the default domain is used.

Conguration FlowchartFigure 9-5 shows the owchart for conguring the DHCP option60 mode.

Figure 9-5 Flowchart for conguring the DHCP option60 mode



Procedure


Step 2 Create a DHCP server.huawei(config)#dhcp-server 2 ip 10.10.10.10 10.10.10.11

Step 3 Set working mode of the DHCP server.The default load-sharing mode is applied and no separate conguration is needed.

NOTE

For details of setting working mode of the DHCP server, see 9.6 SettingWorking Mode of a DHCP Server.

Step 4 Congure the VLAN upstream port and the service port.huawei(config)#vlan 2 smarthuawei(config)#port vlan 2 0/7 0huawei(config)#service-port vlan 2 adsl 0/2/0 vpi 0 vci 35 rx-cttr 6 tx-cttr 6

Step 5 Congure the IP address of the VLAN layer 3 interface.huawei(config)#interface vlanif 2huawei(config-if-Vlanif2)#ip address 10.1.2.1 24

Step 6 Select DHCP relay mode.huawei(config-if-Vlanif2)#quithuawei(config)#dhcp mode layer-3 option-60

Step 7 Specify the option60 domain.huawei(config)#dhcp domain msft

Step 8 Bind the domain with the DCHP server group.huawei(config-dhcp-domain-msft)#dhcp-server 2

Step 9 Congure the gateway address of the domain.huawei(config-dhcp-domain-msft)#quithuawei(config)#interface vlanif 2huawei(config-if-Vlanif2)#dhcp domain msft gateway 10.1.2.1


—-End

Result

The PCs can obtain IP addresses dynamically.

9.4 Conguration Example of DHCP MAC AddressSegment Mode

This example shows how to enable the PC to obtain the IP address automatically in DHCPMAC address segment mode.

Prerequisite

The primary IP address of the layer 3 interface of VLAN 2 shall be in the same networksegment as that of the upper layer router. There shall be routing between the device and theDHCP server.



Conguration Guide

NetworkingFigure 9-6 shows a sample network for conguring MAC address segment mode.

Figure 9-6 Sample network for conguring MAC address segment mode

Data PlanTable 9-3 lists the data plan for conguring MAC address segment mode.

Table 9-3 Data plan for conguring MAC address segment mode

Function Data RemarksPrimary IP address: 10.10.10.10/24 -DHCP server group

2 Secondary IP address: 10.10.10.11/24 -

VLAN 2 Layer 3 interface IP address:10.1.2.1/24

-


Service port 0/2/0 -

MAC address segment name: huawei -

Start range: 0000-0000-0001End range: 0000-0000-0100

-

Gateway IP address: 10.1.2.1 The gateway IP address isthe same as the IP address ofthe layer 3 interface.

MAC addresssegment

DHCP server group: DHCP servergroup 2

-

PC MAC address: 0000-0000-0010 -

Conguration FlowchartFigure 9-7 shows the owchart for conguring MAC address segment mode.



Figure 9-7 Flowchart for conguring MAC address segment mode

Procedure


Step 2 Add the upstream port and service port to the VLAN.huawei(config)#vlan 2 smarthuawei(config)#port vlan 2 0/7 0huawei(config)#service-port vlan 2 adsl 0/2/0 vpi 0 vci 35 rx-cttr 6 tx-cttr 6

Step 3 Congure the IP address of the VLAN layer 3 interface.huawei(config)#interface vlanif 2huawei(config-if-Vlanif2)#ip address 10.1.2.1 24

Step 4 Select DHCP relay mode.huawei(config)#dhcp mode layer-3 mac-range

Step 5 Specify a MAC address segment.



Conguration Guide

huawei(config)#dhcp mac-range huawei

Step 6 Specify the MAC address segment range.huawei(config-mac-range-huawei)#mac-range 0000-0000-0001 to 0000-0000-0100

Step 7 Bind the MAC address segment with the DCHP server group.huawei(config-mac-range-huawei)#dhcp-server 2

Step 8 Congure the gateway address of the MAC address segment.huawei(config-mac-range-huawei)#quithuawei(config)#interface vlanif 2huawei(config-if-Vlanif2)#dhcp mac-range huawei gateway 10.1.2.1

Step 9 Save the data.huawei(cong)#save

—-End

ResultThe PCs can obtain IP addresses dynamically.

9.5 Creating a DHCP Server GroupThis operation enables you to create a DHCP server group.

Background Informationn To improve the reliability of a network, you can specify a primary DHCP server and a

secondary one in a server group to form a DHCP server group.n Up to 20 DHCP server groups (0–19) can be congured in the system.n The primary server or the secondary server is identied by its IP address. The secondary

server cannot be added independently. Instead, it has to be added together with theprimary server.

ProcedureStep 1 Run the dhcp-server command to create a DHCP server group.

Step 2 Run the display dhcp-server command to query the information of the DHCP server group.

—-End

ExampleTo add the primary and secondary DHCP servers with IP addresses of 10.1.1.1 and 10.1.1.2respectively to DHCP server group 1, do as follows:huawei(config)#dhcp-server 1 ip 10.1.1.1 10.1.1.2huawei(config)#display dhcp-server 1The primary IP address of DHCP server group 1: 10.1.1.1The secondary IP address of DHCP server group 1: 10.1.1.2Messages from this server group: 0Messages to this server group: 0Messages from clients to this server group: 0Messages from this server group to clients: 0DHCP OFFER messages: 0DHCP ACK messages: 0DHCP NAK messages: 0DHCP DECLINE messages: 0DHCP DISCOVER messages: 0DHCP REQUEST messages: 0DHCP INFORM messages: 0DHCP RELEASE messages: 0



Related Operation

Table 9-4 lists the related operation for creating a DHCP server group.

Table 9-4 Related operation for creating a DHCP server group

To... Run the Command...Delete a DHCP servergroup

undo dhcp-server

9.6 Setting Working Mode of a DHCP ServerThis operation enables you to set working mode of a DHCP server.

Background InformationThe MA5600 supports two DHCP server working modes:n load-sharing: In this mode, the MA5600 sends DHCP messages to both the active and

standby DHCP servers. By default, the system is in load-sharing mode.n backup: In this mode, the MA5600 sends DHCP messages to the DHCP server that

is running at the current time. The system rstly takes the active DHCP server as therunning DHCP server at the current time. When the DHCP server does not reply OFFERmessage to the MA5600 within a specied period, the system switches the standby DHCPserver to the running DHCP server at the current time. This mode can reduce the messageload in the network.

Procedure

Step 1 Run the dhcp server mode command to set the working mode of a DHCP server.

Step 2 Run the display dhcp server cong command to query the working mode of the DHCP server.

—-End

Example

To set the DHCP server to backup mode, the maximum response time to DISCOVER messageto 50s and the maximum timeout times for responding to DISCOVER message to 100, doas follows:huawei(config)#dhcp server mode backup 50 100huawei(config)#display dhcp server configDHCP server mode: backupDHCP server reply max time: 50 secondDHCP server reply timeout max times: 100

Related Operations

Table 9-5 lists the related operations for setting working mode of a DHCP server.

Table 9-5 Related operations for setting working mode of a DHCP server

To... Run the Command...Create a DHCP server dhcp-serverQuery information of a DHCP server display dhcp-server



Conguration Guide

9.7 Setting DHCP Relay ModeThis operation enables you to set DHCP relay mode.

Background InformationThe MA5600 supports both layer 2 and layer 3 DHCP relay. Layer 3 DHCP relay includes:n DHCP standard mode: Select the DHCP server according to the IP address of the VLAN

layer 3 interface for forwarding DHCP packets.n DHCP option60 mode: Select the DHCP server according to the DHCP Optioni60

domain.n DHCP MAC address segment mode: Select the DHCP server group according to the

source MAC address segment of DHCP packets.

ProcedureStep 1 Run the dhcp mode command to set DHCP working mode.

Step 2 Run the display dhcp cong command to query DHCP working mode.

—-End

ExampleTo set the DHCP relay mode as layer 2, do as follows:huawei(config)#dhcp mode layer-2huawei(config)#display dhcp configDHCP relay mode: layer-2

To set the DHCP relay mode as layer 3 DHCP option60, do as follows:huawei(config)#dhcp mode layer-3 option-60huawei(config)#display dhcp configDHCP relay mode: layer-3DHCP server select mode: option-60

9.8 Binding a DHCP Server Group with a VLAN InterfaceThis operation enables you to bind a DHCP server group with a VLAN interface.

PrerequisiteThe DHCP server group has been created.

Background Informationn A VLAN layer 3 interface can be bound with only one DHCP server group. Therefore, all

DHCP packets to be sent upstream through the VLAN layer 3 interface shall be forwardedto the DHCP server group bound with the VLAN interface.

n If a layer 3 interface has been bound with a DHCP server group, the new settingoverwrites the old one.

n By default, a VLAN interface is not bound with any DHCP server.

ProcedureStep 1 Run the interface vlanif command to enter VLAN interface mode.

Step 2 Run the dhcp-server command to bind a DHCP server group.



Step 3 Run the display dhcp-server interface vlanif command to query the DHCP server groupthat is bound with VLAN interface.

—-End

Example

To bind DHCP server group 1 to VLAN interface 2, do as follows:huawei(config)#interface vlanif 2huawei(config-if-Vlanif2)#dhcp-server 1huawei(config)#display dhcp-server interface vlanif 2The DHCP server group of this interface is 1

Related Operations

Table 9-6 lists the related operations for binding a DHCP server group with a VLAN interface.

Table 9-6 Related operations for binding a DHCP server group with a VLAN interface

To... Run the Command... RemarksUnbind a VLAN interface from aDHCP server

undo dhcp-server In VLAN interface mode.

Show the settings of DHCP relay display dhcp cong -

9.9 Creating an Option60 DomainThis operation enables you to create an option60 domain.

Background Informationn The system supports up to 128 DHCP option60 domains.n If the domain exists, enter domain mode directly. By default, the system has a DHCP

option60 domain named default.

Procedure

Step 1 Run the dhcp domain command to create a domain.

Step 2 Run the quit command to quit from domain mode.

Step 3 Run the display dhcp domain command to query the option60 domain.

—-End

Example

To create domain msft, do as follows:huawei(config)#dhcp domain msfthuawei(config-dhcp-domain-msft)#quithuawei(config)#display dhcp domain{ <cr>|string<s><1,32> }:

Command:display dhcp domain

--------------------------------------------------------------------Index Name Server VLANIF Gateway

-group--------------------------------------------------------------------0 default none none none1 msft none none none



Conguration Guide

--------------------------------------------------------------------Total: 2

Related Operations

Table 9-7 lists the related operations for creating a DHCP option60 domain.

Table 9-7 Related operations for creating a DHCP option60 domain

To... Run the Command... RemarksDelete a DHCP option60 domain undo dhcp domain The domain named default

cannot be deleted.

9.10 Binding a DHCP Server Group with a DHCP Option60Domain

This operation enables you to bind a DHCP server group with a DHCP option60 domain.

Background InformationOnly one DHCP server group can be bound to a DHCP domain.

Procedure

Step 1 Run the dhcp domain command to enter domain mode.


Step 3 Run the display dhcp domain command to query the DHCP server group.

—-End

Example

To bind DHCP server group 1 to DHCP domain msft, do as follows:huawei(config)#dhcp domain msfthuawei(config-dhcp-domain-msft)#dhcp-server 1huawei(config-dhcp-domain-msft)#quithuawei(config)#display dhcp domain msft--------------------------------------------------------------------Index Name Server VLANIF Gateway

-group--------------------------------------------------------------------1 msft 1 none none--------------------------------------------------------------------

Related Operations

Table 9-8 lists the related operations for binding a DHCP server group with a DHCP option60domain.

Table 9-8 Related operations for binding a DHCP server group with a DHCP option60 domain

To… Run the Command… RemarksDelete a DHCP domain undo dhcp domain -

Unbind the DHCP servergroup from a DHCP domain

undo dhcp-server In option60 domain mode.



9.11 Conguring the Gateway of a DHCPOption60 DomainThis operation enables you to congure the gateway of a DHCP option60 domain.

Background Informationn A DHCP domain can be congured with only one gateway address.n By default, the gateway address of a domain is the IP address of the VLAN layer 3

interface.

Procedure


Step 2 Run the dhcp domain gateway command to set the gateway address.

Step 3 Run the quit command to quit from VLAN interface mode.

Step 4 Run the display dhcp domain command to query the DHCP server group.

—-End

Example

To set the gateway address of domain msft as 10.1.2.1, do as follows:huawei(config)#interface vlanif 2huawei(config-if-Vlanif2)#dhcp domain msft gateway 10.1.2.1huawei(config-if-Vlanif2)#quithuawei(config)#display dhcp domain msft--------------------------------------------------------------------Index Name Server VLANIF Gateway

-group--------------------------------------------------------------------1 msft 1 2 10.1.2.1--------------------------------------------------------------------

Related Operation

Table 9-9 lists the related operation for conguring the gateway of a DHCP option60 domain.

Table 9-9 Related operation for conguring the gateway of a DHCP option60 domain

To... Run the Command... RemarksDelete the gateway of a DHCPoption60 domain

undo dhcp domain gateway In VLAN interfacemode.

9.12 Creating a DHCP MAC Address SegmentThis operation enables you to create a DHCP MAC address segment.

Prerequisites

n The DHCP server group has been created.n The VLAN layer 3 interface IP address has been congured.n By default, the system has a MAC address segment named default.



Conguration Guide

Background InformationThe system supports up to 128 MAC address segments.

Procedure

Step 1 Run the dhcp mac-range command to create a DHCP MAC address segment and enter MACaddress segment mode.

Step 2 Run the display dhcp mac-range command to query the MAC address segment.

—-End

Example

To set a MAC address segment named huawei, do as follows:huawei(config)#dhcp mac-range huaweihuawei(config-mac-range-huawei)#quithuawei(config)#display dhcp mac-range{ <cr>|string<S><1,32> }:

Command:display dhcp mac-range

------------------------------------------------------------------------------

Index Name MAC-start MAC-end Server VLAN Gateway-group -IF

------------------------------------------------------------------------------

0 default none none none none none1 huawei none none none none none------------------------------------------------------------------------------

Total: 2

Related Operations

Table 9-10 lists the related operations for creating a DHCP MAC address segment.

Table 9-10 Related operations for creating a DHCP MAC address segment

To... Run the Command... RemarksDelete a DHCP MACaddress segment

undo dhcp mac-range MAC address segment nameddefault cannot be deleted.

9.13 Setting the Range of a DHCP MAC Address SegmentThis operation enables you to set the range of a DHCP MAC address segment.

Background Informationn A MAC address segment is a consecutive MAC address array specied by a start MAC

address and an end MAC address.n The MAC address adopts the format of "H-H-H" ("H" is a 4-bit hexadecimal number).

Procedure

Step 1 Run the dhcp mac-range command to create a MAC address segment and enter MAC addresssegment mode.

Step 2 Run the mac-range command to set the range of a MAC address segment.



Step 3 Run the quit command to quit from the MAC address segment mode.

Step 4 Run the display dhcp mac-range command to query the range of the MAC address segment.

—-End

Example

To set the range of MAC address segment huawei from 0000-0000-0001 to 0000-0000-0100,do as follows:huawei(config)#dhcp mac-range huaweihuawei(config-mac-range-huawei)#mac-range 0000-0000-0001 to 0000-0000-0100huawei(config)#display dhcp mac-range{ <cr>|string<S><1,32> }:Command:

display dhcp mac-range------------------------------------------------------------------------------


------------------------------------------------------------------------------

0 default none none none none none1 huawei 0000-0000-0001 0000-0000-0100 none none none------------------------------------------------------------------------------

Total: 2

Related Operation

Table 9-11 lists the related operation for setting the range of a DHCP MAC address segment.

Table 9-11 Related operation for setting the range of a DHCP MAC address segment

To... Run the Command... RemarksCancel the range of a MACaddress segment

undo mac-range -

9.14 Binding a DHCP Server Group with a DHCP MACAddress Segment

This operation enables you to bind a DHCP server group with a DHCP MAC address segment.

Background InformationA MAC address segment can be bound with only one DHCP server group.

Procedure

Step 1 Run the dhcp mac-range command to create a MAC address segment and enter MAC addresssegment mode.


Step 3 Run the display dhcp mac-range command to query the information of the MAC addresssegment.

—-End



Conguration Guide

Example

To bind MAC address segment huawei with server group 1, do as follows:huawei(config)#dhcp mac-range huaweihuawei(config-mac-range-huawei)#dhcp-server 100huawei(config)#display dhcp mac-range{ <cr>|string<S><1,32> }:Command:

display dhcp mac-range------------------------------------------------------------------------------


------------------------------------------------------------------------------

0 default none none none none none1 huawei none none 100 none none------------------------------------------------------------------------------

Total: 2

Related Operations

Table 9-12 lists the related operations for binding a DHCP server group with a DHCP MACaddress segment.

Table 9-12 Related operations for binding a DHCP server group with a DHCP MAC addresssegment

To... Run the Command.. RemarksDelete the DHCP server groupfrom a DHCP MAC addresssegment

undo dhcp-server -

9.15 Conguring the Gateway of a DHCP MAC AddressSegment

This operation enables you to congure the gateway of a DHCP MAC address segment.

Background InformationA DHCP MAC address segment can be congured with only one gateway address.

Procedure


Step 2 Run the dhcp mac-range huawei gateway command to congure the gateway address.

Step 3 Run the quit command to quit from VLAN interface mode.

Step 4 Run the display dhcp mac-range command to query the information of the gateway address.

—-End

Example

To set the gateway address of MAC address segment huawei as 10.1.2.1, do as follows:huawei(config)#interface vlanif 2huawei(config-if-Vlanif2)#dhcp mac-range huawei gateway 10.1.2.1huawei(config-if-Vlanif2)#quit



huawei(config)#display dhcp mac-range huawei------------------------------------------------------------------------------Index Name MAC-start MAC-end Server VLAN Gateway

-group -IF------------------------------------------------------------------------------0 huawei none none none 2 10.1.2.1------------------------------------------------------------------------------

Related Operations

Table 9-13 lists the related operations for conguring the gateway of a DHCP MAC addresssegment.

Table 9-13 Related operations for conguring the gateway of a DHCP MAC address segment

To... Run the Command... RemarksCancel the gateway of the MACaddress segment on a VLANinterface

undo dhcp mac-rangegateway

-

Unbind the DHCP server group froma MAC address segment

undo dhcp-server In MAC address segmentmode.


SmartAX MA5600 Multi-service Access ModuleConguration Guide 10 ARP & ARP Proxy Conguration

10 ARP & ARP Proxy Conguration


10.1 OverviewThis chapter describes ARP proxy service description and service specication.10.2 ARP Proxy Conguration ExampleThis operation enables you to congure ARP proxy to enable users in different VLANsto communicate with each other.10.3 Adding a Static ARP EntryThis operation enables you to add a static ARP entry to realize layer 3 interconnection withno dynamic ARP trigged.10.4 Enabling the ARP ProxyThis operation enables you to enable the ARP proxy to implement layer 3 interconnection forusers who are isolated at layer 2.


10 ARP & ARP Proxy CongurationSmartAX MA5600 Multi-service Access Module

Conguration Guide

10.1 OverviewThis chapter describes ARP proxy service description and service specication.

Service DescriptionBefore two hosts in a network can communicate with each other, they shall know each other’sphysical addresses, that is, MAC addresses. The IP address represents only the address of ahost at the network layer. To send the data at the network layer to a destination host, the sourcehost must know the physical address of the destination host. This is why an IP address shallbe translated into a MAC address.

Address Resolution Protocol (ARP) is used to translate an IP address into a MAC address.

Through ARP proxy, two PCs subject to layer 2 isolation can interconnect with each otherat layer 3.

Service SpecicationThe MA5600 can maintain ARP entries both dynamically and manually. It supports ARPproxy function.

The MA5600 supports the ARP protocol and maintains an ARP table for the mapping betweenthe MAC addresses and the IP addresses. You can congure the static ARP entry manually.The MA5600 supports up to 500 static ARP entries and 4096 dynamic ARP entries.

10.2 ARP Proxy Conguration ExampleThis operation enables you to congure ARP proxy to enable users in different VLANsto communicate with each other.

Prerequisites

n The network equipment and line works in the normal state.n Service boards work in the normal state.n VPI/VCI congured on the modem is 0/35.

NetworkingFigure 10-1 shows a sample network for conguring the ARP proxy.



Figure 10-1 Sample network for conguring the ARP proxy

Data PlanTable 10-1 lists the data plan for conguring the ARP proxy.

Table 10-1 Data plan for conguring the ARP proxy

Item DataVLAN ID: 100Super VLANSub VLAN: VLAN 10, VLAN 20VLAN ID: 10VLAN type: smart VLAN

Sub VLAN

User: PC1(0/2/0), PC2(0/2/1)VLAN ID: 20VLAN type: MUX VLAN

Sub VLAN

User: PC3(0/3/0)Port:0/7/0Upstream port

VLAN: standard VLAN 40

ProcedureStep 1 Create a super VLAN.

huawei(config)#vlan 100 super

Step 2 Create Sub VLANs 3 and 4, and add them to the super VLAN.huawei(config)#vlan 10 smarthuawei(config)#vlan 20 muxhuawei(config)#supervlan 100 subvlan 10huawei(config)#supervlan 100 subvlan 20

Step 3 Congure the virtual ports of the sub VLANs.huawei(config)#service-port vlan 10 adsl 0/2/0 vpi 0 vci 35 rx-cttr 2 tx-cttr 2huawei(config)#service-port vlan 10 adsl 0/2/1 vpi 0 vci 35 rx-cttr 2 tx-cttr 2huawei(config)#service-port vlan 20 adsl 0/3/0 vpi 0 vci 35 rx-cttr 2 tx-cttr 2

Step 4 Congure the upstream port



Conguration Guide

huawei(config)#vlan 30 standardhuawei(config)#port vlan 30 0/7 0huawei(config)#interface vlanif 30huawei(config-if-vlanif5)#ip address 10.0.1.254 24

Step 5 Congure the layer 3 interface of the super VLAN.huawei(config)#interface vlanif 100huawei(config-if-vlanif100)#ip address 10.0.0.254 24

NOTE

The IP address of the layer 3 interface of the super VLAN must be in the same subnet as that of the PC.

Step 6 Enable the global ARP Proxy function.huawei(config)#arp proxy enable

Step 7 Enable ARP Proxy on the super VLAN interface.huawei(config-if-vlanif100)#arp proxy enable

Step 8 Enable ARP Proxy on the sub VLAN interface.huawei(config-if-vlanif100)#arp proxy enable subvlan 10

NOTE

Skip step 8 if you only want PCs in different VLANs to communicate with each other.

—-End

Result

After the global ARP proxy function and the ARP proxy function of the super VLAN interfaceare enabled, PC 1 and PC 3 in different VLANs can communicate with each other.

After the global ARP proxy function, the ARP proxy function of the super VLAN interface,and that of the sub VLAN interface are enabled, PC 1 and PC 2 in the same VLAN cancommunicate with each other.

10.3 Adding a Static ARP EntryThis operation enables you to add a static ARP entry to realize layer 3 interconnection withno dynamic ARP trigged.

Background InformationThe ARP mapping list applies only to a LAN for address resolution, instead of the WAN.

Procedure

Step 1 Run the arp command to add a static ARP entry.

Step 2 Run the display arp static command and you can nd that a static ARP entry has beenadded successfully.

—-End

Example

To add a static ARP entry to set up the mapping between the IP address 129.102.0.1 and theMAC address 00e0-fc01-0000, passing through port 0/7/0 of VLAN 10, do as follows:huawei(config)#arp 129.102.0.1 00e0-fc01-0000 10 0/7/0



huawei(config)#display arp staticIP Address MAC Address VLAN ID Port Type129.102.0.1 00e0-fc01-0000 10 0/7/0Static--- 1 entry found ---

Related Operations

Table 10-2 lists the related operations for adding a static ARP entry.

Table 10-2 Related operations for adding a static ARP entry

To… Run the Command… RemarksDelete an ARPentry

undo arp The system can delete both static anddynamic ARP entries.

Clear redundantinformation

reset arp You can clear a static ARP entry, a dynamicARP entry, or ARP entries related to a port.By entering the parameter all, you can clearall ARP entries.

10.4 Enabling the ARP ProxyThis operation enables you to enable the ARP proxy to implement layer 3 interconnection forusers who are isolated at layer 2.

Procedure

Step 1 Run the arp proxy command to enable the global ARP proxy function.

Step 2 Run the display arp proxy command and you can nd that the ARP proxy has been enabled.

—-End

Examples

To enable the global ARP proxy, do as follows:huawei(config)arp proxy enablehuawei(config)#display arp proxyGlobal arp proxy is enabled

To enable the ARP proxy of a layer 3 interface, do as follows:huawei(config)#interface vlanif 100huawei(config-if-Vlanif100)arp proxy enablehuawei(config-if-vlanif100)#display arp proxyVLANIF 10 : Arp proxy is enabled

To enable the ARP proxy of a Sub VLAN, do as follows:huawei(config)#interface vlanif 10huawei(config-if-vlanif10)#arp proxy enable subvlan 10huawei(config-if-vlanif10)#display arp proxyARP proxy enable subvlan 10

Related Operation

Table 10-3 lists the related operation for enabling the ARP proxy.



Conguration Guide

Table 10-3 Related operation for enabling the ARP proxy

To… Run the Command…Disable the ARP proxy arp proxy disable


SmartAX MA5600 Multi-service Access ModuleConguration Guide 11 Routing Protocol Conguration

11 Routing Protocol Conguration


11.1 Routing Protocol CongurationThis section describes the routing protocol and its application to the MA5600.11.2 Conguration Example of the Static RouteThis example shows how to congure the static route which enables users in different networksegments to interconnect across different MA5600s.11.3 Conguration Example of RIPThis example realizes layer 3 interconnection among devices in different network segments.11.4 Conguration Example of OSPFThis example shows how to congure OSPF on the MA5600.11.5 Conguration Example of a Route PolicyThis example shows how to congure a route policy for imported routes.11.6 Adding a Static RouteThis operation enables you to add a static route to the destination address. This helps to realizelayer 3 interconnection among network devices in different network segments.11.7 Conguring RIPThis sections describes how to congure RIP.11.8 Conguring OSPFThis section describes how to congure OSPF.11.9 Conguring OSPF on a VLAN InterfaceThis section describes how to congure OSPF on a VLAN interface.11.10 Conguring OSPF TimerThis section describes how to congure OSPF timer.11.11 Conguring Route SummarizationThis sections describes how to congure route summarization.11.12 Conguring OSPF Route ImportThis section describes how to congure OSPF route import.11.13 Conguring Route Filtering PolicyThis operation enables you to congure the route ltering policy to lter unnecessary routes.11.14 Showing and Debugging OSPFThis operation enables you to show and debug OSPF.11.15 Conguring an Address Prex ListThis operation enables you to congure an address prex list to lter IP addresses.11.16 Conguring a Route PolicyThis section describes how to congure a route policy.


11 Routing Protocol CongurationSmartAX MA5600 Multi-service Access Module

Conguration Guide

11.1 Routing Protocol CongurationThis section describes the routing protocol and its application to the MA5600.

Service DescriptionThis chapter introduces the following routing protocols:n Static route: a special type of route that is congured manually by a network

administrator. Static routes are used in small networks with a simple topology that is notexpected to change frequently.

n Routing Information Protocol (RIP): a routing protocol that is based on theVector-Distance Algorithm (V-D).

n Open Shortest Path First (OSPF): a dynamic routing protocol running inside anautonomous system (AS). OSPF discovers and forwards routing information by collectingand forwarding the link status of an AS.

Service SpecicationWith a routing protocol running, the MA5600 can work as a router. The routing protocols theMA5600 supports include:n Static routing protocolsn Dynamic routing protocols such as RIP and OSPF

11.2 Conguration Example of the Static RouteThis example shows how to congure the static route which enables users in different networksegments to interconnect across different MA5600s.

NetworkingFigure 11-1 shows a sample network for conguring the static route.

Figure 11-1 Sample network of conguring the static route

The MA5600_A, MA5600_B, and MA5600_C have the routing function. It is expected thatafter the conguration, any two PCs can communicate with each other.



Data PlanTable 11-1 lists the data plan for conguring the static route at the user side.

Table 11-1 Data plan for conguring the static route at the user side

Item DataPrimary IP address of the layer 3 interface: 1.1.2.1Subnet mask: 255.255.255.0Secondary IP address of the layer 3 interface: 1.1.1.2Subnet mask: 255.255.255.0VLANID: 2

MA5600_A

Upstream port: 0/7/0PC_A IP address: 1.1.1.1

Subnet mask: 255.255.255.0Secondary IP address of layer 3 interface: 1.1.4.2Subnet mask: 255.255.255.0Primary IP address of layer 3 interface: 1.1.3.2Subnet mask: 255.255.255.0VLAN ID: 2

MA5600_B

Upstream port: 0/7/0PC_B IP address: 1.1.4.1

Subnet mask: 255.255.255.0Primary IP address of layer 3 interface: 1.1.3.1Subnet mask: 255.255.255.0Secondary IP address of layer 3 interface: 1.1.5.2Subnet mask: 255.255.255.0Secondary IP address of layer 3 interface: 1.1.2.2Subnet mask: 255.255.255.0VLAN ID: 2

MA5600_C

Upstream port: 0/7/0 (connectingMA5600_A) and 0/7/1 (connectingMA5600_B)

PC_C IP address: 1.1.5.1Subnet mask: 255.255.255.0

Background InformationCongure a native VLAN of the layer 3 interface of each MA5600 to ensure a normalcommunication among them.

Conguration FlowchartFigure 11-2 shows the owchart for conguring the static route.



Conguration Guide

Figure 11-2 Flowchart for conguring the static route

NOTE

The procedure shown in the above owchart is for conguring static routes on one MA5600. Tocongure static routes on multiple MA5600 devices, repeat the procedure.

Procedure

Step 1 Congure the IP address of the layer 3 interface.

NOTE

The congurations are the same for the three MA5600 devices. So, here the conguration for theMA5600_A is taken for example.

huawei(config)#vlan 2 smarthuawei(config)#port vlan 2 0/7 0huawei(config)#interface vlanif 2huawei(config-if-vlanif2)#ip address 1.1.1.2 24huawei(config-if-vlanif2)#ip address 1.1.2.1 24 sub

Step 2 Congure static routes.1. Congure static routes for MA5600_A.

huawei(config)#ip route-static 1.1.0.0 255.255.0.0 1.1.2.2

2. Congure static routes for MA5600_B.huawei(config)#ip route-static 1.1.0.0 255.255.0.0 1.1.3.1

3. Congure static routes for MA5600_C.huawei(config)#ip route-static 1.1.1.0 255.255.255.0 1.1.2.1huawei(config)#ip route-static 1.1.4.0 255.255.255.0 1.1.3.2

Step 3 Congure the host gateways.1. Congure the default gateway of the Host A to 1.1.1.2.2. Congure the default gateway of the Host B to 1.1.4.2.3. Congure the default gateway of the Host C to 1.1.5.2.


—-End

Result

After the conguration, interconnection can be set up between all the hosts and betweenall the MA5600 devices.



11.3 Conguration Example of RIPThis example realizes layer 3 interconnection among devices in different network segments.

NetworkingFigure 11-3 shows a sample network for conguring RIP.

Figure 11-3 Sample network of conguring RIP

Data PlanMA5600_A, MA5600_B and MA5600_C run RIP, and the convergence time must be within30s.

Table 11-2 lists the data plan for conguring RIP.

Table 11-2 Data plan for conguring RIP

Item DataMA5600_A Upstream port: 0/7/0

IP address of the layer 3 interface: 192.0.1.1Subnet mask: 255.255.255.0VLAN ID: 2Loopback interface address: 192.0.2.1Subnet mask: 255.255.255.0

MA5600_B At MA5600_C side:Upstream port: 0/7/0IP address of the layer 3 interface: 192.0.3.1Subnet mask: 255.255.255.0At Ethernet side:Upstream port: 0/7/1IP address of the layer 3 interface: 192.0.1.2Subnet mask: 255.255.255.0VLAN ID: 2



Conguration Guide

Item DataMA5600_C Upstream port: 0/7/0

IP address of the layer 3 interface: 192.0.3.2Subnet mask: 255.255.255.0VLAN ID: 2

Background InformationIn this example, the interfaces of all the MA5600 devices are in one VLAN. If they are not inone VLAN, congure a native VLAN to ensure a normal communication among them.

Conguration FlowchartFigure 11-4 shows the owchart for conguring RIP.

Figure 11-4 Flowchart for conguring RIP

NOTE

The procedure shown in the owchart is for conguring RIP on one MA5600. To congure static routeson multiple MA5600 devices, repeat the procedure.

Procedure

Step 1 Congure MA5600_A.1. Congure IP address of layer 3 interface.

huawei(config)#vlan 2 smarthuawei(config)#port vlan 2 0/7 0huawei(config)#interface vlanif 2huawei(config-if-vlanif2)#ip address 192.0.1.1 24

2. Congure the IP address of the Loopback interface.huawei(config)#interface loopBack 0huawei(config-if-loopback0)#ip address 192.0.2.1 24

3. Enable RIP.

Enable RIP on Ethernet port 0/19/0 and Loopback port 0 on MA5600_A.huawei(config)#riphuawei(config-rip-1)#network 192.0.1.0huawei(config-rip-1)#network 192.0.2.0

4. Set the RIP clock. Set the update time as 10s, age time as 30s, suppress time as 0s, andGarbage-collect time as 40s.



huawei(config-rip-1)#timers rip 10 30 0 40

5. Save the data.huawei#save

Step 2 Congure MA5600_B.1. Congure the IP address of the layer 3 interface.

huawei(config)#vlan 2 smarthuawei(config)#port vlan 2 0/7 0-1huawei(config)#interface vlanif 2huawei(config-if-vlanif2)#ip address 192.0.1.2 24huawei(config-if-vlanif2)#ip address 192.0.3.1 24

2. Enable RIP. Enable RIP on Ethernet port 0/7/0 and Ethernet port 0/7/1.huawei(config)#riphuawei(config-rip-1)#network 192.0.1.0huawei(config-rip-1)#network 192.0.3.0

3. Set the RIP clock. Set the update time as 10s, age time as 30s, suppress time as 0s, andGarbage-collect time as 40s.huawei(config-rip-1)#timers rip 10 30 0 40


Step 3 Congure MA5600_C.1. Congure the IP address of the layer 3 interface.

huawei(config)#vlan 2 muxhuawei(config)#port vlan 2 0/7 0huawei(config)#interface vlanif 2huawei(config-if-vlanif2#ip address192.0.3.2 24

2. Enable RIP.

Enable RIP on Ethernet port Ethernet0/7/0.huawei(config)#riphuawei(config-rip-1)#network 192.0.3.0

3. Set the RIP clock. Set the update time as 10s, age time as 30s, suppress time as 0s, andGarbage-collect time as 40s.huawei(config-rip-1)#timers rip 10 30 0 40


—-End

Result

n On MA5600_B and MA5600_C, run the display ip routing-table protocol ripcommand, and you can nd the route 192.0.2.0/24.

n Before adjusting the timer, perform the shut down operation on Ethernet port 0/7/0 onMA5600_A, and you can nd that route 192.0.2.0/24 of MA5600_B and MA5600_Cbecomes unreachable in 30s.

n After adjusting the timer, perform the undo shut down operation on Ethernet port 0/7/0 onMA5600_A, and you can nd that the route recovers within 30s. That is, the convergencetime of the RIP network is shortened.

11.4 Conguration Example of OSPFThis example shows how to congure OSPF on the MA5600.

NetworkingFigure 11-5 shows a sample network for conguring OSPF.



Conguration Guide

Figure 11-5 Sample network of conguring OSPF

Data PlanTable 11-3 lists the data plan for conguring OSPF.

Table 11-3 Data plan for conguring OSPF

Item Data RemarksIP address of the layer 3 interface:192.1.1.1Subnet mask: 255.255.255.0

-

Priority: 100 -

VLAN ID: 2 -

MA5600_A

Router ID: 1.1.1.1 -

IP address of the layer 3 interface:192.1.1.2Subnet mask: 255.255.255.0

-

Priority: 0 -

VLAN ID: 2 -

MA5600_B



-

Priority: 2 -

VLAN ID: 2 -

MA5600_C



-

Priority: not congured Default: 1VLAN ID: 2 -

MA5600_D




Background Informationn In this example, the interfaces of all the MA5600 devices are in one VLAN. If they are not

in one VLAN, congure a native VLAN to ensure a normal communication among them.n The OSPF area IDs of the MA5600 devices must be consistent.

Conguration FlowchartFigure 11-6 shows the owchart for conguring OSPF.

Figure 11-6 Flowchart for conguring OSPF

NOTE

The procedure shown in the above owchart is for conguring OSPF on one MA5600. To congureOSFP on multiple MA5600 devices, repeat the procedure.

Procedure

Step 1 Congure MA5600_A.1. Congure the IP address of the layer 3 interface.

huawei(config)#vlan 2 smarthuawei(config)#port vlan 2 0/7 0huawei(config)#interface vlanif 2huawei(config-if-vlanif2)#ip address 192.1.1.1 24huawei(config-if-vlanif2)#quit

2. Congure the OSPF Router ID.huawei(config)#router id 1.1.1.1

3. Enable OSPF.huawei(config)#ospfhuawei(config-ospf-1)#area 0huawei(config-ospf-1-area-0.0.0.0)#network 192.1.1.0 0.0.0.255huawei(config-ospf-1-area-0.0.0.0)#network 1.1.1.1 0.0.0.0huawei(config-ospf-1-area-0.0.0.0)#quithuawei(config-ospf-1)#quit

4. Congure the OSPF priority.huawei(config)#interface vlanif 2huawei(config-if-vlanif2)#ospf dr-priority 100huawei(config-if-vlanif2)#quit

Step 2 Congure MA5600_B.1. Congure the IP address of layer 3 interface.



Conguration Guide

huawei(config)#vlan 2 muxhuawei(config)#port vlan 2 0/7 0huawei(config)#interface vlanif 2huawei(config-if-vlanif2)#ip address 192.1.1.2 24huawei(config-if-vlanif2)#quit

2. Congure the OSPF Router ID.huawei(config)#router id 2.2.2.2


4. Congure the OSPF priority.huawei(config)#interface vlanif 2huawei(config-if-vlanif2)#ospf dr-priority 0huawei(config-if-vlanif2)#quit

Step 3 Congure MA5600_C.1. Congure IP address of layer 3 interface.


2. Congure OSPF Router ID.huawei(config)#router id 3.3.3.3


4. Congure OSPF priority.huawei(config)#interface vlanif 2huawei(config-if-vlanif2)#ospf dr-priority 2huawei(config-if-vlanif2)#quit

Step 4 Congure MA5600_D.1. Congure IP address of layer 3 interface.


2. Congure OSPF Router ID.huawei(config)#router id 4.4.4.4



—-End



Result

Run the display ip routing-table command and you can nd the leant route table. Hostscan communicate with each other.

11.5 Conguration Example of a Route PolicyThis example shows how to congure a route policy for imported routes.

NetworkingFigure 11-7 shows a sample network for conguring the route policy. The MA5600_A andMA5600_B have the routing function.

Figure 11-7 Sample network of conguring the route policy

Data PlanTable 11-4 lists the data plan for conguring the route policy.

Table 11-4 Data plan for conguring the route policy

Item DataIP address of layer 3 interface: 10.0.0.1/24VLAN ID: 2Router ID: 1.1.1.1OSPF area: 0

MA5600_A

Static routes: 20.0.0.1, 30.0.0.1, 40.0.0.1IP address of layer 3 interface: 10.0.0.2/24VLAN ID: 2Router ID: 2.2.2.2

MA5600_B

OSPF area: 0

Conguration FlowchartFigure 11-8 shows the owchart for conguring the route policy.



Conguration Guide

Figure 11-8 Flowchart for conguring the route policy

NOTE

The procedure shown in the above owchart is for conguring the route policy on one MA5600. Tocongure the route policy on multiple MA5600 devices, repeat the procedure.

Procedure

Step 1 Conguring MA5600_A.1. Congure IP address of layer 3 interface on MA5600_A.

huawei(config)#interface vlanif 2huawei(config-if-vlanif2)#ip address 10.0.0.1 24

2. Enable OSPF on MA5600_A and specify the area ID to which the interface belongs.huawei(config)#ospfhuawei(config-ospf-1)#area 0huawei(config-ospf-1-area-0.0.0.0)#network 10.0.0.0 0.0.0.255

3. Congure the OSPF router ID on the MA5600_A.huawei(config)#router id 1.1.1.1

4. Congure three static routes.huawei(config)#ip route-static 20.0.0.1 32 vlanif 2huawei(config)#ip route-static 30.0.0.1 32 vlanif 2huawei(config)#ip route-static 40.0.0.1 32 vlanif 2

5. Import static routes.huawei(config-ospf-1)#import-route static

Step 2 Conguring MA5600_B.1. Congure the layer 3 interface on MA5600_B.

huawei(config)#interface vlanif 2huawei(config-if-vlanif2)#ip address 10.0.0.2 24

2. Congure the ACL.huawei(config)#acl number 2000huawei(config-acl-basic-2000)#rule deny source 30.0.0.0 0.255.255.255huawei(config-acl-basic-2000)#rule permit source any

3. Enable OSPF on MA5600_B and specify the area id to which the interface belongs.huawei(config)#ospfhuawei(config-ospf-1)#area 0huawei(config-ospf-1-area-0.0.0.0)#network 10.0.0.0 0.0.0.255



4. Congure the Router ID of MA5600_B.huawei(config)#router id 2.2.2.2

5. Filter imported routes.huawei(config-ospf-1)#filter-policy 2000 import

—-End

Result

1. MA5600_A and MA5600_B run OSPF successfully, and they can communicate wellwith each other.

2. After a lter is congured on MA5600_B, parts of the three imported static routes areavailable while part of them is screened. That is, routes from segments 20.0.0.0 and40.0.0.0 are available, while the route from segment 30.0.0.0 is screened.

11.6 Adding a Static RouteThis operation enables you to add a static route to the destination address. This helps to realizelayer 3 interconnection among network devices in different network segments.

Prerequisite

The IP address has been congured for the layer 3 service port.

Background Informationn The system supports up to 4096 static routes.n The following items are contained in a static route:

– Destination address: It is used to label the destination address or destination networkof an IP packet.

– Subnet mask: The subnet mask is comprised of consecutive "1"s, and expressed indotted decimal format, or the count of consecutive "1"s. The mask is used with thedestination address to identify the subnet address of the destination host or router.

– Output interface: It species the interface of a router for IP packet forwarding.– Next hop IP address: It indicates the next router that an IP packet will pass through.– Route priority: When there are multiple routes with different priorities to the same

destination, the route with the highest priority (smallest value) will be the optimal one.The default priority of a static route is 60.

n When conguring a static route, specify the transmit interface or the next hop IP addressif necessary. For a port supporting ARP or connecting to a point-to-point network, thedestination IP address is in the network that connects to the port directly. In this case,you need to specify the transmit interface.

n A route with both the destination IP address and network mask being 0.0.0.0 is the defaultroute. If no matching route is found in the routing table for an IP packet, the packet isforwarded over the default route.

Procedure

Step 1 Run the ip route-static command to add a static route.

Step 2 Run the display ip routing-table command to query the routing table.

—-End



Conguration Guide

Example

To set up a static route to the subnet 10.71.8.0 through gateway 10.71.53.1, do as follows:huawei(config)#ip route-static 10.71.8.0 255.255.255.0 10.71.53.1huawei(config)#display ip routing-table{ |verbose<K>|statistics<K>|protocol<K>|acl<K>|ip-prefix<K>|ip_addr<X.X.X.X> }:

Command:display ip routing-table

Routing Tables: PublicDestinations : 5 Routes : 5

Destination/Mask Proto Pre Cost NextHop Interface

10.0.0.0/8 Static 60 0 10.71.62.1 meth010.71.62.0/24 Direct 0 0 10.71.62.36 meth010.71.62.36/32 Direct 0 0 127.0.0.1 InLoopBack0127.0.0.0/8 Direct 0 0 127.0.0.1 InLoopBack0127.0.0.1/32 Direct 0 0 127.0.0.1 InLoopBack0

{ <cr>|verbose<K>|statistics<K>|protocol<K>|acl<K>|ip-prefix<K>|ip_addr<X.X.X.X> }:

Command:display ip routing-table

Routing Tables: PublicDestinations : 5 Routes : 5

Destination/Mask Proto Pre Cost NextHop Interface

10.0.0.0/8 Static 60 0 10.71.62.1 meth010.71.62.0/24 Direct 0 0 10.71.62.36 meth010.71.62.36/32 Direct 0 0 127.0.0.1 InLoopBack0127.0.0.0/8 Direct 0 0 127.0.0.1 InLoopBack0127.0.0.1/32 Direct 0 0 127.0.0.1 InLoopBack0

Related Operation

Table 11-5 lists the related operation for adding a static route.

Table 11-5 Related operation for adding a static route

To... Run the Command...Delete a static route undo ip route-static

11.7 Conguring RIPThis sections describes how to congure RIP.

11.7.1 Enabling RIP ProcessThis operation enables RIP process.11.7.2 Setting the RIP VersionThis operation enables you to set the RIP version.11.7.3 Conguring Zero Field Check for RIP-I PacketsThis operation enables you to congure zero eld check for RIP-1 packets.11.7.4 Setting the Cost of the Default RouteThis operation enables you to set the cost of the default route.11.7.5 Enabling Route SummarizationThis operation enables route summarization.11.7.6 Specifying Default Routing MetricThis operation enables you to specify the default routing metric.



11.7.7 Importing Routes of Other ProtocolsThis operation enables you to import routes of other protocols.11.7.8 Disabling Receiving Host RoutesThis operation prohibits the router from receiving host routes.11.7.9 Conguring the RIP PreferenceThis operation enables you to set RIP preference.11.7.10 Conguring the Route Filtering PolicyThis operation enables you to congure the route ltering policy to lter unnecessary routes.11.7.11 Verifying the Source IP Address of a RIP Route UpdateThis operation enables you to verify the source IP address of a RIP route update.11.7.12 Resetting RIPThis operation enables you to restore the default settings of RIP.11.7.13 Clearing RIP Process StatisticsThis operation enables you to clear RIP process statistics.11.7.14 Disabling RIP Packet Transmission on an InterfaceThis operation enables you to disable RIP packet transmission on an interface.11.7.15 Conguring the IP Address of a Peer RouterThis operation enables you to congure the IP address of a peer router.11.7.16 Conguring a Summary Route IP AddressThis operation enables you to congure the IP address of a summary route.11.7.17 Enabling an Interface to Receive/Transmit RIP PacketsThis operation enables an interface to receive and transmit RIP packets.11.7.18 Enabling the Split Horizon FunctionThis operation enables the split horizon function.11.7.19 Enabling the Poison Reverse FunctionThis operation enables the poison reverse function.11.7.20 Conguring the RIP-2 Authentication ModeThis operation enables you to congure the RIP-2 authentication mode.11.7.21 Conguring the Additional Metric of a RouteThis operation enables you to congure the additional metric of a route.11.7.22 Conguring the RIP TimerThis operation enables you to congure the RIP timer so as to improve the RIP runningperformance.11.7.23 Enabling the Transparent Transmission function of the RIP Packet Based on the VLANThis operation enables the transparent transmission function of the RIP packet based on theVLAN.

11.7.1 Enabling RIP Process

This operation enables RIP process.

Context

To congure the global parameters of RIP, you need to enable RIP rst. However, you do nothave to comply with this when conguring the interface related parameters.

Procedure

Step 1 Run the rip command to start the RIP process.

Step 2 Run the display rip command to query the RIP.

—-End



Conguration Guide

ExampleTo enable RIP process 1, do as follows:huawei(config)#rip 1huawei(config-rip-1)#quithuawei(config)#display rip 1{ route<K>|database<K>|<cr> }:Command:

display rip 1Public VPN-instance name :RIP process : 1

RIP version : RIP-1 compatibilityPreference : 100Checkzero : EnabledDefault-cost : 0Summary : EnabledHostroutes : EnabledMaximum number of balanced paths : 1Update time : 30 sec Age time : 180 secSuppress time : 0 sec Garbage-collect time : 120 secSilent interfaces : NoneDefault routes : DisabledVerify-source : EnabledNetworks : NoneConfigured peers : NoneTriggered updates sent : 0Number of route changes : 0Number of replies to queries : 0

Related OperationTable 11-6 lists the related operation for enabling RIP process.

Table 11-6 Related operation for enabling RIP process

To... Run the Command...Disable RIP process undo rip

11.7.2 Setting the RIP VersionThis operation enables you to set the RIP version.

Background Informationn The MA5600 supports packets in two formats: RIP-1 and RIP-2.n The default is RIP-1.

ProcedureStep 1 Run the rip command to start the RIP process.

Step 2 Run the version 2 command to set the RIP version.

Step 3 Run the display rip command to query the RIP information.

—-End

ExampleTo set the format of packets as RIP-2, do as follows:huawei(config)#rip 1huawei(config-rip-1)#version 2huawei(config-rip-1)#quithuawei(config)#display rip 1{ route<K>|database<K>|<cr> }:



Command:display rip 1

Public VPN-instance name :RIP process : 1

RIP version : RIP-2Preference : 100Checkzero : EnabledDefault-cost : 0Summary : EnabledHostroutes : EnabledMaximum number of balanced paths : 1Update time : 30 sec Age time : 180 secSuppress time : 0 sec Garbage-collect time : 120 secSilent interfaces : NoneDefault routes : DisabledVerify-source : EnabledNetworks : NoneConfigured peers : NoneTriggered updates sent : 0Number of route changes : 0Number of replies to queries : 0

Related Operation

Table 11-7 lists the related operation for setting the RIP version.

Table 11-7 Related operation for setting the RIP version

To... Run the Command...Restore the system default format of the RIPpackets

undo version

11.7.3 Conguring Zero Field Check for RIP-I PacketsThis operation enables you to congure zero eld check for RIP-1 packets.

Background InformationIf the eld is not zero, RIP refuses to process the packet.

Procedure


Step 2 Run the checkzero command to congure zero eld check for RIP-1 packets.

Step 3 Run the display rip command to query the conguration information.

—-End

Example

To congure zero eld check for RIP-1 packets, do as follows:huawei(config)#rip 1huawei(config-rip-1)#checkzerohuawei(config-rip-1)#quithuawei(config)#display rip 1{ route<K>|database<K>|<cr> }:Command:


RIP version : RIP-2Preference : 100Checkzero : EnabledDefault-cost : 0



Conguration Guide

Summary : EnabledHostroutes : EnabledMaximum number of balanced paths : 1Update time : 30 sec Age time : 180 secSuppress time : 0 sec Garbage-collect time : 120 secSilent interfaces : NoneDefault routes : DisabledVerify-source : EnabledNetworks : NoneConfigured peers : NoneTriggered updates sent : 0Number of route changes : 0Number of replies to queries : 0

Related Operation

Table 11-8 lists the related operation for conguring zero eld check for RIP-1 packets.

Table 11-8 Related operation for conguring zero eld check for RIP-1 packets

To... Run the Command...Cancel zero eld check for RIP-1 packets undo checkzero

11.7.4 Setting the Cost of the Default RouteThis operation enables you to set the cost of the default route.

Procedure


Step 2 Run the default-route originate command to create a default route and set its cost.

Step 3 Run the display rip command to query the congured cost of the default route.

—-End

Example

To create a default route and set its cost as 5, do as follows:huawei(config)#rip 1huawei(config-rip-1)#default-route originate cost 5huawei(config-rip-1)#quithuawei(config)#display rip 1{ route<K>|database<K>|interface<K>|<cr> }:

Command:display rip 1

Public VPN-instance name :RIP process : 1

RIP version : RIP-2Preference : 100Checkzero : EnabledDefault-cost : 0Summary : EnabledHostroutes : EnabledMaximum number of balanced paths : 1Update time : 35 sec Age time : 170 secSuppress time : 0 sec Garbage-collect time : 240 secSilent interfaces : NoneDefault routes : Enabled Default route cost : 5Verify-source : EnabledNetworks : NoneConfigured peers : NoneTriggered updates sent : 0Number of route changes : 0Number of replies to queries : 0



Related Operation

Table 11-9 lists the related operation for setting the cost of the default route.

Table 11-9 Related operation for setting the cost of the default route

To... Run the Command...Delete the default route undo default-route originate

11.7.5 Enabling Route Summarization

This operation enables route summarization.

Background InformationRoute summarization is to combine routes of different subnets into one route. Routesummarization helps to reduce the routing trafc on the network as well as the size of therouting table.

Procedure

Step 1 Run the rip command to start RIP process.

Step 2 Run the summary command to enable route summarization.

Step 3 Run the display rip command to query the conguration of default route summarization.

—-End

Example

To enable the route summarization, do as follows:huawei(config)#rip 1huawei(config-rip-1)#summaryhuawei(config-rip-1)#quithuawei(config)#display rip 1{ route<K>|database<K>|<cr> }:Command:



Related Operation

Table 11-10 lists the related operation for enabling route summarization.



Conguration Guide

Table 11-10 Related operation for enabling route summarization

To... Run the Command...Disable route summarization undo summary

11.7.6 Specifying Default Routing MetricThis operation enables you to specify the default routing metric.

Procedure


Step 2 Run the default-cost command to specify the default routing metric.

Step 3 Run the display rip command to query the conguration information of the default routingmetric.

—-End

Example

To set the default routing metric as 10, do as follows:huawei(config)#rip 1huawei(config-rip-1)#default-cost 10huawei(config-rip-1)#quithuawei(config)#display rip 1{ route<K>|database<K>|<cr> }:Command:



Related Operation

Table 11-11 lists the related operation for specifying default routing metric.

Table 11-11 Related operation for specifying default routing metric

To... Run the Command...Restore the default routing metric undo default-cost

11.7.7 Importing Routes of Other ProtocolsThis operation enables you to import routes of other protocols.



Background InformationTo enhance the routing function, the MA5600 allows RIP to import routes (including directroute, static routes and OSPF routes) of other protocols into the routing table at a certainmetric. This greatly improves the capability of RIP to obtain routes and enhances theperformance of RIP.

Procedure


Step 2 Run the import-route static command to import static routes.

—-End

Example

To import static routes, do as follows:huawei(config)#rip 1huawei(config-rip-1)#import-route static

Related Operation

Table 11-12 lists the related operation for importing routes of other protocols.

Table 11-12 Related operation for importing routes of other protocols

To... Run the Command...Stop importing routes of other protocols undo import-route

11.7.8 Disabling Receiving Host RoutesThis operation prohibits the router from receiving host routes.

Background Informationn In some special cases, the router can receive a number of host routes from the same

subnet, and these routes are of little help in route addressing, but consume vast amountsof network resources. In this case, receiving host routes shall be disabled.

n By default, receiving host routes is enabled.

Procedure


Step 2 Run the undo host-route command to prohibit the router from receiving host routes.


—-End

Example

To set the system to refuse host routes, do as follows:huawei(config)#rip 1huawei(config-rip-1)#undo host-routehuawei(config-rip-1)#quithuawei(config)#display rip 1{ route<K>|database<K>|<cr> }:Command:



Conguration Guide


RIP version : RIP-2Preference : 100Checkzero : EnabledDefault-cost : 0Summary : EnabledHostroutes : DisabledMaximum number of balanced paths : 1Update time : 30 sec Age time : 180 secSuppress time : 0 sec Garbage-collect time : 120 secSilent interfaces : NoneDefault routes : Enabled Default route cost : 5Verify-source : EnabledNetworks : NoneConfigured peers : NoneTriggered updates sent : 0Number of route changes : 0Number of replies to queries : 0

Related Operation

Table 11-13 lists the related operation for disabling receiving host routes.

Table 11-13 Related operation for disabling receiving host routes

To... Run the Command...Receive host routes host-route

11.7.9 Conguring the RIP PreferenceThis operation enables you to set RIP preference.

Background Informationn Each kind of IGP routing protocol has its own preference. The route policy selects the

route of the routing protocol with the highest preference as the optimal route.n The greater the preference value, the lower the preference.n The default RIP preference is 100.

Procedure


Step 2 Run the preference command to congure the RIP preference.

Step 3 Run the display rip command to query the conguration of RIP preference.

—-End

Example

To set the RIP preference as 120, do as follows:huawei(config)#rip 1huawei(config-rip-1)#preference 120huawei(config-rip-1)#quithuawei(config)#display rip 1{ route<K>|database<K>|<cr> }:Command:


RIP version : RIP-2Preference : 120



Checkzero : EnabledDefault-cost : 0Summary : EnabledHostroutes : DisabledMaximum number of balanced paths : 1Update time : 30 sec Age time : 180 secSuppress time : 0 sec Garbage-collect time : 120 secSilent interfaces : NoneDefault routes : Enabled Default route cost : 5Verify-source : EnabledNetworks : NoneConfigured peers : NoneTriggered updates sent : 0Number of route changes : 0Number of replies to queries : 0

Related Operation

Table 11-14 lists the related operation for conguring the RIP preference.

Table 11-14 Related operation for conguring the RIP preference

To... Run the Command...Restore the default RIP preference undo preference

11.7.10 Conguring the Route Filtering Policy

This operation enables you to congure the route ltering policy to lter unnecessary routes.

Background InformationThe route ltering can be performed based on the ACL, IP-prex list of the system, or theIP-prex of the VLAN interface. Routes which fail to meet the ltering criteria will not bereceived or sent.

Procedure


Step 2 Run the lter-policy ip-prex export static command to congure the route ltering policy.

—-End

Example

To lter the transmitted RIP routing updates based on the IP-prex list abc, do as follows:huawei(config)#rip 1huawei(config-rip-1)#filter-policy ip-prefix abc export static

Related Operation

Table 11-15 lists the related operation for conguring the route ltering policy.

Table 11-15 Related operation for conguring the route ltering policy

To... Run the Command...Delete the route ltering policy undo lter-policy



Conguration Guide

11.7.11 Verifying the Source IP Address of a RIP Route UpdateThis operation enables you to verify the source IP address of a RIP route update.

Background InformationIn general, do not disable this function.

Procedure


Step 2 Run the verify-source command to verify the source IP address of a RIP route update.


—-End

Example

To enable the RIP route verication function, do as follows:huawei(config)#rip 1huawei(config-rip-1)#verify-sourcehuawei(config-rip-1)#quithuawei(config)#display rip 1{ route<K>|database<K>|<cr> }:Command:


RIP version : RIP-2Preference : 120Checkzero : EnabledDefault-cost : 0Summary : EnabledHostroutes : DisabledMaximum number of balanced paths : 1Update time : 30 sec Age time : 180 secSuppress time : 0 sec Garbage-collect time : 120 secSilent interfaces : NoneDefault routes : Enabled Default route cost : 5Verify-source : EnabledNetworks : NoneConfigured peers : NoneTriggered updates sent : 0Number of route changes : 0Number of replies to queries : 0

Related Operation

Table 11-16 lists the related operation for verifying the source IP address of a RIP route update.

Table 11-16 Related operation for verifying the source IP address of a RIP route update

To... Run the Command...Disable the verication function undo verify-source

11.7.12 Resetting RIPThis operation enables you to restore the default settings of RIP.

Procedure

Step 1 Run the rip command to enable the RIP process.



Step 2 Run the reset command to restore the system conguration parameters of the RIP process.

Step 3 Run the display rip command to query the system conguration parameters of the RIP process.

—-End

Example

To restore the system conguration parameters of the RIP process, do as follows:huawei(config)#rip 1huawei(config-rip-1)#resethuawei(config-rip-1)#quithuawei(config)#display rip 1{ route<K>|database<K>|<cr> }:Command:


RIP version : RIP-1 compatibilityPreference : 100Checkzero : EnabledDefault-cost : 0Summary : EnabledHostroutes : EnabledMaximum number of balanced paths : 1Update time : 30 sec Age time : 180 secSuppress time : 0 sec Garbage-collect time : 120 secSilent interfaces : NoneDefault routes : DisabledVerify-source : EnabledNetworks : NoneConfigured peers : NoneTriggered updates sent : 0Number of route changes : 0Number of replies to queries : 0

11.7.13 Clearing RIP Process Statistics

This operation enables you to clear RIP process statistics.

Procedure


Step 2 Run the reset rip command to clear statistics of RIP process.

—-End

Example

To clear statistics of RIP process 1, do as follows:huawei#reset rip 1 statistics

11.7.14 Disabling RIP Packet Transmission on an Interface

This operation enables you to disable RIP packet transmission on an interface.

Background InformationAfter the transmission is disabled on an interface, the interface can still receive and processRIP packets from other routers.



Conguration Guide

Procedure


Step 2 Run the silent-interface command to disable RIP packet transmission on an interface.


—-End

Example

To disable VLAN interface 7 from sending RIP packets, do as follows:huawei(config)#rip 1huawei(config-rip-1)#silent-interface vlanif 7huawei(config-rip-1)#quithuawei(config)#display rip 1{ route<K>|database<K>|<cr> }:Command:


RIP version : RIP-1 compatibilityPreference : 100Checkzero : EnabledDefault-cost : 0Summary : EnabledHostroutes : EnabledMaximum number of balanced paths : 1Update time : 30 sec Age time : 180 secSuppress time : 0 sec Garbage-collect time : 120 secSilent interfaces : 7Default routes : DisabledVerify-source : EnabledNetworks : NoneConfigured peers : NoneTriggered updates sent : 0Number of route changes : 0Number of replies to queries : 0

Related Operation

Table 11-17 lists the related operation for disabling RIP packet transmission on an interface.

Table 11-17 Related operation for disabling RIP packet transmission on an interface

To... Run the Command...Restore RIP packets transmission on aspecied interface

undo silent-interface

11.7.15 Conguring the IP Address of a Peer Router

This operation enables you to congure the IP address of a peer router.

Background Informationn Generally, RIP packets are forwarded in broadcast mode. If you want an interface to

exchange routing information with a peer router in unicast mode, run the peer commandto specify the IP address of the peer router.

n Specifying the peer router enables the peer router to receive the same packet in bothmulticast (broadcast) and unicast modes. So, when conguring the IP address of the peerrouter, it is recommended that you change the related interface on the router to silent mode.



Procedure


Step 2 Run the peer command to congure the IP address of a peer router.

—-End

Example

To congure the IP address of the peer router as 10.0.0.1, do as follows:huawei(config)#rip 1huawei(config-rip-1)#peer 10.0.0.1

Related Operation

Table 11-18 lists the related operation for conguring the IP Address of a Peer router.

Table 11-18 Related operation for conguring the IP Address of a Peer router

To... Run the Command...Cancel the IP address of the speciedpeer router

undo peer

11.7.16 Conguring a Summary Route IP Address

This operation enables you to congure the IP address of a summary route.

Background Informationn The summary address is valid only when the classful summarization is disabled.n With split horizon or poison reverse is enabled, summary address and classful

summarization will fail. That is, to transmit route summarization to neighbors, disablesplit horizon or poison reverse of the related interface.

Procedure

Step 1 Runt the rip command to start RIP progress.

Step 2 Runt the rip summary-address command to congure IP address of a summary route.

—-End

Example

To congure the summary IP address of VLAN interface 2 as 10.0.0.0, do as follows:huawei(config)#interface vlanif 2huawei(config-if-vlanif2)#rip summary-address 10.0.0.0 255.255.255.0

Related Operation

Table 11-19 lists the related operation for conguring a summary route IP address.



Conguration Guide

Table 11-19 Related operation for conguring a summary route IP address

To... Run the Command...Cancel the specied summary route IPaddress

undo rip summary-address

11.7.17 Enabling an Interface to Receive/Transmit RIP Packets

This operation enables an interface to receive and transmit RIP packets.

Background InformationBy default, an interface is enabled to receive and transmit RIP packets.

Procedure

Step 1 Run the interface vlanif command to enter VALN interface mode.

Step 2 Run the rip input(rip output) command to enable an interface to receive/transmit RIP packets.

—-End

Examples

To allow VLAN interface 2 to receive RIP packets, do as follows:huawei(config)#interface vlanif 2huawei(config-if-vlanif2)#rip input

To allow VLAN interface 2 to transmit RIP packets, do as follows:huawei(config)#interface vlanif 2huawei(config-if-vlanif2)#rip output

Related Operation

Table 11-20 lists the related operation for enabling an interface to receive and transmit RIPpackets.

Table 11-20 Related operation for enabling an interface to receive and transmit RIP packets

To... Run the Command...Prevent an interface from receiving ortransmitting RIP packets

undo rip {input|output}

11.7.18 Enabling the Split Horizon Function

This operation enables the split horizon function.

Background Informationn Once the function is enabled, RIP will not send the routing information learned from a

neighbor to it again. This avoids the creation of routing loops.n By default, the split horizon function is enabled.n The split horizon and poison reserve functions cannot be enabled at the same time.



Procedure


Step 2 Run the rip split-horizon command to enable the split horizon function.

—-End

Example

To enable the RIP split horizon function, do as follows:huawei(config)#interface vlanif 2huawei(config-if-vlanif2)#rip split-horizon

Related Operation

Table 11-21 lists the related operation for enabling the split horizon function.

Table 11-21 Related operation for enabling the split horizon function

To... Run the Command...Disable the split horizonfunction

undo rip split-horizon

11.7.19 Enabling the Poison Reverse Function

This operation enables the poison reverse function.

Background InformationYou are not allowed to enable both the split horizon and poison reverse functions at the sametime.

Procedure


Step 2 Run the rip poison-reverse command to enable the poison reverse function.

—-End

Example

To enable the RIP poison reverse function, do as follows:huawei(config)#interface vlanif 2huawei(config-if-vlanif2)#rip poison-reverse

NOTE

Once the function is enabled, if a route breaks down but is still kept in RIP packets, the route is conguredas innite, that is, the routing metric is set as 16. The poison reversal function avoids the creation ofrouting loops among multiple routers.

Related Operation

Table 11-22 lists the related operation for enabling the poison reverse function.



Conguration Guide

Table 11-22 Related operation for enabling the poison reverse function

To... Run the Command...Disable the poison reversalfunction

undo rip poison-reverse

11.7.20 Conguring the RIP-2 Authentication ModeThis operation enables you to congure the RIP-2 authentication mode.

Background InformationRIP-2 supports two authentication modes: plain text authentication and MD5 encrypted textauthentication.n The plain text authentication does not ensure security. The authentication key, which is

not encrypted, is sent together with the packet.n MD5 encrypted text authentication has two formats: one is a common packet format and

the other is a non-standard packet format.

ProcedureStep 1 Run the interface vlanif command to enter VALN interface mode.

Step 2 Run the rip authentication-mode command to congure the RIP-2 authentication mode.

—-End

ExampleTo congure the RIP-2 authentication mode as plain text mode and password as huawei,do as follows:huawei(config)#interface vlanif 2huawei(config-if-vlanif2)#rip authentication-mode simple huawei

Related OperationTable 11-23 lists the related operation for conguring the RIP-2 authentication mode.

Table 11-23 Related operation for conguring the RIP-2 authentication mode

To... Run the Command...Cancel the RIP authentication undo rip authentication mode

11.7.21 Conguring the Additional Metric of a RouteThis operation enables you to congure the additional metric of a route.

Background InformationThe default input metric is 0 while the default output metric is 1.


Step 2 Run the rip metricin or rip metriout command to congure the added metric when theinterface receives or transmits or the RIP packets.



—-End

Example

To congure the input metric added to a RIP route as 5, do as follows:huawei(config)#interface vlanif 2huawei(config-if-vlanif2)#rip metricin 5

To congure the output metric added to a RIP route as 5, do as follows:huawei(config)#interface vlanif 2huawei(config-if-vlanif2)#rip metriout 5

Related Operation

Table 11-24 lists the related operation for conguring the additional metric of a route.

Table 11-24 Related operation for conguring the additional metric of a route

To... Run the Command...Restore the default additional metric undo rip {metricin | metricout}

11.7.22 Conguring the RIP TimerThis operation enables you to congure the RIP timer so as to improve the RIP runningperformance.

Background InformationBy default:n The update time as 30s.n The age time is 180s.n The suppression time is 0s.n Garbage-collect time is 120s.In general, do not change the default values of the timer.

Procedure


Step 2 Run the timers command to congure the RIP timer.

Step 3 Run the display command to query conguration information of the RIP timer.

—-End

Example

To set the update time as 35s, age time as 170s, suppression time as 100s and Garbage-collecttime as 240s, do as follows:huawei(config)#rip 1huawei(config-rip-1)#timers rip 35 170 100 240huawei(config)#display rip 1{ route<K>|database<K>|<cr> }:Command:


RIP version : RIP-2Preference : 100



Conguration Guide

Checkzero : EnabledDefault-cost : 0Summary : EnabledHostroutes : DisabledMaximum number of balanced paths : 1Update time : 35 sec Age time : 170 secSuppress time : 0 sec Garbage-collect time : 240 secSilent interfaces : NoneDefault routes : Enabled Default route cost : 5Verify-source : EnabledNetworks : NoneConfigured peers : NoneTriggered updates sent : 0Number of route changes : 0Number of replies to queries : 0

Related Operation

Table 11-25 lists the related operation for conguring the RIP timer.

Table 11-25 Related operation for conguring the RIP timer

To... Run the Command...Restore the default RIP timer conguration undo timers rip

11.7.23 Enabling the Transparent Transmission function of theRIP Packet Based on the VLAN

This operation enables the transparent transmission function of the RIP packet based on theVLAN.

Background InformationBy default, the function is disabled.

Procedure

Step 1 Run the rip tunnel command to enable the transparent transmission function of the RIP packetbased on the VLAN.

Step 2 Run the display rip tunnel command to query the status of the function.

—-End

Example

To enable the transparent transmission function of the RIP packet based on VLAN 10, doas follows:huawei(config)#rip tunnel enable vlan 10huawei(config)#display rip tunnel vlan 10rip tunnel is enable

11.8 Conguring OSPFThis section describes how to congure OSPF.

11.8.1 Enabling OSPF ProcessThis operation enables OSPF process.



11.8.2 Conguring DR PriorityThis operation enables you to congure the DR priority. To reduce the OSPF packet trafcin the network segment, a router is specied as the DR and another router is specied as theBDR according to the interface DR priority.11.8.3 Setting an OSPF Router IDThis operation enables you to congure the ID for a router.11.8.4 Entering OSPF Area Cong ModeThis operation enables you to enter OSPF area cong mode.11.8.5 Conguring Subnets for an AreaThis operation enables you to congure the interface running OSPF and the area of theinterface.11.8.6 Conguring the OSPF Stub AreaThis operation enables you to congure an area as an OSPF Stub area and set its attributes.11.8.7 Conguring an NBMA Adjacent RouterThis operation enables you to manually congure a router adjacent to the NBMA interface.11.8.8 Setting OSPF PreferenceThis operation enables you to set OSPF preference.11.8.9 Disabling OSPF Packet Transmission on an InterfaceThis operation enables you to prohibit an interface from transmitting OSPF packets, so as toenhance the network adaptability of OSPF, and reduce the consumption of system resources.11.8.10 Conguring the Maximum OSPF Route CountThis operation enables you to congure the maximum OSPF route count.11.8.11 Enabling OSPF Logging FunctionThis operation enables OSPF logging function.

11.8.1 Enabling OSPF ProcessThis operation enables OSPF process.

Background Informationn By default, OSPF is disabled.n To congure the related parameters, enable OSPF rst.

Procedure

Step 1 Run the ospf command to start the OSPF process.

Step 2 Run the display ospf command to query the OSPF process.

—-End

Example

To enable OSPF process 1, do as follows:huawei(config)#ospf 1huawei(config)#display ospf brief

OSPF Process 1 with Router ID 10.71.62.27OSPF Protocol Information

RouterID: 10.71.62.27 Border Router:Route Tag: 0Multi-VPN-Instance is not enabledSpf-schedule-interval: 5Default ASE parameters: Metric: 1 Tag: 1 Type: 2Route Preference: 10ASE Route Preference: 150SPF Computation Count: 0RFC 1583 CompatibleArea Count: 0 Nssa Area Count: 0



Conguration Guide

ExChange/Loading Neighbors: 0

Related Operation

Table 11-26 lists the related operation for enabling OSPF.

Table 11-26 Related operation for enabling OSPF

To... Run the Command...Disable OSPF undo ospf

11.8.2 Conguring DR PriorityThis operation enables you to congure the DR priority. To reduce the OSPF packet trafcin the network segment, a router is specied as the DR and another router is specied as theBDR according to the interface DR priority.

Background Informationn OSPF does not support conguring the DR priority for interface NULL.n The DR is for broadcast or NBMA type interfaces. The interfaces of p2p, p2mp network

type do not need DR election.

Procedure

Step 1 Run the interface Vlanif command to enter VALN interface mode.

Step 2 Run the ospf dr-priority command to congure DR priority.

Step 3 Run the display ospf interface command to query DR priority.

—-End

Example

To congure the DR priority 8 for interface vlanif2, do as follows:huawei(config)#interface Vlanif 2huawei(config-if-vlanif2)#ospf dr-priority 8huawei#display ospf interface vlanif 2

OSPF Process 1 with Router ID 10.71.62.27Interfaces

Interface: 192.1.1.1 (vlanif2)Cost: 1 State: Down Type: Broadcast MTU: 1500Priority: 8Designated Router: 0.0.0.0Backup Designated Router: 0.0.0.0Timers: Hello 10 , Dead 40 , Poll 120 , Retransmit 5 , Transmit Delay 1

11.8.3 Setting an OSPF Router IDThis operation enables you to congure the ID for a router.

Background InformationA router ID is a 32-bit unsigned integer, which uniquely identies a router in the AS.

Procedure

Step 1 Run the ospf router-id command to set an OSPF router ID.



Step 2 Run the display ospf brief command to query the congured OSPF router ID.

—-End

Example

To set the ID of a router as 192.168.1.1, do as follows:huawei(config)#ospf router-id 192.168.1.1huawei(config-ospf-1)#quithuawei(config)#reset ospf briefhuawei(config)#display ospf brief

OSPF Process 1 with Router ID 192.168.1.1OSPF Protocol Information

RouterID: 192.168.1.1 Border Router:Route Tag: 0Multi-VPN-Instance is not enabledSpf-schedule-interval: 5Default ASE parameters: Metric: 1 Tag: 1 Type: 2Route Preference: 10ASE Route Preference: 150SPF Computation Count: 0RFC 1583 CompatibleArea Count: 0 Nssa Area Count: 0ExChange/Loading Neighbors: 0

Related Operation

Table 11-27 lists the related operation for setting an OSPF router ID.

Table 11-27 Related operation for setting an OSPF router ID

To... Run the Command...Disable the OSPF process undo ospf

11.8.4 Entering OSPF Area Cong ModeThis operation enables you to enter OSPF area cong mode.

Background Informationn OSPF further divides the AS into different areas. Routing information is transmitted

between the areas through the ABRs which are located at the boarders of the areas.This helps to reduce the number of OSPF packets in the network, thus improving theperformance of OSPF.

n If the specied area does not exist, the system rst creates the area and then enters areacong mode.

n An area ID is shown in the form of an IP address.n If an area ID is an integer, the MA5600 automatically converts the integer into an IP

address.

Procedure


Step 2 Run the area command to add an area and enter the conguration mode of the area.

—-End

Example

To create area 1 and enter area cong mode, do as follows:



Conguration Guide

huawei(config)#ospf 100huawei(config-ospf-100)#area 1huawei(config-ospf-100-area-0.0.0.1)#

Related Operation

Table 11-28 lists the related operation for entering OSPF area cong mode.

Table 11-28 Related operation for entering OSPF area cong mode

To... Run the Command...Delete an area undo area

11.8.5 Conguring Subnets for an Area

This operation enables you to congure the interface running OSPF and the area of theinterface.

Background InformationWildcard-mask in the network command is the reverse of the IP address, that is, the mask ofthe IP address is reserved (0 changed to 1 and 1 changed to 0). "1" indicates the digit in the IPaddress is omitted and "0" indicates that the digit must be reserved.

Procedure

Step 1 Run the ospf command to start the OSPF progress.


Step 3 Run the network command to congure the interface running OSPF protocol and the area theinterface belongs to.

—-End

Example

To congure the subnet 131.108.20.0 for the interface running OSPF, do as follows:huawei(config)#ospf 1huawei(config-ospf-1)#area 1huawei(config-ospf-1-area-0.0.0.2)#network 131.108.20.0 0.0.0.255

Related Operation

Table 11-29 lists the related operation for conguring subnets for an area.

Table 11-29 Related operation for conguring subnets for an area

To... Run the Command...Delete the interface running OSPF undo network

11.8.6 Conguring the OSPF Stub Area

This operation enables you to congure an area as an OSPF Stub area and set its attributes.



Procedure



Step 3 Run the stub command to congure the OSPF stub area.

—-End

Example

To congure OSPF area 1 as a Stub area, do as follows:huawei(config)#ospf 1huawei(config-ospf-1)#area 1huawei(config-ospf-1-area-0.0.0.1)#stub

Related Operations

Table 11-30 lists the related operations for conguring a Stub area.

Table 11-30 Related operations for conguring a Stub area

To... Run the Command...Delete a Stub area undo stub

Congure a Stub router (undo)stub-router

11.8.7 Conguring an NBMA Adjacent RouterThis operation enables you to manually congure a router adjacent to the NBMA interface.

Background Informationn Up to 128 adjacent routers can be congured in a process.n Since an NBMA interface on the network cannot discover the adjacent routers through

broadcasting the Hello packets, you need to specify the adjacent routers.n By default, the preference for NBMA interface adjacent router is 1.

Procedure


Step 2 Run the peer command to congure an NBMA adjacent router.

—-End

Example

To congure the IP address of the NBMA adjacent router as 1.1.1.1 and specify the DRpriority as 120, do as follows:huawei(config)#ospf 1huawei(config-ospf-1)#peer 1.1.1.1 dr-priority 120

Related Operation

Table 11-31 lists the related operation for conguring an NBMA adjacent router.



Conguration Guide

Table 11-31 Related operation for conguring an NBMA adjacent router

To... Run the Command...Cancel the conguration of theNBMA adjacent router

undo peer

11.8.8 Setting OSPF Preference

This operation enables you to set OSPF preference.

Background Informationn Multiple dynamic routing protocols can run on one router at the same time. Due to this

reason, the problem of route sharing and routing protocol selection occurs.n The system denes a preference for each routing protocol. When different routes are

found by different protocols to the same destination, the route found by the routingprotocol with the highest preference serves as the current effective route.

n The OSPF preference ranges from 1 to 255. By default, it is 10.

Procedure


Step 2 Run the preference command to set OSPF preference.

—-End

Example

To set the OSPF preference as 12, do as follows:huawei(config)#ospf 1huawei(config-ospf-1)#preference 12

Related Operation

Table 11-32 lists the related operation for setting OSPF preference.

Table 11-32 Related operation for setting OSPF preference

To... Run the Command...Restore the default OSPFpreference

undo preference

11.8.9 Disabling OSPF Packet Transmission on an Interface

This operation enables you to prohibit an interface from transmitting OSPF packets, so as toenhance the network adaptability of OSPF, and reduce the consumption of system resources.

Background InformationAfter the transmission is disabled on an interface, the interface shall be in silent state. Theinterface can still advertise its direct route. However, the OSPF Hello packets of the interfacewill be blocked, and no adjacency can be set up on the interface.



Procedure


Step 2 Run the silent-interface command to prohibit an interface from transmitting OSPF packets.

—-End

Example

To prohibit VLAN interface 7 from transmitting OSPF packets, do as follows:huawei(config)#ospf 1huawei(config-ospf-1)#silent-interface vlanif 7

Related Operation

Table 11-33 lists the related operation for prohibiting an interface from transmitting OSPFpackets.

Table 11-33 Related operation for prohibiting an interface from transmitting OSPF packets

To... Run the Command... RemarksAllow an interface to sendOSPF packets

undo silent-interface By default, the systemallows an interface to sendOSPF packets.

11.8.10 Conguring the Maximum OSPF Route Count

This operation enables you to congure the maximum OSPF route count.

Background InformationThe default maximum route count is:n Intra-area routes: 10000n Inter-area routes: 10000n External routes: 10000

Procedure


Step 2 Run the maximum-routes command to congure the maximum OSPF route count.

—-End

Example

To congure the maximum count of OSPF routes as 500, do as follows:huawei(config)#ospf 1huawei(config-ospf-1)#maximum-routes intra 500

Related Operation

Table 11-34 lists the related operation for conguring the maximum OSPF route count.



Conguration Guide

Table 11-34 Related operation for conguring the maximum OSPF route count

To... Run the Command...Restore the default setting undo maximum-routes

11.8.11 Enabling OSPF Logging FunctionThis operation enables OSPF logging function.

Procedure


Step 2 Run the enable log command to query log information.

—-End

Example

To enable the logging function of OSPF, do as follows:huawei(config)#ospf 1huawei(config-ospf-1)#enable log config

Related Operation

Table 11-35 lists the related operation for enabling the OSPF logging function.

Table 11-35 Related operation for enabling the OSPF logging function

To... Run the Command...Disable the logging function ofOSPF

undo enable log

11.9 Conguring OSPF on a VLAN InterfaceThis section describes how to congure OSPF on a VLAN interface.

11.9.1 Conguring the Network Type on an OSPF InterfaceThis operation enables you to congure the network type for an OSPF interface.11.9.2 Conguring OSPF CostThis operation enables you to congure the cost of the interface running OSPF.11.9.3 Conguring OSPF Packet AuthenticationThis operation enables you to congure OSPF packet authentication.11.9.4 Conguring the MTU of the DD PacketThis operation enables you to congure the MTU of the DD packet.

11.9.1 Conguring the Network Type on an OSPF InterfaceThis operation enables you to congure the network type for an OSPF interface.

Background InformationOSPF divides networks into four types. By default, the network type of an interface isdetermined by the physical interface. For details, see Table 11-36.



Table 11-36 Description of the network types

Networktype

Description Default

Broadcast The default network type. The default network type ofan Ethernet port is broadcast.

NBMA Non-Broadcast Multi-Access. This type ofnetwork is fully connected, non-broadcast andmulti-access. The ATM network is of this type.

The default network type ofan ATM interface is NBMA.

p2mp Point-to-Multipoint -

p2p Point-to-Point The default network type ofa serial port is P2P.

Procedure


Step 2 Run the ospf network-type command to congure the network type.

—-End

Example

Presume that the Ethernet port 0/7/0 is in VLAN 2, to congure the network type of the port0/19/0 as P2P, do as follows:huawei(config)#interface vlanif 2huawei(config-vlanif-2)#ospf network-type p2p

Related Operation

Table 11-37 lists the related operation for conguring the network type on an OSPF interface.

Table 11-37 Related operation for conguring the network type on an OSPF interface

To... Run the Command...Restore the default network type ofthe OSPF interface

undo ospf network-type

11.9.2 Conguring OSPF CostThis operation enables you to congure the cost of the interface running OSPF.

Procedure


Step 2 Run the ospf cost command to congure the cost of the interface running OSPF.

—-End

Example

To congure the cost of the interface running OSPF as 5, do as follows:huawei(config)#interface vlanif 2huawei(config-vlanif2)#ospf cost 5



Conguration Guide

Related Operation

Table 11-38 lists the related operation for conguring OSPF cost.

Table 11-38 Related operation for conguring OSPF cost

To... Run the Command... RemarksRestore the defaultcost

undo ospf cost By default, the system calculates thecost needed for the interface runningOSPF according to the current baudrate of the interface.

11.9.3 Conguring OSPF Packet AuthenticationThis operation enables you to congure OSPF packet authentication.

Background Informationn OSPF supports plain text authentication or MD5/HMAC-MD5 encrypted text

authentication for adjacent routes to transmit OSPF packets.n By default, the interface is not congured with any authentication mode.

Procedure


Step 2 Run the ospf authentication-mode command to congure OSPF packet authentication.

—-End

Example

To congure the OSPF authentication as plain text authentication and the authenticationpassword as "huawei", do as follows:huawei(config)#interface vlanif 2huawei(config-if-vlanif2)#ospf authentication-mode simple huawei

Related Operation

Table 11-39 lists the related operation for conguring OSPF packet authentication.

Table 11-39 Related operation for conguring OSPF packet authentication

To... Run the Command...Delete the congured authentication modeand key

undo ospf authentication-mode

11.9.4 Conguring the MTU of the DD PacketThis operation enables you to congure the MTU of the DD packet.

Background Informationn After the adjacency is set up between two routers, the routers begin to transmit DD

packets to each other to exchange the owned routing information.



n By default, the interface does not ll in the MTU eld while transmitting DD packets. Inother words, the MTU eld in the DD packets is 0.


Step 2 Run the ospf mtu-enable command to congure the MTU of the DD packet.

—-End

ExampleTo congure interface vlanif2 to ll in the MTU eld when transmitting DD packet, doas follows:huawei(config)#interface vlanif 2huawei(config-if-vlanif2)#ospf mtu-enable

Related OperationTable 11-40 lists the related operation for conguring the MTU of the DD packet.

Table 11-40 Related operation for conguring the MTU of the DD packet

To... Run the Command...Restore the default setting for the interfacewhen transmitting DD packets

undo ospf mtu-enable

11.10 Conguring OSPF TimerThis section describes how to congure OSPF timer.

11.10.1 Setting the Interval for Sending the Hello PacketsThis operation enables you to set the interval for sending Hello packets. The OSPF routertransmits Hello packets periodically to nd the adjacent router, to maintain adjacency andelect the DR and BDR.11.10.2 Setting the Dead Time Between Adjacent RoutersThis operation enables you to set the dead time between adjacent routers. If a router fails toreceive any Hello packet from an adjacent router for a certain period, it considers the adjacentrouter as unavailable. This period is called the dead time between adjacent routers.11.10.3 Conguring OSPF Packet AuthenticationThis operation enables you to congure OSPF packet authentication.11.10.4 Setting the Hello Packet Poll IntervalThis operation enables you to set the Hello packet poll interval.11.10.5 Setting the LSA Transmit DelayThis operation enables you to set the LSA transmit delay.11.10.6 Setting the LSA Retransmit Interval between Adjacent RoutersThis operation enables you to set the LSA retransmit interval between adjacent routers.11.10.7 Setting the SPF Calculation Interval for OSPFThis operation enables you to set the SPF calculation interval for OSPF.

11.10.1 Setting the Interval for Sending the Hello PacketsThis operation enables you to set the interval for sending Hello packets. The OSPF routertransmits Hello packets periodically to nd the adjacent router, to maintain adjacency andelect the DR and BDR.



Conguration Guide

Background Informationn By default, Hello interval of P2P and broadcast interfaces is 10s and that of P2MP and

NBMA interfaces is 30s.n The intervals for sending Hello packets of network neighbors should be consistent with

each other.n The interval for sending Hello packets should be in inverse proportion of route

convergence speed and network load.n After the network type of the interface is modied, the interval for sending Hello packets

restores the default value.

Procedure


Step 2 Run the ospf timer hello command to set the interval for sending Hello packets.

—-End

Example

To set the interval for sending OSPF Hello packet as 15s, do as follows:huawei(config)#interface vlanif 2huawei(config-if-vlanif2)#ospf timer hello 15

Related Operation

Table 11-41 lists the related operation for setting the interval for sending Hello packets.

Table 11-41 Related operation for setting the interval for sending Hello packets

To... Run the Command...Restore the default interval for sendingHello packets

undo ospf timer hello

11.10.2 Setting the Dead Time Between Adjacent RoutersThis operation enables you to set the dead time between adjacent routers. If a router fails toreceive any Hello packet from an adjacent router for a certain period, it considers the adjacentrouter as unavailable. This period is called the dead time between adjacent routers.

Background Informationn By default, the dead time between adjacent routers on a P2P and broadcast interfaces is

40s and that on P2MP and NBMA (non-broadcast) interfaces is 120s.n The value of dead seconds must be 4 times that of hello seconds at least.n After the network type of the interface is modied, the dead time is restored to the

default value.

Procedure


Step 2 Run the ospf timer dead command to set the dead time of adjacent routers.

—-End



Example

To set the dead time of adjacent routers as 60s, do as follows:huawei(config)#interface vlanif 2huawei(config-if-vlanif2)#ospf timer dead 60

Related Operation

Table 11-42 lists the related operation for setting the dead time between adjacent routers.

Table 11-42 Related operation for setting the dead time between adjacent routers

To... Run the Command...Restore the default dead time undo ospf timer dead

11.10.3 Conguring OSPF Packet AuthenticationThis operation enables you to congure OSPF packet authentication.

Background Informationn OSPF supports plain text authentication or MD5/HMAC-MD5 encrypted text

authentication for adjacent routes to transmit OSPF packets.n By default, the interface is not congured with any authentication mode.

Procedure


Step 2 Run the ospf authentication-mode command to congure OSPF packet authentication.

—-End

Example

To congure the OSPF authentication as plain text authentication and the authenticationpassword as "huawei", do as follows:huawei(config)#interface vlanif 2huawei(config-if-vlanif2)#ospf authentication-mode simple huawei

Related Operation

Table 11-43 lists the related operation for conguring OSPF packet authentication.

Table 11-43 Related operation for conguring OSPF packet authentication

To... Run the Command...Delete the congured authentication modeand key

undo ospf authentication-mode

11.10.4 Setting the Hello Packet Poll IntervalThis operation enables you to set the Hello packet poll interval.



Conguration Guide

Background Informationn In the NBMA network, after the adjacent router fails, a router transmits Hello packet to

the failed router periodically with the Hello packet poll interval.n The Hello packet poll interval shall at least four times the interval for sending Hello

packets.n By default, the Hello packet poll interval is 120s.

Procedure


Step 2 Run the ospf timer poll command to set the Hello packet poll interval.

—-End

Example

To set the Hello packet poll interval as 60s, do as follows:huawei(config)#interface vlanif 2huawei(config-if-vlanif2)#ospf timer poll 60

Related Operation

Table 11-44 lists the related operation for setting the Hello packet poll interval.

Table 11-44 Related operation for setting the Hello packet poll interval

To... Run the Command...Restore the default poll interval undo ospf timer poll

11.10.5 Setting the LSA Transmit DelayThis operation enables you to set the LSA transmit delay.

Background Informationn The Link State Advertise (LSA) describes the interface state and the adjacency state of a

router. When saved in the LSDB of the local router, LSA ages. However, LSA does notage in the process of network transmission.

n It is necessary to add LSA transmit delay to the expiration time before the transmission.This conguration is very important for low speed networks.

n By default, the delay for sending link-state update is 1s.

Procedure


Step 2 Run the ospf trans-delay command to set the LSA transmit delay.

—-End

Example

To set LSA transmit delay as 10s, do as follows:huawei(config)#interface vlanif 2huawei(config-if-vlanif2)#ospf trans-delay 10



Related OperationTable 11-45 lists the related operation for setting the LSA transmit delay.

Table 11-45 Related operation for setting the LSA transmit delay

To... Run the Command...Restore the default LSA transmit delay undo ospf trans-delay

11.10.6 Setting the LSA Retransmit Interval between AdjacentRouters

This operation enables you to set the LSA retransmit interval between adjacent routers.

Background Informationn When a router sends an LSA to its neighbors, it shall wait for an ACK from them. If

no ACK is received from the neighbors within the retransmit interval, this LSA shallbe resent.

n A too small LSA retransmit interval on an interface may lead to unnecessaryretransmission. A too large LSA retransmit interval affects the ooding speed in caseof packet loss.

n By default, the LSA retransmit interval between adjacent routers is 5s.


Step 2 Run the ospf timer retransmit command to set the LSA retransmit interval.

—-End

ExampleTo set the LSA retransmit interval as 8s, do as follows:huawei(config)#interface vlanif 2huawei(config-if-vlanif2)#ospf timer retransmit 8

Related OperationTable 11-46 lists the related operation for setting the LSA retransmit interval between adjacentrouters.

Table 11-46 Related operation for setting LSA retransmit interval between adjacent routers

To... Run the Command...Restore the default LSA retransmitinterval between adjacent routers

undo ospf timer retransmit

11.10.7 Setting the SPF Calculation Interval for OSPFThis operation enables you to set the SPF calculation interval for OSPF.

Background Informationn Whenever the LSDB of OSPF changes, the SPF shall be recalculated.



Conguration Guide

n Calculating the shortest path upon any change consumes vast amounts of resources andaffects the operation efciency of the router. Adjusting the SPF calculation interval,however, can restrain the resource consumption due to frequent network changes.

n By default, the interval of SPF recalculation is 5s.

Procedure


Step 2 Run the spf-schedule-interval command to set the SPF calculation interval for OSPF.

—-End

Example

To set the interval of SPF recalculation as 10s, do as follows:huawei(config)#ospf 1huawei(config-ospf-1)#spf-schedule-interval 10

Related Operation

Table 11-47 lists the related operation for setting the SPF calculation interval for OSPF.

Table 11-47 Related operation for setting the SPF calculation interval for OSPF

To... Run the Command...Restore the default SPF calculationinterval

undo spf-schedule-interval

11.11 Conguring Route SummarizationThis sections describes how to congure route summarization.

11.11.1 Conguring Route Summarization Between AreasThis operation enables you to congure route summarization between areas. Routesummarization means that the ABR summarizes all routes with the same prex to a route entryand then send it to other areas, so as to reduce the broadcasted routing information.11.11.2 Conguring the Summarization of Routes Imported by OSPFThis operation enables you to how to congure the summarization of routes imported by OSPF.

11.11.1 Conguring Route Summarization Between AreasThis operation enables you to congure route summarization between areas. Routesummarization means that the ABR summarizes all routes with the same prex to a route entryand then send it to other areas, so as to reduce the broadcasted routing information.

Background Informationn By default, the ABR does not summarize routes between areas.n One area can be congured with multiple summarization network segments.n The route summarization is valid when congured on an ABR.

Procedure

Step 1 Run the ospf command to start the OSPF progress.




Step 3 Run the network command to congure the interface running OSPF protocol and the area theinterface belongs to.

Step 4 Run the abr-summary command to congure route summarization between areas.

—-End

Example

To summarize the routes in the two network segments of 20.20.10.0 and 20.20.20.0 in OSPFarea as one route entry 20.20.0.0 and send it to other areas, do as follows:huawei(config)#ospf 100huawei(config-ospf-100)#area 1huawei(config-ospf-100-area-0.0.0.1)#network 20.20.10.0 0.0.0.255huawei(config-ospf-100-area-0.0.0.1)#network 20.20.20.0 0.0.0.255huawei(config-ospf-100-area-0.0.0.1#abr-summary 20.20.0.0 255.255.0.0

Related Operation

Table 11-48 lists the related operation for conguring route summarization between areas.

Table 11-48 Related operation for conguring route summarization between areas

To... Run the Command...Disable the route summarizationbetween areas

undo abr-summary

11.11.2 Conguring the Summarization of Routes Imported byOSPF

This operation enables you to how to congure the summarization of routes imported by OSPF.

Background InformationOSPF supports the summary of imported routes. By default, the summary of imported routesis disabled.

Procedure


Step 2 Run the asbr-summary command to congure summary of routes with the same prex.

—-End

Example

To enable the summary of routes with the same prex of 10.2, do as follows:huawei(config)#ospf 1huawei(config-ospf-1)#asbr-summary 10.2.0.0 255.255.0.0

Related Operation

Table 11-49 lists the related operation for conguring the summarization of routes importedby OSPF.



Conguration Guide

Table 11-49 Related operation for conguring summarization of routes imported by OSPF

To... Run the Command...Disable the summarization ofroutes imported by OSPF

undo asbr-summary

11.12 Conguring OSPF Route ImportThis section describes how to congure OSPF route import.

11.12.1 Importing Routes from Other Protocols into OSPFThis operation enables you to import routes from other protocols into OSPF.11.12.2 Setting the Default Parameters of OSPF Imported RoutesThis operation enables you to set the default parameters of OSPF imported routes.

11.12.1 Importing Routes from Other Protocols into OSPFThis operation enables you to import routes from other protocols into OSPF.

Background Informationn OSPF makes the routes found by other routing protocols to be processed as routes

outside the AS. The protocol types of routes that OSPF can import are RIP, direct routesand static routes.

n By default, OSPF’s importing routes from other protocols is disabled.

Procedure


Step 2 Run the import-route rip command to import routes from other protocols into OSPF.

—-End

Example

To specify the imported RIP route as Type 2 external route, the route tag as 33, and the costas 50, do as follows:huawei(config)#ospf 1huawei(config-ospf-1)#import-route rip 40 type 2 tag 33 cost 50

Related Operation

Table 11-50 lists the related operation for importing routes from other protocols into OSPF.

Table 11-50 Related operation for importing routes from other protocols into OSPF

To... Run the Command...Disable importing routes fromother protocol into OSPF

undo import-route

11.12.2 Setting the Default Parameters of OSPF Imported RoutesThis operation enables you to set the default parameters of OSPF imported routes.



Background InformationThe default settings are:n Cost: 10n The type of imported route: 2n The upper limit of the imported external routes: 1000 at a time

Procedure


Step 2 Run the default command to set the default parameters for OSPF to import external routes.

—-End

Example

To set:n The upper limit of the default imported external routes as 100n The default cost for OSPF to accept external routes as 8n The default tag for OSPF to accept external routes as 8n The default type of imported routes as Type-1Do as follows:huawei(config)#ospf 100huawei(config-ospf-100)#default cost 8 type 1 tag 8 limit 100

Related Operations

Table 11-51 lists related operations for setting parameters for OSPF to import external routes.

Table 11-51 Related operations for setting parameters for OSPF to import external routes

To... Run the Command...Restore the default upper limit for OSPF to importexternal routes each time

undo default limit

Restore the default cost for OSPF to import externalroutes

undo default cost

Restore the default tag when OSPF imports externalroutes

undo default tag

Restore the default type of the external routes tobe imported

undo default type

11.13 Conguring Route Filtering PolicyThis operation enables you to congure the route ltering policy to lter unnecessary routes.

Background Informationn Routing ltering can be based on access control list (ACL) or address prex. The routing

information not meeting the requirements will be refused.n By default, the OSPF route ltering is disabled.



Conguration Guide

Procedure

Step 1 Run the acl command to create an ACL.

Step 2 Run the rule command to congure the ACL rule.

Step 3 Run the lter-policy import command to ler the routing information.

—-End

Example

To lter routing information according to rules specied by ACL 2000, do as follows:huawei(config)#acl number 2000huawei(config-acl-basic-2000)#rule permit source 192.168.0.1 0huawei(config-acl-basic-2000)#quithuawei(config)#ospf 1huawei(config-ospf-1)#filter-policy 2000 import

Related Operation

Table 11-52 lists the related operation for conguring route ltering.

Table 11-52 Related operation for conguring route ltering

To... Run the Command...Delete the route ltering policy undo lter-policy

11.14 Showing and Debugging OSPFThis operation enables you to show and debug OSPF.

Background InformationTable 11-53 lists the commands for showing and debugging OSPF.

Table 11-53 Commands for showing and debugging OSPF

To... Run the Command…View the briefinformation on theOSPF routing process

display ospf [ process-id ] brief

View the OSPFstatistics

display ospf [ process-id ] cumulative

View the LSDBinformation on OSPF

display ospf [ process-id ] lsdb [ { brief | [ { router | network |summary | asbr | nssa | opaque-link | opaque-area | opaque-as} link-state-id ] [ originate-router advertising-router-id |self-originate ] } ]

View the OSPFneighbor information

display ospf [ process-id ] peer [ meth interface-number | vlanifinterface-number ] [ ip-address ]

View the OSPFnext-hop information

display ospf [ process-id ] nexthop

View the OSPF routingtable

display ospf [ process-id ] routing [ interface interface-typeinterface-number ] [ nexthop nexthop-address ]

View the OSPF routingtable

display ospf [ process-id ] request-queue [ interface-typeinterface-number ] [neighbor-id ]



To... Run the Command…View the OSPFretransmission list

display ospf [ process-id ] retrans-queue [ methinterface-number | vlanif interface-number ] [ ip-address ]

View the informationon OSPF ABR andautonomous systemboundary router(ASBR)

display ospf [ process-id ] abr-asbr

View OSPF interfaceinformation

display ospf [ process-id ] interface [ all | interface-typeinterface-number ]

View OSPF errors display ospf [process-id ] errorView OSPF ASBRsummarization

display ospf [ process-id ] asbr-summary [ ip-address mask ]

Enable/Disable thedebugging of OSPFpacket

(undo)debugging ospf [ process-id ] packet [ ack | dd | hello| request | update ] [ lter { src | nbr } { acl-number | prexprex-list-name } ]

Enable/Disable thedebugging of OSPFhot-standby

(undo)debugging ospf [ process-id ] hot-standby

Enable/Disable thedebugging of OSPFevent

(undo)debugging ospf [ process-id ] event

Enable/Disable thedebugging of OSPFLSA packet

(undo)debugging ospf [ process-id ] lsa-originate

Enable/Disable OSPFSPF debugging

debugging ospf [ process-id ] spf { all | brief | intra}(undo)debugging ospf [ process-id ] spf { asbr-summary |ase | net-summary | nssa } [ lter { acl acl-number | ip-prexprex-list-name } ]

11.15 Conguring an Address Prex ListThis operation enables you to congure an address prex list to lter IP addresses.

Background Informationn Identied by name, an address prex list may contain multiple entries. Each entry

species a matching range and is identied with index-number.n If more than one entry has been dened, at least one of them shall adopt permit mode.n Entries in deny mode can be dened rst to quickly lter undesired routes. If all entries

are in deny mode, no route can pass the ltering.n If multiple entries in deny have been dened, at least one entry of permit 0.0.0.0/0

greater-equal 0 less-equal 32 shall be dened to allow the pass-through of other routes.n In the process of matching, the router checks every entry identied with index-number

in ascending order. If the route matches one entry, it means that the route matches theaddress prex list, and comparison with next entry is not required.

Procedure

Run the ip ip-prex command to congure the address prex list.

—-End



Conguration Guide

Example

To congure the address prex list with the name of p1, the mask code length of 17 or 18, andpassing the route in the network segment of 10.0.192.0/8, do as follows:huawei(config)#ip ip-prefix p1 permit 10.0.192.0 8 greater-equal 17 less-equal 18

Related Operation

Table 11-54 lists the related operation for conguring an address prex list.

Table 11-54 Related operation for conguring an address prex list

To... Run the Command...Delete an address prex list undo ip ip-prex

11.16 Conguring a Route PolicyThis section describes how to congure a route policy.

11.16.1 Dening a Route PolicyThis operation enables you to dene a route policy.11.16.2 Dening the if-match Clause of a Route PolicyThis operation enables you to dene the if-match clause of a route policy.11.16.3 Dening the apply Clause of a Route PolicyThis operation enables you to dene the apply clause of a route policy.

11.16.1 Dening a Route Policy

This operation enables you to dene a route policy.

Background Informationn Up to 1000 route policies can be dened in the system, and each route policy can be

congured with up to 20 nodes.n A route policy may consist of several nodes, with each node as a unit for the match test.

The node number is also the matching order.n The relationship between nodes of a route policy is "or". The system checks every node

of a route policy. If one node passes the match test, it means that the route policy passesthe match test.

n Every node consists of if-match clause and apply clause:– if-match denes the matching order. The relationship between two if-match clauses

of a node is "and". In other words, the match test can be considered as pass-throughonly when all if-match clauses of a node are satised.

– apply clause species the action to be taken when node match test is conducted,that is, set some attributes of the routes.

Parameter DescriptionTable 11-55 lists the parameters for dening a route policy.



Table 11-55 Parameters for dening a route policy

Parameter Descriptionpermit It species the matching mode of a node as "permit". When a

route entry passes a node, the system executes the apply clauseof the node without the test by the next node. If the route entryfails to pass the ltering, it will go to next node for test.

deny It species the matching mode of a mode as "deny". In thismode, the apply clause of the node will not be executed. Whena route entry satises all if-match clauses of a node, it will notgo to next node for test. If a route entry does not satisfy anyif-match clause of a node, it will go to next node for test.

Procedure

Step 1 Run the route-policy command to create a route policy and the enter route policy congurationmode.

Step 2 Run the display route-policy command to query the running status of the congured routepolicy.

—-End

Example

To congure route policy 1 with node number of 10 and the matching mode "permit", doas follows:huawei(config)#route-policy policy1 permit node 10huawei#display route-policy{ <cr>|string<S><1,19> }: policy1Command:display route-policy policy1Route-policy : policy1permit : 1apply ip-address next-hop 193.1.1.18apply cost 120apply cost-type internalapply tag-value 100apply preference 90

Related Operation

Table 11-56 lists the related operation for conguring a route policy.

Table 11-56 Related operation for conguring a route policy

To... Run theCommand...

Remarks

Delete a route policy undo route-policy By default, no route policy is dened.

11.16.2 Dening the if-match Clause of a Route PolicyThis operation enables you to dene the if-match clause of a route policy.

Background Informationn The if-match clause denes the matching rules, namely the preconditions for routes to

pass the current route policy, based on the attributes of the routes.



Conguration Guide

n The relationship between two if-match clauses of a node is "and". The match test can beconsidered as pass-through only when all if-match clauses of a node are satised. Theapply clause species the action to be taken when node match test is conducted.

n If no if-match clause is specied, all routes can pass through the node.n By default, no match action is taken.

Procedure

Step 1 Run the route-policy command to create a route policy and enter route policy congurationmode.

Step 2 Run the if-match command to set the ltering criteria of routing information.

Step 3 Run the display route-policy command to query the conguration information.

—-End

Example

To set ltering the address prex list p1 of destination address of route, do as follows:huawei(config)#route-policy route-policy 1 permit node 1huawei(config-route-policy)#if-match ip-prefix p1huawei(config-route-policy)#quithuawei(config)#display route-policy{ <cr>|string<S><1,19> }:1Command:

display route-policy 1Route-policy : 1permit : 1Match clauses :if-match ip-prefix p1

Related Operation

Table 11-57 lists the related operation for dening the route policy matching rule.

Table 11-57 Related operation for dening the route policy matching rule

To... Run the Command...Delete the route policy matchingrule

undo if-match

11.16.3 Dening the apply Clause of a Route PolicyThis operation enables you to dene the apply clause of a route policy.

Background Informationn The apply clause species the commands to be used for modifying the attributes of the

routes when if-match clauses are satised.n By default, no setting is available.

Procedure

Step 1 Run the route-policy command to create a route policy and enter route policy congurationmode.

Step 2 Run the if-match command to set the ltering criteria of routing information.

Step 3 Run the apply tag command to set the tag of the route information.



Step 4 Run the display route-policy command to query the congured route policy.

—-End

Example

To set the routing information tag of the ltered route as 100, do as follows:huawei(config)#route-policy route-policy 1 permit node 1huawei(config-route-policy)#if-match ip-prefix p1huawei(config-route-policy)#apply tag 100huawei(config-route-policy)#quithuawei(config)#display route-policyCommand:

display route-policyRoute-policy : pllicy1permit : 10Route-policy : policy1permit : 10Route-policy : 1permit : 1Match clauses :if-match ip-prefix p1Apply clauses :apply tag 100

Related Operation

Table 11-58 lists the related operation for modifying the attributes of the ltered route.

Table 11-58 Related operation for modifying the attributes of the ltered route

To... Run the Command...Cancel the modication of theattributes of the ltered route

undo apply


SmartAX MA5600 Multi-service Access ModuleConguration Guide 12 MSTP Conguration

12 MSTP Conguration


12.1 OverviewThis chapter describes MSTP and its applications to the MA5600.12.2 Enabling the MSTP FunctionThis operation enables the MSTP function on the MA5600.12.3 Setting the Working Mode of MSTPThis operation enables you to set the working mode of MSTP.12.4 Setting the MST Region ParametersThis section describes how to set the MST region parameters.12.5 Activating the Conguration of the MST RegionThis operation enables you to activate the conguration of the MST region.12.6 Specifying the Device as a Root Bridge or a Backup Root BridgeThis operation enables you to specify the device as a root bridge or a backup root bridge.12.7 Setting the Priority of the Device in the Specied Spanning Tree InstanceThis operation enables you to set the priority of the device in the specied spanning treeinstance.12.8 Setting the Maximum Hop of the MST RegionThis operation enables you to set the maximum hop of the MST region.12.9 Setting the Diameter of the Switching FabricThis operation enables you to set the diameter of the switching fabric.12.10 Setting the Calculation Standard for the Path CostThis operation enables you to set the calculation standard for the path cost.12.11 Setting the Time Parameters of the Specic Network BridgeThis section describes how to set the time parameters of the specic network bridge. The timeparameters include Forward Delay, Hello Time, MAX Age, and time factor.12.12 Setting the Parameters of the Specied PortThis section describes how to set the parameters of the specied port.12.13 Setting the mCheck VariableThis operation enables you to set the mCheck variable to force a port to work in MSTP mode.12.14 Conguring the Device Protection FunctionThis section describes how to congure the device protection functions, including BPDUprotection, loopback protection and root protection.12.15 Clear the MSTP Protocol StatisticsThis operation enables you to clear the MSTP protocol statistics.


12 MSTP CongurationSmartAX MA5600 Multi-service Access Module

Conguration Guide

12.1 OverviewThis chapter describes MSTP and its applications to the MA5600.

Service DescriptionThe multiple spanning tree protocol (MSTP) applies to the redundant network. It makesup for the drawback of STP and RSTP. MSTP makes the network converge fast and thetrafc of different VLANs distributed along their respective paths, which provides a betterload-sharing mechanism.

MSTP prunes a loop network into a loop-free tree network. It avoids the proliferation andinnite cycling of the packets in the loop network. In addition, MSTP provides multipleredundant paths for VLAN data transmission to achieve the load-sharing purpose.

Service SpecicationThe MA5600 supports MSTP, which is compatible with the STP and RSTP. It supports MSTPloop network to satisfy the various networking requirements.

12.2 Enabling the MSTP FunctionThis operation enables the MSTP function on the MA5600.

Background Informationn By default, the MSTP function is disabled.n After the MSTP function is enabled, the device determines whether it works in STP

compatible mode or MSTP mode based on the congured protocol.n After the MSTP function is enabled, MSTP maintains dynamically the spanning tree of

the VLAN based on the received BPDU packets. After the MSTP function is disabled,the MSTP device becomes a transparent bridge and does not maintain the spanning tree.

Procedure

Step 1 Run the stp enable command or stp port frameid/slotid/portid enable command to enablethe MSTP function of the bridge or the port.

Step 2 Run the display stp command or display stp port command to query the MPLS state ofthe bridge or the port.

—-End

Examples

To enable the MSTP function of the bridge, do as follows:huawei(config)#stp enable Are you sure you will change global stp state?[Y/N][N]yhuawei(config)#display stp{ <cr>|instance<K>|port<K> }:

Command:display stp

The bridge is executing the IEEE Multiple Spanning Tree ProtocolBridge Diameter : 7 Max Hops : 20PathCost standard : LEGACY BPDU-Protection : disabledTime Factor : 3TC or TCN received : 0 Time since last TC : 1 days :18m:27s

============================== Instance 0 ==================================Bridge Priority : 32768 MAC Address : 00e0-fc99-5050

Hello Time: 2 sec Forward Delay: 15 sec Max Age: 20 sec



IST Root Priority : 32768 MAC Address : 00e0-fc99-5050Hello Time: 2 sec Forward Delay: 15 sec Max Age: 20 sec

CST Root Priority : 32768 MAC Address : 00e0-fc99-5050Hello Time: 2 sec Forward Delay: 15 sec Max Age: 20 sec

Path cost to IST root bridge is 0Path cost to CST root bridge is 0

--------------------------------------------------------------------------------- More ( Press ’Q’ to break ) ----

To enable the MSTP function of port 0/7/0, do as follows:huawei(config)#stp port 0/7/0 enablehuawei(config)#display stp port 0/7/0

----[CIST][Port1(Down)]----Port Protocol :enabledPort Role :CIST Disabled PortPort Priority :128Port Cost :Config=auto / Active=200000Desg. Bridge/Port :32768.00e0-fc99-5050 / 128.1Port Edged(Admin) :disabledPoint-to-point :Config=auto / Active=falseTransit Limit :3 packets/hello-timeProtection Type :NonePort Stp Mode :StpPortTimes :Hello 2 s MaxAge 20 s FwDly 15 s Message Age 0 s RemHop 20BPDU Sent :0

TCN: 0, Config: 0, RST: 0, MST: 0BPDU Received :0

TCN: 0, Config: 0, RST: 0, MST: 0

Related Operations

Table 12-1 lists the related operations for enabling the MSTP function.

Table 12-1 Related operations for enabling the MSTP function

To... Run the Command... RemarksDisable the MSTP function of the device stp disable -

Disable the MSTP function of the port stp port disable -

Restore the default MSTP state of thedevice

undo stp By default, it isdisabled.

Restore the default MSTP state of theport

undo stp port By default, it isdisabled.

Clear the MSTP statistics reset stp statistics -

12.3 Setting the Working Mode of MSTPThis operation enables you to set the working mode of MSTP.

Background Informationn MSTP supports two working modes:

– MSTP mode– STP mode

n MSTP is compatible with STP. If the network bridge that runs STP exists in the switchingfabric, MSTP automatically runs in MSTP/STP compatible mode.



Conguration Guide

n When the network condition is good, though the network bridge that runs STP in thesubnet is removed, the port still runs in the STP compatible mode. In this case, run thestp mode mstp command to force the port to work in MSTP mode.

Procedure

n The following section shows the procedure for setting the STP working mode.1. Run the stp mode stp command to set the STP working mode.2. Run the display stp command to query the working mode.

n The following section shows the procedure for setting the RSTP working mode.1. Run the stp mode mstp command to set the MSTP working mode.2. Run the display stp command to query the working mode.

—-End

Examples

To set the STP working mode, do as follows:huawei(config)#stp mode stphuawei(config)#display stp{ <cr>|instance<K>|port<K> }:

Command:display stp

The bridge is executing the IEEE compatible Spanning Tree ProtocolBridge Diameter : 7 Max Hops : 20PathCost standard : LEGACY BPDU-Protection : disabledTime Factor : 3TC or TCN received : 0 Time since last TC : 2 days :16m:14s


Hello Time: 2 sec Forward Delay: 15 sec Max Age: 20 secIST Root Priority : 32768 MAC Address : 00e0-fc99-5050

Hello Time: 2 sec Forward Delay: 15 sec Max Age: 20 secCST Root Priority : 32768 MAC Address : 00e0-fc99-5050




To set the MSTP working mode, do as follows:huawei(config)#stp mode mstphuawei(config)#display stp{ <cr>|instance<K>|port<K> }:

Command:display stp







-----------------------------------------------------------------------------




Related Operation

Table 12-2 lists the related operation for setting the working mode of MSTP.

Table 12-2 Related operation for setting the working mode of MSTP

To... Run the Command... RemarksRestore the default working mode ofMSTP

undo stp mode By default, thedevice works inMSTP mode.

12.4 Setting the MST Region ParametersThis section describes how to set the MST region parameters.

12.4.1 Setting the MD5-Key for the MD5 Encryption Algorithm Congured on the MSTRegionThis operation enables you to set the MD5-Key for the MD5 encryption algorithm.12.4.2 Conguring the MST Region NameThis operation enables you to congure the MST region name.12.4.3 Mapping the Specied VLAN to the Specied MSTP InstanceThis operation enables you to map the specied VLAN to the specied MSTP instance.12.4.4 Mapping All VLANs to the MSTP Instances by Modular ArithmeticThis operation enables you to map all VLANs to the MSTP instances by modular arithmetic.12.4.5 Setting the MSTP Revision LevelThis operation enables you to set the MSTP revision level.12.4.6 Restoring the Defaults for All Parameters of the MST RegionThis operation enables you to restore the defaults for all parameters of the MST region.

12.4.1 Setting the MD5-Key for the MD5 Encryption AlgorithmCongured on the MST Region

This operation enables you to set the MD5-Key for the MD5 encryption algorithm.

Background Informationn The purpose of setting the MD5-Key is for device security. Two devices in a same

multiple spanning tree (MST) can communicate with each other when their MD5-Keyvalues are the same.

n The MD5-Key value is a character string not longer than 32 bytes. In addition, its lengthmust be multiples of 2. By default, it is 0x13AC06A62E47FD 51F95D2BA243CD0346.

Procedure

Step 1 Run the stp md5-key command to set the MD5-Key for the MD5 encryption algorithmcongured on the MST region.

Step 2 Run the display current-conguration command to query the conguration of the device.

—-End



Conguration Guide

Example

To set the MD5-Key for the MD5 encryption algorithm as 0x11ed224466, do as follows:huawei(config)#stp md5-key 11ed224466huawei(config)#display current-configuration section config[MA5600V300R003: 3002]#[config]<config>mpls vlan 10mpls vlan 20mpls vlan 500mpls vlan 1000mpls vlan 1001#stp region-configurationregion-name huaweiinstance 1 vlan 1000instance 2 vlan 100active region-configurationstp instance 0 priority 0stp timer hello 1000stp md5-key 11ED224466stp port 0/7/0 root-protection enablestp enable#lacp priority 0 systemlacp long-period 20---- More ( Press ’Q’ to break ) ----

Related Operation

Table 12-3 lists the related operation for setting the MD5-Key for the MD5 encryptionalgorithm congured on the MST region.

Table 12-3 Related operation for setting the MD5-Key for the MD5 encryption algorithmcongured on the MST region

To... Run the Command...Restore the default MD5-Key for theMD5 encryption algorithm

undo stp md5-key

12.4.2 Conguring the MST Region NameThis operation enables you to congure the MST region name.

Background InformationYou can congure the parameters related to the MST regions, such as the name, revisionlevel, and VLAN instance mapping table.

The default values of the three parameters are as follows:n The name of the MST region is the management MAC address.n All VLANs are mapped to CIST.n The revision level of MSTP is 0.

Procedure

Step 1 Run the stp region-conguration command to switch over to MST region mode.

Step 2 Run the region-name command to congure the name of the MST region.

Step 3 Run the check region-conguration command to query the parameters of the current MSTregion.



—-End

Example

To congure the name of the MST region as huawei-mstp-bridge, do as follows:huawei(config)#stp region-configurationhuawei(stp-region-configuration)#region-name huawei-mstp-bridgehuawei(stp-region-configuration)#check region-configuration

Admin configurationFormat selector :0Region name :huawei-mstp-bridgeRevision level :0

Instance Vlans Mapped0 1 to 4094

Related Operations

Table 12-4 lists the related operations for conguring the MST region name.

Table 12-4 Related operations for conguring the MST region name

To... Run the Command...Restore the default name of the MSTregion

undo region-name

Activate the conguration of the MSTregion

active region-conguration

Query the conguration of the MSTregion

display stp region-conguration

12.4.3 Mapping the Specied VLAN to the Specied MSTPInstance

This operation enables you to map the specied VLAN to the specied MSTP instance.

Background Informationn By default, all VLANs are mapped to CIST, that is, instance 0.n One VLAN can be mapped to only one instance at one time. If you re-map a VLAN to

another instance, the original mapping is disabled.n A maximum of 10 VLAN sections can be congured for an MSTP instance.n After the mapping, activate it to make it take effect.

Procedure


Step 2 Run the instance vlan command to map the specied VLAN to the specied MSTP instance.


—-End

Example

To map VLANs 2-10 and VLANs 12-16 to MSTP instance 3, do as follows:



Conguration Guide

huawei(config)#stp region-configurationhuawei(stp-region-configuration)#instance 3 vlan 2 to 10 12 to 16huawei(stp-region-configuration)#check region-configurationAdmin configurationFormat selector :0Region name :huawei-mstp-bridgeRevision level :0

Instance Vlans Mapped0 1, 11, 17 to 40943 2 to 10, 12 to 16

Related Operations

Table 12-5 lists the related operations for mapping the specied VLAN to the specied MSTPinstance.

Table 12-5 Related operations for mapping the specied VLAN to the specied MSTP instance

To... Run the Command... RemarksDisable the VLANmapping of the speciedMSTP instance

undo instance vlan VLAN mapping in CIST(instance 0) cannot be disabled.

Activate the congurationof the MST region

active region-conguration -

Query the congurationof the MST region


-

12.4.4 Mapping All VLANs to the MSTP Instances by ModularArithmetic

This operation enables you to map all VLANs to the MSTP instances by modular arithmetic.

Background Informationn By default, all VLANs are mapped to CIST, that is, instance 0.n On the MA5600, you can specify the VLAN to each MSTP instance rapidly by modular

arithmetic.– When you map the VLAN to the MSTP instance by modular arithmetic, the ID of the

mapped instance is (VLANID - 1) % module + 1.– The modular value for the modular arithmetic ranges from 1 to 16. It indicates the

number of the MSTP instances.n This operation is used to map the VLANs to the MSTP instances rapidly. In actual

application, you can run the instance vlan command to adjust the mappings slightly asrequired.

n Activate the setting to make it take effect.

Procedure


Step 2 Run the vlan-mapping module command to map all VLANs to the MSTP instances bymodular arithmetic.


—-End



Example

To map all VLANs to the MSTP instances by modular arithmetic, with the modular valueof 16, do as follows:huawei(config)#stp region-configurationhuawei(stp-region-configuration)#vlan-mapping module 16huawei(stp-region-configuration)#check region-configurationAdmin configurationFormat selector :0Region name :huawei-mstp-bridgeRevision level :0

Instance Vlans Mapped1 1, 17, 33, 49, 65, 81, 97, 113, 129, 145, 161,

177, 193, 209, 225, 241, 257, 273, 289, 305, 321, 337,353, 369, 385, 401, 417, 433, 449, 465, 481, 497, 513,529, 545, 561, 577, 593, 609, 625, 641, 657, 673, 689,705, 721, 737, 753, 769, 785, 801, 817, 833, 849, 865,881, 897, 913, 929, 945, 961, 977, 993, 1009, 1025, 1041,1057, 1073, 1089, 1105, 1121, 1137, 1153, 1169, 1185, 1201, 1217,1233, 1249, 1265, 1281, 1297, 1313, 1329, 1345, 1361, 1377, 1393,1409, 1425, 1441, 1457, 1473, 1489, 1505, 1521, 1537, 1553, 1569,1585, 1601, 1617, 1633, 1649, 1665, 1681, 1697, 1713, 1729, 1745,1761, 1777, 1793, 1809, 1825, 1841, 1857, 1873, 1889, 1905, 1921,1937, 1953, 1969, 1985, 2001, 2017, 2033, 2049, 2065, 2081, 2097,2113, 2129, 2145, 2161, 2177, 2193, 2209, 2225, 2241, 2257, 2273,2289, 2305, 2321, 2337, 2353, 2369, 2385, 2401, 2417, 2433, 2449,2465, 2481, 2497, 2513, 2529, 2545, 2561, 2577, 2593, 2609, 2625,2641, 2657, 2673, 2689, 2705, 2721, 2737, 2753, 2769, 2785, 2801,2817, 2833, 2849, 2865, 2881, 2897, 2913, 2929, 2945, 2961, 2977,2993, 3009, 3025, 3041, 3057, 3073, 3089, 3105, 3121, 3137, 3153,3169, 3185, 3201, 3217, 3233, 3249, 3265, 3281, 3297, 3313, 3329,3345, 3361, 3377, 3393, 3409, 3425, 3441, 3457, 3473, 3489, 3505,3521, 3537, 3553, 3569, 3585, 3601, 3617, 3633, 3649, 3665, 3681,3697, 3713, 3729, 3745, 3761, 3777, 3793, 3809, 3825, 3841, 3857,3873, 3889, 3905, 3921, 3937, 3953, 3969, 3985, 4001, 4017, 4033,4049, 4065, 4081

2 2, 18, 34, 50, 66, 82, 98, 114, 130, 146, 162,178, 194, 210, 226, 242, 258, 274, 290, 306, 322, 338,


Related Operations

Table 12-6 lists the related operations for mapping all VLANs to the MSTP instances.

Table 12-6 Related operations for mapping all VLANs to the MSTP instances

To... Run the Command...Map all VLANs to CIST instance 0 undo vlan-mapping moduleActivate the conguration of the MSTregion


Query the effective conguration of theMST region


12.4.5 Setting the MSTP Revision Level

This operation enables you to set the MSTP revision level.

Background Informationn By default, the revision level is 0.n Activate the setting to make it take effect.



Conguration Guide

NOTE

n When you congure the parameters related to the MST region, the current device is placed into aspecied MST region.

n Two devices belong to a same MST region when they meet the following conditions:– They have the same MST region name and the MSTP revision level.– The VLAN mapping tables, which correspond to all the spanning tree instances, must be the

same with each other.

Procedure


Step 2 Run the revision-level command to set the MSTP revision level of the device.


—-End

Example

To set the MSTP revision level as 100, do as follows:huawei(config)#stp region-configurationhuawei(stp-region-configuration)#revision-level 100huawei(stp-region-configuration)#check region-configurationAdmin configurationFormat selector :0Region name :00e0fc995050Revision level :100


Related Operations

Table 12-7 lists the related operations for setting the MSTP revision level of the device.

Table 12-7 Related operations for setting the MSTP revision level of the device

To... Run the Command...Restore the MSTP revision level undo revision-levelActivate the conguration of the MSTregion


Query the conguration of the MSTregion


12.4.6 Restoring the Defaults for All Parameters of theMST RegionThis operation enables you to restore the defaults for all parameters of the MST region.

Background InformationBy default, the name of the MST region is its management MAC address, all VLANs aremapped to instance 0, and the revision level of MSTP is 0.

Procedure

Step 1 Run the reset stp region-conguration command to restore the defaults to all parametersof the MST region.




Step 3 Run the display stp region-conguration command to query the conguration of the MSTregion.

—-End

Examples

To restore the defaults for all parameters of the MST region, do as follows:huawei(config)#reset stp region-configurationhuawei(config)#stp region-configurationhuawei(stp-region-configuration)#display stp region-configurationOper configurationFormat selector :0Region name :00e0fc995050Revision level :0


12.5 Activating the Conguration of the MST RegionThis operation enables you to activate the conguration of the MST region.

Background InformationWhen you congure the parameters related to the MST region, especially the VLAN mappingtable, MSTP will recalculate the spanning tree. This results in an unstable network topology.

To avoid it, MSTP will not recalculate the spanning tree immediately after you congure theparameters, unless the following conditions are satised:n Run the active region-conguration command to activate the conguration of the MST

region.n Run the stp enable command to enable the MSTP function.

Procedure


Step 2 Run the active region-conguration command to activate the conguration of the MST region.

Step 3 Run the display stp region-conguration command to query the effective congurationof the MST region.

—-End

Example

To activate the conguration of the MST region, do as follows:huawei(config)#stp region-configurationhuawei(stp-region-configuration)#active region-configurationhuawei(stp-region-configuration)#display stp region-configurationOper configurationFormat selector :0Region name :huawei-mstp-bridgeRevision level :100




Conguration Guide

Related Operation

Table 12-8 lists the related operation for activating the conguration of the MST region.

Table 12-8 Related operation for activating the conguration of the MST region

To... Run the Command...Query the conguration of the currentMST region

check region-conguration

12.6 Specifying the Device as a Root Bridge or a BackupRoot Bridge

This operation enables you to specify the device as a root bridge or a backup root bridge.

Background Informationn By default, the device is not used as a root bridge or a backup root bridge.n After specifying the current bridge as a root bridge or a backup root bridge, you cannot

modify the system priority of the root bridge.n One spanning tree instance can be congured with only one root bridge, but more backup

root bridges.– If the root bridge fails or is powered off, the backup root bridge is used as the root

bridge.– If multiple backup root bridges are congured, the root bridge with smallest MAC

address is used as the root bridge of the specied spanning tree instance.

Procedure

Step 1 Run the stp root command to specify the device as a root bridge or a backup root bridge.

Step 2 Run the display stp command to query the MSTP conguration of the device.

—-End

Example

To specify the current device as the root bridge of MSTP instance 2, do as follows:huawei(config)#stp instance 2 root primary

NOTE

If you do not specify the parameter instance instance-id, the conguration takes effect only to theCIST instance.

huawei(config)#display stp instance 2{ <cr>|port<K> }:

Command:display stp instance 2







Path cost to IST root bridge is 0

Related Operation

Table 12-9 lists the related operation for specifying the device as a root bridge or a backuproot bridge.

Table 12-9 Related operation for specifying the device as a root bridge or a backup root bridge

To... Run the Command...Cancel the operation of specifying thedevice as a root bridge or a backup rootbridge

undo stp root

12.7 Setting the Priority of the Device in the SpeciedSpanning Tree Instance

This operation enables you to set the priority of the device in the specied spanning treeinstance.

Background Informationn The priority of the device ranges from 0 to 61440, with the step of 4096. By default, it

is 32768.n The priority of the device determines whether it can be selected as the root bridge of the

spanning tree. A device with a smaller priority is likely to be selected as the root bridge ofthe spanning tree.

n The device that supports MSTP has different priorities in different spanning tree instances.n If two devices have the same priority, then the device with the smaller MAC address is

selected as the root bridge of the spanning tree.

Procedure

Step 1 Run the stp priority command to set the priority of the device in the specied spanning treeinstance.


—-End

Example

To set the priority of the device in spanning tree instance 2 as 4096, do as follows:huawei(config)#stp instance 2 priority 4096

NOTE

If you set the parameter instance instance-id as 0, the priority you set is used as the priority of thedevice in the CIST.

huawei(config)#display stp instance 2{ <cr>|port<K> }:Command:

display stp instance 2The bridge is executing the IEEE Multiple Spanning Tree ProtocolBridge Diameter : 7 Max Hops : 20PathCost standard : LEGACY BPDU-Protection : disabledTime Factor : 3TC or TCN received : 0 Time since last TC : 3 days :16m:20s



Conguration Guide




Path cost to IST root bridge is 0

Related Operations

Table 12-10 lists the related operations for setting the priority of the device in the speciedspanning tree instance.

Table 12-10 Related operations for setting the priority of the device in the specied spanningtree instance

To... Run the Command...Restore the default priority of the devicein the specied spanning tree instance

undo stp priority

Set the priority of the port in the speciedspanning tree instance

stp port port-priority

12.8 Setting the Maximum Hop of the MST RegionThis operation enables you to set the maximum hop of the MST region.

Background Informationn By default, the maximum hop of the MST region is 20.n The device takes the root device of the spanning tree in the MST region as a start point.

When the conguration message in the region, that is, the BPDU packet, is forwardedby one device, its hop is reduced by 1. The device drops the packet with the hop of 0.In this case, the network scale in the region is restricted.

n If the current device becomes the root bridge device of the CIST or MSTI in the MSTregion, the maximum hop congured on the bridge device will become the networkdiameter of the spanning tree. In this case, the spanning tree scale in the region isrestricted.

Procedure

Step 1 Run the stp max-hops command to set the maximum hop of the MST region.

Step 2 Run the display stp command to query the MSTP conguration of the current device.

—-End

Example

To set the maximum hop of the MST region as 10, do as follows:huawei(config)#stp max-hops 10

huawei(config)#display stp{ <cr>|instance<K>|port<K> }:Command:

display stpThe bridge is executing the IEEE Multiple Spanning Tree ProtocolBridge Diameter : 7 Max Hops : 10PathCost standard : LEGACY BPDU-Protection : disabledTime Factor : 3TC or TCN received : 0 Time since last TC : 3 days :17m:39s









Related Operation

Table 12-11 lists the related operation for setting the maximum hop of the MST region.

Table 12-11 Related operation for setting the maximum hop of the MST region

To... Run the Command...Restore the default maximum hop of thedevice

undo stp max-hops

12.9 Setting the Diameter of the Switching FabricThis operation enables you to set the diameter of the switching fabric.

Background Informationn The setting takes effect only to CIST.n The device takes the root of the spanning tree in the MST region as a start point. When

the conguration message in the region, that is, the BPDU packet, is forwarded by onedevice, its hop is reduced by 1. The device drops the packet with the hop of 0. In thiscase, the network scale in the region is restricted.

n If the current device becomes the root bridge of the CIST or MSTI in the MST region, themaximum hop congured on the root bridge is the network diameter of the spanning tree.

n The parameters Hello Time, Forward Delay and Max Age are related to the networkscale. When you set the diameter of the switching fabric, MSTP sets automatically theparameters Hello Time, Forward Delay and Max Age to a proper value based on thecongured network diameter.

n By default, the diameter of the switching fabric is 7, the Forward Delay is 15, the HelloTime is 2s, and the Max Age is 20s.

NOTE

n The diameter of the switching fabric is the path with the most switching devices along it. Thediameter is indicated by the number of the switching devices along the path.

n The larger the network diameter is, the larger the network scale is.

Procedure

Step 1 Run the stp bridge-diameter command to set the diameter of the switching fabric.


—-End

Example

To set the diameter of the switching fabric as 6, do as follows:



Conguration Guide

huawei(config)#stp bridge-diameter 6huawei(config)#display stp{ <cr>|instance<K>|port<K> }:Command:

display stpThe bridge is executing the IEEE Multiple Spanning Tree ProtocolBridge Diameter : 6 Max Hops : 20PathCost standard : LEGACY BPDU-Protection : disabledTime Factor : 3TC or TCN received : 0 Time since last TC : 3 days :17m:55s







Related Operation

Table 12-12 lists the related operation for setting the diameter of the switching fabric.

Table 12-12 Related operation for setting the diameter of the switching fabric

To... Run the Command...Restore the default diameter of theswitching fabric

undo stp bridge-diameter

12.10 Setting the Calculation Standard for the Path CostThis operation enables you to set the calculation standard for the path cost.

Background Informationn The MA5600 supports three kinds of calculation standards for the path cost: IEEE

802.1D standard (dot1d), IEEE 802.1t standard (dot1t), and private standard of Huawei(legacy). By default, the third is used.

n After the calculation standard is set, the path cost of the device is calculated based on itautomatically.

n Different calculation standards dene different path cost values for the ports. If the setcalculation standard is different from the current standard, all ports use the default pathcost of the set calculation standard.

Procedure

Step 1 Run the stp pathcost-standard command to set the calculation standard for the path cost.


—-End

Example

To set the calculation standard for the path cost as IEEE 802.1t, do as follows:huawei(config)#stp pathcost-standard dot1t



huawei(config)#display stp{ <cr>|instance<K>|port<K> }:

Command:display stp

The bridge is executing the IEEE Multiple Spanning Tree ProtocolBridge Diameter : 6 Max Hops : 20PathCost standard : DOT1T BPDU-Protection : disabledTime Factor : 3TC or TCN received : 95 Time since last TC : 0 days : 0m: 4s







Related Operation

Table 12-13 lists the related operation for setting the calculation standard for the path cost.

Table 12-13 Related operation for setting the calculation standard for the path cost

To... Run the Command...Restore the default calculation standardfor the path cost

undo stp pathcost-standard

12.11 Setting the Time Parameters of the Specic NetworkBridge

This section describes how to set the time parameters of the specic network bridge. The timeparameters include Forward Delay, Hello Time, MAX Age, and time factor.

12.11.1 Setting the Forward Delay of the Specied Network BridgeThis operation enables you to set the Forward Delay of the specied network bridge.12.11.2 Setting the Hello Time of the Specied Network BridgeThis operation enables you to set the Hello Time of the specied network bridge.12.11.3 Setting the Max Age of the Specied Network BridgeThis operation enables you to set the Max Age of the specied network bridge.12.11.4 Setting the Timeout Time Factor of the Specied Network BridgeThis operation enables you to set the timeout time factor of the specied network bridge.

12.11.1 Setting the Forward Delay of the Specied Network BridgeThis operation enables you to set the Forward Delay of the specied network bridge.

Background Informationn For MSTP, when the port transits from discarding to forwarding state, an intermediate

state, Learning, is used if the rapid transition condition of the port state is not met. In thiscase, the temporary loop can be avoided.

n The Forward Delay of the root bridge species the interval of state transition. If thecurrent device is a root bridge, its state transition interval is specied by the Forward



Conguration Guide

Delay. The other devices use the Forward Delay specied by the root bridge to performstate transition.

n The three time parameters, Forward Delay, Hello Time, and Max Age must comply withthe following formula to guarantee network stability: 2 x (Forward Delay - 1.0 second)≥ Max Age ≥ 2 x (Hello Time + 1.0 second).

n By default, the Forward Delay is 15 seconds.

NOTE

The time parameters of MSTP are related to the network scale. You are recommended to run the stpbridge-diameter command to specify the network diameter of the switching fabric. In this case, MSTPadjusts the Hello Time, Forward Delay and Max Age to the proper values automatically based on thespecied network diameter.

Procedure

Step 1 Run the stp timer forward-delay command to set the Forward Delay of the specied networkbridge.


—-End

Example

To set the Forward Delay of the specied network bridge as 2000 centiseconds, do as follows:huawei(config)#stp timer forward-delay 2000huawei(config)#display stp{ <cr>|instance<K>|port<K> }:

Command:display stp

The bridge is executing the IEEE Multiple Spanning Tree ProtocolBridge Diameter : 6 Max Hops : 20PathCost standard : DOT1T BPDU-Protection : disabledTime Factor : 3TC or TCN received : 96 Time since last TC : 0 days : 1m:15s







Related Operations

Table 12-14 lists the related operations for setting the Forward Delay of the specied networkbridge.

Table 12-14 Related operations for setting the Forward Delay of the specied network bridge

To... Run the Command...Restore the default Forward Delay undo stp timer forward-delaySet the Hello Time of the speciednetwork bridge

stp timer hello

Set the Max Age of the specied networkbridge

stp timer max-age



12.11.2 Setting the Hello Time of the Specied Network BridgeThis operation enables you to set the Hello Time of the specied network bridge.

Background Informationn The device transmits the conguration packets at regular intervals specied by the Hello

Time to keep the spanning tree stable. If a device does not receive the congurationpackets, it considers that the conguration packets timed out and then recalculates thespanning tree.

n If the current device is a root bridge, the conguration packets are sent at regular intervalsspecied by the Hello Time. The other devices uses the Hello Time specied by the rootbridge to send the conguration packets.


n By default, the Hello Time is 2 seconds.

NOTE


Procedure

Step 1 Run the stp timer hello command to set the Hello Time of the specied network bridge.


—-End

Example

To set the Hello Time of the specied network bridge as 1000 centiseconds, do as follows:huawei(config)#stp timer hello 1000huawei(config)#display stp{ <cr>|instance<K>|port<K> }:

Command:display stp








Related Operations

Table 12-15 lists the related operations for setting the Hello Time of the specied networkbridge.



Conguration Guide

Table 12-15 Related operations for setting the Hello Time of the specied network bridge

To... Run the Command...Restore the default Hello Time undo stp timer helloSet the Forward Delay of the speciednetwork bridge

stp timer forward-delay

Set the Max Age of the specied networkbridge

stp timer max-age

12.11.3 Setting the Max Age of the Specied Network BridgeThis operation enables you to set the Max Age of the specied network bridge.

Background Informationn The Max Age takes no effect to multiple spanning tree instance (MSTI).n On the common and internal spanning tree (CIST), the device uses the Max Age to judge

whether the conguration received by the port is out of date. If the conguration receivedby the port is out of date, recalculate the spanning tree instance.

n If the device is a CIST root bridge, it uses the Max Age to judge whether the congurationis out of date. If the device is not a CIST root bridge, it uses the Max Age set on theCIST root bridge to judge.


n By default, the Max Age is 20 seconds.

NOTE


ProcedureStep 1 Run the stp timer max-age command to set the Max Age of the specied network bridge.


—-End

ExampleTo set the Max Age of the specied network bridge as 3000 centiseconds, do as follows:huawei(config)#stp timer max-age 3000huawei(config)#display stp{ <cr>|instance<K>|port<K> }:

Command:display stp










Related Operations

Table 12-16 lists the related operations for setting the Max Age of the specied network bridge.

Table 12-16 Related operations for setting the Max Age of the specied network bridge

To... Run the Command...Restore the default Max Age undo stp timer max-ageSet the Forward Delay of the speciednetwork bridge

stp timer forward-delay

Set the Hello Time of the speciednetwork bridge

stp timer hello

12.11.4 Setting the Timeout Time Factor of the Specied NetworkBridge

This operation enables you to set the timeout time factor of the specied network bridge.

Background Informationn The device that supports MSTP sends Hello packets at regular intervals to the neighboring

network bridges. In this case, it checks whether the links are normal.n If the device does not receive the Hello packets from the upstream device within a triple

Hello Time, it considers the upstream device faulty and recalculates the spanning tree. Bydoing so, the link problem can be resolved in time.

n Generally, the network condition is good. In the case that the upstream devices are busy,the spanning tree may be recalculated. You can avoid such an unnecessary calculation bythe timeout time factor of the specied network bridge.

n By default, the timeout time factor of the specied network bridge is 3.

Procedure

Step 1 Run the stp time-factor command to set the timeout time factor of the specied networkbridge.


—-End

Example

To set the timeout time factor of the specied network bridge as 6, do as follows:huawei(config)#stp time-factor 6

huawei(config)#display stp{ <cr>|instance<K>|port<K> }:

Command:display stp

The bridge is executing the IEEE Multiple Spanning Tree ProtocolBridge Diameter : 6 Max Hops : 20



Conguration Guide

PathCost standard : DOT1T BPDU-Protection : disabledTime Factor : 6TC or TCN received : 96 Time since last TC : 0 days : 1m:15s







Related Operation

Table 12-17 lists the related operation for setting the timeout time factor of the speciednetwork bridge.

Table 12-17 Related operation for setting the timeout time factor of the specied networkbridge

To... Run the Command...Restore the default timeout time factor ofthe specied network bridge

undo stp time-factor

12.12 Setting the Parameters of the Specied PortThis section describes how to set the parameters of the specied port.

12.12.1 Setting the Maximum Transmission Rate of the Specied PortThis operation enables you to set the maximum transmission rate of the specied port.12.12.2 Setting the Specied Port as an Edge PortThis operation enables you to set the specied port as an edge port. An edge port is notconnected with any switching device.12.12.3 Setting the Path Cost of the Port in the Specied Spanning Tree InstanceThis operation enables you to set the path cost of the port in the specied spanning tree instance.12.12.4 Setting the Priority of the Specied PortThis operation enables you to set the priority of the specied port.12.12.5 Setting the Point-to-Point Link Connection of the Specied PortThis operation enables you to set the point-to-point link connection of the specied port.

12.12.1 Setting the Maximum Transmission Rate of the SpeciedPort

This operation enables you to set the maximum transmission rate of the specied port.

Background Informationn The maximum transmission rate of the port indicates the maximum MSTP packets

transmitted by the port within one Hello Time.n The port can transmit a maximum of 255 packets within one Hello Time. The default

number of packets transmitted is 3.



Procedure

Run the stp port transmit-limit command to set the number of packets transmitted by theport within the Hello Time.

—-End

Example

To set the maximum packets transmitted by the port within one Hello Time as 16, do as follows:huawei(config)#stp port 0/7/0 transmit-limit 16

Related Operations

Table 12-18 lists the related operations for setting the maximum transmission rate of thespecied port.

Table 12-18 Related operations for setting the maximum transmission rate of the specied port

To... Run the Command...Restore the default maximum number ofpackets transmitted by the port

undo stp port transmit-limit

Query the system conguration display current-conguration

12.12.2 Setting the Specied Port as an Edge PortThis operation enables you to set the specied port as an edge port. An edge port is notconnected with any switching device.

Background Informationn You can set only the port connected to the terminal as an edge port. When the BPDU

protection is disabled from the switching device, after the port receives the BPDDpackets, even if the port is set as an edge port, it still works as a non edge port. By default,all ports are set as non edge ports.

n If you specify a port as an edge port, when the port is transited from blocking toforwarding state, the rapid transition can be implemented.

n This setting takes effect to all spanning tree instances. When a port is set as an edge port,it works as an edge port on all spanning tree instances. When a port is set as a non edgeport, it works as a non edge port on all spanning tree instances.

NOTE

For the port directly connected to the terminal, set it as an edge port, and enable its BPDU protectionfunction. For more details, see the section 12.14.1 Enabling the BPDU Protection Function of the Device.In this case, the rapid transition of the port state can be implemented, and the network security isguaranteed.

Procedure

Step 1 Run the stp port edged-port enable command to set the port as an edge port.

Step 2 Run the display stp command to query the MSTP global conguration.

—-End

Example

To set port 0/7/0 as an edge port, do as follows:



Conguration Guide

huawei(config)#stp port 0/7/0 edged-port enablehuawei(config)#display stp{ <cr>|instance<K>|port<K> }:

Command:display stp

The bridge is executing the IEEE Multiple Spanning Tree ProtocolBridge Diameter : 7 Max Hops : 20PathCost standard : LEGACY BPDU-Protection : disabledTime Factor : 3TC or TCN received : 0 Time since last TC : 0 days : 2m:25s






-----------------------------------------------------------------------------Port F/ S/ P Priority Cost Admin-State Role State Type-----------------------------------------------------------------------------1 0/7/ 0 128 200000 Disabled Disa Down Edge3 0/7/ 2 128 200000 Enabled Disa Down None17 0/ 2/ 0 0 200000 Enabled Disa Down None18 0/ 2/ 1 128 200000 Enabled Disa Down None19 0/ 2/ 2 128 200000 Enabled Disa Down None20 0/ 2/ 3 128 200000 Enabled Disa Down None-----------------------------------------------------------------------------

Related Operation

Table 12-19 lists the related operation for setting the specied port as an edge port.

Table 12-19 Related operation for setting the specied port as an edge port

To... Run the Command...Set a port as a non edge port stp port edged-port disable

12.12.3 Setting the Path Cost of the Port in the Specied SpanningTree Instance

This operation enables you to set the path cost of the port in the specied spanning tree instance.

Background Informationn By default, the network bridge obtains the path cost of the port based on the link status.n Setting the path cost of the Ethernet port results in the recalculation of the spanning tree.

Therefore, the default path cost is recommended.NOTE

n Path cost is a parameter related to the rate of the link connected to the port. For the device thatsupports MSTP, the port has different path costs in different spanning tree instances.

n Setting a proper path cost makes various VLAN trafc be forwarded along different physical links. Inthis case, the VLAN load-sharing function is implemented.

Procedure

Step 1 Run the stp port cost command to set the path cost of the port in the specied spanning treeinstance.




—-End

Example

To set the path cost of the port in spanning tree instance 2 as 1024, do as follows:huawei(config)#stp port 0/7/0 instance 2 cost 1024

NOTE

If you do not specify the parameter instance instance-id, the setting take effects only to the CIST instance.










Related Operation

Table 12-20 lists the related operation for setting the path cost of the port in the speciedspanning tree instance.

Table 12-20 Related operation for setting the path cost of the port in the specied spanningtree instance.

To... Run the Command...Restore the default path cost of thespecied port

undo stp port cost

12.12.4 Setting the Priority of the Specied PortThis operation enables you to set the priority of the specied port.

Background Informationn The priority of a port affects its role in the specied spanning tree instance. You can set

different priorities for the same port on the different MSTIs. This makes various VLAN



Conguration Guide

trafc be forwarded along different physical links. In this case, the VLAN load-sharingfunction is implemented.

n If the priority of the port changes, MSTP will recalculate the role of the port and performstate transition.

n The priority of the port ranges from 0 to 240, with the step of 16. By default, it is 128.

Procedure

Step 1 Run the stp port port-priority command to set the priority of the specied port.


—-End

Example

To set the priority of the specied port as 64, do as follows:huawei(config)#stp port 0/7/0 instance 0 port-priority 64

NOTE

If you do not specify the parameter instance instance-id, the setting take effects only to the CIST instance.










Related Operation

Table 12-21 lists the related operation for setting the priority of the specied port.

Table 12-21 Related operation for setting the priority of the specied port

To... Run the Command...Restore the default priority of thespecied port

undo stp port port-priority



12.12.5 Setting the Point-to-Point Link Connection of the SpeciedPort

This operation enables you to set the point-to-point link connection of the specied port.

Background Informationn By default, the point-to-point parameter is set to auto mode. MSTP checks whether the

link connected to the specied port is a point-to-point link.n If the port is not connected to a point-to-point link, the port state cannot be transited

rapidly. The default setting is recommended.n This setting takes effect to CIST and MSTI. When the port is set as connecting (or not

connecting) with the point-to-point link, the setting applies to all the spanning treeinstances.

n If the port is set as connecting with the point-to-point link, but actually it is not connectedwith a point-to-point link, the port will be in loopback state.

NOTE

n For an aggregated port, only the primary port can be set as connecting with the point-to-point link.n Presume that a port works in auto negotiation mode, if it is in full duplex mode after the negotiation,

it can be set as connecting with the point-to-point link.

Procedure

Run the stp port point-to-point command to set whether the link that is connected to theport is a point-to-point link.

—-End

Example

To set the link that is connected to port 0/7/0 as a point-to-point link, do as follows:huawei(config)#stp port 0/7/0 point-to-point force-true

Related Operation

Table 12-22 lists the related operation for setting the point-to-point link connection of thespecied port.

Table 12-22 Related operation for setting the point-to-point link connection of the speciedport

To... Run the Command...Set the link connected to the port as thedefault state

undo stp port frameid/slotid/portidpoint-to-point

12.13 Setting the mCheck VariableThis operation enables you to set the mCheck variable to force a port to work in MSTP mode.

Background InformationRun the stp portframeid/slotid/portid mcheck command to check whether there is anynetwork bridge that runs STP in the subnet to which the current port is connected.n If the network bridge that runs STP exists in the subnet where the port is connected, the

port runs in MSTP/STP compatible mode automatically.



Conguration Guide

n When the network condition is good, though the network bridge that runs STP in thesubnet is removed, the port still runs in the STP compatible mode. In this case, run thecommand to force the port to work in MSTP mode. After that, the type of the packetsreceived by the port determines whether it works in MSTP or STP compatible mode.

This command takes effect only when the network bridge runs MSTP.

Procedure

Run the stp portframeid/slotid/portid mcheck command to set the mCheck variable.

—-End

Example

To transit port 0/7/0 to work in MSTP mode, do as follows:huawei(config)#stp port 0/7/0 mcheck

12.14 Conguring the Device Protection FunctionThis section describes how to congure the device protection functions, including BPDUprotection, loopback protection and root protection.

12.14.1 Enabling the BPDU Protection Function of the DeviceThis operation enables the BPDU protection function of the device.12.14.2 Enabling the Loop Protection Function of the DeviceThis operation enables the loop protection function of the device.12.14.3 Enabling the Root Protection Function of the DeviceThis operation enables the root protection function of the device.

12.14.1 Enabling the BPDU Protection Function of the DeviceThis operation enables the BPDU protection function of the device.

Background Informationn By default, the BPDU protection function is disabled.n If the port of an access device is connected directly to the user terminal, such as a PC,

or connected to the le server, the port is usually set as an edge port to implement rapidstate transition. When the port receives the BPDU packets, the system sets the port as anon edge port and recalculates the spanning tree. This will result in an unstable networktopology.

n MSTP provides the BPDU protection function to prevent users from forging BPDUpackets to attack the device maliciously. If the BPDU protection function is enabled on thedevice, the system disables the edge port that receives the BPDU packets. If the disabledport does not receive the BPDU packets within 180s, it will be enabled automatically.

Procedure

Step 1 Run the stp bpdu-protection enable command to enable the BPDU protection functionof the device.


—-End



Example

To enable the BPDU protection function of device, do as follows:huawei(config)#stp bpdu-protection enablehuawei(config)#display stp{ <cr>|instance<K>|port<K> }:

Command:display stp

The bridge is executing the IEEE Multiple Spanning Tree ProtocolBridge Diameter : 7 Max Hops : 20PathCost standard : LEGACY BPDU-Protection : enabledTime Factor : 3TC or TCN received : 0 Time since last TC : 0 days : 6m:42s







Related Operation

Table 12-23 lists the related operation for enabling the BPDU protection function of the device.

Table 12-23 Related operation for enabling the BPDU protection function of the device

To... Run the Command...Disable the BPDU protection functionof the device

stp bpdu-protection disable

12.14.2 Enabling the Loop Protection Function of the Device

This operation enables the loop protection function of the device.

Background Informationn To avoid the switching fabric loop due to the link congestion or unidirectional link fault,

MSTP provides the loop protection function.n After the loop protection function is enabled, the root port keeps its role, and the blocked

port keeps its discarding state and does not forward any packets. In this case, the loopwill not occur in the network.

n By default, the loop protection function is disabled.

Procedure

Step 1 Run the stp port loop-protection enable command to enable the loop protection functionof the port.

Step 2 Run the display stp port command to query the MSTP conguration of the port.

—-End



Conguration Guide

Example

To enable the loop protection function of port 0/7/0, do as follows:huawei(config)#stp port 0/7/0 loop-protection enablehuawei(config)#display stp port 0/7/0----[CIST][Port1(Down)]----Port Protocol :enabledPort Role :CIST Disabled PortPort Priority :128Port Cost :Config=auto / Active=200000Desg. Bridge/Port :0.00e0-fc99-5050 / 128.1Port Edged(Admin) :disabledPoint-to-point :Config=auto / Active=falseTransit Limit :3 packets/hello-timeProtection Type :LoopPort Stp Mode :StpPortTimes :Hello 10 s MaxAge 20 s FwDly 15 s Message Age 0 s RemHop20BPDU Sent :0



----[MSTI 2][Port1(Down)]----Port Role :Disabled PortPort Priority :128Port Cost :Config=auto / Active=200000---- More ( Press ’Q’ to break ) ----

Related Operations

Table 12-24 lists the related operations for enabling the loop protection function of the device.

Table 12-24 Related operations for enabling the loop protection function of the device

To... Run the Command...Disable the loop protection function ofthe device

stp port loop-protection disable

Enable the BPDU protection function ofthe device

stp bpdu-protection

Enable the root protection function ofthe device

stp port root-protection

12.14.3 Enabling the Root Protection Function of the Device

This operation enables the root protection function of the device.

Background Informationn Due to the incorrect conguration or malicious attacks, the legal root bridge in the

network might receive the conguration packets with a higher priority. In this case, thecurrent root bridge becomes invalid, which causes the network topology changed. MSTPprovides the root protection function to avoid such a case.

n For the port that is enabled with the root protection function, it is only used as a speciedport for all instances. Once the port receives the conguration packets with a higherpriority, which sets the port as a non specied port, the port will be in the listening state,and will not forward the packets. When the port does not receive the congurationpackets with a higher priority for a certain period, the port will restore to the normal state.

n By default, the root protection function of the port is disabled.



ProcedureStep 1 Run the stp port root-protection enable command to enable the root protection function

of the port.

Step 2 Run the display stp port command to query the MSTP conguration of the port.

—-End

ExampleTo enable the root protection function of port 0/7/0, do as follows:huawei(config)#stp port 0/7/0 root-protection enablehuawei(config)#display stp port 0/7/0----[CIST][Port1(Down)]----Port Protocol :enabledPort Role :CIST Disabled PortPort Priority :128Port Cost :Config=auto / Active=200000Desg. Bridge/Port :0.00e0-fc99-5050 / 128.1Port Edged(Admin) :disabledPoint-to-point :Config=auto / Active=falseTransit Limit :3 packets/hello-timeProtection Type :RootPort Stp Mode :StpPortTimes :Hello 10 s MaxAge 20 s FwDly 15 s Message Age 0 s RemHop20BPDU Sent :0



----[MSTI 2][Port1(Down)]----Port Role :Disabled PortPort Priority :128Port Cost :Config=auto / Active=200000---- More ( Press ’Q’ to break ) ----

Related OperationsTable 12-25 lists the related operations for enabling the root protection function of the device.

Table 12-25 Related operations for enabling the root protection function of the device

To... Run the Command...Disable the root protection function ofthe device

stp port root-protection disable

Enable the BPDU protection function ofthe device

stp bpdu-protection

Enable the loop protection function ofthe port

stp port loop-protection

12.15 Clear the MSTP Protocol StatisticsThis operation enables you to clear the MSTP protocol statistics.

Background InformationYou can clear the device/port MSTP protocol statistics.

Proceduren Run the reset stp command to clear the MSTP protocol statistics.



Conguration Guide

huawei#reset stp

n Run the reset stp port frameid/slotid/portid command to clear the MSTP protocolstatistics of a port.huawei(config)#reset stp port 0/7/0

—-End


SmartAX MA5600 Multi-service Access ModuleConguration Guide 13 NTP Conguration

13 NTP Conguration


13.1 OverviewThis section describes the NTP concepts and its specication on the MA5600.13.2 Conguration Example of NTP Broadcast ModeThis operation enables you to congure NTP broadcast mode on the MA5600, so as toimplement clock synchronization among network devices.13.3 Conguration Example of NTP Multicast ModeThis operation enables you to congure NTP multicast mode on the MA5600, so as toimplement clock synchronization among network devices.13.4 Conguration Example of NTP Server/Client ModeThis operation enables you to congure NTP server/client mode on the MA5600, so as toimplement clock synchronization among network devices.13.5 Conguration Example of NTP Peer ModeThis operation enables you to congure NTP peer mode on the MA5600, so as to implementclock synchronization among network devices.13.6 Conguring the NTP ID AuthenticationThis operation enables you to congure NTP ID authentication so as to enhance networksecurity and avoid unauthorized clock modication.13.7 Conguring the NTP Master ClockThis operation enables you to congure the NTP master clock.13.8 Conguring NTP Broadcast ModeThis section describes how to congure the MA5600 as NTP broadcast server mode andNTP broadcast client mode.13.9 Conguring the NTP Multicast ModeThis operation enables you to congure the NTP multicast server or client mode.13.10 Conguring NTP Server/Client ModeThis operation enables you to dene a remote server as the NTP server, and the local device asthe client.13.11 Conguring NTP Peer ModeThis operation enables you to congure the MA5600 as the peer of a local device.13.12 Conguring the Authority of Access to a Local Device’s NTP ServiceThis operation enables you to congure the authority of access to a local device’s NTPservice.13.13 Conguring an Interface for Transmitting/Receiving NTP PacketsThis operation enables you to congure an interface for transmitting or receiving NTP packets.


13 NTP CongurationSmartAX MA5600 Multi-service Access Module

Conguration Guide

13.1 OverviewThis section describes the NTP concepts and its specication on the MA5600.

Service DescriptionNetwork Time Protocol (NTP) is an application layer protocol in the TCP/IP protocol suite.NTP is used to synchronize the time between the distributed time server and the client. Thenetwork devices that support NTP keep their time consistent by exchanging NTP packetsto implement various service applications based on universal time, such as the networkmanagement system and the network accounting system.

Service SpecicationThere are four NTP modes:n Server/clientn Peern Broadcastn MulticastThe MA5600 supports all these modes.

13.2 Conguration Example of NTP Broadcast ModeThis operation enables you to congure NTP broadcast mode on the MA5600, so as toimplement clock synchronization among network devices.

NetworkingFigure 13-1 shows a sample network for conguring NTP broadcast mode.

Figure 13-1 Sample network for conguring the NTP broadcast mode

An MA5600 serves as an NTP broadcast server, and periodically sends clock synchronizationpackets to destination 255.255.255.255. The other MA5600 serves as a client to intercept thebroadcast packets from the server, and then synchronizes its clock with that of the server.

Data PlanTable 13-1 lists the data plan for conguring NTP broadcast mode.



Table 13-1 Data plan for conguring NTP broadcast mode

Item DataVLAN ID: 2IP address of L3 interface 1: 1.1.1.1

MA5600_A

Clock: Selects the local clock as the NTP master clock at stratum2.VLAN ID: 2IP address of L3 interface 2: 1.1.1.2

MA5600_B

Clock: Follows the clock of the broadcast server.

Background Informationn The network devices and the line must be in the normal state.n The clock stratum of the synchronizing device must be equal to or lower than that of the

synchronized device. Otherwise, clock synchronization fails.

Conguration FlowchartFigure 13-2 shows the owchart for conguring NTP broadcast mode.

Figure 13-2 Flowchart for conguring NTP broadcast mode

Procedure

n Congure the NTP broadcast server MA5600_A.1. Dene the local clock of MA5600_A as the master NTP clock at stratum 2.

huawei(config)#ntp-service refclock-master 2

2. Enable NTP authentication.huawei(config)#ntp-service authentication enablehuawei(config)#ntp-service authentication-keyid 88 authentication-mode md5 123456huawei(config)#ntp-service reliable authentication-keyid 88

3. Add a layer 3 virtual port.huawei(config)#vlan 2 standardhuawei(config)#port vlan 2 0/7 0huawei(config)#interface vlanif 2huawei(config-if-vlanif2)#ip address 1.1.1.1 24

4. Dene the master NTP clock as the NTP broadcast server and specify theauthentication ID.



Conguration Guide

huawei(config-if-vlanif2)#ntp-service broadcast-serverauthentication-key 88

5. Save the data.huawei(config)#save

n Congure the NTP broadcast client MA5600_B.1. Enable NTP authentication.

huawei(config)#ntp-service authentication enablehuawei(config)#ntp-service authentication-keyid 88 authentication-mode md5 123456huawei(config)#ntp-service reliable authentication-keyid 88


3. Dene MA5600_B as a broadcast client.huawei(config-if-vlanif2)#ntp-service broadcast-client


—-End

Result

Follow the steps below to verify the conguration:1. After synchronization, show the state of MA5600_B.

huawei(config)#display ntp-service statusclock status: synchronizedclock stratum: 3reference clock ID: 1.1.1.1nominal frequency: 100.0000 Hzactual frequency: 100.0000 Hzclock precision: 2^17clock offset: 996.5820 msroot delay: 0.00 msroot dispersion: 10.45 mspeer dispersion: 10.93 msreference time: 12:10:10.170 UTC May 14 2005(C6306922.2BC286F8)

According to the above congurations, the clock of MA5600_B is at stratum of 3, andis synchronized with that of MA5600_A.

2. Display the sessions of MA5600_B.huawei(config)#display ntp-service sessions{ <cr>|verbose<K> }:Command:

display ntp-service sessionssource reference stra reach poll now offset delay disper

********************************************************************************[1234]1.1.1.1 LOCAL(0) 2 376 64 27 991.1 0.0 1.9note: 1 source(master),2 source(peer),3 selected,4 candidate,5 configured

By analyzing the sessions of MA5600_B, you can nd that MA5600_B has beenconnected to MA5600_A.

13.3 Conguration Example of NTP Multicast ModeThis operation enables you to congure NTP multicast mode on the MA5600, so as toimplement clock synchronization among network devices.

NetworkingFigure 13-3 shows a sample network for conguring NTP multicast mode.



Figure 13-3 Sample network for conguring NTP multicast mode

MA5600_A sends multicast packets through VLAN interface 2 while MA5600_B interceptsmulticast information from VLAN interface 2. After receiving multicast packets fromMA5600_A, MA5600_B synchronizes with MA5600_A.

Data PlanTable 13-2 lists the data plan for conguring NTP multicast mode.

Table 13-2 Data plan for conguring NTP multicast mode

Item DataIP address of L3 interface 2: 1.1.1.1Subnet mask: 255.255.255.0

MA5600_A

Clock: Selects the local clock as the NTP master clock at stratum2.IP address of L3 interface 2: 1.1.1.2Subnet mask: 255.255.255.0

MA5600_B

Clock: Follows the clock of the multicast server.

Background InformationThe stratum of the NTP server must be higher than or equal to that of the NTP client.Otherwise, the synchronization fails.

Conguration FlowchartFigure 13-4 shows the owchart for conguring NTP multicast mode.



Conguration Guide

Figure 13-4 Flowchart for conguring NTP multicast mode

Procedure

n Congure the NTP multicast server MA5600_A.1. Set the local clock as the master clock working in stratum 2.


2. Congure the NTP authentication.huawei(config)#ntp-service authentication enablehuawei(config)#ntp-service authentication-keyid 88 authentication-mode md5 123456huawei(config)#ntp-service reliable authentication-keyid 88


4. Set MA5600_A as the multicast server and specify the authentication ID.huawei(config-if-vlanif2)#ntp-service multicast-serverauthentication-keyid 88


n Congure the NTP multicast host MA5600_B.1. Congure the NTP authentication.

huawei(config)#ntp-service authentication enablehuawei(config)#ntp-service authentication-keyid 88 authentication-mode md5 123456huawei(config)#ntp-service reliable authentication-keyid 88


3. Set MA5600_B as an NTP multicast client.huawei(config)#interface vlanif 2huawei(config-if-vlanif2)# ntp-service multicast-client


—-End



Result

Follow the steps below to verify the conguration:1. After synchronization, display the state of MA5600_B.

huawei(config)#display ntp-service statusclock status: synchronizedclock stratum: 3reference clock ID: 1.1.1.1nominal frequency: 100.0000 Hzactual frequency: 100.0000 Hzclock precision: 2^17clock offset: 996.5820 msroot delay: 0.00 msroot dispersion: 10.45 mspeer dispersion: 10.93 msreference time: 12:10:10.170 UTC May 14 2005(C6306922.2BC286F8)

According to the above congurations, the clock of MA5600_B, is at stratum of 3, andis synchronized with that of MA5600_A.

2. Display sessions of MA5600_B.huawei(config)#display ntp-service sessions{ <cr>|verbose<K> }:Command:

display ntp-service sessionssource reference stra reach poll now offset delay disper

********************************************************************************[1234]1.1.1.1 LOCAL(0) 2 376 64 27 991.1 0.0 1.9note: 1 source(master),2 source(peer),3 selected,4 candidate,5 configured

By analyzing the sessions of MA5600_B, you can nd that MA5600_B has beenconnected to MA5600_A.

13.4 Conguration Example of NTP Server/Client ModeThis operation enables you to congure NTP server/client mode on the MA5600, so as toimplement clock synchronization among network devices.

NetworkingFigure 13-5 shows a sample network for conguring NTP server/client mode.

Figure 13-5 Sample network for conguring NTP server/client mode



Conguration Guide

An MA5600 serves as an NTP broadcast server, while the other MA5600 serves as a client.The client sends the clock synchronization request to the server and the server synchronizesthe clock according to the request.

Data PlanTable 13-3 shows the data plan for conguring NTP server/client mode.

Table 13-3 Data plan for conguring NTP server/client mode

Item DataIP address of VLAN interface 2: 1.1.1.1Subnet mask: 255.255.255.0

MA5600_A

Clock: Selects the local clock as the NTP master clock atstratum 2.IP address of VLAN interface 2: 1.1.1.2Subnet mask: 255.255.255.0

MA5600_B

Clock: Selects MA5600_A as the NTP server.

Background InformationThe stratum of the NTP server must be higher than or equal to that of the NTP client.Otherwise, the synchronization fails.

Conguration FlowchartFigure 13-6 shows the owchart for conguring NTP server/client mode.

Figure 13-6 Flowchart for conguring NTP server/client mode

NOTE

n When the MA5600 functions as a time server, the layer 3 interface needs to be congured.n If any other network device supporting NTP serves as a time server, whether the layer 3 interface

needs to be congured depends on the features of the device.

Procedure

n Congure the NTP server MA5600_A.1. Set the local clock as the master clock working in stratum 2.






n Congure the client MA5600_B.1. Add a layer 3 virtual port.

huawei(config)#vlan 2 standardhuawei(config)#port vlan 2 0/7 0huawei(config)#interface vlanif 2huawei(config-if-vlanif2)#ip address 1.1.1.2 24huawei(config-if-vlanif2)#quit

2. Specify the IP address of MA5600_A and specify it as the server.huawei(config)#ntp-service unicast-server 1.1.1.1


—-End

Result

Follow the steps below to verify the conguration:1. Before synchronization, display the state of MA5600_B.

huawei(config)#display ntp-service statusclock status: unsynchronizedclock stratum: 16reference clock ID: nonenominal frequency: 100.0000 Hzactual frequency: 100.0000 Hzclock precision: 2^17clock offset: 0.0000 msroot delay: 0.00 msroot dispersion: 0.00 mspeer dispersion: 0.00 msreference time: 00:00:00.000 UTC Jan 1 1900(00000000.00000000)

2. After synchronization, display the state of MA5600_B.huawei(config)#display ntp-service statusclock status: synchronizedclock stratum: 3reference clock ID: 1.1.1.1nominal frequency: 100.0000 Hzactual frequency: 100.0000 Hzclock precision: 2^17clock offset: 0.0000 msroot delay: 8.18 msroot dispersion: 0.15 mspeer dispersion: 10.94 msreference time: 11:06:39.203 UTC May 14 2005(C6305A3F.3422EE41)

According to the above congurations, the clock of MA5600, is at stratum of 3, andis synchronized with that of MA5600_A.

3. Display the sessions of MA5600_B. By analyzing the sessions of MA5600_B, you cannd that MA5600_B has been connected to MA5600_A.huawei(config)#display ntp-service sessions{ <cr>|verbose<K> }:

Command:display ntp-service sessions

source reference stra reach poll now offset delay disper**************************************************************************[12345]1.1.1.1 LOCAL(0) 2 177 64 62 -1.0 6.9 2.8note: 1 source(master),2 source(peer),3 selected,4 candidate,5 configured



Conguration Guide

13.5 Conguration Example of NTP Peer ModeThis operation enables you to congure NTP peer mode on the MA5600, so as to implementclock synchronization among network devices.

NetworkingFigure 13-7 shows a sample network for conguring NTP peer mode.

Figure 13-7 Sample network for conguring NTP peer mode

One MA5600 serves as an NTP active peer, while the other MA5600 serves as the passivepeer. The active peer sends a clock synchronization request to the passive peer, and then thepassive peer responds to the request. In this case, the peer with a higher clock stratum issynchronized by the peer with a lower clock stratum.

Data PlanTable 13-4 lists the data plan for conguring NTP peer mode.

Table 13-4 Data plan for conguring NTP peer mode

Item DataIP address of VLAN interface 2: 1.1.1.1Subnet mask: 255.255.255.0

MA5600_A

Clock: Selects the local clock as the NTP master clock atstratum 2.IP address of VLAN interface 2: 1.1.1.2Subnet mask: 255.255.255.0

MA5600_B

Clock: Selects MA5600_B as the peer.

Conguration FlowchartFigure 13-8 shows the owchart for conguring NTP peer mode.



Figure 13-8 Flowchart for conguring NTP peer mode

Procedure

n Congure the server MA5600_A.1. Set the local clock as the NTP master clock in stratum 2.



3. Set MA5600_B as the peer.huawei(config)#ntp-service unicast-peer 1.1.1.2


n Congure the MA5600_B as the passive peer.1. Add a layer 3 virtual port.

huawei(config)#vlan 2 standardhuawei(config)#port vlan 2 0/7 0huawei(config)#interface vlanif 2huawei(config-if-vlanif2)#ip address 1.1.1.2 24


—-End

Result

According to the above congurations, MA5600_A and MA5600_B are dened as peers.MA5600_A works in active peer mode, and MA5600_B works in passive peer mode. Bydefault, the system clock is at stratum 16, so the clock of MA5600_B is at stratum 16. Theclock of MA5600_A is at stratum 2. Therefore, MA5600_B turns to MA5600_A for clocksynchronization.

You can verify the conguration through the following steps:1. Check the state of the MA5600_B before synchronization.

huawei(config)#display ntp-service statusclock status: synchronizedclock stratum: 16reference clock ID: nonenominal frequency: 100.0000 Hzactual frequency: 100.0000 Hzclock precision: 2^17clock offset: 0.0000 msroot delay: 8.18 ms



Conguration Guide

root dispersion: 0.15 mspeer dispersion: 10.94 msreference time: 11:06:39.203 UTC May 14 2005(C6305A3F.3422EE41)

2. Check the state of the MA5600_B after the synchronization.huawei(config)#display ntp-service statusclock status: synchronizedclock stratum: 3reference clock ID: 1.1.1.1nominal frequency: 100.0000 Hzactual frequency: 100.0000 Hzclock precision: 2^17clock offset: 0.0000 msroot delay: 8.18 msroot dispersion: 0.15 mspeer dispersion: 10.94 msreference time: 11:06:39.203 UTC May 14 2005(C6305A3F.3422EE41)

MA5600_A has been synchronized with MA5600_B, and the stratum of MA5600_B is 3, anincrease of 1 on that of MA5600_A.

NOTE

Whether the active peer synchronizes with the passive peer or the passive peer synchronizes with activepeer is determined by the clock stratum rather than the active or the passive state.

13.6 Conguring the NTP ID AuthenticationThis operation enables you to congure NTP ID authentication so as to enhance networksecurity and avoid unauthorized clock modication.

Background Informationn If the NTP authentication is disabled on the client, the client can turn to the server for clock

synchronization, regardless of whether the NTP authentication is enabled on the server.n If NTP authentication is enabled, a reliable key shall be congured.n The conguration of the server shall be consistent with that of the client.n If NTP is enabled on the client, the client can pass the authentication by the server, as long

as the server is congured with the same key as that of the client, regardless of whetherNTP authentication is enabled on the server or its key is reliable.

n The client synchronizes the server that provides the reliable key. If the server provides anunreliable key, the client does not synchronize the server.

Conguration FlowchartFigure 13-9 shows the owchart for conguring the NTP server/client mode with IDauthentication.



Figure 13-9 Flowchart for conguring the NTP server/client mode with ID authentication

Procedure

Step 1 Run the ntp-service authentication enable command to enable ID authentication for theNTP server.

Step 2 Run the ntp-service authentication-keyid command to set an ID authentication key forthe NTP server.

Step 3 Run the ntp-service reliable authentication-keyid command to dene the key as a reliablekey.

Step 4 Run the display current-conguration section command to query the current congurationof the system.

—-End

Example

To enable NTP ID authentication, congure the NTP conguration key as aNiceKey with keynumber of 42, and then dene key 42 as a reliable key, do as follows:



Conguration Guide

huawei(config)#ntp-service authentication enablehuawei(config)#ntp-service authentication-keyid 42 authentication-mode md5 aNiceKeyhuawei(config)#ntp-service reliable authentication-keyid 42huawei(config)#display current-configuration section post-system[MA5600V300R003: 3002]#[post-system]<post-system>ip route-static 0.0.0.0 0.0.0.0 10.71.55.1ip route-static 2.2.2.2 255.255.255.255 10.1.1.2ip route-static 2.2.2.2 255.255.255.255 20.1.1.2#static-lsp ingress tunnel-interface tunnel1 destination 2.2.2.2 nexthop 10.1.1.2 out-label 8200static-lsp ingress tunnel-interface tunnel2 destination 2.2.2.2 nexthop 20.1.1.2 out-label 8210#snmp-agent local-engineid 000007DB0300E0FC590001snmp-agent sys-info version v1 v2csnmp-agent group v3 group authentication read-view internetsnmp-agent usm-user v3 user group authentication-mode md55B35F3BA2B65CA9D4A35CC868E5963CF privacy-mode des56B889728872508FA68D4C91595D092958snmp-agent#ntp-service authentication enablentp-service authentication-keyid 42 authentication-mode md5 X&9#$^U(!:[Q=^Q‘MAF4<1!!ntp-service reliable authentication-keyid 42#ssh user op authentication-type passwordssh user user authentication-type passwordssh user test authentication-type password#tunnel-policy policy10#return

Related Operations

Table 13-5 lists the related operations for conguring NTP ID authentication.

Table 13-5 Related operations for conguring NTP ID authentication

To... Run the Command...Disable NTP IDauthentication

undo ntp-service authentication enable

Remove the NTPauthentication key

undo ntp-service authentication-keyid

Cancel a key as a reliable one undo ntp-service reliable authentication-keyidDisplay the NTP servicestatus

display ntp-service status

13.7 Conguring the NTP Master ClockThis operation enables you to congure the NTP master clock.

Background Informationn The IP address of the local reference lock is set to 127.127.t.u, in which:

t ranges 0–37 but is currently 1.

u ranges 0–3, representing the NTP process number.



n With no IP address specied, by default, local clock 127.127.1.0 serves as the NTPmaster clock.

n Clock stratum represents clock accuracy. The clock stratum number ranges 1–15. Theinitial value is 16 before it is congured. The clock at stratum 1 is of the highest accuracy.The larger the clock stratum number, the lower the clock accuracy.

Procedure

Step 1 Run the ntp-service refclock-master command to congure the NTP master clock.

Step 2 Run the display ntp-service status command to query the NTP status information.

—-End

Example

To dene the clock of a local device as the master NTP clock at stratum 2 and specify theIP address as 127.127.127.0, do as follows:huawei(config)#ntp-service refclock-master 127.127.1.0 2huawei(config)#display ntp-service statusclock status: synchronizedclock stratum: 2reference clock ID: LOCAL(0)nominal frequency: 100.0000 Hzactual frequency: 100.0000 Hzclock precision: 2^18clock offset: 0.0000 msroot delay: 0.00 msroot dispersion: 0.00 mspeer dispersion: 10.00 msreference time: 13:41:41.065 UTC Feb 14 2006(C79C5C95.10ADBC66)

Related Operation

Table 13-6 lists the related operation for conguring the NTP master clock.

Table 13-6 Related operation for conguring the NTP master clock

To... Run the Command...Cancel the NTP master clock undo ntp-service refclock-master

13.8 Conguring NTP Broadcast ModeThis section describes how to congure the MA5600 as NTP broadcast server mode andNTP broadcast client mode.

13.8.1 Conguring NTP Broadcast Server ModeThis operation enables you to congure the MA5600 as the NTP broadcast server.13.8.2 Conguring NTP Broadcast Client ModeThis operation enables you to congure the MA5600 as the NTP broadcast client.

13.8.1 Conguring NTP Broadcast Server Mode

This operation enables you to congure the MA5600 as the NTP broadcast server.



Conguration Guide

Background Informationn This task is to specify an interface on the local device to transmit NTP broadcast packets.

The local device operates in broadcast-server mode, and serves as a broadcast server tobroadcast packets to its clients regularly.

n Perform this operation on the interface where the NTP broadcast packets are to betransmitted.

Procedure


Step 2 Run the ntp-service broadcast-server command to congure the NTP broadcast server mode.


—-End

Example

To dene VLAN interface 2 on a local device to transmit NTP broadcast packets which areencrypted by key 88, do as follows:huawei(config)#interface vlanif 2huawei(config-if-vlanif2)#ntp-service broadcast-server authentication-keyid 88huawei(config-if-vlanif2)#quithuawei(config)#display current-configuration section vlanif[MA5600V300R003: 3002]#[vlanif]<vlanif10>

interface vlanif10ip address 10.1.1.1 255.255.255.0mplsmpls te#<vlanif30>

interface vlanif30ntp-service broadcast-server authentication-keyid 88#return

Related Operations

Table 13-7 lists the related operations for conguring NTP broadcast server mode.

Table 13-7 Related operations for conguring NTP broadcast server mode

To... Run the Command... RemarksCancel the broadcast serverconguration

undo ntp-servicebroadcast-server

-

Display NTP service trace display ntp-service trace Synchronize NTP server chainfrom the local device to thereference clock source, anddisplay brief information ofeach NTP server.

Display the state of sessionsmaintained by NTP service

display ntp-servicesessions

-

Enable NTP debugging debugging ntp-service -



13.8.2 Conguring NTP Broadcast Client Mode

This operation enables you to congure the MA5600 as the NTP broadcast client.

Background Informationn The local device rst detects the broadcast packets from the server. When receiving the

rst broadcast packet, it enters the client/server mode briey to exchange packets with aremote server for estimating the network delay. The local device then enters the broadcastclient mode, continues detecting the broadcast packets, and synchronizes the local clockaccording to the received broadcast packets.

n Perform this operation on the interface where the NTP multicast packets are to betransmitted.

Procedure


Step 2 Run the ntp-service broadcast-client command to congure NTP broadcast client mode.

Step 3 Run the display ntp-service status command to query the NTP information.

—-End

Example

To specify a local device as a broadcast client to receive broadcast packets through VLANinterface 2, do as follows:huawei(config)#interface vlanif 2huawei(config-if-vlanif2)#ntp-service broadcast-clienthuawei(config)#display ntp-service statushuawei#display ntp-service statusclock status: synchronizedclock stratum: 3reference clock ID: 212.125.95.4nominal frequence: 100.0000 Hzactual frequence: 100.0000 Hzclock precision: 2^6clock offset: 0.5809 msroot delay : 372.66 msroot dispersion: 23.87 mspeer disper: 10.83 msreference time: 04:01:11.344 UTC May 16 2003(C26EE107.5847A17F)

Related Operations

Table 13-8 lists the related operations for conguring NTP broadcast client mode.

Table 13-8 Related operations for conguring NTP broadcast client mode

To... Run the Command…Cancel the broadcast client conguration undo ntp-service broadcast-clientDisplay NTP service trace display ntp-service trace

13.9 Conguring the NTP Multicast ModeThis operation enables you to congure the NTP multicast server or client mode.



Conguration Guide

Background InformationWorking principle of NTP multicast server is as follows:n The multicast server sends clock synchronization packets to multicast destination IP

address 224.0.1.1. The client detects the multicast packets and synchronizes the localclock according to the packets.

Working principles of NTP multicast client are as follows:n The local device rst detects the multicast packets from the server. When receiving the

rst multicast packet, it enters the client/server mode briey to switch packets with aremote server for estimating the network delay.

n The local device enters multicast client mode, continues to detect the multicast packets,and synchronizes the local clock according to the received multicast packets.

Note that:n The server and the client can be congured only on the interface where the NTP multicast

packets are to be transmitted or received.n In multicast mode, the NTP congurations must be performed on both the server and the

client. The client must be synchronized by the clock of the server.

Procedure

Step 1 Run the interface command to enter the layer 3 interface mode.

Step 2 Run the ntp-service multicast-server command to congure the NTP multicast mode.


—-End

Examples

To dene a local device as multicast server to transmit multicast packets through VLANinterface 2, do as follows:huawei(config)#interface vlanif 2huawei(config-if-vlanif2)#ntp-service multicast-server

huawei(config)#display ntp-service statusUA5000(config)#display ntp-service statusclock status: synchronizedclock stratum: 2reference clock ID: LOCAL(0)nominal frequency: 100.0000 Hzactual frequency: 100.0000 Hzclock precision: 2^18clock offset: 0.0000 msroot delay: 0.00 msroot dispersion: 10.94 mspeer dispersion: 10.00 msreference time: 21:57:54.244 UTC Sep 9 2006(C8ADB762.3E7CD035)

To dene a local device as multicast client to receive multicast packets through VLANinterface 2, do as follows:huawei(config)#interface vlanif 2huawei(config-if-vlanif2)#ntp-service multicast-client

huawei(config)#display ntp-service statusUA5000(config)#display ntp-service statusclock status: synchronizedclock stratum: 2reference clock ID: LOCAL(0)nominal frequency: 100.0000 Hzactual frequency: 100.0000 Hzclock precision: 2^18clock offset: 0.0000 msroot delay: 0.00 msroot dispersion: 10.94 ms



peer dispersion: 10.00 msreference time: 22:00:03.537 UTC Sep 9 2006(C8ADB7E3.89A7E308)

Related Operations

Table 13-9 lists the related operations for conguring the NTP multicast mode.

Table 13-9 Related operations for conguring the NTP multicast mode

To... Run the Command…Cancel the multicast server conguration undo ntp-service multicast-server

Cancel the multicast client conguration undo ntp-service multicast-client

Display NTP service trace display ntp-service trace

13.10 Conguring NTP Server/Client ModeThis operation enables you to dene a remote server as the NTP server, and the local device asthe client.

Background Informationn The client sends the clock synchronization request to the server. After receiving the

request, the server automatically works in server mode and then sends the response.After receiving the response from the server, the client lters and selects the clock, andsynchronizes the preferred server.

n In this mode, only the local client initiates the clock synchronization with the remoteserver, while the remote server does not.

Procedure

Step 1 Run the ntp-service unicast-server command to congure the NTP server/client mode.


—-End

Example

To specify the device with the IP address of 1.0.1.11 as the NTP server and the version as 3forthe client, do as follows:huawei(config)#ntp-service unicast-server 1.0.1.11 version 3




Conguration Guide

Related Operations

Table 13-10 lists the related operations for conguring NTP server/client mode.

Table 13-10 Related operations for conguring NTP server/client mode

To... Run the Command...Cancel a specied NTP server undo ntp-service unicast-serverSet the max. local session number ntp-service max-dynamic-sessions numberRestore the default setting of maximumlocal sessions

undo ntp-service max-dynamic-sessions

13.11 Conguring NTP Peer ModeThis operation enables you to congure the MA5600 as the peer of a local device.

Background Informationn The active peer sends the clock synchronization request to the passive peer. After

receiving the request, the other peer automatically works in passive peer mode and sendsthe response. Both the active peer and the passive peer synchronize their clocks mutually.

n In NTP peer mode, the NTP conguration is performed only on the active peer.n The peer with a higher clock stratum is synchronized by the peer with a lower clock

stratum.

Procedure

Step 1 Run the ntp-service unicast-peer command to congure NTP peer mode.


—-End

Example

To specify the remote device with IP address of 3.0.1.32 as the peer of the local device, doas follows:huawei(config)#ntp-service unicast-peer 3.0.1.32


Related Operation

Table 13-11 lists the related operation for conguring NTP peer mode.



Table 13-11 Related operation for conguring NTP peer mode

To... Run the Command...Cancel the specied NTP peer undo ntp-service unicast-peer

13.12 Conguring the Authority of Access to a LocalDevice’s NTP Service

This operation enables you to congure the authority of access to a local device’s NTPservice.

Prerequisite

The ACL applied already exists.

Background InformationBy default, access to a local device’s NTP service is not controlled. With this conguration,when there is an access request, the request will be matched with peer, server, synchronizationand query in descending order. The rst matched authority will be granted.n peer: authority for absolute accessn query: control and query authority.n server: authority for server’s access and queryn synchronization: authority for only the server’s accessn query: authority for query

Procedure

Step 1 Run the ntp-service access command to congure the authority of access to a local device’sNTP service.


—-End

Example

To congure the authority of access to a local device’s NTP service as "peer", and the ACLapplied as 2000, do as follows:huawei(config)#ntp-service access peer 2000huawei(config)#display current-configuration section post-system[MA5600V300R003: 3002]#[post-system]<post-system>ip route-static 0.0.0.0 0.0.0.0 10.71.55.1ip route-static 2.2.2.2 255.255.255.255 10.1.1.2ip route-static 2.2.2.2 255.255.255.255 20.1.1.2#snmp-agent local-engineid 000007DB0300E0FC590001snmp-agent sys-info version v1 v2csnmp-agent group v3 group authentication read-view internetsnmp-agent usm-user v3 user group authentication-mode md55B35F3BA2B65CA9D4A35CC868E5963CF privacy-mode des56B889728872508FA68D4C91595D092958snmp-agent#ntp-service authentication enablentp-service access peer 2000



Conguration Guide

ntp-service authentication-keyid 42 authentication-mode md5X&9#$^U(!:[Q=^Q‘MAF4<1!!ntp-service reliable authentication-keyid 42#ssh user op authentication-type passwordssh user user authentication-type passwordssh user test authentication-type password#tunnel-policy policy10#return

Related Operations

Table 13-12 lists the related operations for conguring the authority of access to a localdevice’s NTP service.

Table 13-12 Related operations for conguring the authority of access to a local device’sNTP service

To... Run the Command…Cancel the NTP accessauthority conguration

undo ntp-service access

Congure the maximumnumber of dynamic sessionsthat can be set up on a localdevice

ntp-service max-dynamic-sessions [number]

Cancel the conguration ofmaximum number of dynamicsessions that can be set up ona local device

undo ntp-service max-dynamic-sessions

13.13 Conguring an Interface for Transmitting/ReceivingNTP Packets

This operation enables you to congure an interface for transmitting or receiving NTP packets.

Prerequisite

The applied ACL has been existed.

Background Informationn Once an interface is specied through the ntp-service source-interface command, the IP

address of the interface is also the IP address of the packets.n If the ntp-service unicast-server or ntp-service unicast-peer command also species a

transmit interface, this transmit interface prevails.

Procedure

Run the ntp-service source-interface command to specify an interface for transmitting NTPpackets.

—-End

Example

To specify interface MEth 0 for transmitting NTP packets, do as follows:



huawei(config)#ntp-service source-interface meth 0

Related Operations

Table 13-13 lists the related operations for conguring an interface for transmitting orreceiving NTP packets.

Table 13-13 Related operations for conguring an interface for transmitting or receivingNTP packets

To... Run the Command… RemarksCancel the local transmit orreceive interface

undo ntp-servicesource-interface

-

Disable an interface fromreceiving NTP packets

ntp-service in-interface disable In correspondinginterface cong mode

Enable an interface to receiveNTP packets

undo ntp-service in-interfacedisable

In correspondinginterface cong mode


SmartAX MA5600 Multi-service Access ModuleConguration Guide 14 MAC Address Conguration

14 MAC Address Conguration


14.1 OverviewThis chapter describes MAC address and its application to the MA5600.14.2 Adding a Static MAC AddressThis operation enables you to add a static MAC address.14.3 Setting the Maximum MAC Address Number Learned by a Service PortThis operation enables you to set the maximum MAC address number learned by a serviceport. This helps to restrict the number of users connected to the port.14.4 Conguring the Aging Time of a Dynamic MAC AddressThis operation enables you to congure the aging time of a dynamic MAC address.14.5 Binding the MAC AddressThis operation enables you to bind a service port with a MAC address.14.6 Conguring MAC Address FilteringThis operation enables you to congure the function of MAC address ltering to lter thepackets with the source MAC address as the specied one.14.7 Conguring the MAC Address PoolThis operation enables you to congure the MAC address pool.


14 MAC Address CongurationSmartAX MA5600 Multi-service Access Module

Conguration Guide

14.1 OverviewThis chapter describes MAC address and its application to the MA5600.

Service DescriptionTo meet the needs of bearing multiple services, the MA5600 supports the MAC address listsand the MAC address pool.

The MAC address lists of the MA5600 is capable of learning new MAC addresses. If thesource MAC address of a packet does not exist in the list, the MA5600 can add the sourceMAC address and the port number of the received packet to the list as a new item.

Dynamic MAC addresses in the MAC address list also features the aging function. TheMA5600 deletes the associated address items of a device that has not sent any packet with thissource MAC address for a certain period.

In IP over ATM (IPoA) or PPP over ATM (PPPoA) access, the MA5600 needs to convert theIPoA/PPPoA packets into IP over Ethernet (IPoE)/PPP over Ethernet (PPPoE) packets. Inthis case, the MAC address pool of the MA5600 needs to allocate MAC addresses to users,and add ATM cells with the MAC address, that is, source MAC addresses (SMAC), so as toconvert ATM cells to Ethernet frames.

Service Specicationsn The MA5600 supports up to 1024 static MAC addresses.n The MA5600 supports up to 20 MAC address pools, but the total number of congurable

MAC addresses cannot exceed 1024.n The MA5600 supports up to 16384 MAC addresses including the dynamic MAC

addresses and static MAC addresses.

14.2 Adding a Static MAC AddressThis operation enables you to add a static MAC address.

Background Informationn When you add a static MAC address and there exists the same dynamic MAC address

in the specied service channel or the upstream port of a specied VLAN, the dynamicMAC address is overwritten by the static MAC address. You cannot add a static MACaddress if there exists a same static MAC address in the system.

n The congured static MAC address must be excluded from the MAC address pool. Youcan run the display mac-pool command to check it.

n An upstream port which is included in different VLANs can be congured with thesame static MAC address.

Procedure

Step 1 Run the mac-address static command to add a static MAC address.

Step 2 Run the display mac-address static command to query the congured static MAC address.

—-End

Example

To congure the MAC address of ADSL2+ port 0/2/0 (with VPI/VCI of 0/32) as1010-1010-1010, do as follows:



huawei(config)#mac-address static adsl0/2/0 vpi 0 vci 32 1010-1010-1010huawei(config)#display mac-address static---------------------------------------------------------------------------Type MAC MAC Type F/S /P VPI VCI FLOWTYPE FLOWPARA VLANID---------------------------------------------------------------------------adl 1010-1010-1010 static 0/2/0 0 32 - - 3---------------------------------------------------------------------------Total: 1Note : F--Frame, S--Slot, P--Port(xDSL Port,UP-Link Port,IMA GROUP or

VLAN ID etc.), the VPI is access-end VLAN ID in vdsl/eau portor PON ID in epon port

Related Operation

Table 14-1 lists the related operation for adding a static MAC address.

Table 14-1 Related operation for adding a static MAC address

To... Run the Command...Delete a static MAC address undo mac-address static

14.3 Setting the MaximumMAC Address Number Learnedby a Service Port

This operation enables you to set the maximum MAC address number learned by a serviceport. This helps to restrict the number of users connected to the port.

Background Informationn By default, the maximum MAC address number learned by a service port is 255.n The maximum MAC address number learned by a service port does not include the

congured static MAC addresses.

Procedure

Step 1 Run the mac-address max-mac-count command to set the maximum MAC address numberlearned by a service port.

Step 2 Run the display mac-address max-mac-count command to query the congured maximumMAC address number learned by the service port.

—-End

Examples

To set the maximum MAC address number learned by service port 0/2/0 with VLAN IDof 10 at the user side as 10, do as follows:huawei(config)#mac-address max-mac-count adsl 0/2/0 vpi 0 vci 32 user-vlan 10 10huawei(config)#display mac-address max-mac-count adsl 0/2/0vpi 0 vci 32 user-vlan 10Command:

display mac-address max-mac-count adsl 0/2/0 vpi 0 vci 32 user-vlan 10----------------------------------------------------------------------------Type F/S /P VPI VCI VLAN ID FLOWTYPE FLOWPARA Learnable MAC number----------------------------------------------------------------------------adl 0/2/0 0 32 10 user-vlan 10 10----------------------------------------------------------------------------Note : F--Frame, S--Slot, P--Port(xDSL Port,UP-Link Port,IMA GROUP or

VLAN ID etc.), the VPI is access-end VLAN ID in vdsl/eau portor PON ID in gpon port



Conguration Guide

14.4 Conguring the Aging Time of a Dynamic MACAddress

This operation enables you to congure the aging time of a dynamic MAC address.

Background Informationn To effectively realize the aging function of dynamic MAC addresses, you need to

congure the aging time. If a device has not transmitted any packet during the periodwhich is the one to double of the aging time, the MA5600 deletes the MAC addressof the device from the MAC address list.

n By default, the aging time is 300s. In general, the default value is recommended.n If the aging time is set too short, a dynamic MAC address is deleted very soon. As a

result, the data packets associated with the address are broadcast to all the ports in aVLAN due to the failure to nd the destination address, thus affecting the runningefciency of the MA5600.

n On the other hand, if the aging time is set too long, the MA5600 cannot update its MACaddress list according to the network change. Consequently, a large number of packetsare discarded due to failure to nd the destination address.

n The address aging function is only effective to dynamic MAC addresses.

Procedure

Step 1 Run themac-address timer command to congure the aging time of a dynamic MAC address.

Step 2 Run the display mac-address timer command to query the congured aging time of thedynamic MAC address.

—-End

Examples

To set the aging time of a dynamic MAC address as 500s, do as follows:huawei(config)#mac-address timer 500huawei(config)#display mac-address timerMAC aging time: 500s

To congure no aging time of a dynamic MAC address, do as follows:huawei(config)#mac-address timer no-aginghuawei(config)#display mac-address timerMAC aging time: No aging

14.5 Binding the MAC AddressThis operation enables you to bind a service port with a MAC address.

Background InformationThe MA5600 does not support binding a MAC address directly. By conguring a staticMAC address entry and setting the maximum address count to 0, you can bind a port with aMAC address.

Procedure

Step 1 Run the mac-address static command to congure the static MAC address for a port.



Step 2 Run the mac-address max-mac-count command to set the maximum address count for theservice port.

Step 3 Run the display mac-address max-mac-count command to query the maximum MACaddress number that can be learnt by service channels.

—-End

Example

Assume that you have congured the static MAC address of ADSL2+ port 0/2/0 as1010-1010-1010, and the maximum address count as 0. As a result, the port only allows thepass of packets with the source MAC address of 1010-1010-1010. That is, the port is boundwith the MAC address.huawei(config)#mac-address static adsl 0/2/0 vpi 0 vci 35 1010-1010-1010huawei(config)#mac-address max-mac-count adsl 0/2/0 vpi 0 vci 35 0huawei(config)#display mac-address max-mac-count adsl 0/2/0 vpi 0 vci 35----------------------------------------------------------------------------Type F/S /P VPI VCI VLAN ID FLOWTYPE FLOWPARA Learnable MAC number----------------------------------------------------------------------------adl 0/2/0 0 35 4000 - - 0--------------------------------------------------------------------------Total: 1Note : F--Frame, S--Slot, P--Port(xDSL Port,UP-Link Port,IMA GROUP or


14.6 Conguring MAC Address FilteringThis operation enables you to congure the function of MAC address ltering to lter thepackets with the source MAC address as the specied one.

Background InformationThe system supports up to four ltering MAC addresses.

Procedure

Step 1 Run the security mac-lter command to congure MAC address ltering.

Step 2 Run the display security mac-lter command to query the congured ltering MAC address.

—-End

Example

To congure the MAC address1000-0000-0000 as the ltering MAC address, do as follows:huawei(config)#security mac-filter 1000-0000-0000huawei(config)#display security mac-filter--------- Mac Address ---------

1000-0000-0000---- 1 mac address found ----

Related Operation

Table 14-2 lists the related operation for conguring MAC address ltering.



Conguration Guide

Table 14-2 Related operation for conguring MAC address ltering

To… Run the Command…Delete the ltering MAC address undo security mac-lter

14.7 Conguring the MAC Address PoolThis operation enables you to congure the MAC address pool.

Background Informationn The system supports up to 20 MAC address pools and totally 1024 MAC addresses.n The congured static MAC address must be excluded from the MAC address pool to be

congured. You can run the display mac-pool static command to check it.n A MAC address pool cannot contain the MAC address of the control board.n When adding a MAC address pool, you do not need to specify the index and range of the

MAC address pool. By default, the range is 256.You need to congure the MAC address pool in one of the following two cases:n The user modem adopts the IPoA access mode, and the MA5600 adopts the IPoA or

Auto encapsulation mode.n The user modem adopts the PPPoA access mode, and the MA5600 adopts the PPPoA or

Auto encapsulation mode.

Procedure

Step 1 Run the mac-pool command to congure the MAC address pool.

Step 2 Run the display mac-pool command to query the added MAC address pool.

—-End

Example

To add a MAC address pool with the index of 0, the start MAC address of 1000-0000-0000,and the address count of 800, do as follows:huawei(config)#mac-pool 0 1000-0000-0000 800huawei(config)#display mac-pool allCurrent allocation method of MAC addresses: manualUser-configured MAC pools :----------------------------------------------------------------Index StartMAC EndMAC Scope UsedNum----------------------------------------------------------------

0 1000-0000-0000 1000-0000-031f 800 0----------------------------------------------------------------MAC pools : 1, MAC addresses :800, Addresses in use : 0


SmartAX MA5600 Multi-service Access ModuleConguration Guide 15 TCP/IP Connection Conguration

15 TCP/IP Connection Conguration

About This Chapter15.1 OverviewThis chapter describes the Transfer Control Protocol/Internet Protocol (TCP/IP) connectionattributes and the application to the MA5600.15.2 Basic ConceptsThis section describes concepts of synwait timer and nwait timer.15.3 Conguring the Synwait TimerThis operation enables you to congure the synwait timer.15.4 Conguring the Finwait TimerThis operation enables you to congure the nwait timer.15.5 Conguring the socket BufferThis operation enables you to congure the size of the socket transmit & receive buffer.15.6 Enabling the TCP DebuggingThis operation enables the TCP debugging.15.7 Enabling the IP Packets DebuggingThis operation enables the IP packets debugging.


15 TCP/IP Connection CongurationSmartAX MA5600 Multi-service Access Module

Conguration Guide

15.1 OverviewThis chapter describes the Transfer Control Protocol/Internet Protocol (TCP/IP) connectionattributes and the application to the MA5600.

Service DescriptionThe MA5600 supports TCP/IP.

TCP connection conguration involves:n Conguring the synwait timern Conguring the nwait timern Conguring the socket buffern Enabling the TCP debuggingIP connection involves enabling the IP packets debugging.

15.2 Basic ConceptsThis section describes concepts of synwait timer and nwait timer.

Synwait TimerWhen the synchronization (SYN) packet is sent, TCP enables the synwait timer. If noacknowledgement (ACK) packet is received before time specied by the synwait timer, theTCP connection will be terminated.

Finwait TimerWhen the TCP connection state changes from FIN_WAIT_1 to FIN_WAIT_2, the nwaittimer is enabled.

If no FIN packet is received before the time specied by the nwait timer, the TCP connectionwill be dropped.

15.3 Conguring the Synwait TimerThis operation enables you to congure the synwait timer.

Background InformationThe timeout time of synwait timer ranges from 2s to 600s. The default is 75s.

Procedure

Run the tcp timer syn-timeout command to congure the synwait timer.

—-End

Example

To set the TCP timer time as 100s, do as follows:huawei(config)#tcp timer syn-timeout 100



Related Operation

Table 15-1 lists the related operation for conguring the synwait timer.

Table 15-1 Related operation for conguring the synwait timer

To... Run the Command...Restore the default setting of thesyswait timer

undo tcp timer syn-timeout

15.4 Conguring the Finwait TimerThis operation enables you to congure the nwait timer.

Background InformationThe timeout time of nwait timer ranges from 76s to 3600s. The default is 675s.

Procedure

Run the tcp timer n-timeout command to congure the nwait timer.

—-End

Example

To set the time of nwait timer as 200s, do as follows:huawei(config)#tcp timer fin-timeout 200

Related Operation

Table 15-2 lists the related operation for conguring the nwait timer.

Table 15-2 Related operation for conguring the nwait timer

To... Run the Command...Restore the default setting of nwaittimer

undo tcp timer n-timeout

15.5 Conguring the socket BufferThis operation enables you to congure the size of the socket transmit & receive buffer.

Background InformationThe buffer size ranges from 1 KB to 32 KB. The default is 4 KB.

Procedure

Run the tcp window command to set the size of the socket transmit & receive buffer.

—-End


15 TCP/IP Connection CongurationSmartAX MA5600 Multi-service Access Module

Conguration Guide

Example

To set the size of the socket transmit & receive buffer as 12 KB, do as follows:huawei(config)#tcp window 12

Related Operation

Table 15-3 lists the related operation for conguring the socket buffer.

Table 15-3 Related operation for conguring the socket buffer

To... Run the Command...Restore the default setting of the socketbuffer

undo tcp window

15.6 Enabling the TCP DebuggingThis operation enables the TCP debugging.

Background InformationAfter the terminal monitor and terminal debugging function are enabled, the relatedinformation will be displayed on the terminal.

By default, the terminal monitor and terminal debugging functions are disabled.

Procedure

Run the debugging tcp packet command to enable the TCP debugging.

—-End

Example

To enable the TCP debugging, do as follows:huawei(config)#debugging tcp packet

Related Operations

Table 15-4 lists the related operations for enabling the IP packets debugging.

Table 15-4 Related operations for enabling the IP packets debugging

To... Run the Command...Disable the TCP debugging undo debugging tcp {packet|event|md5}Enable/Disable the switch for displayingthe debugging/log/alarm information at theterminal

(undo) terminal monitor

Enable/Disable output of the debugginginformation on the terminal

(undo) terminal debugging

15.7 Enabling the IP Packets DebuggingThis operation enables the IP packets debugging.



Background InformationAfter the terminal monitor and terminal debugging function are enabled, the relatedinformation will be displayed on the terminal.

By default, the terminal monitor and terminal debugging functions are disabled.

Procedure

Run the debugging ip packet command to enable the IP packets debugging.

—-End

Example

To enable the IP packets debugging, do as follows:huawei(config)#debugging ip packet*0.24271340 MA5600-42 IP/8/debug_case:Receiving, interface = vlanif3000, version = 4, headlen = 20, tos = 192,pktlen = 70, pktid = 35614, offset = 0, ttl = 1, protocol = 17,checksum = 17131, s = 10.11.0.209, d = 224.0.0.2prompt: Receiving IP packet

Related Operations

Table 15-5 lists the related operations for enabling the IP packets debugging.

Table 15-5 Related operations for enabling the IP packets debugging

To... Run the Command...Disable the IP packets debugging undo debugging ip packetEnable/Disable the ICMP debugging (undo) debugging ip icmpQuery the information about the IP layerinterfaces

display ip interface

Enable/Disable the switch for displayingthe debugging/log/alarm information at theterminal

(undo) terminal monitor

Enable/Disable output of the debugginginformation on the terminal

(undo) terminal debugging


SmartAX MA5600 Multi-service Access ModuleConguration Guide 16 ACL & QoS Conguration

16 ACL & QoS Conguration


16.1 OverviewThis chapter describes access control list (ACL) and Quality of Service (QoS), and theirapplications to the MA5600.16.2 Conguring the Basic ACLThis operation enables you to lter data packets that meet the source IP address conditionswithin a certain period of time.16.3 Conguring the Advanced ACLThis operation enables you to lter data packets that meet the source IP address and DSCPconditions within a certain period of time.16.4 Conguring the Layer 2 ACLThis operation enables you to lter data packets that meet the source MAC address, destinationMAC address, and VLAN ID conditions within a certain period of time.16.5 Conguration Example of the Customized ACLThis operation enables you to lter data packets that meet the customized conditions within acertain period of time.16.6 Creating an ACLThis operation enables you to create a basic ACL, an advanced ACL, a layer 2 ACL ora customized ACL.16.7 Conguring a Time RangeThis operation enables you to congure a time range, so as to specify the valid time of anACL rule.16.8 Setting the StepThis operation enables you to modify the step of ACL rules when they are automaticallynumbered.16.9 Creating a Basic ACL RuleThis operation enables you to congure a basic ACL rule so that the device can lter datapackets according to the source IP address.16.10 Creating an Advanced ACL RuleThis operation enables you to congure an advanced ACL rule to lter data packets accordingto such information as the source IP address, destination IP address, and IP bearer protocol type.16.11 Creating a Layer 2 ACL RuleThis operation enables you to congure a layer 2 ACL rule to lter data packets according tothe link layer information such as the source MAC address, source VLAN ID, layer 2 protocoltype, layer 2 forward port, and destination MAC address.


16 ACL & QoS CongurationSmartAX MA5600 Multi-service Access Module

Conguration Guide

16.12 Creating a Customized ACL RuleThis operation enables you to congure a customized ACL rule to lter data packets accordingto any eight character strings (up to four bytes in a character string) in the rst 80 bytes of thelayer 2 data frame.16.13 Activating an ACLThis operation enables you to activate a congured ACL to validate it.16.14 Conguring the Trafc EntryThis operation enables you to congure the trafc entry. You can add and delete trafc entriesto achieve trafc management. Trafc management monitors and controls the service trafcthrough a series of trafc entries.16.15 Enabling Trafc LimitThis operation enables trafc limitation of packets matching an ACL rule on a port. Trafclimitation enables better use of network resources and better services to users by limitingthe trafc of specied users on specied ports, so that services are provided according tonetwork conditions.16.16 Adding Priority Tag to PacketsThis operation enables you to add priority tag to TOS, DSCP, and 802.1p packets matching anACL on a port.16.17 Enabling Trafc MirroringThis operation enables trafc mirroring. Mirroring is to duplicate data packets that match anACL rule to a monitor port for fault locating and troubleshooting.16.18 Enabling Trafc RedirectionThis operation enables redirection of packets matching an ACL on a port.16.19 Enabling Trafc StatisticsThis operation enables trafc statistics for packets matching an ACL on a port.16.20 Enabling Line Rate Limitation on a PortThis operation enables the line rate limitation on a port.16.21 Conguring Queue SchedulingThis operation enables you to congure queue scheduling to solve the problem of packetstreams competing for resources in the case of congestion.



16.1 OverviewThis chapter describes access control list (ACL) and Quality of Service (QoS), and theirapplications to the MA5600.

Service DescriptionAn ACL carries out the packet ltering function. You can congure some matching rules onnetwork devices to lter unwanted data packets. With the matching rules, network devicescan permit or deny the matching data packets to pass. The classied trafc is the prerequisitefor carrying out QoS.

By setting different parameters of the QoS, such as service availability, throughput, time delay,jitter, and loss rate, you can provide users with high quality services. QoS only applies tothe packets ltered by the ACL.

Service SpecicationsThe MA5600 can ensure high QoS for user services based on the trafc rule classication,measurement and scheduling policies. The MA5600 supports the following types of ACLs:n Basic ACLn Advanced ACLn Layer 2 ACLn User dened ACLThe MA5600 performs ltering, trafc mirroring, trafc limitation, priority queuing,scheduling, redirection, and trafc measurement on packets ltered by ACL rules.

If ACL rules are delivered to user port of the MA5600, such as ADSL2+ port 0/1/0, then allADSL2+ ports in slot 1 of frame 0 lter packets; If ACL rules are delivered to an Ethernetport, then only the Ether port lters packets.

For the basic, advanced or layer 2 ACL, the mask of the IP/MAC address is the inverse mask.For the customized ACL, the mask of the IP/MAC address is the positive mask.

ACL TypesTable 16-1 describes the four types of ACLs.

Table 16-1 ACL types

ACL Type Numeral Range FeatureBasic ACL 2000–2999 Allows rule denition

according to L3 source IPaddress.

Advanced ACL 3000–3999 Allows rule denitionaccording to source address,destination address, IP bearerprotocol type, TCP sourceport, TCP destination port,ICMP protocol type andICMP code.Compared with the basicACL, the denition of theadvanced ACL is moreaccurate, richer and moreexible.



Conguration Guide

ACL Type Numeral Range FeatureLayer 2 ACL 4000–4999 Allows rule denition

according to source MACaddress, source VLAN ID,layer 2 protocol type, anddestination MAC address.

User dened ACL 5000–5999 Allows rule denitionaccording to any 32 bytes ofthe rst 80 bytes in a layer 2frame.

Difference Between Matching Sequence and Conguration SequenceACL rule IDs are assigned in the same sequence as that an ACL is dened.

By default, the ID of the rst ACL rule is 5, the ID of the second rule is 10, the ID of the thirdrule is 15, and so on. This is called conguration sequence.

If a trafc stream reaches a device and matches with two or more ACL rules, which rule shouldbe followed to handle the trafc. This is determined by the matching sequence.

You can match the trafc with one group of ACL rules or with different groups of ACL rules.

Matching with One Group of ACL Rulesn If all rules in an ACL are activated at the same time, a rule dened later has a higher

priority than those dened earlier.n If rules in an ACL are activated one by one, a rule activated later has higher priority

than those activated earlier.Assume that ACL rule A denies all IP packets, and ACL rule B permits packets to a specic IPaddress. Active the two rules at the same time. In this case, the two ACL rules conict whenthey are used to process packets to such specic IP address. Since ACL rule B is conguredlater, it has higher priority over ACL rule A, so ACL rule B is chosen as the rule to handle thepackets to such a specic address.

Matching with Different Groups of ACL RulesWhen matching the packets using different groups of ACL rules, the QoS action that isactivated later has a higher priority than the actions activated earlier.

Assume that ACL group A denies all IP packets, and ACL group B permits packets to aspecic IP address, QoS action A is based on ACL A, while QoS action B is based on ACL B.Activate QoS action A rst on a port, and then activate QoS action B on the same port. Afterthat, all packets are denied except the packets carrying the specic IP address. This is becausethat QoS action B is activated later than QoS action A.

If QoS action B is activated rst on the port, and QoS action A is activated later, all the IPpackets are denied.

Default Matching SequenceIf a trafc stream does not match with any rule, the stream is processed according to a defaultrule.

The default rule is to forward all the un-matched packets.

You can dene a rule such as permit any or deny any for all ACLs so that any packet has arule to match.



Recommendations on Conguring ACL RulesTo use ACLs more efciently, you can:n Activate QoS actions consecutively if the QoS actions apply to the same ACL rule.

To enable trafc statistics and trafc limitation on packets that match with rule 10 of ACL2001, activate these two actions consecutively. The reason is that all QoS actions basedon the same rule share the same hardware resource.

n Activate QoS actions consecutively if the QoS actions have the same type of parametersbut different parameter values. This is because ACLs with the same parameters butdifferent values share the same hardware resource.

Assume that rule 10 of ACL 2000 denies packets from IP address 1.1.1.1, while rule 15 ofACL 2000 denies packets from IP address 2.2.2.2.

n The same type of parameter is used in conguring the two rules, only parameter valuesdiffer. So the two rules use the same hardware resource, and have the same priority ifthey are activated consecutively.

n When conguring an ACL group, comply with the principle that all ACLs within thegroup have the same parameters but different values, as ACLs with the same parametersbut different values can share the same hardware resources. If a QoS based on an ACLgroup is issued, the ACLs within the group will have the same priority. To offer differentpriorities to rules of different ACL groups, comply with the above mentioned rules.

16.2 Conguring the Basic ACLThis operation enables you to lter data packets that meet the source IP address conditionswithin a certain period of time.

Data PlanTable 16-2 lists the data plan for conguring the basic ACL.

Table 16-2 Data plan for conguring the basic ACL

Item Data RemarksACL number 2000 -

Source IPaddress

2.2.2.2 Data packets from 2.2.2.2 are permitted topass. Wildcard: 0.0.0.0 (negative mask).

ACL step Default value -

Time range From 00:00 to 12:00 everyFriday

-

Port 0/7/0 Apply ACL 2000 on the port.

Conguration FlowchartFigure 16-1 shows the owchart for conguring a basic ACL.



Conguration Guide

Figure 16-1 Flowchart for conguring a basic ACL

Procedure

Step 1 Congure a time range.huawei(config)#time-range time1 00:00 to 12:00 fri

Step 2 Create an ACL.huawei(config)#acl 2000

Step 3 Congure the basic ACL rule.huawei(config-acl-basic-2000)#rule deny time-range time1huawei(config-acl-basic-2000)#rule permit source 2.2.2.2 0.0.0.0 time-range time1

Step 4 Activate the ACL on port 0/7/0.huawei(config-acl-basic-2000)#quithuawei(config)#packet-filter inbound ip-group 2000 port 0/7/0


—-End

Result

According to the ACL rule, from 00:00 to 12:00 every Friday, the port 0/7/0 on the MA5600can receive the data packets from IP address 2.2.2.2, and discard other data packets.

16.3 Conguring the Advanced ACLThis operation enables you to lter data packets that meet the source IP address and DSCPconditions within a certain period of time.

Data PlanTable 16-3 lists the data plan for conguring the advanced ACL.



Table 16-3 Data plan for conguring the advanced ACL


Source IPaddress

2.2.2.2 Wildcard: 0.0.0.255

DestinationIP address

3.3.3.3 Wildcard mask: 0.0.0.0.

DSCP 23 -



-


Conguration FlowchartFigure 16-2 shows the owchart for conguring an advanced ACL.

Figure 16-2 Flowchart for conguring an advanced ACL.

Procedure



Step 3 Congure the advanced ACL rule.huawei(config-acl-adv-3000)#rule deny time-range time1huawei(config-acl-adv-3000)#rule 3 permit ip source 2.2.2.2 0.0.0.255destination 3.3.3.3 0 dscp 23 time-range time1



Conguration Guide

Step 4 Activate the ACL on port 0/7/0.huawei(config-acl-adv-3000)#quithuawei(config)#packet-filter inbound ip-group 3000 port 0/7/0

Step 5 Save the data.huawei(config)#quithuawei#save

—-End

Result

According to the ACL rule, from 00:00 to 12:00 every Friday, port 0/7/0 on the MA5600 canreceive the data packets from 2.2.2.2 to 3.3.3.3 with DSCP of 23. Other packets are discarded.

16.4 Conguring the Layer 2 ACLThis operation enables you to lter data packets that meet the source MAC address, destinationMAC address, and VLAN ID conditions within a certain period of time.

Data PlanTable 16-4 lists the data plan for conguring the layer 2 ACL.

Table 16-4 Data plan for conguring the layer 2 ACL


Type 0x8863 The type of an Ethernet bearer protocol inhexadecimal digits.

COS 1 802.1p prioritySource VLAN ID 12 -

Source MACaddress

2222-2222-2222 Wildcard: 0000-0000-0000

Destination MACaddress

00e0-fc11-4141 Wildcard: 0000-0000-0000


Time range From 00:00 to 12:00every Friday

-


Background InformationIf you omit "0x" when entering the type of an Ethernet bearer protocol, the input shall beconsidered as a decimal number. The decimal number you input is converted to hexadecimalones for the protocol type.

Conguration FlowchartFigure 16-3 shows the owchart for conguring a layer 2 ACL.



Figure 16-3 Flowchart for conguring a layer 2 ACL

Procedure



Step 3 Congure the layer 2 ACL rule.huawei(config-acl-link-4000)#rule deny time-range time1huawei(config-acl-link-4000)#rule 1 permit type 0x8863 cos 1source 12 2222-2222-2222 0000-0000-0000 destination 00e0-fc11-41410000-0000-0000 time-range time1

Step 4 Activate the ACL on port 0/7/0.huawei(config-acl-link-4000)#quithuawei(config)#packet-filter inbound link-group 4000 port 0/7/0


—-End

Result

According to the ACL rule, from 00:00 to 12:00 every Friday, port 0/7/0 on the MA5600 canreceive the Ethernet frames with the source MAC address of 2222-2222-2222, destinationMAC address of 00e0-fc11-4141, VLAN ID of 12, and COS of 1. Other packets are discarded.

16.5 Conguration Example of the Customized ACLThis operation enables you to lter data packets that meet the customized conditions within acertain period of time.



Conguration Guide

Background InformationThe customized ACL can only be used to lter the data frame that is in the format of ETHII + VLAN tag.

Data PlanTable 16-5 shows the data plan for conguring the customized ACL.

Table 16-5 Data plan for conguring the customized ACL


Matching byte 06 Wildcard: FFOffset 27 -

ACL step default -


-

Port 0/7/0 The ACL 5000 applies to this port.

Conguration FlowchartFigure 16-4 shows the owchart for conguring a customized ACL.

Figure 16-4 Flowchart for conguring a customized ACL

Procedure





Step 3 Congure the customized ACL rule.huawei(config-acl-user-5000)#rule deny time-range time1huawei(config-acl-user-5000)#rule permit 06 ff 27 time-range time1

Step 4 Activate the ACL on port 0/7/0.huawei(config-acl-user-5000)#quithuawei(config)#packet-filter inbound user-group 5000 port 0/7/0


—-End

Result

According to the ACL rule, from 00:00 to 12:00 every Friday, port 0/7/0 on the MA5600 canreceive only TCP packets. Other data packets are discarded.

16.6 Creating an ACLThis operation enables you to create a basic ACL, an advanced ACL, a layer 2 ACL ora customized ACL.

Background InformationThe MA5600 supports up to 64 ACLs. Each ACL can be congured with up to 64 rules.

Table 16-6 lists the ACL number range.

Table 16-6 ACL number range

ACL type Numeral rangeBasic ACL (for IP packets) 2000-2999

Advanced ACL (IP packets) 3000-3999

Layer 2 ACL (for link layer packets) 4000-4999

Customized ACL 5000-5999

Procedure

Step 1 Run the acl command to create an ACL.

Step 2 Run the quit command to quit from the ACL cong mode.

Step 3 Run the display acl command to query the conguration of the ACL.

—-End

Example

To create an advanced ACL with ID of 3000, do as follows:huawei(config)#acl 3000huawei(config-acl-adv-3000)#quithuawei(config)#display acl 3000Advanced ACL 3000, 0 ruleAcl’s step is 5

Related Operations

Table 16-7 lists the related operations for creating an ACL.



Conguration Guide

Table 16-7 Related operations for creating an ACL

To… Run the Command… RemarksDelete an ACL undo acl If an ACL and its rules are activated, or if

they are quoted by other QoS functions,the ACL and the rules cannot be deleted.

Congure thedescription for anACL

description The description covers the functions andfeatures of the ACL.

Delete thedescription for anACL

undo description -

Congure the stepfor an ACL

step Step means the difference between twoneighboring rules in a group of ACLrules. By default, it is 5.

Restore the defaultstep

undo step By default, it is 5.

16.7 Conguring a Time RangeThis operation enables you to congure a time range, so as to specify the valid time of anACL rule.

Background InformationACL time ranges include relative time and absolute time.n Relative time refers to periodical intervals, such as the period from 8:30 in the morning

to 18:30 in the afternoon every Monday.n Absolute time refers to intervals from a specic moment to another specic moment,

such as the period from 12:00 in the noon on June 8, 2006 to 18:00 in the afternoonon August 8, 2006.

The principle for a time range to take effect is as follows:n When a time range includes only absolute time or relative time, the union set of all

intervals in the time range takes effect.n When a range time includes both absolute time and relative time, the intersection set of

the union sets of both relative time and absolute time takes effect.Note that:n Conguring a time range is optional when you congure an ACL.n A time range that is used cannot be deleted.

Procedure

Step 1 Run the time-range command to congure a time range.

Step 2 Run the display time-range command and you can nd that the time range is congured.

—-End

Example

To create a time range named "last24hrs" that is valid for the whole day of 2006-03-24, doas follows:huawei(config)#time-range last24hrs from 00:00 2006/03/24 to 24:00 2006/03/24huawei(config)#display time-range all



Current time is: 2006-03-01 10:05:07+08:00 WednesdayTime-range : last24hrs ( Inactive )from 2006-03-24 00:00 to 2006-03-24 24:00

16.8 Setting the StepThis operation enables you to modify the step of ACL rules when they are automaticallynumbered.

Background Informationn By default, the step is 5.n If a step changes, the rules in an ACL shall be re-numbered.

For example, presume that the rules of an ACL are numbered as 5, 10, and 15. If you setthe step to 2 using the command step 2, the rules will be numbered as 2, 4 and 6.

n To restore the default step value and renumber the ACL rules, run the undo step command.

Assume that ACL 1 contains rules 1, 3 and 5 with a step of 2. After you run the undo stepcommand, the numbers of the ACL rules are 5, 10 and 15, with the default step of 5.

Procedure

Step 1 Run the step command to modify the step of ACL rule.

Step 2 Run the display acl command to query the set step.

—-End

Example

To set the step to 10, do as follows:huawei(config-acl-basic-2000)#step 10huawei(config)#display acl 2000Basic ACL 2000, 1 ruleAcl’s step is 10rule 10 permit (0 times matched)

Related Operation

Table 16-8 lists the related operation for setting the step.

Table 16-8 Related operation for setting the step

To… Run the Command… RemarksRestore the defaultstep value

undo step By default, it is 5.

16.9 Creating a Basic ACL RuleThis operation enables you to congure a basic ACL rule so that the device can lter datapackets according to the source IP address.

Prerequisite

The basic ACL to which the rule is added already exists.



Conguration Guide

Background InformationUp to 64 rules can be created for an ACL.

You can change the conguration of an ACL rule by specifying the number of the rule. Thismethod does not change the untouched part of the rule.

Procedure

Step 1 Run the acl command to create a basic ACL rule.

Step 2 Run the rule command to congure the basic ACL rule.

Step 3 Run the quit command to quit from the basic ACL cong mode.

Step 4 Run the display acl command to query the information of the basic ACL rule.

—-End

Example

To dene a basic ACL rule that enables data packets from 2.2.2.2 to pass, do as follows:huawei(config)#acl 2000huawei(config-acl-basic-2000)#rule permit source 2.2.2.2 0huawei(config-acl-basic-2000)#quithuawei(config)#display acl 2000Basic ACL 2000, 1 ruleAcl’s step is 5rule 5 permit source 2.2.2.2 0 (0 times matched)

Related Operation

Table 16-9 lists the related operation for creating a basic ACL rule.

Table 16-9 Related operation for creating a basic ACL rule

To… Run the Command…Delete an ACL rule undo rule

16.10 Creating an Advanced ACL RuleThis operation enables you to congure an advanced ACL rule to lter data packets accordingto such information as the source IP address, destination IP address, and IP bearer protocol type.

Prerequisite

The advanced ACL to which the rule is added already exists.



Procedure

Step 1 Run the acl command to create an advanced ACL rule.

Step 2 Run the rule command to congure the advanced ACL rule.

Step 3 Run the quit command to quit from the advanced ACL cong mode.



Step 4 Run the display acl command to query the information of the ACL rule.

—-End

Example

To dene an advanced ACL rule that enables data packets from 2.2.2.2 to 3.3.3.3 with DSCPof 23 to pass, and the valid time as the predened time 1, do as follows:huawei(config)#acl 3000huawei(config-acl-adv-3000)#rule 3 permit ip source 2.2.2.2 0destination 3.3.3.3 0 dscp 23huawei(config-acl-adv-3000)#quithuawei(config)#display acl 3000Advanced ACL 3000, 1 ruleAcl’s step is 5rule 3 permit ip source 2.2.2.2 0 destination 3.3.3.3 0 dscp23 (0 times matched)

Related Operation

Table 16-10 lists the related operation for creating an advanced ACL rule.

Table 16-10 Related operation for creating an advanced ACL rule


16.11 Creating a Layer 2 ACL RuleThis operation enables you to congure a layer 2 ACL rule to lter data packets according tothe link layer information such as the source MAC address, source VLAN ID, layer 2 protocoltype, layer 2 forward port, and destination MAC address.

Prerequisite

The layer 2 ACL to which the rule is added already exists.



Procedure

Step 1 Run the acl command to create a layer 2 ACL rule.

Step 2 Run the rule command to congure the layer 2ACL rule.

Step 3 Run the quit command to quit from the layer 2 ACL cong mode.

Step 4 Run the display acl command to query the information of the layer 2 ACL rule.

—-End

Example

To dene a layer 2 ACL rule that enables data packets with type of 0x8863, COS of 1, sourceMAC address of 2222-2222-2222 and destination MAC address of 3333-3333-3333 to pass,do as follows:



Conguration Guide

huawei(config)#acl 4000huawei(config-acl-link-4000)#rule 1 permit type 0x8863 cos 1 source 122222-2222-2222 0000-0000-0000 destination3333-3333-3333 0000-0000-0000huawei(config-acl-link-4000)#quithuawei(config)#display acl 4000Basic ACL 4000, 1 ruleAcl’s step is 5rule 1 permit type 0x8863 cos background source 2222-2222-2222 0000-0000-0000

12 destination 3333-3333-3333 0000-0000-0000

Related Operation

Table 16-11 lists the related operation for creating a layer 2 ACL rule.

Table 16-11 Related operation for creating a layer 2 ACL rule


16.12 Creating a Customized ACL RuleThis operation enables you to congure a customized ACL rule to lter data packets accordingto any eight character strings (up to four bytes in a character string) in the rst 80 bytes of thelayer 2 data frame.

Prerequisite

The customized ACL to which the rule is added already exists.



Figure 16-5 shows the rst 64 bytes of a layer 2 frame. Every letter represents onehexadecimal, and every two letters represent one byte.

Figure 16-5 First 64 bytes of a layer 2 frame

Table 16-12 lists the meaning of the letters and their offset values.

Table 16-12 Description of letters and their offset values

Letter Meaning Offset Letter Meaning OffsetA Destination

MAC address0 L IP check sum 28

B Source MACaddress

6 M Source IPaddress

30



Letter Meaning Offset Letter Meaning OffsetC VLAN tag eld 12 N Destination IP

address34

D Protocol type 16 O TCP source port 38E IP version 18 P TCP destination

port40

F TOS eld 19 Q Serial number 42G IP packet

length20 R Acknowledge-

ment46

H ID number 22 S IP header lengthand reserved bit

50

I Flags eld 24 T Reserved bit andags bit

51

J TTL eld 26 U Window Sizeeld

52

K Protocolnumber (6refers to TCPand 17 refers toUDP)

27 V Other 54

In Table 16-12, the offset of their eld is their offset in the 802.3 data frame of Sub NetworkAccess Protocol (SNAP) + tag. For the customized ACL, the user can use the rule mask andoffset parameters to extract any byte from the rst 80 bytes of data frame, and then comparethe extracted byte with customized rules to lter matched data frames for processing.

Procedure

Step 1 Run the acl command to create a customized ACL rule.

Step 2 Run the rule command to congure the customized ACL rule.

—-End

Example

To lter all TCP packets, do as follows:huawei(config)#acl 5000huawei(config-acl-adv-5000)#rule permit 06 ff 27huawei(config-acl-adv-5000)#quithuawei(config)#display acl 5000User ACL 5000, 1 ruleAcl’s step is 5rule 5 permit 06 ff 27

Related Operation

Table 16-13 lists the related operation for creating a customized ACL rule.

Table 16-13 Related operation for creating a used dened ACL rule




Conguration Guide

16.13 Activating an ACLThis operation enables you to activate a congured ACL to validate it.

Prerequisite

The ACL to be activated has been congured, and the port for which the ACL is to be activatedis working in the normal state.

Procedure

Step 1 Run the packet-lter command to activate an ACL.

Step 2 Run the display packet-lter port command and you can nd that the ACL is activated.

—-End

Example

To activate ACL 3000 of port 0/2/0, do as follows:huawei(config)#packet-filter inbound ip-group 3000 port 0/2/0huawei(config)#display packet-filter port 0/2/0port0/2/0Inbound:inbound Acl 3000 rule 1 port 0/2/0 running

Related Operation

Table 16-14 lists the related operation for activating the ACL of a port.

Table 16-14 Related operation for activating the ACL of a port

To... Run the Command...Deactivate an ACL undo packet-lter

16.14 Conguring the Trafc EntryThis operation enables you to congure the trafc entry. You can add and delete trafc entriesto achieve trafc management. Trafc management monitors and controls the service trafcthrough a series of trafc entries.

Background InformationThe MA5600 supports ATM and IP trafc management. The trafc entries are the core oftrafc management.

ATM-based Trafc Management

The MA5600 provides the ATM service by means of permanent virtual connection (PVC).When setting up a PVC, select the trafc prole index, which corresponds to the trafc table.

An ATM trafc table contains the following items:n Trafc index

It is the trafc prole index selected when the PVC is set up.n Service type

The MA5600 supports four service types: CBR, rt-VBR, nrt-VBR and UBR.n Trafc type



The MA5600 supports the trafc shaping of the CBR and rt-VBR service. To enhancethe processing efciency, 32 trafc classes are provided for CLP01PCR parameter ofCBR service; Similarly, 16 trafc classes are provided to CPL01SCR and CLP0SCRparameters of rt-VBR service.

n Trafc parameter

The trafc parameters include: PCR, SCR and CDVT.IP-based Trafc Management

The MA5600 provides the IP service by means of VLAN. When adding the virtual port to aVLAN, select the trafc prole index, which corresponds to the trafc table.

An IP trafc table contains the following items:n Trafc index

It is the trafc prole index selected when the virtual port is added to the VLAN.n CAR

Committed access rate means the maximum access rate.n Priority and priority policy

It is the policy for selecting the trafc priority and packet priority.

Procedure

Step 1 Run the trafc table command to congure a trafc entry.

Step 2 Run the display trafc table command to query a trafc entry.

—-End

Example

Assume that:n Service type: cbrn Trafc class: noClpNoScrn Clp01Pcr: 160n 802.1p priority: 6n Priority policy: tag-In-PackageTo add an ATM trafc entry, do as follows:

Query the trafc class of the bit rate table.huawei(config)#traffic table{ index<K>|ip<K>|atm<K> }:atm{ srvcategory<K> }:srvcategory{ cbr<K>|ubr<K>|rt-vbr<K>|nrt-vbr<K> }:cbr{ tdtype<K> }:tdtype{ NoClpNoScr<K>|ClpNoTaggingNoScr<K>|ClpTaggingNoScr<K>|ClpTransparentNoScr<K>|NoClpNoScrCdvt<K> }:noClpNoScr{ Clp01Pcr<K> }:clp01Pcr{ pcrval<1,599039> }:160{ <cr>|priority<K> }:priority{ prival<0,7> }:6{ <cr>|priority-policy<K> }:priority-policy{ priority-policy<E><Pvc-Setting,Tag-In-Package> }:tag-In-Package

Command:traffic table atm srvcategory cbr tdtype noClpNoScr clp01Pcr 160

priority 6 priority-policy tag-In-PackageCreate traffic descriptor record successfully-----------------------------------------------------------------------------TD Index : 0Priority : 6Priority policy : tag-priCAR : 128 kbps



Conguration Guide

TD Type : NoClpNoScrService category : cbrReferenced Status : not usedEnPPDISC : offEnEPDISC : offClp01Pcr : 160 kbps--------------------------------------------------------------------------

Query the trafc entry.huawei(config)#display traffic table from-index{ row-index<0,511> }:0{ <cr>|to-index<K> }:

Command:display traffic table from-index 0

Traffic parameters for IP service:-----------------------------------------------------------------------------TID CAR(kbps) Priority Pri-Policy-----------------------------------------------------------------------------0 128 6 tag-pri-----------------------------------------------------------------------------

Traffic parameters for ATM service:-----------------------------------------------------------------------------TID Service Traf CLP01PCR CLP0PCR CLP01SCR CLP0SCR MBS CDVT PPD/EPD/SHAPE

Type Type kbps kbps kbps kbps cells 1/10us-----------------------------------------------------------------------------0 cbr 2 160 -- -- -- -- -- off/off/-------------------------------------------------------------------------------Total Num : 1Traffic type definition:1:NoTrafficDescriptor 2:NoClpNoScr 3:ClpNoTaggingNoScr4:ClpTaggingNoScr 5:NoClpScr 6:ClpNoTaggingScr7:ClpTaggingScr 8:ClpNoTaggingMcr 9:ClpTransparentNoScr10:ClpTransparentScr 11:NoClpTaggingNoScr 12:NoClpNoScrCdvt13:NoClpScrCdvt 14:ClpNoTaggingScrCdvt 15:ClpTaggingScrCdvt-----------------------------------------------------------------------------

Assume that:n CAR: 2048kbpsn 802.1p priority: 6n Priority policy: tag-In-PackageTo add an IP trafc entry, do as follows:

Congure the trafc entry.huawei(config)#traffic table ip{ car<K> }:car{ carval<64,131072>|off<K> }:2048{ priority<K> }:priority{ prival<0,7> }:6{ priority-policy<K> }:priority-policy{ priority-policy<E><Pvc-Setting,Tag-In-Package> }:tag-In-Package

Command:traffic table ip car 2048 priority 6 priority-policy tag-In-Package

Create traffic descriptor record successfully-----------------------------------------------------------------------------TD Index : 0Priority : 6Priority policy : tag-priCAR : 2048 kbpsTD Type : NoClpNoScrService category : ubrReferenced Status: not usedEnPPDISC : onEnEPDISC : onClp01Pcr : 2048 kbps-----------------------------------------------------------------------------

Query the trafc entry.



huawei(config)#display traffic table from-index 0{ <cr>|to-index<K> }:


Traffic parameters for IP service:-----------------------------------------------------------------------------TID CAR(kbps) Priority Pri-Policy-----------------------------------------------------------------------------0 2048 6 tag-pri-----------------------------------------------------------------------------

Traffic parameters for ATM service:-----------------------------------------------------------------------------TID Service Traf CLP01PCR CLP0PCR CLP01SCR CLP0SCR MBS CDVT PPD/EPD/SHAPE

Type Type kbps kbps kbps kbps cells 1/10us-----------------------------------------------------------------------------0 ubr 2 2048 -- -- -- -- -- on /on /-------------------------------------------------------------------------------Total Num : 1Traffic type definition:1:NoTrafficDescriptor 2:NoClpNoScr 3:ClpNoTaggingNoScr4:ClpTaggingNoScr 5:NoClpScr 6:ClpNoTaggingScr7:ClpTaggingScr 8:ClpNoTaggingMcr 9:ClpTransparentNoScr10:ClpTransparentScr 11:NoClpTaggingNoScr 12:NoClpNoScrCdvt13:NoClpScrCdvt 14:ClpNoTaggingScrCdvt 15:ClpTaggingScrCdvt-----------------------------------------------------------------------------

Related Operation

Table 16-15 lists the related operation for conguring the trafc entry.

Table 16-15 Related operation for conguring the trafc entry

To… Run the Command... RemarksDelete a trafc entry undo trafc table You can delete a trafc

entry only if it has not beenreferenced.

16.15 Enabling Trafc LimitThis operation enables trafc limitation of packets matching an ACL rule on a port. Trafclimitation enables better use of network resources and better services to users by limitingthe trafc of specied users on specied ports, so that services are provided according tonetwork conditions.

Prerequisite

The ACL and its rule have been congured, and the port for trafc limit is working in thenormal state.

Background Informationn The trafc limitation is only valid for permit rules of an ACL.n The limited trafc must be a multiple of 64.

Procedure

Step 1 Run the trafc-limit command to enable trafc limitation of packets matching an ACL ruleon a port.

Step 2 Run the display qos-info trafc-limit port command to query the status of trafc limitation.



Conguration Guide

—-End

Example

To limit the trafc received on Ethernet port 0/2/0 that matches the rules of ACL 2001 to 512kbps, and mark DSCP priority tags to packets that exceed the limitation, do as follows:huawei(config)#traffic-limit inbound ip-group 2001 512 exceedremark-dscp af1 port 0/2/0huawei(config)#display qos-info traffic-limit port 0/2/0traffic-limit:port 0/2/0:Inbound:Matches: Acl 2001 rule 5 runningTarget rate: 512 KbpsExceed action: remark-dscp af1

Related Operation

Table 16-16 lists the related operation for enabling trafc limit.

Table 16-16 Related operation for enabling trafc limit

To… Run the Command…Disable the trafc limitation undo trafc-limit

16.16 Adding Priority Tag to PacketsThis operation enables you to add priority tag to TOS, DSCP, and 802.1p packets matching anACL on a port.

Prerequisite

The ACL and its rule have been congured, and the port involved in adding a priority tag topackets is working in the normal state.

Background InformationThis operation is only valid for permit rules of an ACL.

You cannot congure the COS priority and local-precedence priority at the same time.

Procedure

Step 1 Run the trafc-priority command to add priority tag to packets matching an ACL.

Step 2 Run the display qos-info trafc-priority port command and you can nd that the priorityis congured.

—-End

Example

Assume that:n DSCP priority level: 10 (af1)n 802.1p priority: 1 (background)n Local priority level: 0To add a priority tag to packets received on port 0/2/0 that match ACL 2001, do as follows:



huawei(config)#traffic-priority inbound ip-group 2001 dscp af1 COSbackground local-precedence 0 port 0/2/0huawei(config)#display qos-info traffic-priority port 0/2/0

traffic-priority:port 0/2/0:Inbound:Matches: Acl 2001 rule 5 runningPriority action: dscp af1 COS background

Total number of traffic-priority inbound : 1Total number of traffic-priority outbound : 0Total number of traffic-priority all : 1

Related Operation

Table 16-17 lists the related operation for adding a priority tag to packets.

Table 16-17 Related operation for adding a priority tag to packets

To… Run the Command…Disable the priority tag undo trafc-priority

16.17 Enabling Trafc MirroringThis operation enables trafc mirroring. Mirroring is to duplicate data packets that match anACL rule to a monitor port for fault locating and troubleshooting.

Prerequisite

The ACL and its rule have been congured, and the port involved in trafc mirroring isworking in the normal state.

Background Informationn The command only works for permit rules of an ACL.n The mirroring destination port cannot be a trunk port or an aggregated port.n Only one mirroring destination port is supported. Specify the port when trafc mirroring

is used for the rst time. The port must be on board SCU or ETH board.

Procedure

Step 1 Run the trafc-mirror command to enable trafc mirroring of packets matching ACL rules.

Step 2 Run the display qos-info trafc-mirror port command to query the trafc mirroring.

—-End

Example

To mirror the packets on ADSL2+ port 0/2/0 that match the rules of ACL 2001 to Ethernetport 0/7/0, do as follows:huawei(config)# traffic-mirror inbound ip-group 2001 port 0/2/0 to port 0/7/0huawei(config)#display qos-info traffic-mirror port 0/2/0

traffic-mirror:port 0/2/0:Inbound:Matches: Acl 2001 rule 5 runningMirror to: port 0/7/0



Conguration Guide

Total number of traffic-mirror inbound : 1Total number of traffic-mirror outbound : 0Total number of traffic-mirror all : 1

Related Operation

Table 16-18 lists the related operation for enabling trafc mirroring.

Table 16-18 Related operation for enabling trafc mirroring

To… Run the Command…Disable trafc mirroring on packetsmatching an ACL rule on a port

undo trafc-mirror

16.18 Enabling Trafc RedirectionThis operation enables redirection of packets matching an ACL on a port.

Prerequisite

The ACL and its rule have been congured, and the port involved in trafc redirection isworking in the normal state.

Background Informationn The trafc redirection is only valid for permit rules of an ACL.n The service boards support only redirection of packets to ports on other boards instead

of other ports of the same board. SCU board supports redirection of packets to otherports of the same board.

Procedure

Step 1 Run the trafc-redirect command to redirect trafc.

Step 2 Run the display qos-info trafc-redirect port command to query the QoS conguration.

—-End

Example

To redirect trafc matching with ACL 2001 on port 0/7/0 to port 0/7/1, do as follows:huawei(config)#traffic-redirect inbound ip-group 2001 port 0/7/0 to port 0/7/1huawei(config)#display qos-info traffic-redirect port 0/7/0traffic-redirect:port 0/7/0:Inbound:Matches: Acl 2001 rule 5 runningRedirected to: port 0/7/1

Total number of traffic-redirect inbound : 1Total number of traffic-redirect outbound : 0Total number of traffic-redirect all : 1

Related Operation

Table 16-19 lists the related operation for redirecting trafc.



Table 16-19 Related operation for redirecting trafc

To… Run the Command…Cancel the ACL-based trafcredirection of a specied port

undo trafc-redirect

16.19 Enabling Trafc StatisticsThis operation enables trafc statistics for packets matching an ACL on a port.

Prerequisite

The ACL and its rule have been congured, and the port involved in trafc statistics is workingin the normal state.

Background InformationThe trafc statistics function is only valid for permit rules of an ACL.

Procedure

Step 1 Run the trafc-statistic command to measure trafc.

Step 2 Run the display qos-info trafc-statistic port command to display the QoS conguration.

—-End

Example

To measure the packets received at port 0/7/0 that match with ACL 2001, do as follows:huawei(config)#traffic-statistic inbound ip-group 2001 port 0/7/0huawei(config)#display qos-info traffic-statistic port 0/7/0

traffic-statistic:port 0/7/0:Inbound:Matches: Acl 2001 rule 5 running0 packet

Total number of traffic-statistic inbound : 1Total number of traffic-statistic outbound : 0Total number of traffic-statistic all : 1

Related Operations

Table 16-20 lists the related operations for enabling trafc statistics.

Table 16-20 Related operations for enabling trafc statistics

To… Run the Command…Clear the statistics on trafcs thatmatch with an ACL rule at a port

reset trafc-statistic

Disable trafc statistics for packetsmatching an ACL on a port

undo trafc-statistic

16.20 Enabling Line Rate Limitation on a PortThis operation enables the line rate limitation on a port.



Conguration Guide

Background Informationn Line rate limitation on the MA5600 is to limit the total transmit rate of a SCU Ethernet

port, instead of limiting the rate at a specic port on a service board.n Line rate limitation is to limit the bit rate of a port.n The limited rate shall be a multiple of 64.

ProcedureStep 1 Run the line-rate command to limit the line rate on a port.

Step 2 Run the display qos-info line-rate port command to query the limited line rate on the port.

—-End

ExampleTo limit the rate at Ethernet port 0/7/0 to 640 kbit/s, do as follows:huawei(config)#line-rate 640 port 0/7/0huawei(config)#display qos-info line-rate port 0/7/0line-rate:port 0/7/0:

Line rate: 640 Kbps

Related OperationTable 16-21 lists the related operation for enabling line rate limitation on a port.

Table 16-21 Related operation for enabling line rate limitation on a port

To… Run the Command…Disable the line rate limitation on aport

undo line-rate

16.21 Conguring Queue SchedulingThis operation enables you to congure queue scheduling to solve the problem of packetstreams competing for resources in the case of congestion.

Background InformationThe MA5600 supports Strict-Priority Queue (PQ) and Weighted Round Robin (WRR).n Strict-Priority Queue (PQ)

– PQ gives preference to packets in a high priority queue. When a high priority queueis empty, packets in a queue of lower priority are sent.

n Weighted Round Robin (WRR)– The system supports WRR for eight queues. Each queue has a weight value (w3, w2,

w1 and w0 in descending order) for resource acquisition. WRR is performed for thequeues by turns. This guarantees that each queue can obtain certain service time.

n By default, 802.1p priority level maps with local priority level.n The MA5600 supports mapping between COS priority level with local priority level.

ProcedureStep 1 Run the queue-scheduler command to congure queue scheduling.

Step 2 Run the display queue-scheduler command to query conguration of the queue scheduling.



—-End

Example

To congure a WRR scheduler and assign these weight values to the eight queues: 10, 10, 20,20, 10, 10, 10 and 10, do as follows:huawei(config)#queue-scheduler wrr 10 10 20 20 10 10 10 10huawei(config)#display queue-schedulerQueue scheduling mode: weighted round robinweight of queue 0: 10%weight of queue 1: 10%weight of queue 2: 20%weight of queue 3: 20%weight of queue 4: 10%weight of queue 5: 10%weight of queue 6: 10%weight of queue 7: 10%

Related Operation

Table 16-22 lists the related operation for conguring queue scheduling.

Table 16-22 Related operation for conguring queue scheduling

To… Run the Command…Restore the default queuescheduling setting

undo queue-scheduler


SmartAX MA5600 Multi-service Access ModuleConguration Guide 17 User Security Conguration

17 User Security Conguration


17.1 OverviewThis section describes the service description and service specications of user security.17.2 Enabling the PITPThis operation enables the PITP so that the device can report the user port information to theBRAS for authenticating the user.17.3 Setting the RAIO Working ModeThis operation enables you to set the RAIO working mode.17.4 Setting the Ethernet Encapsulation TypeThis operation enables you to set the Ethernet encapsulation type.17.5 Enabling the DHCP Option82 FunctionThis operation enables the DHCP option82 function so that the BRAS can authenticate theaccess users. The MA5600 adds the option82 eld to the DHCP packets to ensure the securityof the DHCP function.17.6 Setting the Maximum Length of DHCP PacketsThis operation enables you to set the maximum length of DHCP packets.17.7 Binding the IP AddressThis operation enables you to bind a service port with one or multiple IP addresses, so thatthe messages from the IP addresses other than the bound IP addresses are refused to passthrough the service channel of the port.17.8 Binding the MAC AddressThis operation enables you to bind a service port with a MAC address.


17 User Security CongurationSmartAX MA5600 Multi-service Access Module

Conguration Guide

17.1 OverviewThis section describes the service description and service specications of user security.

Service DescriptionPolicy Information Transfer Protocol (PITP), a member of Huawei Group ManagementProtocol (HGMP) family, provides the Broadband Remote Access Server (BRAS) with theinformation about the port of access users.

PITP binds user accounts with the access ports to avoid the theft and roaming of user accounts.

The DHCP Option82 contains reliable user port information and terminal information, whichare added to the DHCP packets. The DHCP Option82 is used as reference for the DHCP serverto allocate the IP address and other parameters.

Service SpecicationsThe MA5600 supports the PITP V mode and P mode as well as DHCP Option82 to implementbinding between the user account and the physical port.

17.2 Enabling the PITPThis operation enables the PITP so that the device can report the user port information to theBRAS for authenticating the user.

Background InformationPITP has two modes:n vmoden pmodeYou can congure the PITP in the following two modes:n Global conguration

– You can run the pitp { disable | enable { pmode | vmode } } command to disablePITP or select PITP mode.

– By default, the global conguration is disabled.n Port conguration

– You can run the pitp { port frame/slot/port { enable | disable } | board frame/slot {enable | disable } } command to enable or disable PITP of the physical port.

– By default, the port conguration is enabled.n You can switch over between PITP P and V modes. However, the system works in only

one mode. Disabling PITP invalidates both PITP modes.n Global PITP conguration is of higher priority than port PITP conguration.n Global PITP conguration is of higher priority than port PITP conguration. If global

PITP conguration is disabled, packets from a port do not contain user port informationregardless whether the port PITP is enabled.

n PPPoE packets from a port contain user port information only when both global PITPconguration and port PITP conguration are enabled.

n The ports on the control board do not support PITP, and it only transmits the PITP packetstransparently.

n To enable DHCP Option82 or PITP, you need to congure the RAIO mode rst.



Procedure

Step 1 Run the pitp command to enable the PITP V mode or the PITP of the physical port.

Step 2 Run the display pitp cong command to query the PITP conguration.

—-End

Example

To enable the PITP V mode, do as follows:huawei(config)#pitp enable vmodehuawei(config)#display pitp configPITP is enabled. Current mode:vmode

To enable PITP of port 0/2/0 with GEM Port ID of 128, do as follows:huawei(config)#pitp port 0/2/0 enablehuawei(config)#display pitp port 0/2/0 configPITP is enabled on this port

17.3 Setting the RAIO Working ModeThis operation enables you to set the RAIO working mode.

Background Informationn Relay Agent Information Option (RAIO) includes DHCP option82 and PITP tag. Because

these two options are not standardized, different carriers have different formats of them.n By default, the RAIO working mode is common.n To differentiate the formats, set correctly the RAIO working mode before using the

DHCP option82 and PITP tag function.

Procedure

Step 1 Run the raio-mode command to set the RAIO working mode.

Step 2 Run the display raio-mode command to query the RAIO working mode.

—-End

Examples

To set the RAIO working mode as port-userlabel so that after the DHCP option82 function isenabled on the port, the PPPoE packets contain the description of the port, do as follows:huawei(config)#raio-mode port-userlabel dhcp-option82huawei(config)#display raio-mode{ <cr>|pitp-pmode<K>|pitp-vmode<K>|dhcp-option82<K>|detail<K> }:

Command:display raio-mode

Current mode of PITP pmode: xdsl-port-rate modeCurrent mode of PITP vmode: common modeCurrent mode of DHCP option82: port-userlabel mode

To set the RAIO working mode as xdsl-port-rate so that after the PITP P mode is enabledon the port, the PPPoE packets contain the upstream/downstream activation rate of the port,do as follows:huawei(config)#raio-mode xdsl-port-rate pitp-pmodehuawei(config)#display raio-mode



Conguration Guide

{ <cr>|pitp-pmode<K>|pitp-vmode<K>|dhcp-option82<K>|detail<K> }:

Command:display raio-mode

Current mode of PITP pmode: xdsl-port-rate modeCurrent mode of PITP vmode: common modeCurrent mode of DHCP option82: xdsl-port-rate mode

17.4 Setting the Ethernet Encapsulation TypeThis operation enables you to set the Ethernet encapsulation type.

Background Information

WARNING

Before setting the Ethernet encapsulation type, make sure that the PITP V mode is disabled.

When setting a protocol type, make sure that it does not conict with any of existing protocoltypes, such as:n IP: 0x0800n ARP: 0x0806n RARP: 0x8035n 802.1q: 0x8100n PPPoE: 0x8863 and0x8864

Procedure

Step 1 Run the pitp vmode ether-type command to set the Ethernet encapsulation type.

Step 2 Run the display pitp vmode ether-type command and you can nd the Ethernet encapsulationtype is set successfully.

—-End

Example

To set the Ethernet encapsulation type in V mode, do as follows:huawei(config)#pitp vmode ether-type 0x8200huawei(config)#display pitp vmode ether-typeVmode ethernet type is 0x8200

Related Operation

Table 17-1 lists the related operation for setting the Ethernet encapsulation type.

Table 17-1 Related operation for setting the Ethernet encapsulation type

To... Run the Command...Disable PITP V mode pitp disable



17.5 Enabling the DHCP Option82 FunctionThis operation enables the DHCP option82 function so that the BRAS can authenticate theaccess users. The MA5600 adds the option82 eld to the DHCP packets to ensure the securityof the DHCP function.

Background Informationn With the DHCP option82 function enabled, the MA5600 can add/remove the option82

eld to/from DHCP packets.n With the DHCP option82 function disabled, the MA5600 transparently transmits or

directly forwards DHCP packets without processing them.

Procedure

Step 1 Run the dhcp option82 enable command to enable the DHCP option82.

Step 2 Run the display dhcp option82 cong command and you can nd the DHCP option82is enabled.

—-End

Example

To enable the DHCP option82, do as follows:huawei(config)#dhcp option82 enablehuawei(config)#display dhcp option82 configDHCP option82 is enabledMaximum length of DHCP packet is 1300 bytes

Related Operations

Table 17-2 lists the related operations for enabling the DHCP option82.

Table 17-2 Related operations for enabling the DHCP option82

To... Run the Command...Disable the DHCP option82 dhcp option82 disableSet the maximum length of the DHCPpacket

dhcp option82 max-length

17.6 Setting the Maximum Length of DHCP PacketsThis operation enables you to set the maximum length of DHCP packets.

Background Informationn By default, the maximum length of DHCP packets is 1500 bytes.n You can set the maximum length for the DHCP packets added with DHCP relay Agent

Option messages. If there are packets with length exceeding this value, the systemtransparently transmits these packets.

Procedure

Step 1 Run the dhcp option82 max-length command to set the maximum length of DHCP packets.



Conguration Guide

Step 2 Run the display dhcp option82 cong command to query the congured maximum length ofDHCP packets.

—-End

ExampleTo set the maximum length of DHCP packets as 1300 bytes, do as follows:huawei(config)#dhcp option82 max-length 1300huawei(config)#huawei(config)#display dhcp option82 configDHCP option82 is enabledMaximum length of DHCP packet is 1300 bytes

17.7 Binding the IP AddressThis operation enables you to bind a service port with one or multiple IP addresses, so thatthe messages from the IP addresses other than the bound IP addresses are refused to passthrough the service channel of the port.

Background Informationn A service channel can be bound with up to 8 IP addresses. The bound IP address must be

unicast IP address.n One port can be bound with either one IP address or eight consecutive IP addresses

according to the IP address mask at one time.

ProcedureStep 1 Run the bind ip command to bind an IP address.

Step 2 Run the display bind command to query the IP address binding information.

—-End

ExamplesTo bind the IP address 10.1.1.245 of the service channel (VPI/VCI of 0/35) with ADSL port0/2/0, do as follows:huawei(config)#bind ip adsl 0/2/0 vpi 0 vci 35 single-service 10.1.1.245huawei(config)#display bind adsl 0/2/0 vpi 0 vci 35{ <cr>|user-encap<K>|user-vlan<K> }:

Command:display bind adsl 0/2/0 vpi 0 vci 35

-------------------------No. IP address-------------------------0 10.1.1.2451 -2 -3 -4 -5 -6 -7 --------------------------

To bind the IP address 10.10.10.10/29 of the service channel (VPI/VCI of 0/35) with ADSLport 0/2/0 (the bound IP address segment is 10.10.10.8-10.10.10.15), do as follows:huawei(config)#bind ip adsl 0/2/0 vpi 0 vci 35 single-service 10.10.10.10 29huawei(config)#display bind adsl 0/2/0 vpi 0 vci 35 single-service{ <cr>|user-encap<K>|user-vlan<K> }:

Command:



display bind adsl 0/2/0 vpi 0 vci 35-------------------------No. IP address-------------------------0 10.10.10.81 10.10.10.92 10.10.10.103 10.10.10.114 10.10.10.125 10.10.10.136 10.10.10.147 10.10.10.15-------------------------

Related Operation

Table 17-3 lists the related operation for binding the IP address.

Table 17-3 Related operation for binding the IP address

To... Run the Command...Cancel the binding of IP address undo bind ip

17.8 Binding the MAC AddressThis operation enables you to bind a service port with a MAC address.

Background InformationThe MA5600 does not support binding a MAC address directly. By conguring a staticMAC address entry and setting the maximum address count to 0, you can bind a port with aMAC address.

Procedure

Step 1 Run the mac-address static command to congure the static MAC address for a port.

Step 2 Run the mac-address max-mac-count command to set the maximum address count for theservice port.

Step 3 Run the display mac-address max-mac-count command to query the maximum MACaddress number that can be learnt by service channels.

—-End

Example

Assume that you have congured the static MAC address of ADSL2+ port 0/2/0 as1010-1010-1010, and the maximum address count as 0. As a result, the port only allows thepass of packets with the source MAC address of 1010-1010-1010. That is, the port is boundwith the MAC address.huawei(config)#mac-address static adsl 0/2/0 vpi 0 vci 35 1010-1010-1010huawei(config)#mac-address max-mac-count adsl 0/2/0 vpi 0 vci 35 0huawei(config)#display mac-address max-mac-count adsl 0/2/0 vpi 0 vci 35----------------------------------------------------------------------------Type F/S /P VPI VCI VLAN ID FLOWTYPE FLOWPARA Learnable MAC number----------------------------------------------------------------------------adl 0/2/0 0 35 4000 - - 0--------------------------------------------------------------------------Total: 1Note : F--Frame, S--Slot, P--Port(xDSL Port,UP-Link Port,IMA GROUP or



SmartAX MA5600 Multi-service Access ModuleConguration Guide 18 System Security Conguration

18 System Security Conguration


18.1 OverviewThis chapter introduces the service description and service specication of system security.18.2 Enabling Anti DoS AttackThis operation enables the anti DoS attack function, so as to prevent large amount of packetssent by the access user from attacking the MA5600.18.3 Enabling Anti MAC SpoongThis operation enables the anti MAC spoong function. With the anti MAC spoong functionenabled, unauthorized users are prevented from sending PPPoE and DHCP control packetsthrough forged MAC addresses.18.4 Enabling Anti IP SpoongThis operation enable the anti IP spoong function. With the anti IP spoong function enabled,unauthorized users are prevented from logging in to the device using legal IP addresses.18.5 Enabling Anti IP AttackThis operation enables the function of anti IP attack. This function prevents users frommaliciously sending IP packets to the IP address of the device to enhance the device security.18.6 Enabling Anti ICMP AttackThis operation enables the function of anti ICMP attack.18.7 Enabling Source Route FilteringThis operation enables the function of source route ltering. This function lters the IP packetcontaining the route option eld.18.8 Conguring MAC Address FilteringThis operation enables you to congure the function of MAC address ltering to lter thepackets with the source MAC address as the specied one.18.9 Setting the Time to Detect Exceptional Disconnection of the PPPoE/DHCP UsersThis operation enables you to set the time to detect exceptional disconnection of thePPPoE/DHCP users.18.10 Conguring the Black ListThis operation enables you to congure a rewall black list, such as adding some IP addressesto the rewall black list, so that the service packets from these IP addresses cannot pass therewall.18.11 Conguring the Firewall FunctionThis operation enables you to congure the rewall function to prohibit or allow the packetsthat meet the criteria to pass the inband or outband management interface.18.12 Conguring an Accessible Address SegmentThis operation enables you to congure the accessible address segment for the rewall ofa specied protocol type.


18 System Security CongurationSmartAX MA5600 Multi-service Access Module

Conguration Guide

18.13 Conguring the Inaccessible Address SegmentThis operation enables you to add the inaccessible address segment for the rewall of thespecied protocol type.



18.1 OverviewThis chapter introduces the service description and service specication of system security.

Service DescriptionThe MA5600 supports system security setting to prevent attacks initiated at the network oruser side. This helps to guarantee user or equipment stability.

Service SpecicationTo ensure stable operation, the MA5600 supports the following security features:n Anti DoS attackn Anti IP spoongn Anti MAC spoongn Anti IP attackn Anti ICMP attackn Source route lteringn MAC address lteringn IP/MAC address bindingn Firewall functionn SSH

18.2 Enabling Anti DoS AttackThis operation enables the anti DoS attack function, so as to prevent large amount of packetssent by the access user from attacking the MA5600.

Procedure

Step 1 Run the security anti-dos enable command to enable anti DoS attack.

Step 2 Run the display security cong command to query the status of anti DoS attack.

—-End

Example

To enable anti DoS attack, do as follows:huawei(config)#security anti-dos enablehuawei(config)#display security configAnti-ipspoofing function : disableAnti-dos function : enableAnti-macspoofing function : disableAnti-ipattack function : disableAnti-icmpattack function : disableSource-route filter function : disable

PPPoE Overall Aging Time(sec): 360PPPoE Aging Period (sec): 90DHCP Overall Aging Time(sec): 1560

Related Operations

Table 18-1 lists the related operations for enabling anti DoS attack.



Conguration Guide

Table 18-1 Related operations for enabling anti DoS attack

To… Run the Command…Disable anti DoS attack security anti-dos disableDisplay the black list of anti DoSattackers

display security dos-blacklist

18.3 Enabling Anti MAC SpoongThis operation enables the anti MAC spoong function. With the anti MAC spoong functionenabled, unauthorized users are prevented from sending PPPoE and DHCP control packetsthrough forged MAC addresses.

Background Informationn The anti MAC spoong function is implemented through MAC address binding.n Each service virtue port can be bound with up to eight different MAC addresses

dynamically.n If a user has been online before the anti MAC spoong function is enabled, the system

does not bind MAC address.n If a user logs in after the anti MAC spoong function is enabled, the user MAC address

is bound.

Procedure

Step 1 Run the security anti-macspoong enable command to enable anti MAC spoong function.

Step 2 Run the display security cong command and you can nd that the function is enabled.

—-End

Example

To enable anti MAC spoong, do as follows:huawei(config)#security anti-macspoofing enablehuawei(config)#display security configAnti-ipspoofing function : disableAnti-dos function : enableAnti-macspoofing function : enableAnti-ipattack function : disableAnti-icmpattack function : disableSource-route filter function : disable


Related Operations

Table 18-2 lists the related operations for enabling anti MAC spoong.

Table 18-2 Related operations for enabling anti MAC spoong

To… Run the Command…Disable anti MAC spoong security anti-macspoong disableDisplay the dynamically bound MACaddresses

display security bind mac



18.4 Enabling Anti IP SpoongThis operation enable the anti IP spoong function. With the anti IP spoong function enabled,unauthorized users are prevented from logging in to the device using legal IP addresses.

Background Informationn The anti IP spoong function is implemented through dynamic IP address binding.n By default, the dynamic IP address binding function is disabled.n The system only binds the IP address of the user who obtains the IP address through

DHCP.n When the anti IP spoong function is enabled for a user who has already got online,

the user service will be interrupted. In this case, the user needs to get ofine and thenonline again.

n When the anti IP spoong function is enabled before the user gets online, the user doesnot need to get ofine and then online again.

Procedure

Step 1 Run the security anti-ipspoong enable command to enable anti IP spoong.


—-End

Example

To enable anti IP spoong, do as follows:huawei(config)#security anti-ipspoofing enablehuawei(config)#display security configAnti-ipspoofing function : enableAnti-dos function : enableAnti-macspoofing function : enableAnti-ipattack function : disableAnti-icmpattack function : disableSource-route filter function : disable


Related Operations

Table 18-3 lists the related operations for enabling anti MAC spoong.

Table 18-3 Related operations for enabling anti MAC spoong

To… Run the Command…Disable anti IP spoong security anti-ipspoong disableDisplay the dynamically bound IPaddresses

display security bind ip

18.5 Enabling Anti IP AttackThis operation enables the function of anti IP attack. This function prevents users frommaliciously sending IP packets to the IP address of the device to enhance the device security.



Conguration Guide

Procedure

Step 1 Run the security anti-ipattack enable command to enable anti IP attack function.


—-End

Example

To enable the function of anti IP attack, do as follows:huawei(config)#security anti-ipattack enablehuawei(config)#display security configAnti-ipspoofing function : enableAnti-dos function : enableAnti-macspoofing function : enableAnti-ipattack function : enableAnti-icmpattack function : disableSource-route filter function : disable


Related Operation

Table 18-4 lists the related operation for enabling the function of anti IP attack.

Table 18-4 Related operation for enabling the function of anti IP attack

To… Run the Command…Disable the function of anti IPattack

security anti-ipattack disable

18.6 Enabling Anti ICMP AttackThis operation enables the function of anti ICMP attack.

Procedure

Step 1 Run the security anti-icmpattack enable command to enable anti ICMP attack.


—-End

Example

To enable the function of anti ICMP attack, do as follows:huawei(config)#security anti-icmpattack enablehuawei(config)#display security configAnti-ipspoofing function : enableAnti-dos function : enableAnti-macspoofing function : enableAnti-ipattack function : enableAnti-icmpattack function : enableSource-route filter function : disable




Related Operation

Table 18-5 lists the related operation for enabling the function of anti ICMP attack.

Table 18-5 Related operation for enabling the function of anti ICMP attack

To… Run the Command…Disable the function of anti ICMPattack

security anti-icmpattack disable

18.7 Enabling Source Route FilteringThis operation enables the function of source route ltering. This function lters the IP packetcontaining the route option eld.

Background InformationBy default, the source route packet is not discarded.

Procedure

Step 1 Run the security source-route enable command to enable the function of source route ltering.


—-End

Example

To enable the function of source route ltering, do as follows:huawei(config)#security source-route enablehuawei(config)#display security configAnti-ipspoofing function : enableAnti-dos function : enableAnti-macspoofing function : enableAnti-ipattack function : enableAnti-icmpattack function : enableSource-route filter function : enable


Related Operation

Table 18-6 lists the related operation for enabling the function of source route ltering.

Table 18-6 Related operation for enabling the function of source route ltering

To… Run the Command…Disable source route ltering security source-route disable

18.8 Conguring MAC Address FilteringThis operation enables you to congure the function of MAC address ltering to lter thepackets with the source MAC address as the specied one.



Conguration Guide

Background InformationThe system supports up to four ltering MAC addresses.

Procedure

Step 1 Run the security mac-lter command to congure MAC address ltering.

Step 2 Run the display security mac-lter command to query the congured ltering MAC address.

—-End

Example

To congure the MAC address1000-0000-0000 as the ltering MAC address, do as follows:huawei(config)#security mac-filter 1000-0000-0000huawei(config)#display security mac-filter--------- Mac Address ---------

1000-0000-0000---- 1 mac address found ----

Related Operation

Table 18-7 lists the related operation for conguring MAC address ltering.

Table 18-7 Related operation for conguring MAC address ltering

To… Run the Command…Delete the ltering MAC address undo security mac-lter

18.9 Setting the Time to Detect Exceptional Disconnectionof the PPPoE/DHCP Users

This operation enables you to set the time to detect exceptional disconnection of thePPPoE/DHCP users.

Background Informationn For PPPoE users, the timeout time includes aging period and overall aging time.

– The system checks the online/ofine status of a user every aging period. When theofine period of a user exceeds the aging period but is less than the overall aging time,the ofine time of the user will be accumulated.

– When the accumulated ofine time exceeds the overall aging time, it is consideredthat the user has been ofine.

n By default, the PPPoE aging period is 90s, and the overall aging time is 360s.n For DHCP users, the detection time contains only the timeout total time (1560s by

default).n By default, the DHCP overall aging time is 1560s.

Procedure

Step 1 Run the security anti-macspoong { pppoe | dhcp } timeout command to set the time todetect exceptional disconnection of the PPPoE or DHCP users.

Step 2 Run the display security cong command and you can nd the information about the time todetect the exceptional disconnection of the PPPoE/DHCP users.



—-End

Examples

To set the timeout total time for PPPoE users as 1800s, do as follows:huawei(config)#security pppoe timeout 1800huawei(config)#display security configAnti-ipspoofing function : enableAnti-dos function : disableAnti-macspoofing function : disableAnti-ipattack function : disableAnti-icmpattack function : disableSource-route filter function : disable


To set the timeout total time for DHCP users as 1800s, do as follows:huawei(config)#security dhcp timeout 1800huawei(config)#display security configAnti-ipspoofing function : enableAnti-dos function : disableAnti-macspoofing function : disableAnti-ipattack function : disableAnti-icmpattack function : disableSource-route filter function : disable


18.10 Conguring the Black ListThis operation enables you to congure a rewall black list, such as adding some IP addressesto the rewall black list, so that the service packets from these IP addresses cannot pass therewall.

Prerequisite

The ACL applied to the rewall function exists.

Background Informationn The system supports up to 2000 items in a rewall black list.n You can use the ACL rule when enabling the rewall black list function. In this case, the

priority level of the rewall black list is higher than that of the ACL rule. That is, thesystem checks the rewall black list rst, and then matches the ACL rule.

n The ACL rule used when the black list function is enabled can only be the advancedACL rule.

n The rewall black list function only takes effect to the service packets that are sent fromthe user side.

Procedure

Step 1 Run the rewall blacklist item command to add a rewall black list item.

Step 2 Run the rewall blacklist enable command to enable the rewall black list item.

Step 3 Run the display rewall blacklist item command to show the conguration of the rewallblack list.



Conguration Guide

—-End

Example

To add IP address 10.10.10.10 to a rewall black list with the aging time of 100 minutes,enable the rewall black list function and apply ACL 3000, do as follows:huawei(config)#firewall blacklist item 10.10.10.10 timeout 100huawei(config)#firewall blacklist enable acl-number 3000huawei(config)#display firewall blacklist itemFirewall blacklist items :Current manual insert items : 1Current automatic insert items : 0Need aging items : 1

IP Reason InsertTime AgeTime----------------------------------------------------------------10.10.10.10 Manual 2006/02/16 09:58:50 100

Related Operations

Table 18-8 lists the related operations for conguring the rewall black list function.

Table 18-8 Related operations for conguring the rewall black list function

To… Run the Command…Disable the rewall black listfunction

undo rewall blacklist enable

Delete an item from a rewallblack list

undo rewall blacklist item

18.11 Conguring the Firewall FunctionThis operation enables you to congure the rewall function to prohibit or allow the packetsthat meet the criteria to pass the inband or outband management interface.

Prerequisite

The ACL applied to the rewall function exists.

Background Informationn Only one ACL can be congured respectively for the egress and ingress directions of the

inband or outband management interface.n The ACL applied to the rewall function can be the basic ACL or the advanced ACL.n The priority level of the ACL rule is superior to the default operation of rewall. That

is, the packets matching the ACL rule are handled based on the ACL rule, and those notmatching the rule are handled based on the default operation of rewall.

Conguration FlowchartFigure 18-1 shows the owchart for conguring the rewall function.



Figure 18-1 Flowchart for conguring the rewall function

Procedure

Step 1 Run the rewall enable command to enable the rewall function.

Step 2 Run the rewall default command to set the default operation of the rewall as deny.

Step 3 Run the interface meth 0 command to enter interface cong mode.

Step 4 Run the rewall packet-lter command to apply ACL 2000 to the maintenance network port.

Step 5 Run the display rewall packet-lter statistics command and you can nd the conguration.

—-End

Example

To enable the rewall function, set the default operation of the rewall as deny, and apply ACL2000 to the outband management interface to lter packets, do as follows:huawei(config)#firewall enablehuawei(config)#firewall default denyhuawei(config)#interface meth 0huawei(config-if-meth0)#firewall packet-filter 2000 inboundhuawei(config)#display firewall packet-filter statistics allInterface: meth0In-bound Policy: acl 2000From 2006-02-16 10:00:26 to 2006-02-16 10:02:43

0 packets, 0 bytes, 0% permitted,0 packets, 0 bytes, 0% denied,0 packets, 0 bytes, 0% permitted default,0 packets, 0 bytes, 0% denied default,

Totally 0 packets, 0 bytes, 0% permitted,Totally 0 packets, 0 bytes, 0% denied.

Related Operation

Table 18-9 lists the related operation for conguring the rewall function.

Table 18-9 Related operation for conguring the rewall function

To… Run the Command…Disable the rewallfunction

undo rewall enable



Conguration Guide

18.12 Conguring an Accessible Address SegmentThis operation enables you to congure the accessible address segment for the rewall ofa specied protocol type.

Background Informationn The specied protocol types include telnet, SSH, and SNMP.n Each rewall can be added with up to 10 address segments.n When one address segment is added, the rst address cannot be the same as the existed

one.n When deleting one address segment, you can only input the rst address of the address

segment.

Procedure

Step 1 Run the sysman ip-access command to add an accessible address segment.

Step 2 Run the display sysman ip-address telnet command to query the conguration of theaccessible address segment.

—-End

Example

To add a legal address segment to the telnet IP-refuse table, do as follows:huawei (config)#sysman ip-access telnet 1.1.1.1 10.10.10.10huawei(config)#display sysman ip-access telnetIP-Access Table:--------------------------------------------Index Start-IPAddr End-IPAddr--------------------------------------------1 1.1.1.1 10.10.10.10

--------------------------------------------

Related Operations

Table 18-10 lists the related operations for conguring an accessible address segment.

Table 18-10 Related operations for conguring an accessible address segment

To… Run the Command… RemarksDelete an inaccessibleaddress segment

undo sysman ip-access -

Display the rewallconguration

display sysman -

Enable the sourceaddress lteringrewall

sysman lewall protocol-typeenable

When the rewall is enabled, alladdress segments are refused.In this case, run the sysmanip-access command to add anacceptable address segment.

Disable the sourceaddress lteringrewall

sysman lewall protocol-typedisable

When the rewall is disabled, alladdress segments are accepted.In this case, run the sysmanip-refuse command to add arefused address segment.



18.13 Conguring the Inaccessible Address SegmentThis operation enables you to add the inaccessible address segment for the rewall of thespecied protocol type.

Background Informationn The specied protocol type includes: telnet, SSH, SNMP.n Each rewall is allowed to add ten address segments.n When you add an address segment, the start address cannot be the same as an existing one.n To delete an address segment, input the start address of the address segment.

Procedure

Step 1 Run the sysman ip-refuse command to congure the inaccessible address segment.

Step 2 Run the display sysman ip-refuse command to query conguration of the accessible addresssegment.

—-End

Example

To add a valid address segment to the refuse list of the telnet type, do as follows:huawei (config)#sysman ip-refuse telnet 1.1.1.10 10.10.10.1huawei(config)#display sysman ip-refuse telnetIP-Refuse Table:--------------------------------------------Index Start-IPAddr End-IPAddr--------------------------------------------1 1.1.1.10 10.10.10.1

--------------------------------------------

Related Operations

Table 18-11 lists the related operations for conguring the inaccessible address segment.

Table 18-11 Related operations for conguring the inaccessible address segment

To… Run the Command… RemarksDelete the accessibleaddress segment

undo sysman ip-refuse -

Display theconguration ofrewall

display sysman -

Enable the sourceaddress lteringrewall

sysman lewall protocol-typeenable

When the rewall is enabled, alladdress segments are refused.In this case, run the sysmanip-access command to add anacceptable address segment.

Disable the sourceaddress lteringrewall

sysman lewall protocol-typedisable

When the rewall is disabled, alladdress segments are accepted.In this case, run the sysmanip-refuse command to add arefused address segment.


SmartAX MA5600 Multi-service Access ModuleConguration Guide 19 ADSL2+ Service Conguration

19 ADSL2+ Service Conguration


19.1 OverviewThis section describes the service description and service specications of AsymmetricalDigital Subscriber Line 2 plus (ADSL2+).19.2 Conguration Example of the ADSL2+ IPoA ServiceThis example shows how to congure the ADSL2+ IPoA service so that you can access theInternet through the ADSL2+ lines.19.3 Conguration Example of the ADSL2+ PPPoA ServiceThis example shows how to congure the ADSL2+ PPPoA service so that you can accessthe Internet through ADSL2+ lines.19.4 Conguration Example of the ADSL2+ PPPoE/IPoE ServiceThis example shows how to congure the ADSL2+ PPPoE/IPoE service, so that the user canaccess the Internet through the ADSL2+ lines.19.5 Adding an ADSL2+ Line ProleThis operation enables you to add an ADSL2+ line prole. This helps to include theparameters needed by all the ADSL2+ ports in a line prole. After the line prole is conguredsuccessfully, it can be directly used to activate the ports.19.6 Adding an Extended ADSL2+ Line ProleThis operation enables you to add an extended ADSL2+ line prole. The extended ADSL2+line prole is used to congure the extended parameters for an ADSL2+ port when the port isactivated. This helps to lter the sub-carrier that are unsuitable for carrying data.19.7 Adding an ADSL2+ Alarm ProleThis operation enables you to add an ADSL2+ alarm prole. After the alarm prole iscongured and bound successfully, it can be directly used to activate the ports.19.8 Activating an ADSL2+ PortThis operation enables you to activate an ADSL2+ port for transmitting service data.19.9 Conguring the Port Rate Measurement Thresholds for an ADSL2+ PortThis operation enables you to congure the upstream and downstream rate measurementthresholds for an ADSL2+ port.19.10 Conguring IPoA/IPoE Protocol ConversionThe MA5600 supports the conversion between the IPoA and IPoE protocols. In this way, theIPoA users can access the upper layer IP network to enhance the access ability and networkcapability of the MA5600.19.11 Conguring PPPoA/PPPoE Protocol ConversionThe MA5600 supports the conversion between the PPPoA and PPPoE protocols. In this way,the PPPoA users can access the upper layer IP network to enhance the access ability andnetwork capability of the MA5600.


19 ADSL2+ Service CongurationSmartAX MA5600 Multi-service Access Module

Conguration Guide

19.12 Querying an ADSL2+ PortThis operation enables you to query the comprehensive information about an ADSL2+ port.



19.1 OverviewThis section describes the service description and service specications of AsymmetricalDigital Subscriber Line 2 plus (ADSL2+).

Service DescriptionADSL2+ adopts asymmetric transmission mode and features:n High rate, up to 24 Mbit/s downstream and 1.2 Mbit/s upstreamn Long reach distance, up to 6.5 km

Service SpecicationsThe MA5600 provides the ADSL2+ service through the ADEF board. An MA5600 shelfcan house up to 14 ADSL2+ boards. With each board providing 64 ADSL2+ ports, a shelfprovides up 896 ADSL2+ subscribers.

The MA5600 provides six encapsulation modes, including llc-Bridge, vcmux-Bridge,llc-IPoA, vcmux-IPoA, llc-PPPoA and vcmux-PPPoA.

The MA5600 provides an Auto mode, including llc-Bridge, vcmux-Bridge, llc-IPoA,llc-PPPoA and vcmux-PPPoA.

By default, the encapsulation mode is llc-Bridge.

Table 19-1 lists the encapsulation mode mapping between the MA5600 and the modem.

Table 19-1 Encapsulation mode mapping between the MA5600 and the modem

Service Type Modem Encapsulation Type MA5600 Encapsulation Typellc-PPPoA llc-PPPoA, AutoPPPoAvcmux-PPPoA vcmux-PPPoA, Autollc RFC1483/2684 Route llc-IPoA, AutoIPoA

vcmux RFC1483/2684 Route vcmux-IPoA

llc-Bridge llc-Bridge, AutoIPoE

vcmux-Bridge vcmux-Bridge, Autollc-RFC1483/2684 Bridge llc-Bridge, Autovcmux-RFC1483/2684 Bridge vcmux-Bridge, Autovcmux- PPPoE vcmux-Bridge, Auto

PPPoE

llc-PPPoE llc-Bridge, Auto

19.2 Conguration Example of the ADSL2+ IPoA ServiceThis example shows how to congure the ADSL2+ IPoA service so that you can access theInternet through the ADSL2+ lines.

NetworkingFigure 19-1 shows a sample network for conguring the ADSL2+ IPoA service.



Conguration Guide

Figure 19-1 Sample network for conguring the ADSL2+ IPoA service

Data PlanTable 19-2 shows data plan for conguring the ADSL2+ IPoA service.

Table 19-2 Data plan for conguring the ADSL2+ IPoA service

Item Data RemarksADSL2+ port: 0/2/0 -

VLAN ID: 10 The same as that of the upperlayer device.

ADEF

Downstream bandwidth: 3Mbit/s

The system adapts thebandwidth to the user’sneeds.

Upstream port: 0/7/0 -SCU

Gateway IP address: 10.1.1.1 It is the IP address of the upperlayer router.

Background InformationIn case of IPoA access, select the dynamic IP address (without specifying the source IPaddress) or static IP address (specifying the source IP address). To switch from a dynamicaddress to a static address in IPoA access, you need to adopt LLC-Bridge encapsulation rst,and then adopt the IPoA static address encapsulation.n The MA5600 can restrict the user rate through a specied trafc prole or an ADSL2+

line prole. When both the trafc prole and the ADSL2+ line prole work, the smallerbandwidth specied in the two proles is used as the user line bandwidth.

n The following takes the user rate restricted by the trafc prole for example. The defaultline prole is used.

Conguration FlowchartFigure 19-2 shows the owchart for conguring the ADSL2+ IPoA service.



Figure 19-2 Flowchart for conguring the ADSL2+ IPoA service

Procedure

Step 1 Query if an appropriate trafc prole exists.huawei(config)#display traffic table from-index 0{ <cr>|to-index<K> }:


Traffic parameters for IP service:--------------------------------------------------------------------------TID CAR(kbps) Priority Pri-Policy--------------------------------------------------------------------------0 960 6 tag-pri1 2496 6 tag-pri2 512 0 tag-pri3 576 2 tag-pri4 64 4 tag-pri5 2048 0 tag-pri6 -- 0 tag-pri7 3072 6 pvc-pri--------------------------------------------------------------------------



Conguration Guide

Traffic parameters for ATM service:--------------------------------------------------------------------------TID Service Traf CLP01PCR CLP0PCR CLP01SCR CLP0SCR MBS CDVT PPD/EPD/SHAPE

Type Type kbps kbps kbps kbps cells 1/10us--------------------------------------------------------------------------0 cbr 2 1000 -- -- -- -- -- off/off/--1 cbr 2 2500 -- -- -- -- -- off/off/--2 ubr 2 512 -- -- -- -- -- on /on /--3 nrt-vbr 5 1200 -- 600 -- 250 -- on /on /--4 rt-vbr 15 128 -- -- 64 300 10000000 on /on /off5 ubr 2 2048 -- -- -- -- -- on /on /--6 ubr 1 -- -- -- -- -- -- off/off/----------------------------------------------------------------------------Total Num : 7Traffic type definition:1:NoTrafficDescriptor 2:NoClpNoScr 3:ClpNoTaggingNoScr4:ClpTaggingNoScr 5:NoClpScr 6:ClpNoTaggingScr7:ClpTaggingScr 8:ClpNoTaggingMcr 9:ClpTransparentNoScr10:ClpTransparentScr 11:NoClpTaggingNoScr 12:NoClpNoScrCdvt13:NoClpScrCdvt 14:ClpNoTaggingScrCdvt 15:ClpTaggingScrCdvt--------------------------------------------------------------------------

In this step, no appropriate trafc prole is found. Therefore, run the trafc table command toadd one:huawei(config)#traffic table index 7 ip car 3072 priority 6priority-policy pvc-Setting

Step 2 Create a VLAN.You can create a MUX VLAN or a Smart VLAN.A MUX VLAN is adopted in this example.huawei(config)#vlan 10 muxhuawei(config)#port vlan 10 0/7 0huawei(config)#service-port vlan 10 adsl 0/2/0 vpi 0 vci 35 rx-cttr 7 tx-cttr 7

Step 3 Query if an appropriate port exists.If the port is activated already, deactivate it.To deactivate the ADSL2+ port 0/2/0, do as follows:huawei(config)#interface adsl 0/2huawei(config-if-adsl-0/2)#deactivate 0

Step 4 Query if an appropriate line prole exists.If there is no appropriate line prole, add one.The default line prole 1002 is adopted in this example.

Step 5 Activate the ADSL2+ port0/2/0.huawei(config-if-adsl-0/2)#activate 0 profile-index 1002

Step 6 Bind the ADSL2+ port 0/2/0 with the default alarm prole 1.huawei(config-if-adsl-0/2)#alarm-config 0 1

Step 7 Congure IPoA servicen Congure MAC address pool 0, with the start address of 0000-0000-0001.

huawei(config-if-adsl-0/2)#quithuawei(config)#mac-pool 0 0000-0000-0001

n Enable the IPoA protocol conversion.huawei(config)#ipoa enable

n Set the default gateway of IPoA.huawei(config)#ipoa default gateway 10.1.1.1

n Set the service encapsulation mode of the ADSL2+ port0/2/0 as LLC-IPoA.huawei(config)#encapsulation 0/2/0 vpi 0 vci 35 type ipoa llc srcIP 10.1.1.20


—-End



Result

After the conguration, you can access the Internet in the IPoA mode.

19.3 Conguration Example of the ADSL2+ PPPoA ServiceThis example shows how to congure the ADSL2+ PPPoA service so that you can accessthe Internet through ADSL2+ lines.

NetworkingFigure 19-3 shows a sample network of the ADSL2+ PPPoA service .

Figure 19-3 Sample network of the ADSL2+ PPPoA service

Data PlanTable 19-3 shows the data plan for conguring the ADSL2+ PPPoA service.

Table 19-3 Data plan for conguring the ADSL2+ PPPoA service


VLAN ID: 10 The same as that of the upper layerdevice

ADEF


The system adapts the bandwidth to theuser’s needs.


Gateway IP Address: 10.1.1.1 The same as that of upper layer router.

Background InformationIn the case of IPoA access, select the dynamic IP address (without specifying the source IPaddress) or static IP address (specifying the source IP address). To switch from a dynamic



Conguration Guide

address to a static address in IPoA access, you need to adopt LLC-Bridge encapsulation rst,and then adopt the IPoA static address encapsulation.n The MA5600 can restrict the user rate through a specied trafc prole or an ADSL2+


n The following takes the user rate restricted by the trafc prole for example. The defaultline prole is used.

You can bind a port with a line prole only when the port is in deactivated state.

Conguration FlowchartFigure 19-4 show the owchart for conguring the ADSL2+ PPPoA service.

Figure 19-4 Flowchart for conguring the ADSL2+ PPPoA service



NOTE

n In this example, the service board is in the normal state.n In this example, the extended line prole is not congured. For how to congure the extended line

prole, see 19.6 Adding an Extended ADSL2+ Line Prole.

Procedure

Step 1 Query and congure a trafc prole.huawei(config)#display traffic table from-index 0{ <cr>|to-index<K> }:Command:

display traffic table from-index 0Traffic parameters for IP service:--------------------------------------------------------------------------TID CAR(kbps) Priority Pri-Policy--------------------------------------------------------------------------0 960 6 tag-pri1 2496 6 tag-pri2 512 0 tag-pri3 576 2 tag-pri4 64 4 tag-pri5 2048 0 tag-pri6 -- 0 tag-pri7 3072 6 pvc-pri--------------------------------------------------------------------------Traffic parameters for ATM service:--------------------------------------------------------------------------TID Service Traf CLP01PCR CLP0PCR CLP01SCR CLP0SCR MBS CDVT PPD/EPD/SHAPE

Type Type kbps kbps kbps kbps cells 1/10us--------------------------------------------------------------------------0 cbr 2 1000 -- -- -- -- -- off/off/--1 cbr 2 2500 -- -- -- -- -- off/off/--2 ubr 2 512 -- -- -- -- -- on /on /--3 nrt-vbr 5 1200 -- 600 -- 250 -- on /on /--4 rt-vbr 15 128 -- -- 64 300 10000000 on /on /off5 ubr 2 2048 -- -- -- -- -- on /on /--6 ubr 1 -- -- -- -- -- -- off/off/--7 ubr 2 3072 -- -- -- -- -- on/on/--

--------------------------------------------------------------------------Total Num : 8Traffic type definition:1:NoTrafficDescriptor 2:NoClpNoScr 3:ClpNoTaggingNoScr4:ClpTaggingNoScr 5:NoClpScr 6:ClpNoTaggingScr7:ClpTaggingScr 8:ClpNoTaggingMcr 9:ClpTransparentNoScr10:ClpTransparentScr 11:NoClpTaggingNoScr 12:NoClpNoScrCdvt13:NoClpScrCdvt 14:ClpNoTaggingScrCdvt 15:ClpTaggingScrCdvt

--------------------------------------------------------------------------The query result shows that trafc prole 7 is available.

Step 2 Congure a VLAN.You can create a MUX VLAN or a smart VLAN. In this example, a MUX VLAN is adopted.huawei(config)#vlan 10 muxhuawei(config)#port vlan 10 0/7 0huawei(config)#service-port vlan 10 adsl 0/2/0 vpi 0 vci 35 rx-cttr 7 tx-cttr7

Step 3 Query if an appropriate port exists.If the port is activated already, deactivate it.To deactivate the ADSL2+ port 0/2/0, do as follows:huawei(config)#interface adsl 0/2/0huawei(config-if-adsl-0/2)#deactivate 0

Step 4 Bind the ADSL2+ port 0/2/0 with the default alarm prole 1.huawei(config-if-adsl-0/2)#alarm-config 0 1

Step 5 Activate ADSL2+ port 0/2/0 using the default line prole 1002.huawei(config-if-adsl-0/2)#activate 0 profile-index 1002

Step 6 Congure PPPoA service1. Congure MAC address pool 0, with the start address of 0000-0000-0001.

huawei(config-if-adsl-0/2)#quithuawei(config)#mac-pool 0 0000-0000-0001



Conguration Guide

2. Enable the PPPoA protocol conversion.huawei(config)#pppoa enable

3. Set the service encapsulation mode of the ADSL2+ port 0/2/0 as LLC-PPPoA.huawei(config)#encapsulation 0/2/0 vpi 0 vci 35 type pppoa llc


—-End

Result

After the conguration, you can access the Internet in the PPPoA mode.

19.4 Conguration Example of the ADSL2+ PPPoE/IPoEService

This example shows how to congure the ADSL2+ PPPoE/IPoE service, so that the user canaccess the Internet through the ADSL2+ lines.

NetworkingFigure 19-5 shows a sample network for conguring the ADSL2+ PPPoE/IPoE service.

Figure 19-5 Sample network for conguring the ADSL2+ PPPoE/IPoE service

Data PlanTable 19-4 shows the data plan for conguring the ADSL2+ PPPoE/IPoE service.



Table 19-4 Data plan for conguring the ADSL2+ PPPoE/IPoE service



ADEF


The system adapts thebandwidth to the user’sneeds.


Gateway IP address: 10.1.1.1 The IP address of the upperlayer router.

Background Informationn The MA5600 can restrict the user rate through a specied trafc prole and an ADSL+


n The following takes the user rate restriction through the trafc prole for example. Thedefault line prole is used.

You can bind a line prole with a port only when the port is deactivated.

Conguration FlowchartFigure 19-6 shows the owchart for conguring the ADSL2+ PPPoE/IPoE service.



Conguration Guide

Figure 19-6 Flowchart for conguring the ADSL2+ PPPoE/IPoE service



NOTE

n In this example, the service board is in the normal state.n In this example, the extended line prole is not congured. For how to congure the extended line

prole, see 19.6 Adding an Extended ADSL2+ Line Prole.

Procedure

Step 1 Query and congure a trafc prole.huawei(config)#display traffic table from-index 0{ <cr>|to-index<K> }:Command:

display traffic table from-index 0Traffic parameters for IP service:--------------------------------------------------------------------------TID CAR(kbps) Priority Pri-Policy--------------------------------------------------------------------------0 960 6 tag-pri1 2496 6 tag-pri2 512 0 tag-pri3 576 2 tag-pri4 64 4 tag-pri5 2048 0 tag-pri6 -- 0 tag-pri7 3072 6 pvc-pri--------------------------------------------------------------------------Traffic parameters for ATM service:--------------------------------------------------------------------------TID Service Traf CLP01PCR CLP0PCR CLP01SCR CLP0SCR MBS CDVT PPD/EPD/SHAPE

Type Type kbps kbps kbps kbps cells 1/10us--------------------------------------------------------------------------0 cbr 2 1000 -- -- -- -- -- off/off/--1 cbr 2 2500 -- -- -- -- -- off/off/--2 ubr 2 512 -- -- -- -- -- on /on /--3 nrt-vbr 5 1200 -- 600 -- 250 -- on /on /--4 rt-vbr 15 128 -- -- 64 300 10000000 on /on /off5 ubr 2 2048 -- -- -- -- -- on /on /--6 ubr 1 -- -- -- -- -- -- off/off/--7 ubr 2 3072 -- -- -- -- -- on/on/--

----------------------------------------------------------------------------Total Num : 8Traffic type definition:1:NoTrafficDescriptor 2:NoClpNoScr 3:ClpNoTaggingNoScr4:ClpTaggingNoScr 5:NoClpScr 6:ClpNoTaggingScr7:ClpTaggingScr 8:ClpNoTaggingMcr 9:ClpTransparentNoScr10:ClpTransparentScr 11:NoClpTaggingNoScr 12:NoClpNoScrCdvt13:NoClpScrCdvt 14:ClpNoTaggingScrCdvt 15:ClpTaggingScrCdvt--------------------------------------------------------------------------

The query result shows that trafc prole 7 is available.

Step 2 Congure a VLAN. You can create a MUX VLAN or a smart VLAN. A MUX VLAN isadopted in this example.huawei(config)#vlan 10 muxhuawei(config)#port vlan 10 0/7 0huawei(config)#service-port vlan 10 adsl 0/2/0 vpi 0 vci 35 rx-cttr 7 tx-cttr7

Step 3 Make sure the port is deactivated. If the port is activated already, deactivate it. To deactivatethe ADSL2+ port 0/2/0, do as follows:huawei(config)#interface adsl 0/2huawei(config-if-adsl-0/2)#deactivate 0

Step 4 Query if appropriate trafc prole exists. If there is no appropriate trafc prole, add one. Thedefault line prole 1002 is adopted in this example.

Step 5 Bind ADSL2+ port 0/2/0with the default alarm prole "1".huawei(config-if-adsl-0/2)#alarm-config 0 1

Step 6 Activate port 0/2/0 using the line prole "1002".huawei(config-if-adsl-0/2)#activate 0 profile-index 1002

Step 7 Save the data.huawei(config-if-adsl-0/2)#quithuawei(config)#save



Conguration Guide

—-End

Result

After the conguration, the user can access the Internet in the PPPoE/IPoE mode.

19.5 Adding an ADSL2+ Line ProleThis operation enables you to add an ADSL2+ line prole. This helps to include theparameters needed by all the ADSL2+ ports in a line prole. After the line prole is conguredsuccessfully, it can be directly used to activate the ports.

Background InformationWhen conguring an ADSL2+ line prole, pay attention to the following points:n Up to 1002 line proles can be congured for the MA5600. 1, 1000, 1001 and 1002

are default ones, which can be modied.n ADSL2+ line prole contains a series of parameters, such as:

– Upstream/downstream rate– Upstream/downstream interleaved depth– Signal to Noise Ratio (SNR) marginWhen a port is being activated, the ATU-R negotiates with the ATU-C based on theparameters in the line prole, so as to determine whether the connection can be set up tobetween them under the existing conditions.

n When the transmission mode is G.lite (G992.2/G992.4), you can select only "interleaved"as the channel mode.

n When the downstream channel mode is xed, the downstream rate must be equal tothe minimum rate.

n When setting the upstream/downstream SNR margin, make sure that the settings complywith mini. SNR margin≤ target SNR margin≤ max. SNR margin.

n According to G.lite Standards, when the transmission mode is G.lite (G992.2/G992.4), thesupported rate ranges 64–1536 kbit/s in downstream, and 32–512 kbit/s in upstream.

n When setting the downstream SNR margin for rate downshift, make sure that it is largerthan or equal to the downstream mini. SNR margin. Similarly, the upstream SNR marginfor rate downshift shall be equal to or larger than the upstream mini. SNR margin.

Conguration FlowchartFigure 19-7 and Figure 19-8 show the owchart for conguring an ADSL2+ line prole.



Figure 19-7 Flowchart for conguring an ADSL2+ line prole-1



Conguration Guide

Figure 19-8 Flowchart for conguring an ADSL2+ line prole-2

Procedure

Run the adsl line-prole add command to add an ADSL2+ line prole.

—-End

Example

Assume that:n ADSL2+ work mode: G.dmtn Maximum downstream delay: 8 msn Maximum upstream delay: 2 msn Minimum downstream rate: 1024 Kbit/sn Maximum downstream rate: 32000 Kbit/s



n Minimum upstream rate: 32 Kbit/sn Maximum upstream rate: 512 Kbit/sTo add an ADSL2+ line prole, do as follows:huawei(config)#adsl line-profile add{ <cr>|profile-index<L><2,999> }:Command:

adsl line-profile addStart adding profilePress ’Q’ to quit the current configuration and new configuration will be

neglected> Do you want to name the profile (y/n) [n]:> Please choose default value type 0-adsl 1-adsl2+ (0~1) [0]:1> Will you set basic configuration for modem? (y/n)[n]:yNote: Setting to these mode of G992.3~5 will lead that the adsl ports thatare not support adsl2+ not be activatedADSL transmission mode:> 0: All (G992.1~5,T1.413)> 1: Full rate(G992.1/3/5 or T1.413)> 2: g.lite(G992.2/4) (ADSL over ISDN board doesn’t support g.lite mode)> 3: T1.413(ADSL over ISDN board doesn’t support T1.413 mode)> 4: g.dmt (G992.1/3/5)> 5: g.hs (G992.1~5, G992.5 is prior)> 6: G992.1> 7: G992.2> 8: G992.3> 9: G992.4> 10:G992.5> 11: ADSL all (G992.1~2,T1.413)> 12: ADSL&ADSL2(G992.1/3 or T1.413)Please select (0~1212) [0]: 4> Trellis mode 0-disable 1-enable (0~1) [1]:> Downstream channel bit swap 0-disable 1-enable (0~1) [1]:> Upstream channel bit swap 0-disable 1-enable (0~1) [1]:> Please select channel mode 0-interleaved 1-fast (0~1) [0]:> Will you set interleaved delay? (y/n)[n]:y> Maximum downstream interleaved delay(0~255 ms) [16]:8> Maximum upstream interleaved delay(0~255 ms) [6]:2> Please select form of transmit rate adaptation in downstream:> 0-fixed 1-adaptAtStartup 2-adaptAtRuntime (0~2) [1]:> Will you set SNR margin for modem? (y/n)[n]:> Will you set parameters for rate? (y/n)[n]:y> Minimum transmit rate in downstream (32~32000 Kbps) [32]: 1024> Maximum transmit rate in downstream (32~32000 Kbps) [24544]: 32000> Minimum transmit rate in upstream (32~6000 Kbps) [32]:> Maximum transmit rate in upstream (32~6000 Kbps) [1024]: 512Add profile 3 successfully

Table 19-5 lists parameters of an ADSL2+ line prole.

Table 19-5 Parameters of an ADSL2+ line prole

Parameter DescriptionProle Index You can input the line prole index or press Enter to enable

the system to allocate a prole index. The prole indexis unique.

ADSL2+ transmission mode Currently, there are six ADSL/ADSL2+ working modes:G992.1, G992.2, G992.3, G992.4, G992.5 and T1.413.

n G992.2 adopts rather narrow frequency spectrum andlow upstream/downstream rate. Its frequency spectrumis only half of that of G992.1 or T1.413; its maximumupstream and downstream rates are 512 kbit/s and 1536kbit/s respectively.

n G992.1 and the T1.413 adopt similar rates: up to 8160kbit/s in downstream, and up to 896 kbit/s in upstream.



Conguration Guide

Parameter DescriptionTrellis mode The Trellis coding algorithm is used to boost SNR and

enhance line stability. It is usually enabled.Upstream/Downstreamchannel bit swap

When the conditions of an ADSL2+ channel get worse, theSNR of a sub-carrier may deteriorate, resulting in failure inbearing the bits allocated to the sub-carrier. With the bitswap function, the system can swap the allocated bits fromone sub-carrier to another to avoid possible disconnectiondue to the variation in characteristics.

channel mode There are two channel modes: interleave mode and fastmode. Compared with fast mode, the interleave modeis characterized by stable line connection, and longertransmission delay.

n For common Internet access services, the interleavemode is recommended.

n For services that are delay sensitive, such as Video OnDemand (VOD), fast mode is recommended.

Maximum downstream/up-stream interleaved depth

The larger the interleave delay, the higher the ADSL2+connection stability, but the longer the transmission delay.

Adapt mode indownstream/upstream

There are three adapt modes:

n 1-xedn 2-adaptAtStartupn 3-adaptAtRuntime

SNR margin for modem The SNR margin refers to the additional tolerable SNRthat does not lead to the deterioration of the current linerate. The larger the modem SNR margin, the higher theconnection stability, but the lower of the activated physicalconnection rate.

Minimum SNR margin indownstream/upstream

In the process of ADSL2+ connection setup, if thecalculated SNR margin is lower than the preset one, theport activation will fail.

Maximal SNR margin indownstream/upstream

In the process of ADSL2+ connection setup, if thecalculated target SNR margin of an ADSL2+ line is higherthan the preset max. SNR margin, the system will limit thedownstream max. SNR margin to the preset max. value.

Target SNR margin indownstream/upstream

The target SNR margin is the preserved SNR margin toensure normal communication in the case of line SNRdeterioration. The larger the target SNR margin, the lowerthe chance of occurrence of the line error, the safer thesystem may be, but the lower the data transmission rate.Therefore, the target SNR margin shall be adjusted basedon the actual line conditions.

Downstream/Upstream SNRmargin for rate downshift

When the SNR margin reaches this value, the system startsto adjust the rate downwards.

Downstream/Upstream SNRmargin for rate upshift

When the SNR margin reaches this value, the system startsto adjust the rate upwards.

Minimum upshift time indownstream/upstream

When the SNR margin reaches "SNR margin for rateupshift", the system will keep the current rate for a certainperiod before adjusting the rate upwards.



Parameter DescriptionMinimum downshift time indownstream/upstream

When the SNR margin reaches "SNR margin for ratedownshift", the system will keep the current rate for acertain period before adjusting the rate downwards.

Minimum bit rate indownstream/upstream

In the process of ADSL2+ connection setup, if thecalculated upward/downward rate is lower than this value,the port activation will fail.

Maximum bit rate indownstream/upstream

In setting up the ADSL2+ connection, if the line is in goodcondition and the calculated downstream/upstream rateof an ADSL2+ line is higher than the preset max. value,the system will limit the rate to the preset value whileincreasing the SNR margin. If the line is in poor condition,and the calculated downstream/upstream rate is lower thanthe set max. rate, the system will set up the ADSL2+connection at the calculated rate, while maintaining thetarget SNR margin.

Related Operations

Table 19-6 lists the related operations for adding an ADSL2+ line prole.

Table 19-6 Related operations for adding an ADSL2+ line prole

To... Run the Command... RemarksQuickly add an ADSL2+line prole

adsl line-prole quickadd The system adopts non-interactivemode for inputting parametersof the command. The commandserves as a complement to thecommand adsl line prole add.

Delete an ADSL2+ lineprole

adsl line-prole delete You cannot delete the default lineproles or a referenced line prole.

Modify an ADSL2+ lineprole

adsl line-prole modify After the line prole is modied,the system prompts that the proletakes effect immediately

Quickly modify anADSL2+ line prole

adsl line-prolequickmodify

The system adopts non-interactivemode for inputting parametersof the command. The commandserves as a complement to thecommand adsl line prole modify.

Display an ADSL2+ lineprole

display adsl line-prole -

19.6 Adding an Extended ADSL2+ Line ProleThis operation enables you to add an extended ADSL2+ line prole. The extended ADSL2+line prole is used to congure the extended parameters for an ADSL2+ port when the port isactivated. This helps to lter the sub-carrier that are unsuitable for carrying data.

Background InformationAn extended ADSL2+ line prole is used to congure the extended parameters for an ADSL2+port when the port is activated. The following are three major parameters:n missingtone



Conguration Guide

When you set this parameter to the specied sub-carrier of the line, these sub-carriers hasno power output, and no bit is allocated to them.

If the noise of some bands is very unstable, you can set this parameter to forbid this band.In this way, the line will not be affected by the band.

Some bands have special purposes in some regions. To prevent interference to thesebands, you can set the parameter to forbid these bands.

n Impulse Noise Protection (INP)

INP denes the capacity of resisting the impulse interference of the ADSL channel. Itsunit is DMT SYMBOL.

If INP is 1, it means that the current ADSL channel can resist the impulse noise of oneDMT SYMBOL.

n Maximum downstream power spectral density (PSD) margin

The maximum downstream PSD margin ranges from –40 dBm/Hz to –52 dBm/Hz.By default, it is –40 dBm/Hz.

The MA5600 supports up to 32 extended ADSL2+ line proles. After an extended ADSL2+line prole is congured, bind it with the ports and then directly reference it for activatingthe ADSL2+ ports.

Procedure

Step 1 Run the adsl extline-prole add command to add an extended ADSL2+ line prole.

Step 2 Run the display adsl extline-prole command to query a congured extended ADSL2+line prole.

—-End

Example

To add an extended ADSL2+ line prole and disable the tones 80-90, do as follows:huawei(config-if-adsl-0/2)#adsl extline-profile add{ <cr>|profile-index<L><1,32> }:Command:

adsl extline-profile addStart adding profileNotes: If pilot tone is included in the forbidden tones ,the link may not be

activatedWhen port activated with annexA in mode G992.1, 64tone is pilotWhen port activated with annexB in mode G992.1, 96tone is pilot

Press ’Q’ to quit the current configuration and new configuration will beneglected> Do you want to name the profile (y/n) [n]:> Will you configure the disabled tone? (y/n)[n]:y> How many sections do you want to configure?(1-4)[4]:1> No.1 Please input the start index of the disabled tone(32-511)[32]:80> Please input the end index of the disabled tone(32-511)[32]:90> Do you want to validate the settings of this section? (y/n)[n]:y> Will you configure the minimum INP in downstream? (y/n)[n]:> Will you configure the minimum INP in upstream? (y/n)[n]:> Will you configure the maximum PSD mask in downstream? (y/n)[n]:Add profile 1 successfully

Run the display adsl extline-prole command to query the extended line prole 1.huawei(config-if-adsl-0/7)#display adsl extline-profile 1Command:

display adsl extline-profile 1------------------------------------------------------------------Profile Index : 1 Name: ADSL EXTLINEPROFILE 1Minimum INP in downstream(DMT Symbol) :autoMinimum INP in upstream(DMT Symbol) :autoMaximum PSD mask in downstream(dBm/Hz) :-40Current configuration of each section:Sections Value Effective



Section 1 80 - 90 ySection 2 0 - 0 nSection 3 0 - 0 nSection 4 0 - 0 n------------------------------------------------------------------Notice: The value ’0’(missing_tone) or ’-’(INP) denotes that the Parameter has not

been configured

Related Operations

Table 19-7 lists the related operations for adding an extended ADSL2+ line prole.

Table 19-7 Related operations for adding an extended ADSL2+ line prole

To... Run the Command... RemarksQuickly add anextended ADSL2+line prole

adsl extline-prolequickadd

The system adopts non-interactivemode for inputting parameters of thecommand. It is a complement to theadsl extline-prole add command.

Delete an extendedADSL2+ line prole

adsl extline-proledelete

You cannot delete a referenced extendedline prole.

Modify an extendedADSL2+ line prole

adsl extline-prolemodify

After the prole is modied, thesystem prompts the prole takes effectimmediately.

Quickly modify anextended ADSL2+line prole

adsl extline-prolequickmodify

The system adopts non-interactivemode for inputting parameters of thecommand. It is a complement to theadsl extline-prole modify command.

Bind/unbind anextended ADSL2+line prole

(undo)extline-cong To bind an extended ADSL2+ lineprole with all ports on a board ata time, run the extline-cong allcommand.

Query an extendedADSL2+ line prole

display adslextline-prole

-

19.7 Adding an ADSL2+ Alarm ProleThis operation enables you to add an ADSL2+ alarm prole. After the alarm prole iscongured and bound successfully, it can be directly used to activate the ports.

Prerequisite

The ADSL2+ line meets the requirements of service provisioning.

Background InformationWhen adding an ADSL2+ alarm prole, you should pay attention to the following points:n The MA5600 has a default ADSL2+ alarm prole named DEFVAL and numbered 1.

You can modify the prole but cannot delete it.n The ADSL2+ alarm prole contains a series of alarm thresholds to measure and monitor

an activated ADSL2+ line. When a statistic reaches the threshold, the MA5600 sends thealarm to the loghost and NMS.

Conguration FlowchartFigure 19-9 shows the owchart for adding an ADSL2+ alarm prole.



Conguration Guide

Figure 19-9 Flowchart for adding an ADSL2+ alarm prole

Procedure

Run the adsl alarm-prole add command to add an ADSL2+ alarm prole.

—-End

Example

To add an ADSL2+ alarm prole, with the index of 2, do as follows:huawei(config-if-adsl-0/2)#adsl alarm-profile add 2Start adding profilePress ’Q’ to quit the current configuration and new configuration will be

neglected> Do you want to name the profile (y/n) [n]:<ATU-C>

> The number of Loss of Frame Seconds (0~900) [0]:50> The number of Loss of Signal Seconds (0~900) [0]:10> The number of Loss of Link Seconds (0~900) [0]:> The number of Loss of Power Seconds (0~900) [0]:> The number of Errored Seconds (0~900) [0]:> Enable or disable the Initial failure trap 0-disable 1-enable (0~1) [0]:> The number of failed fast retrain seconds (0~900) [0]:10> The number of severely errored seconds (0~900) [0]:



> The number of unavailable seconds (0~900) [0]:> Threshold of positive difference between the current and the past transmit

rate in fast mode (0~31968Kbps) [0]:100> Threshold of positive difference between the current and the past transmit

rate in interleaved mode (0~31968Kbps) [0]:> Threshold of negative difference between the current and the past transmit

rate in fast mode (0~31968Kbps) [0]:> Threshold of negative difference between the current and the past transmit

rate in interleaved mode (0~31968Kbps) [0]:<ATU-R>

> The number of Loss of Frame Seconds (0~900) [0]:10> The number of Loss of Signal Seconds (0~900) [0]:10> The number of Loss of Power Seconds (0~900) [0]:10> The number of Errored Seconds (0~900) [0]:> The number of severely errored seconds (0~900) [0]:> The number of unavailable seconds (0~900) [0]:> Threshold of positive difference between the current and the past transmit

rate in fast mode (0~5968Kbps) [0]:> Threshold of positive difference between the current and the past transmit

rate in interleaved mode (0~5968Kbps) [0]:> Threshold of negative difference between the current and the past transmit

rate in fast mode (0~5968Kbps) [0]:> Threshold of negative difference between the current and the past transmit

rate in interleaved mode (0~5968Kbps) [0]:Add profile 2 successfully

Table 19-8 lists the parameters of an ADSL2+ alarm prole.

Table 19-8 Parameters of an ADSL2+ alarm prole

Parameters DescriptionIndex You can enter a prole index or press Enter to enable

the system to designate an index for it. The proleindex is unique.

The number of loss of frame Seconds Within any given 15-minute period, if the number ofdownstream frame second loss exceeds the presetvalue, an alarm is generated.

The number of loss of signal Seconds Within any given 15-minute period, if the numberof lost signal seconds exceeds the preset value, analarm is generated.

The number of loss of link seconds Within any given 15-minute period, if the number oflost link seconds exceeds the preset value, an alarmis generated.

The number of loss of power seconds Within any given 15-minute period, if the numberof lost power seconds exceeds the preset value, analarm is generated.

The number of errored seconds Within any given 15-minute period, if the number oferrored seconds exceeds the preset value, an alarmis generated.

The number of failed fast retrainseconds

Within any given 15-minute period, if the numberof failed retrain events exceeds the preset value, analarm is generated.

The number of severely erroredseconds

Within any given 15-minute period, if the number ofseverely errored seconds exceeds the preset value, analarm is generated.

The number of unavailable seconds Within any given 15-minute period, if the numberof unavailable seconds exceeds the preset value, analarm is generated.



Conguration Guide

Parameters DescriptionThreshold of positive differencebetween the current and the pasttransmit rate in fast mode

Within any given 15-minute period, if the positivedifference between the current and the past transmitrates in fast mode exceeds the preset value, an alarmis generated.

Threshold of negative differencebetween the current and the pasttransmit rate in fast mode

Within any given 15-minute period, if the negativedifference between the current and the past transmitrates in fast mode exceeds the preset value, an alarmis generated.

Threshold of positive differencebetween the current and the pasttransmit rate in interleaved mode

Within any given 15-minute period, if the positivedifference between the current and the past transmitrates in interleaved mode exceeds the preset value,an alarm is generated.

Threshold of negative differencebetween the current and the pasttransmit rate in interleaved mode

Within any given 15-minute period, if the negativedifference between the current and the past transmitrates in interleaved mode exceeds the preset value,an alarm is generated.

Related Operations

Table 19-9 lists the related operations for adding an ADSL2+ alarm prole.

Table 19-9 Related operations for adding an ADSL2+ alarm prole

To... Run theCommand... RemarksQuickly add an ADSL2+alarm prole

adsl alarm-prolequickadd

The system adopts non-interactivemode for inputting the parameters ofthe command. The command servesas a complement to the adsl alarmprole add command.

Delete an ADSL2+ alarmprole

adsl alarm-proledelete

You cannot delete the default alarmproles or a referenced alarm prole.

Modify an ADSL2+alarm prole

adsl alarm-prolemodify

After the prole is modied, thesystem prompts that the prole takeseffect immediately.

Quickly modify anADSL2+ alarm prole

adsl alarm-prolequickmodify

The system adopts the non-interactivemode for inputting parameters of thecommand. The command serves as acomplement to the adsl alarm prolemodify command.

Display an ADSL2+alarm prole

display adslalarm-prole

-

Bind an ADSL2+ alarmprole

alarm-cong A congured alarm prole can takeeffect only after it is bound with anADSL2+ port.

19.8 Activating an ADSL2+ PortThis operation enables you to activate an ADSL2+ port for transmitting service data.



Prerequisite

The ADSL2+ line prole has been congured.

Background Informationn Activating (or activation) refers to the training between the ATU-C and the ATU-R.

During the training process, the system checks the line distance and line state based onsettings included in the line prole, such as upstream/downstream line rate and SNRmargin. The ATU-C negotiates with the ATU-R to check whether the MA5600 can workwell under the existing conditions.

n If the training succeeds, the ATU-C can communicate with the ATU-R. At the moment,the port works in activated state, and is ready for service data transmission.

n When the ATU-R is online, the activation process ends upon the completion of thetraining. When the ATU-R gets ofine, the communication is terminated, and theATU-C is in listening state. Once the ATU-R gets online, the training process beginsautomatically. When the training succeeds, the port is activated.

n To activate an ADSL2+ port, you need to bind it with an ADSL2+ line prole. If noprole is specied, the system will use the prole bound with the port last time to activateADSL2+ port.

Procedure

Step 1 Run the activate command to activate an ADSL2+ port.

Step 2 Run the display port state all command to query the activated port.

—-End

Examples

To activate all ports on ADSL2+ board in slot0/2 using line prole 1, do as follows:huawei(config-if-adsl-0/2)#activate all profile-index 1huawei(config-if-adsl-0/2)#display port state all----------------------------------------------------------------------Port Status Line_Profile Alm_Profile Ext_Profile----------------------------------------------------------------------

0 Activated 1 1 --1 Activated 1 1 --2 Activated 1 1 --3 Activated 1 1 --4 Activated 1 1 --5 Activated 1 1 --6 Activated 1 1 --7 Activated 1 1 --8 Activated 1 1 --9 Activated 1 1 --10 Activated 1 1 --11 Activated 1 1 --12 Activated 1 1 --13 Activated 1 1 --14 Activated 1 1 --15 Activated 1 1 --16 Activated 1 1 --17 Activated 1 1 --18 Activated 1 1 --19 Activated 1 1 --20 Activated 1 1 --21 Activated 1 1 --22 Activated 1 1 --23 Activated 1 1 --24 Activated 1 1 --25 Activated 1 1 --26 Activated 1 1 --27 Activated 1 1 --28 Activated 1 1 --29 Activated 1 1 --



Conguration Guide

30 Activated 1 1 --31 Activated 1 1 --32 Activated 1 1 --33 Activated 1 1 --34 Activated 1 1 --35 Activated 1 1 --36 Activated 1 1 --37 Activated 1 1 --38 Activated 1 1 --39 Activated 1 1 --40 Activated 1 1 --41 Activated 1 1 --42 Activated 1 1 --43 Activated 1 1 --44 Activated 1 1 --45 Activated 1 1 --46 Activated 1 1 --47 Activated 1 1 --48 Activated 1 1 --49 Activated 1 1 --50 Activated 1 1 --51 Activated 1 1 --52 Activated 1 1 --53 Activated 1 1 --54 Activated 1 1 --55 Activated 1 1 --56 Activated 1 1 --57 Activated 1 1 --58 Activated 1 1 --59 Activated 1 1 --60 Activated 1 1 --61 Activated 1 1 --62 Activated 1 1 --63 Activated 1 1 --

----------------------------------------------------------------------Total number of activated port : 64Total number of unactivated port: 0

To activate port 0 on the ADSL2+ board in slot 0/2 using line prole huawei, do as follows:huawei(config-if-adsl-0/2)#activate 0 profile-namehuawei(config-if-adsl-0/2)#display port state 0----------------------------------------------------------------------Port Status Line_Profile Alm_Profile Ext_Profile----------------------------------------------------------------------

0 Activated 3 1 ------------------------------------------------------------------------

Related Operations

Table 19-10 lists the related operations for activating an ADSL2+ port.

Table 19-10 Related operations for activating an ADSL2+ port

To... Run the Command... RemarksDeactivate an ADSL2+port

deactivate After an ADSL port is deactivated,the communication linkestablished during activationbetween the ATU-C and theATU-R will be disconnected. Forservice transmission, activate theport again.

Query the port state display port state In ADSL cong. modeQuery the port state display adsl port state In Global cong. mode



19.9 Conguring the Port Rate Measurement Thresholdsfor an ADSL2+ Port

This operation enables you to congure the upstream and downstream rate measurementthresholds for an ADSL2+ port.

Background Informationn When an ADSL2+ port is activated, the upstream and downstream rate measurements

states change.n If the host detects one rate measurement does not meet the system requirement, an alarm

will be reported to the NMS.n If the host detects both the upstream and downstream rate measurements meet the system

requirement, a recovery alarm will be reported.

Procedure

Step 1 Run the line-monitoring command to set the rate measurement thresholds for an ADSL2+ port.

Step 2 Run the display adsl line-monitoring command to query the rate measurement thresholdsinformation of an ADSL2+ port.

—-End

Examples

To set the upstream line monitoring threshold for the port 0/2/0 as 1024 kbit/s, do as follows:huawei(config)#adsl line-monitoring 0/2/0 rate-threshold upstream 1024

To set the downstream line monitoring threshold for the port 0/2/0 as 2048 kbit/s, do as follows:huawei(config)#adsl line-monitoring 0/2/0 rate-threshold downstream 2048

Run the display adsl line-monitoring command to query the line monitoring thresholdinformation for a port.huawei(config)#display adsl line-monitoring 0/2/0Port ID: 0/2/0Port Type: ADSLUp-Stream Rate: 1024 kbpsDown-Stream Rate: 2048 kbps

19.10 Conguring IPoA/IPoE Protocol ConversionThe MA5600 supports the conversion between the IPoA and IPoE protocols. In this way, theIPoA users can access the upper layer IP network to enhance the access ability and networkcapability of the MA5600.

19.10.1 Enabling IPoA Protocol ConversionThis operation enables IPoA/IPoE protocol conversion.19.10.2 Setting the Aging time of IPoA Forwarding EntryThis operation enables you to set the aging time of IPoA forwarding entry.19.10.3 Setting the Default Gateway of the IPoA UserThis operation enables you to congure the default gateway of the IPoA user.19.10.4 Conguring the Encapsulation Type of the IPoA UserThis operation enable you to congure the encapsulation type of the IPoA user.



Conguration Guide

19.10.1 Enabling IPoA Protocol ConversionThis operation enables IPoA/IPoE protocol conversion.

Procedure

Step 1 Run the ipoa enable command to enable IPoA protocol conversion.

Step 2 Run the display ipoa cong command to query IPoA protocol conversion state.

—-End

Example

To enable IPoA protocol conversion, do as follows:huawei(config)#ipoa enable

Run the display ipoa cong command and you can nd the IPoA protocol conversion isenabled.huawei(config)#display ipoa configIPoA status : enableIPoA user default gateway : 0.0.0.0IPoA expire-time : 1200 s

Related Operations

Table 19-11 lists the related operations for enabling IPoA protocol conversion.

Table 19-11 Related operations for enabling IPoA protocol conversion

To... Run the Command...Disable IPoA protocol conversion ipoa disableQuery the IPoA conguration display ipoa cong

19.10.2 Setting the Aging time of IPoA Forwarding EntryThis operation enables you to set the aging time of IPoA forwarding entry.

Background Informationn By default, the aging time of IPoA forwarding entry is 1200s.n When the aging time times out, the IPoA forwarding entry cannot be updated, and the

system regards users ofine.

Procedure

Step 1 Run the ipoa expire-time 300 command to set the aging time of IPoA forwarding entry.

Step 2 Run the display ipoa cong command to query the correctly congured aging time of IPoAforwarding entry.

—-End

Example

To congure the aging time of IPoA forwarding entry as 300s, do as follows:huawei(config)#ipoa expire-time 300



Run the display ipoa cong command and you can nd the aging time of IPoA forwardingentry is set correctly.huawei(config)#display ipoa configIPoA status : enableIPoA user default gateway : 0.0.0.0IPoA expire-time : 300 s

Related Operation

Table 19-12 lists the related operation for setting the aging time of IPoA forwarding entry.

Table 19-12 Related operation for setting the aging time of IPoA forwarding entry

To... Run the Command...Query the IPoA conguration display ipoa cong

19.10.3 Setting the Default Gateway of the IPoA UserThis operation enables you to congure the default gateway of the IPoA user.

Background Informationn By default, the gateway of the IPoA user is 0.0.0.0.n The default gateway of the IPoA user is the interface IP address of upper device that

connects to the MA5600. But not that of the MA5600 its own.

Procedure

Step 1 Run the ipoa default gateway command to set the default gateway of the IPoA user.

Step 2 Run the display ipoa cong command to query the default gateway of the IPoA user is setcorrectly.

—-End

Example

To set the default gateway of the IPoA user as 10.1.1.1, do as follows:huawei(config)#ipoa default gateway 10.1.1.1

Run the display ipoa cong command and you can nd that the default gateway of the IPoAuser is set correctly.huawei(config)#display ipoa configIPoA status : enableIPoA user default gateway : 10.1.1.1IPoA expire-time : 300 s

Related Operations

Table 19-13 lists the related operations for setting the default gateway of the IPoA user.

Table 19-13 Related operations for setting the default gateway of the IPoA user

To... Run the Command...Display the IPoA conguration display ipoa congRestore the default gateway of the IPoA user undo ipoa default gateway



Conguration Guide

19.10.4 Conguring the Encapsulation Type of the IPoA UserThis operation enable you to congure the encapsulation type of the IPoA user.

Background Informationn By default, LLC and VC-MUX are used for the IPoA encapsulation. You can set the

encapsulation type as needed.n When conguring LLC for the IPoA service, pay attention to the following points:

– LLC encapsulation supports both dynamic and static source IP address learning. Soyou do not need to specify the source IP address if the modem automatically reportsthe IP address.

– When a default gateway has been congured for the IPoA service, you need notcongure the destination IP address for the IPoA user. In this case, the user’sdestination IP address is that of the default gateway.

– After you have congured IPoA encapsulation for an xDSL port, you can delete avirtual port only after you have changed the encapsulation type to LLC bridge.

– Make sure the MAC address pool is congured before the encapsulation conguration.Otherwise, the encapsulation conguration fails.

n When conguring VC-MUX for the IPoA service, pan attention to the following points:– Since VC-MUX encapsulation supports only static source IP address learning, you

must specify the source IP address.– When a default gateway has been congured for the IPoA service, you need not

congure the destination IP address for the IPoA user. In this case, the user’sdestination IP address is that of the default gateway.

– After you have congured IPoA encapsulation for an xDSL port, you can delete avirtual port only after you have changed the encapsulation type to LLC bridge.

– Make sure the MAC address pool is congured before the encapsulation conguration.Otherwise, the encapsulation conguration fails.

Procedure

Step 1 Run the encapsulation command to congure the encapsulation type of the IPoA user.

Step 2 Run the display encapsulation type command to query the conguration.

—-End

Example

To congure the encapsulation type of the IPoA user as LLC, do as follows:huawei(config)#encapsulation 0/2/0 vpi 0 vci 34{ type<K> }:type{ bridge<K>|pppoa<K>|auto<K>|ipoa<K> }:ipoa{ llc<K>|vc-mux<K> }:llc{ <cr>|srcIP<K>|dstIP<K> }:Command:

encapsulation 0/2/0 vpi 0 vci 34 type ipoa llcChanging encapsulation type may cause service interruption, are you sure to

make the operation? (y/n)[n]ySet encapsulation type successfully

Run the display encapsulation type command to query the LLC-IPoA user.huawei(config)#display encapsulation type ipoa llc{ <cr>|number<K> }:Command:

display encapsulation type ipoa llc--------------------------------------------------------------------------F/S /P VPI VCI ENCAP SRCIP DSTIP SRCIP-MODE--------------------------------------------------------------------------



0/2 /0 0 34 llc_ip 0.0.0.0 1.1.1.1 dynamic--------------------------------------------------------------------------Total: 1Note : F--Frame, S--Slot, P--Port(or Virtual Port, such as IMA GROUP,

VLAN ID etc.), The vpi is access-end VLAN ID in vdsl port

To congure the encapsulation type of the IPoA user as VC-MUX, do as follows:huawei(config)#encapsulation{ frame/slot/port<S><1,15>|frame/slot<S><1,15> }:0/2/0 vpi 0 vci 34{ type<K> }:type{ bridge<K>|pppoa<K>|auto<K>|ipoa<K> }:ipoa{ llc<K>|vc-mux<K> }:vc-mux{ srcIP<K> }:srcIP 10.1.1.2{ <cr>|dstIP<K> }:Command:

encapsulation 0/2/0 vpi 0 vci 34 type ipoa vc-mux srcIP 10.1.1.2Changing encapsulation type may cause service interruption, are you sure to


Run the display encapsulation type command to query the VC-MUX-IPoA user.huawei(config)#display encapsulation type ipoa vc-mux{ <cr>|number<K> }:

Command:display encapsulation type ipoa vc-mux

----------------------------------------------------------------------------F/S /P VPI VCI ENCAP SRCIP DSTIP SRCIP-MODE----------------------------------------------------------------------------0/2 /0 0 34 vc_ip 10.1.1.2 10.1.1.1 static----------------------------------------------------------------------------Total: 1Note : F--Frame, S--Slot, P--Port(or Virtual Port, such as IMA GROUP,

VLAN ID etc.), The VPI is access-end VLAN ID in VDSL port

19.11 Conguring PPPoA/PPPoE Protocol ConversionThe MA5600 supports the conversion between the PPPoA and PPPoE protocols. In this way,the PPPoA users can access the upper layer IP network to enhance the access ability andnetwork capability of the MA5600.

19.11.1 Enabling PPPoA Protocol ConversionThis operation enables you to convert the PPPoA protocol to PPPoE protocol, so that thePPPoA user can access the upper layer IP network.19.11.2 Conguring the Encapsulation Type of the PPPoA UserThis operation enables you to congure the encapsulation type of the PPPoA user.19.11.3 Enabling PPPoA/PPPoE MRU NegotiationThis operation enables you to enable PPPoA/PPPoE maximum receive unit (MRU) negotiation.

19.11.1 Enabling PPPoA Protocol Conversion

This operation enables you to convert the PPPoA protocol to PPPoE protocol, so that thePPPoA user can access the upper layer IP network.

Procedure

Step 1 Run the pppoa enable command to enable PPPoA/PPPoE protocol conversion.

Step 2 Run the display pppoa cong command to query the PPPoA/PPPoE protocol conversion state.

—-End



Conguration Guide

Example

To enable the PPPoA/PPPoE protocol conversion, do as follows:huawei(config)#pppoa enable

Run the display pppoa cong command and you can query the PPPoA protocol conversionis enabled.huawei(config)#display pppoa configGlobal PPPoA-to-PPPoE conversion : EnableMax-receive-unit negotiate function: Disable

Related Operations

Table 19-14 lists the related operations for enabling PPPoA protocol conversion.

Table 19-14 Related operations for enabling PPPoA protocol conversion

To... Run the Command...Disable the PPPoA protocol conversion pppoa disableQuery the PPPoA conguration display pppoa cong

19.11.2 Conguring the Encapsulation Type of the PPPoA UserThis operation enables you to congure the encapsulation type of the PPPoA user.

Background Informationn By default, LLC and VC-MUX are used for the PPPoA encapsulation. You can set the

encapsulation type as needed.n For PPPoA access, LLC and VC-MUX encapsulation are similar. Congure it based on

the actual access user type.n After you have congured PPPoA encapsulation for an xDSL port, you can delete a

virtual service port only when you have changed the encapsulation type to LLC bridge.n Be sure to congure the MAC address pool before the encapsulation conguration.

Otherwise, the encapsulation conguration will fail.

Procedure

Step 1 Run the encapsulation command to congure the encapsulation type of the PPPoA user.

Step 2 Run the display encapsulation type command to query the conguration.

—-End

Example

To congure the encapsulation type of a PPPoA user as LLC, do as follows:huawei(config)#encapsulation 0/2/0 vpi 0 vci 34{ type<K> }:type{ bridge<K>|pppoa<K>|auto<K>|ipoa<K> }:pppoa{ llc<K>|vc-mux<K> }:llcCommand:

encapsulation 0/2/0 vpi 0 vci 34 type pppoa llcChanging encapsulation type may cause service interruption, are you sure to


Run the display encapsulation type command to query the LLC-PPPoA user.huawei(config)#display encapsulation type pppoa llc



--------------------------------------------------------------------------F/S /P VPI VCI ENCAP SRCIP DSTIP SRCIP-MODE--------------------------------------------------------------------------0/2 /0 0 34 llc_ppp - - ---------------------------------------------------------------------------Total: 1Note : F--Frame, S--Slot, P--Port(or Virtual Port, such as IMA GROUP,

VLAN ID etc.), The vpi is access-end VLAN ID in vdsl port

Related Operation

Table 19-15 lists the related operation for conguring the encapsulation type of the PPPoA user.

Table 19-15 Related operation for conguring the encapsulation type of the PPPoA user

To... Run the Command...Query the user encapsulation type display encapsulation type

19.11.3 Enabling PPPoA/PPPoE MRU NegotiationThis operation enables you to enable PPPoA/PPPoE maximum receive unit (MRU) negotiation.

Background InformationThe MA5600 determines whether to segment and resemble packets according to thePPPoA/PPPoE MRU conguration.n MRU enabled

– The PC initiates the PPPoE connection and negotiates by MRU of 1492 bits. In thiscase, the packets will be segmented and resembled.

n MRU disabled– The MA5600 identies the PPPoE packets converted from PPPoA packets. It adds

a Tag to the packets and then sends them to the upper layer BRAS. The BRASnegotiates with the CPE according to the 1500-byte MRU. By doing so, the size ofthe MTU between the CPE and the BRAS is equal to that of the standard MTU of theEthernet. In this case, the packet is not segmented and reassembled.

Procedure

Step 1 Run the pppoa mru enable command to enable PPPoA/PPPoE MRU negotiation.

Step 2 Run the display pppoa cong command to query PPPoA and MRU switch state.

—-End

Example

To enable the MRU negotiation, do as follows:

huawei(cong)#pppoa mru enable

Run the display pppoa cong command to query the PPPoA and MRU conguration.huawei(config)#display pppoa configGlobal PPPoA-to-PPPoE conversion : EnableMax-receive-unit negotiate function: Enable

Related Operation

Table 19-16 lists the related operation for enabling PPPoA/PPPoE MRU negotiation.



Conguration Guide

Table 19-16 Related operation for enabling PPPoA/PPPoE MRU negotiation

To... Run the Command...Disable PPPoA/PPPoE MRU negotiation pppoa mru disable

19.12 Querying an ADSL2+ PortThis operation enables you to query the comprehensive information about an ADSL2+ port.

Background InformationAn ADSL2+ port may be in activating, activated, deactivated or loopback state.

Figure 19-10 shows the inter-conversion between these states.

Figure 19-10 Inter-conversion between ADSL2+ port states

Procedure

Run the display interface adsl command to query the comprehensive information about anADSL2+ port.

—-End

Example

To display the comprehensive information about ADSL2+ port 0/2/0, do as follows:huawei#display interface adsl 0/2/0

Adsl 0/2/0 is downThe ADSL link is activatingDescription : --Bind line-profile No.1002 ADSL LINE PROFILE 1002Bind alarm-profile No. 1 DEFVALBind no ext-profileBTV user bind profile name : --Hardware is ATU-CLast UP time : --Last DOWN time : --Current operational mode : No protocol selected /Current downstream Rate : 0Current upstream Rate : 0Total count of line training : 1Total Up stream cells num(cell) : 0Total Up stream packets num(packet) : 0Total Down stream cells num(cell) : 0Total Down stream packets num(packet) : 0Total Down stream packets discarded due to congestion(packet) : 0PVC 0/35PVC encapsulation : Bridge LLCrx-cttr : 2tx-cttr : 2VLAN : 100Max mac-address learning count : 255Support Down MultiCast Stream : enableUp stream cells num(cell) : 0Up stream packets num(packet) : 0Down stream cells num(cell) : 0Down stream packets num(packet) : 0



Related Operations

Table 19-17 lists the related operations for querying an ADSL2+ port.

Table 19-17 Related operations for querying an ADSL2+ port

To... Run the Command...Query the state of an ADSL2+ port display port stateQuery the settings of an ADSL2+ port display parameterQuery the performance statistics of anADSL2+ port

display statistics performance

Query bit allocation display line bit-allocationQuery the subcarrier SNR of theactivated line

display line snr

Query the alarm state of an ADSL2+port

display alarm state

Query the operation parameters of anactivated line

display line operation

Set the switch controlling the detaileddisplay of ADSL2+ line operations

adsl line-operation detail {enable | disable}

Query the switch controlling thedetailed display of ADSL2+ lineoperations

display adsl line-operation detail cong


SmartAX MA5600 Multi-service Access ModuleConguration Guide 20 SHDSL Service Conguration

20 SHDSL Service Conguration


20.1 OverviewThis section describes the service description and service specications of SHDSL.20.2 Conguration Example of the SHDSL IPoA ServiceThis example shows how to congure the SHDSL IPoA service so that the user can access theInternet through the SHDSL lines.20.3 Conguration Example of the SHDSL PPPoA ServiceThis example shows how to congure the SHDSL PPPoA service so that the user can accessthe Internet through the SHDSL lines.20.4 Conguration Example of the SHDSL IPoE/PPPoE ServiceThis example shows how to congure the SHDSL service in IPoE/PPPoE mode so that theuser can access the Internet through the SHDSL lines.20.5 Adding an SHDSL Line ProleThis operation enables you to add an SHDSL line prole. The SHDSL line prole includesa majority of parameters of the ports. After the line prole is congured, it can be usedto activate the ports.20.6 Adding an SHDSL Alarm ProleThis operation enables you to add an SHDSL alarm prole. The SHDSL alarm prole isused to set a group of alarm thresholds for measuring and monitoring the performances of anactive SHDSL line. When a statistic reaches the threshold, the MA5600 informs the deviceof the event, and sends alarms to the NMS.20.7 Binding an SHDSL Alarm ProleThis operation enables you to bind an SHDSL alarm prole to SHDSL ports to validate thealarm prole after the SHDSL ports are activated.20.8 Activating an SHDSL PortThis operation enables you to activate an SHDSL port for service transmission.20.9 Querying an SHDSL PortThis operation enables you to query the SHDSL port status to check the port conditions.20.10 Conguring the Clock ModeThis operation enables you to congure the clock mode.


20 SHDSL Service CongurationSmartAX MA5600 Multi-service Access Module

Conguration Guide

20.1 OverviewThis section describes the service description and service specications of SHDSL.

Service DescriptionThe Single-line High Speed Digital Subscriber Line (SHDSL) technology provides symmetrichigh rate leased line access service over twisted pairs to meet the requirements from the small tomedium-sized enterprises or SOHO users. SHDSL offers a reach distance from 3 km to 6 km.

The SHEA board of the MA5600 supports the SHDSL.bis line. The rate of the SHDSL rangesfrom 192 kbit/s to 5969 kbit/s and can be 2312Kbit/s, with the rate adjustment granularity of8 bits

Service SpecicationsThe MA5600 provides the SHDSL service through the SHEA board. Each SHEA boardprovides 32 SHDSL ports.

Table 20-1 shows the encapsulation type mapping between the MA5600 and the Modem.

Table 20-1 Encapsulation type mapping between the MA5600 and the Modem

Access Type Modem EncapsulationType

MA5600 Encapsulation Type

PPPoA PPPoA PPPoA or AutoIPoA RFC1483 Route or IPoA IPoA or AutoIPoE RFC1483 Bridge Bridge or Auto

RFC1483 Bridge Bridge or AutoPPPoEPPPoE Bridge or Auto

20.2 Conguration Example of the SHDSL IPoA ServiceThis example shows how to congure the SHDSL IPoA service so that the user can access theInternet through the SHDSL lines.

NetworkingFigure 20-1 shows a sample network for conguring the SHDSL IPoA service.



Figure 20-1 Sample network for conguring the SHDSL IPoA service

Data PlanTable 20-2 shows the data plan for conguring SHDSL IPoA service.

Table 20-2 Data plan for conguring the SHDSL IPoA service

Item Data RemarksSHDSL port: 0/5/0 -

VLAN ID: 10 The same as that of the upper layerdevice.

SHEA board

Downstream bandwidth: 2 Mbit/s Should meet the user’srequirements.

Upstream port: 0/7/0 -SCU boardGateway IP address: 10.1.1.1 -

Background InformationBefore conguring SHDSL service, make sure that:n The network devices and lines are in the normal state.n The SHEA board is in the normal state.n The upper layer router of the MA5600 has assigned the VLAN for the SHDSL user.

NOTE

n The MA5600 can restrict the user bandwidth through a specied trafc prole or SHDSL line prole.When both the trafc prole and the SHDSL line prole work, the smaller one of the bandwidthsrestricted by the two proles is used as the user bandwidth.

n The following takes the user rate restriction through the SHDS line prole for example. Thebandwidth congured for the trafc prole shall be higher than that for the line prole.

Conguration FlowchartFigure 20-2 shows the owchart for conguring SHDSL IPoA service.



Conguration Guide

Figure 20-2 Flowchart for conguring the SHDSL IPoA service



Procedure

Step 1 Add and conrm the board.1. Insert the board into the MA5600 shelf, and the system detects the board automatically.2. Run the following command to conrm the board if it is in the auto discovery state.huawei(config)#board confirm 0/5

Step 2 Query if there is an appropriate trafc prole. If there is no appropriate trafc prole, add one.huawei(config)#display traffic table from-index 0{ <cr>|to-index<K> }:Command:

display traffic table from-index 0Traffic parameters for IP service:--------------------------------------------------------------------TID CAR(kbps) Priority Pri-Policy--------------------------------------------------------------------0 960 6 tag-pri1 2496 6 tag-pri2 512 0 tag-pri3 576 2 tag-pri4 64 4 tag-pri5 2048 0 tag-pri6 -- 0 tag-pri-----------------------------------------------------------------Traffic parameters for ATM service:--------------------------------------------------------------------TID Service Traf CLP01PCR CLP0PCR CLP01SCR CLP0SCR MBS CDVT PPD/EPD/SHAPE

Type Type kbps kbps kbps kbps cells 1/10us--------------------------------------------------------------------0 cbr 2 1000 -- -- -- -- -- off/off/--1 cbr 2 2500 -- -- -- -- -- off/off/--2 ubr 2 512 -- -- -- -- -- on /on /--3 nrt-vbr 5 1200 -- 600 -- 250 -- on /on /--4 rt-vbr 15 128 -- -- 64 300 10000000 on /on /off5 ubr 2 2048 -- -- -- -- -- on /on /--6 ubr 1 -- -- -- -- -- -- off/off/---------------------------------------------------------------------Total Num : 7Traffic type definition:1:NoTrafficDescriptor 2:NoClpNoScr 3:ClpNoTaggingNoScr4:ClpTaggingNoScr 5:NoClpScr 6:ClpNoTaggingScr7:ClpTaggingScr 8:ClpNoTaggingMcr 9:ClpTransparentNoScr10:ClpTransparentScr 11:NoClpTaggingNoScr 12:NoClpNoScrCdvt13:NoClpScrCdvt 14:ClpNoTaggingScrCdvt 15:ClpTaggingScrCdvt--------------------------------------------------------------------

The query result shows trafc prole 1 is available.

Step 3 Create a VLAN and add the upstream port and service port to it. You can create a MUX VLANor a smart VLAN. In this example, a MUX VLAN is created.1. Create VLAN 10 and add upstream port 0/7/0 to it.

huawei(config)#vlan 10 muxhuawei(config)#port vlan 10 0/7 0

2. Add a service port to VLAN 10.huawei(config)#service-port vlan 10 shdsl 0/5/0 vpi 0 vci35 rx-cttr 1 tx-cttr 1

Step 4 Make sure the port is deactivated.1. Run the display port state command to query the port state. If the port is activated

already, deactivate it rst and then use the new line prole to activate it again.2. Deactivate SHDSL port 0/5/0.

huawei(config)#interface shl 0/5huawei(config-if-shl-0/5)#deactivate 0

Step 5 Query if there is an appropriate line prole.If there is no appropriate prole, add one. Line prole 1 is the default line prole with thebandwidth of 2048 kbit/s. In general, use the default line prole. In this example, a newline prole is created.huawei(config-if-shl-0/5)#quithuawei(config)#shdsl line-profile add 3



Conguration Guide

During inputting,press ’Q’ to quit,then settings at this time will be ignored> Do you use the default data to create a line profile?(y/n)[y]:n> G.SHDSL interface mode of line (1--two wire;2--four wire)[1]:> G.SHDSL minimum line rate(Value must be multiple of 64,except 2312kbps,192~5696,2312 kbps)[2048]:

> G.SHDSL maximum line rate(Value must be multiple of 64,except 2312kbps,192~5696,2312 kbps)[2048]:

> Power Spectral Density mode (1--symmetric;2--asymmetric)[1]:> Transmission mode (1--G.991.2 Annex A;2--G.991.2 Annex B;3--support Annex A&B)[3]:

> Remote enable (1--enabled;2--disabled)[1]:> Probe enable (1--disabled;2--enabled)[1]:> Do you config the target SNR margin?(y/n)[n]:Add profile 3 successfully

Step 6 Query whether there is an appropriate alarm prole.1. If there is no appropriate alarm prole, add one. In this example, the default alarm

prole 1 is created.2. An SHDSL alarm prole must be bound to a port before this prole can take effect.3. By default, each port is bound with alarm prole 1. If the port has been bound with

another alarm prole, rebind it with alarm prole 1.huawei(config)#interface shl 0/5huawei(config-if-shl-0/5)#alarm-config 0 1

Step 7 Activate the port.Use alarm prole 3 to activate SHDSL port 0/5/0.huawei(config-if-shl-0/5)#activate 0 3

Step 8 Congure MAC address pool.Congure MAC address pool 0 with the start address of 0000-0000-0001.huawei(config-if-shl-0/5)#quithuawei(config)#mac-pool 0 0000-0000-0001

Step 9 Enable IPoA protocol switch.huawei(config)#ipoa enable

Step 10 Congure IPoA default gateway.huawei(config)#ipoa default gateway 10.1.1.1

Step 11 Set the encapsulation type.Set the encapsulation type of SHDSL port 0/5/0 as IPoA-LLC.huawei(config)#encapsulation 0/5/0 vpi 0 vci 35 type ipoa llc srcIP 10.1.1.20

In the case of IPoA access, select the dynamic IP address (without specifying the source IPaddress) or the static IP address (specifying the source IP address) for the packets. To switchfrom a dynamic address to a static address in IPoA mode, you need to adopt LLC-Bridgeencapsulation rst, and then adopt the IPoA static address encapsulation.

Step 12 Query the conguration information and the port state.huawei(config)#interface shl 0/5huawei(config-if-shl-0/5)#display port state 0--------------------------------------------------------------------Port Running Control Line Alarm Running Config BindID Status Status Profile Profile Operation Operation Status--------------------------------------------------------------------

0 Activated Active 3 1 Normal None Normal--------------------------------------------------------------------

Step 13 Save the data.huawei(config-if-shl-0/5)#quithuawei(config)#save

—-End

Result

After the conguration, the user can access the Internet in IPoA mode.



20.3 Conguration Example of the SHDSL PPPoA ServiceThis example shows how to congure the SHDSL PPPoA service so that the user can accessthe Internet through the SHDSL lines.

NetworkingFigure 20-3 shows a sample network for conguring the SHDSL PPPoA service.

Figure 20-3 Sample network for conguring the SHDSL PPPoA service

Data PlanTable 20-3 shows the data plan for conguring the SHDSL PPPoA service.

Table 20-3 Data plan for conguring the SHDSL PPPoA service



SHEA board



Background InformationBefore conguring the SHDSL service, make sure that:n The network devices and lines are in the normal state.n The SHEA board is in the normal state.n The upper layer router of the MA5600 has assigned the VLAN for the SHDSL user.



Conguration Guide

NOTE



Conguration FlowchartFigure 20-4 shows the owchart for conguring the SHDSL PPPoA service.



Figure 20-4 Flowchart for conguring the SHDSL PPPoA service



Conguration Guide

Procedure


Step 2 Query if an appropriate trafc prole exists.If there is no an appropriate trafc prole, add one.huawei(config)#display traffic table from-index 0Traffic parameters for IP service:--------------------------------------------------------------------TID CAR(kbps) Priority Pri-Policy--------------------------------------------------------------------0 960 6 tag-pri1 2496 6 tag-pri2 512 0 tag-pri3 576 2 tag-pri4 64 4 tag-pri5 2048 0 tag-pri6 -- 0 tag-pri--------------------------------------------------------------------Traffic parameters for ATM service:-------------------------------------------------------------------TID Service Traf CLP01PCR CLP0PCR CLP01SCR CLP0SCR MBS CDVT PPD/EPD/SHAPE

Type Type kbps kbps kbps kbps cells 1/10us--------------------------------------------------------------------0 cbr 2 1000 -- -- -- -- -- off/off/--1 cbr 2 2500 -- -- -- -- -- off/off/--2 ubr 2 512 -- -- -- -- -- on /on /--3 nrt-vbr 5 1200 -- 600 -- 250 -- on /on /--4 rt-vbr 15 128 -- -- 64 300 10000000 on /on /off5 ubr 2 2048 -- -- -- -- -- on /on /--6 ubr 1 -- -- -- -- -- -- off/off/----------------------------------------------------------------------Total Num : 7Traffic type definition:1:NoTrafficDescriptor 2:NoClpNoScr 3:ClpNoTaggingNoScr4:ClpTaggingNoScr 5:NoClpScr 6:ClpNoTaggingScr7:ClpTaggingScr 8:ClpNoTaggingMcr 9:ClpTransparentNoScr10:ClpTransparentScr 11:NoClpTaggingNoScr 12:NoClpNoScrCdvt13:NoClpScrCdvt 14:ClpNoTaggingScrCdvt 15:ClpTaggingScrCdvt--------------------------------------------------------------------

The query result shows that the trafc prole 1 is available.

Step 3 Create a VLAN and add the upstream port and service port to the VLAN. You can create aMUX VLAN or a smart VLAN. In this example, a MUX VLAN is created.1. Create VLAN 10 and add the upstream port0/7/0 to it.




already, deactivate it rst and then use the new line prole to activate it again.2. Deactivate SHDSL port0/5/0.


Step 5 Query whether there is an appropriate line prole.1. If there is no appropriate line prole, add one.2. Line prole 1 is the default line prole with the bandwidth of 2048 kbit/s. In general,

use the default line prole.huawei(config-if-shl-0/5)#quithuawei(config)#shdsl line-profile add 3



During inputting,press ’Q’ to quit,then settings at this time will be ignored> G.SHDSL interface mode of line (1--two wire;2--four wire)[1]:> Do you use the default data to create a line profile?(y/n)[y]:n> G.SHDSL minimum line rate(Value must be multiple of 64,except 2312kbps,192~5696,2312 kbps)[2048]:




Step 6 Query if there is an appropriate alarm prole.1. If there is no appropriate alarm prole, add one. In this example, the default alarm



Step 7 Bind SHDSL port with the default alarm prole.Bind SHDSL port 0/5/0 using the default alarm prole. Alarm prole 1 is the default alarm. Ingeneral, use the default alarm prole. In this example, add an alarm prole as follows:huawei(config-if-shl-0/5)#alarm-config 0 1

Step 8 Activate SHDSL port 0/5/0.huawei(config-if-shl-0/5)#activate 0 3

Step 9 Congure the MAC address pool.Congure MAC address pool 0 with the start address of 0000-0000-0001.huawei(config-if-shl-0/5)#quithuawei(config)#mac-pool 0 1000-0000-0001

Step 10 Enable the PPPoA protocol switch.huawei(config)#pppoa enable

Step 11 Set the encapsulation type.Set the encapsulation type of SHDSL port 0/5/0 as PPPoA-LLC.huawei(config)#encapsulation{ frame/slot/port<S><1,15>|frame/slot<S><1,15> }:0/5/0{ vpi<K> }:vpi{ vpi<0,4095> }:0{ vci<K> }:vci{ vci<32,65535> }:35{ type<K> }:type{ bridge<K>|ipoa<K>|pppoa<K> }:pppoa{ llc<K>|vc-mux<K> }:llc

Step 12 Query conguration information and the port state.huawei(config)#interface shl 0/5huawei(config-if-shl-0/5)#display port state 0--------------------------------------------------------------------Port Running Control Line Alarm Running Config BindID Status Status Profile Profile Operation Operation Status--------------------------------------------------------------------0 Activated Active 3 1 Normal None Normal--------------------------------------------------------------------


—-End



Conguration Guide

Result

After the conguration, you can access the Internet in the PPPoA mode.

20.4 Conguration Example of the SHDSL IPoE/PPPoEService

This example shows how to congure the SHDSL service in IPoE/PPPoE mode so that theuser can access the Internet through the SHDSL lines.

NetworkingFigure 20-5 shows a sample network for the SHDSL IPoE/PPPoE service.

Figure 20-5 Sample network of the SHDSL IPoE/PPPoE service

Data PlanTable 20-4 shows the data plan for conguring the SHDSL IPoE/PPPoE service.

Table 20-4 Data plan for the SHDSL IPoE/PPPoE service


VLAN ID: 10 The same as that of the upper layerdevice.

SHEA board





Background InformationBefore conguring the SHDSL service, make sure that:n The network devices and lines are in the normal state.n The SHEA board is in the normal state.n The upper layer router of the MA5600 has assigned the VLAN for the SHDSL user.

NOTE



Conguration FlowchartFigure 20-6 shows the owchart for conguring the SHDSL IPoE/PPPoE service.



Conguration Guide

Figure 20-6 Flowchart for conguring the SHDSL IPoE/PPPoE service



Procedure


Step 2 Query if there is an appropriate trafc prole.If there is no appropriate trafc prole, add one.huawei(config)#display traffic table from-index 0Traffic parameters for IP service:--------------------------------------------------------------------TID CAR(kbps) Priority Pri-Policy--------------------------------------------------------------------0 960 6 tag-pri1 2496 6 tag-pri2 512 0 tag-pri3 576 2 tag-pri4 64 4 tag-pri5 2048 0 tag-pri6 -- 0 tag-pri--------------------------------------------------------------------Traffic parameters for ATM service:--------------------------------------------------------------------TID Service Traf CLP01PCR CLP0PCR CLP01SCR CLP0SCR MBS CDVT PPD/EPD/SHAPE

Type Type kbps kbps kbps kbps cells 1/10us--------------------------------------------------------------------0 cbr 2 1000 -- -- -- -- -- off/off/--1 cbr 2 2500 -- -- -- -- -- off/off/--2 ubr 2 512 -- -- -- -- -- on /on /--3 nrt-vbr 5 1200 -- 600 -- 250 -- on /on /--4 rt-vbr 15 128 -- -- 64 300 10000000 on /on /off5 ubr 2 2048 -- -- -- -- -- on /on /--6 ubr 1 -- -- -- -- -- -- off/off/----------------------------------------------------------------------Total Num : 7Traffic type definition:1:NoTrafficDescriptor 2:NoClpNoScr 3:ClpNoTaggingNoScr4:ClpTaggingNoScr 5:NoClpScr 6:ClpNoTaggingScr7:ClpTaggingScr 8:ClpNoTaggingMcr 9:ClpTransparentNoScr10:ClpTransparentScr 11:NoClpTaggingNoScr 12:NoClpNoScrCdvt13:NoClpScrCdvt 14:ClpNoTaggingScrCdvt 15:ClpTaggingScrCdvt--------------------------------------------------------------------

The query result shows trafc prole 1 is available.

Step 3 Create a VLAN and add the upstream port and service port to the VLAN. You can create aMUX VLAN or a smart VLAN. In this example, a MUX VLAN is created.1. Create VLAN 10 and add upstream port 0/7/0 to it.




already, deactivate it rst and then use the new line prole to activate it again.2. Deactivate SHDSL port 0/5/0.


Step 5 Query if there is an appropriate line prole.

n Line prole 1 is the default line prole with the bandwidth of 2048 kbit/s.n In general, use the default line prole.In this example, a new line prole is created.



Conguration Guide

huawei(config-if-shl-0/5)#quithuawei(config)#shdsl line-profile add 3During inputting,press ’Q’ to quit,then settings at this time will be ignored

> G.SHDSL interface mode of line (1--two wire;2--four wire)[1]:> Do you use the default data to create a line profile?(y/n)[y]:n> G.SHDSL minimum line rate(Value must be multiple of 64,except 2312kbps,192~5696,2312 kbps)[2048]:




Step 6 Query if there is an appropriate alarm prole.1. If there is no appropriate alarm prole, add one. In this example, the default alarm



Step 7 Activate the port.Use prole 3 to activate SHDSL port 0/5/0.huawei(config-if-shl-0/5)#activate 0 3

Step 8 Query conguration information and the port state.huawei(config-if-shl-0/5)#display port state 0--------------------------------------------------------------------Port Running Control Line Alarm Running Config BindID Status Status Profile Profile Operation Operation Status--------------------------------------------------------------------

0 Activated Active 3 1 Normal None Normal--------------------------------------------------------------------


—-End

Result

After the conguration, the user can access the Internet in IPoE/PPPoE mode.

20.5 Adding an SHDSL Line ProleThis operation enables you to add an SHDSL line prole. The SHDSL line prole includesa majority of parameters of the ports. After the line prole is congured, it can be usedto activate the ports.

Background InformationEach SHDSL line of the MA5600 is associated with a specic channel mode, and is boundwith a line prole.

A conguration table can hold up to 100 line proles, including two default proles, prole 1and prole 100, which cannot be deleted but can be modied.



Conguration FlowchartFigure 20-7 shows the owchart for adding an SHDSL line prole.

Figure 20-7 Flowchart for adding an SHDSL line prole



Conguration Guide

Procedure

Run the shdsl line-prole add command to add an SHDSL line prole.

—-End

Example

To add an SHDSL line prole with the index of 3, do as follows:huawei(config)#shdsl line-profile add 3During inputting,press ’Q’ to quit,then settings at this time will be ignoredDo you want to name the profile (y/n) [n]:

> G.SHDSL interface mode of line (1--two wire;2--four wire)[1]:1> Do you use the default data to create a line profile?(y/n)[y]:n> G.SHDSL minimum line rate(Value must be multiple of 64,except 2312kbps,192~2304,2312 kbps)[2048]:1024

> G.SHDSL maximum line rate(Value must be multiple of 64,except 2312kbps,192~2304,2312 kbps)[2048]:2312



Parameter Description

Table 20-5 lists the parameters of an SHDSL line prole.

Table 20-5 Parameters of an SHDSL line prole

Parameter DescriptionProle index You can enter a prole index or press Enter to enable the system

to allocate a prole index.G.SHDSL interfacemode of line

Selects interface mode of line.

G.SHDSL minimumline rate

Species the minimum line rate.

G.SHDSL maximumline rate

In the process of setting up an SHDSL connection, if thecalculated downstream/upstream rate of an SHDSL line is higherthan the set maximum value, the system will limit the rate to theset value while increasing the SNR margin. If the calculateddownstream/upstream rate is lower than the set maximum rate,the system will set up the SHDSL connection at the calculatedrate, while maintaining the target SNR margin.

Power Spectral Densitymode

There are two types of PSD: symmetrical and asymmetrical.

Transmission mode There are three types of SHDSL transmission modes:

n ITU-T G.991.2 Annex An ITU-T G.991.2 Annex Bn Annex A&B

Remote enable It species whether to manage the STU-R.



Parameter DescriptionProbe enable n If this function is enabled, the system implements the line

probe function to search the best line rate.n If this function is disabled, the system skips the line rateadaptation process to shorten the time to set up the G.SHDSLline.

n By default, the probe function is disabled.Downstream/Upstreamcurrent target SNRmargin

n The target SNR margin is the preserved SNR margin to ensurenormal communication in the case of line SNR deterioration.The larger the target SNR margin, the less chances ofoccurrence of the line error, and the safer the system can be.Meanwhile, the larger the target SNR margin, the lower themaximum data transmission rate.

n Therefore, the target SNR margin must be adjusted based onthe actual line conditions.

Downstream/Upstreamworst case target SNRmargin

It species the downstream/upstream SNR threshold in the worstcase.

Target SNR marginbitmap(0x01~0x0f,bit0--down current,bit1-downworst, bit2--upcurrent,bit3--up worst)

Range: 0x01-0x0F.

n bit0=1: makes the settings of current downstream target SNRmargin take effect.

n bit1=1: makes the settings of worst downstream target SNRmargin take effect.

n bit2=1: makes the settings of current upstream target SNRmargin take effect.

n bit3=1: makes the settings of worst upstream target SNRmargin take effect.

By default, the value is 0x01. That is, by default, the settings ofcurrent downstream target SNR margin take effect.

20.6 Adding an SHDSL Alarm ProleThis operation enables you to add an SHDSL alarm prole. The SHDSL alarm prole isused to set a group of alarm thresholds for measuring and monitoring the performances of anactive SHDSL line. When a statistic reaches the threshold, the MA5600 informs the deviceof the event, and sends alarms to the NMS.

Background InformationThere are two default alarm proles, prole 1 and prole 100.

The default alarm prole cannot be deleted.

Conguration FlowchartFigure 20-8 shows the owchart for adding an SHDSL alarm prole.



Conguration Guide

Figure 20-8 Flowchart for adding an SHDSL alarm prole

Procedure

Run the shdsl alarm-prole add command to add an SHDSL alarm prole.

—-End

Example

To add an SHDSL alarm prole with the index of 3, do as follows:huawei(config)#shdsl alarm-profile add 3During inputting,press ’Q’ to quit,then settings at this time will be ignoredDo you want to name the profile (y/n) [n]:yPlease input profile name:profile-3

> Do you use the default data to create an alarm profile?(y/n)[y]:n> Loop attenuation threshold (0~127 db)[0]:> SNR margin threshold (0~10 db)[0]:> ES threshold (0~900 s)[0]:> SES threshold (0~900 s)[0]:> CRC anomaly threshold (0~58981500)[0]:> LOSWS threshold (0~900 s)[0]:> UAS threshold (0~900 s)[0]:Add profile 3 successfully




Table 20-6 lists the parameters of an SHDSL alarm prole.

Table 20-6 Parameters of an SHDSL alarm prole

Parameter DescriptionProle index You can enter a prole number or press Enter to enable the

system to designate a number for it. The prole index is unique,and is in the range of 2 to 99.

Loop attenuation threshold The system collects performance data generated within any15-minute period. If the loop attenuation exceeds the threshold,the system will report an alarm.

SNR margin threshold The system collects SNR related performance data generatedwithin any 15-minute period. If the SNR margin exceeds thethreshold, the system will report an alarm.

ES threshold The system collects ES related performance data generatedwithin any 15-minute period. If the accumulated ES exceedsthe threshold, the system will report an alarm.

SES threshold The system collects SES related performance data generatedwithin any 15-minute period. If the accumulative SES exceedsthe threshold, the system will report an alarm.

CRC anomalies numberthreshold

The system collects CRC related performance data generatedwithin any 15-minute period. If the accumulative CRC exceedsthe threshold, the system will report an alarm.

LOSWS threshold The system collects LOSW related performance data generatedwithin any 15-minute period. If the LOSW exceeds thethreshold, the system will report an alarm.

UAS threshold The system collects UAS related performance data generatedwithin any 15-minute period. If the UAS exceeds the threshold,the system will report an alarm.

Related Operations

Table 20-7 lists the related operations for adding an SHDSL alarm prole.

Table 20-7 Related operations for adding an SHDSL alarm prole

To... Run the Command ... RemarksDelete an SHDSLalarm prole

shdsl alarm-prole delete You cannot delete the default alarmproles or a referenced alarmprole.

Query an SHDSLalarm prole

display shdsl alarm-prole Run the command in privilegemode or SHDSL cong mode.

Quickly add an SHDSLalarm prole

shdsl alarm-prolequickadd

The system adopts non-interactivemode for the input of the parameterof the command. The commandserves as a complement to the shdslalarm-prole add command.



Conguration Guide

20.7 Binding an SHDSL Alarm ProleThis operation enables you to bind an SHDSL alarm prole to SHDSL ports to validate thealarm prole after the SHDSL ports are activated.

Background InformationPay attention to the following points:n An SHDSL alarm prole can take effect only when it is bound to a port and the port is

activated.n You can bind an SHDSL alarm prole to the deactivated port only.n By default, the system uses the alarm prole bound with the port last time, or alarm

prole 1 if the port is to be bound for the rst time.

Procedure

Step 1 Run the alarm-cong command to bind an SHDSL alarm prole with a port.

Step 2 Run the display port state command to query whether the ports has been bound with thealarm prole.

—-End

Example

To bind alarm prole 3 to port 1 of the SHDSL board in slot 0/5, do as follows:huawei(config-if-shl-0/5)#alarm-config 1 3

Run the display port state command and you can nd the ports has been bound with thealarm prole.huawei(config-if-shl-0/5)#display port state 1---------------------------------------------------------------------------Port Running Control Line Alarm Running Config BindID Status Status Profile Profile Operation Operation Status---------------------------------------------------------------------------

1 Deactivated Deactive 1 3 Normal None Normal---------------------------------------------------------------------------

20.8 Activating an SHDSL PortThis operation enables you to activate an SHDSL port for service transmission.

Prerequisite

There is a suitable SHDSL line prole.

Background Informationn Activating (or activation) refers to the training between the STU-C and the STU-R.

During the training process, the system will check the line distance and line state basedon settings included in the line prole, such as upstream/downstream line rate and SNRmargin. The STU-C negotiates with the STU-R to check whether the devices can workwell under the existing conditions.

n If the training succeeds, the STU-C can communicate with the STU-R. At the moment,the port works in activated state, and is ready for service delivery.

n When the STU-R is online, the activation process ends after the completion of thetraining. When the STU-R gets ofine, the communication is terminated, and the



ATU-C is in the listening state. Once the STU-R gets online, the training process beginsautomatically. When the training succeeds, the port is activated.

n Before transmitting service trafc, an SHDSL port must be activated.n If no prole index is entered during the activation operation, the system uses the prole

bound with the port last time to activate the port. If a port is to be activated for the rsttime, the system uses the default line prole, namely prole 1.

n If you intend to use new parameters for an activated port, you must deactivate the portrst, and then activate it using the prole with the desired parameters.

Procedure

Step 1 Run the activate command to activate an SHDSL port.

Step 2 Run the display port state command to query the information of the SHDSL port.

—-End

Example

To activate the SHDSL port 0 in slot 0/5 using line prole 1, do as follows:huawei(config-if-shl-0/5)#activate 0 1

Run the display port state command to query the SHDSL port information.huawei(config-if-shl-0/5)#display port state 0---------------------------------------------------------------------------Port Running Control Line Alarm Running Config BindID Status Status Profile Profile Operation Operation Status---------------------------------------------------------------------------

0 Activated Active 1 1 Normal None Normal---------------------------------------------------------------------------

Related Operations

Table 20-8 lists the related operations for activating an SHDSL port.

Table 20-8 Related operations for activating an SHDSL port

To... Run the Command...Deactivate an SHDSL port deactivateLoopback an SHDSL port loopback

20.9 Querying an SHDSL PortThis operation enables you to query the SHDSL port status to check the port conditions.

Background Informationn An SHDSL port may be in activating, activated, deactivated or loopback state.n Figure 20-9 shows the inter-conversion between the states.

Figure 20-9 Inter-conversion between the SHDSL port states



Conguration Guide

Procedure

Run the display port state command to query the SHDSL port state.

—-End

Example

To query the conguration and running status of the port 0/5/0, do as follows:huawei(config-if-shl-0/5)#display port state 0--------------------------------------------------------------------------Port Running Control Line Alarm Running Config BindID Status Status Profile Profile Operation Operation Status

--------------------------------------------------------------------------0 Activating Active 1 1 Normal None Normal

--------------------------------------------------------------------------

20.10 Conguring the Clock ModeThis operation enables you to congure the clock mode.

Background InformationThe SHDSL port clock modes include:n Systemn LocalThe network synchronization reference (NSR) clock mode takes effect only when the portis reactivated.n Activate it directly if the port is in deactivated state.n Deactivate it and then reactivate it if the port is in activated state.

Procedure

Run the set clockmode command to congure the clock mode.

—-End

Example

To set the clock mode as system, do as follows:huawei(config-if-shl-0/5)#set clockmode systemThe new clockmode will not take effect until the port is activated again.Are you sure to set clockmode? (y/n)[n]:y

Run the display clockmode command to and you can nd the clock mode is set correctly.huawei(config-if-shl-0/5)#display clockmodeClock mode: System


SmartAX MA5600 Multi-service Access ModuleConguration Guide 21 VDSL2 Service Conguration

21 VDSL2 Service Conguration


21.1 OverviewThe section describes the service description and service specications of VDSL2 service.21.2 Conguration Example of the VDSL2 IPoA ServiceThis example shows how to congure the VDSL2 PPPoE/IPoE service so that the user canaccess the Internet in IPoA mode through VDSL2 lines.21.3 Conguration Example of the VDSL2 PPPoA ServiceThis example shows how to congure the VDSL2 PPPoE/IPoE service so that the user canaccess the Internet in PPPoA mode through VDSL2 lines.21.4 Conguration Example of the VDSL2 PPPoE/IPoE ServiceThis example shows how to congure the VDSL2 PPPoE/IPoE service so that the user canaccess the Internet in PPPoE/IPoE mode through VDSL2 lines.21.5 Adding a VDSL2 Line ProleThis operation enables you to add a VDSL2 line prole so as to include the majority ofparameters of all the VDSL2 ports in a line prole.21.6 Adding a VDSL2 Channel ProleThis operation enables you to add a VDSL2 channel prole.21.7 Adding a VDSL2 Line TemplateThis operation enables you to add a VDSL2 line template. The line prole binds the speciedline prole and channel prole. Use the line prole to activate ports.21.8 Adding a VDSL2 Line Alarm ProleThis operation enables you to congure a VDSL2 line alarm prole so as to include themajority of parameters of all the VDSL2 ports in a line alarm prole. After the alarm prole iscongured successfully, it can be directly used to activate the ports.21.9 Adding a VDSL2 Channel Alarm ProleThis operation enables you to add a channel alarm prole containing alarm thresholds forchannel parameters.21.10 Adding a VDSL2 Alarm TemplateThis operation enables you to add a VDSL2 alarm template.21.11 Activating a VDSL2 PortThis operation enables you to activate a VDSL2 port.21.12 Querying a VDSL2 portThis operation enables you to query a VDSL2 port.


21 VDSL2 Service CongurationSmartAX MA5600 Multi-service Access Module

Conguration Guide

21.1 OverviewThe section describes the service description and service specications of VDSL2 service.

Service DescriptionVery High Speed DSL2 (VDSL2) adopts symmetric or asymmetric transmission mode, withthe reach distance of up to 3.5 km.

Service Specicationsn The MA5600 provides the VDSL2 service through the VDEA board.n An MA5600 shelf can house up to 14 VDSL2 boards. With each VDSL2 board providing

32 VDSL2 ports, a shelf supports up to 448 VDSL2 subscribers.

21.2 Conguration Example of the VDSL2 IPoA ServiceThis example shows how to congure the VDSL2 PPPoE/IPoE service so that the user canaccess the Internet in IPoA mode through VDSL2 lines.

Prerequisites

n The network devices and lines are normal.n The VDEA board is in the normal state.n The upper layer router has assigned the VLANs for different VDSL2 users for Internet

access.

Background InformationThe MA5600 can restrict the user rate through:n A specied trafc prolen A VDSL2 line proleIn the case of IPoA access, you can select the dynamic IP address (without specifying thesource IP address) or static IP address (specifying the source IP address) for the packets.To switch from a dynamic address to a static address in IPoA access, you need to adoptLLC-Bridge encapsulation rst, and then adopt the IPoA static address encapsulation.

NetworkingFigure 21-1 shows a sample network of the VDSL2 IPoA service.



Figure 21-1 Sample network of the VDSL2 IPoA service

Conguration FlowchartFigure 21-2 shows the owchart for conguring the VDSL2 IPoA Service.



Conguration Guide

Figure 21-2 Flowchart for conguring the VDSL2 IPoA Service



NOTE

Adding a service port can be performed in data channel mode: ATM mode or PTM mode. PTM modedoes not support PPPoA and IPoA access, but other conguration of the two modes is the same.

Data PlanTable 21-1 shows the data plan for conguring the VDSL2 IPoA service.

Table 21-1 Data plan for conguring the VDSL2 IPoA service

Item Data RemarksVDSL2 port: 0/2/0 -

VLAN ID: 10 Should be the same as that ofthe upper layer device.

VDEA board



Procedure

Step 1 Query if an appropriate trafc prole exists.If there is no appropriate trafc prole, add one.huawei(config)#traffic table index 7 ip car 3072 priority 6priority-policy pvc-Setting

Step 2 Create VLAN 10 and add the upstream port 0/7/0 to it.

You can add a MUX VLAN or a smart VLAN.huawei(config)#vlan 10 muxhuawei(config)#port vlan 10 0/7 0

Step 3 Add the service port 0/2/0 to VLAN 10.huawei(config)#service-port vlan 10 vdsl mode atm vpi 0 vci35 rx-cttr 7 tx-cttr 7

Step 4 Congure the VDSL2 line prole.

You can add a VDSL2 line prole according to the service requirements. Here, prole 3is added.huawei(config)#vdsl line-profile add 3Start adding profilePress ’Q’ to quit the current configuration and new configuration will be

neglected> Do you want to name the profile (y/n) [n]:> Transmission mode:> 0: Custom> 1: All (G992.1~5,T1.413,G993.2)> 2: Full rate(G992.1/3/5,T1.413,G993.2)> 3: G.DMT (G992.1/3/5,G993.2)> 4: G.HS (G992.1~5,G993.2)> 5: ADSL (G.992.1~5,T1.413)> 6: VDSL (G993.2)> Please select (0~6) [1]:0> Current configured modes:> 1-T1.413 2-G.992.1 (Annex A/B/C)> 3-G.992.2 (Annex A/C) 4-G.992.3 (Annex A/B/I/J/L/M)> 5-G.992.4 (Annex A/I) 6-G.992.5 (Annex A/B/I/J/M)> 7-G.993.2 (Annex A/B/C)> Please select 1-Modify 2-Delete 3-Save and quit [3]:1> 1-T1.413 2-G.992.1 (Annex A/B/C)> 3-G.992.2 (Annex A/C) 4-G.992.3 (Annex A/B/I/J/L/M)> 5-G.992.4 (Annex A/I) 6-G.992.5 (Annex A/B/I/J/M)> 7-G.993.2 (Annex A/B/C)



Conguration Guide

> Please select (1,2-3) [1]:2-6> G.992.1: 1-All Annex 2-AnnexA 3-AnnexB 4-AnnexC (1,2-3) [1]:> G.992.2: 1-All Annex 2-AnnexA 3-AnnexC (1,2-3) [1]:> G.992.3: 1-All Annex 2-AnnexA 3-AnnexB 4-AnnexI 5-AnnexJ 6-AnnexL> 7-AnnexM (1,2-3) [1]:2-6> G.992.4: 1-All Annex 2-AnnexA 3-AnnexI (1,2-3) [1]:> G.992.5: 1-All Annex 2-AnnexA 3-AnnexB 4-AnnexI 5-AnnexJ 6-AnnexM> (1,2-3) [1]:2-5> Current configured modes:> 1-T1.413 2-G.992.1 (Annex A/B/C)> 3-G.992.2 (Annex A/C) 4-G.992.3 (Annex A/B/I/J/L)> 5-G.992.4 (Annex A/I) 6-G.992.5 (Annex A/B/I/J)> 7-G.993.2 (Annex A/B/C)> Please select 1-Modify 2-Delete 3-Save and quit [3]:3> Please select the form of transmit rate adaptation downstream:> 1-fixed 2-adaptAtStartup (1~2) [2]:> Please select the form of transmit rate adaptation upstream:> 1-fixed 2-adaptAtStartup (1~2) [2]:> Will you set SNR margin parameters? (y/n) [n]:y> Target SNR margin downstream (0~310 0.1dB) [60]:> Minimum SNR margin downstream (0~60 0.1dB) [0]:> Maximum SNR margin downstream (60~310 0.1dB) [300]:> Target SNR margin upstream (0~310 0.1dB) [60]:> Minimum SNR margin upstream (0~60 0.1dB) [0]:> Maximum SNR margin upstream (60~310 0.1dB) [300]:> Will you set DPBO parameters? (y/n)[n]:y> DPBO E-side electrical length (0~511 0.5dB) [0]:> Will you set UPBO parameters? (y/n)[n]:y> UPBO reference PSD per band, each band consists of two parameters[a, b].

Parameter a value from 40 dBm/Hz (coded as 0) to 80.95 dBm/Hz(coded as 4095) in steps of 0.01 dBm/Hz; and b value from 0 (coded as 0)to 40.95 dBm/Hz (coded as 4095) in steps of 0.01 dBm/Hz

> UPBO US1 band reference PSD parameter a(0~4095) [1650]:> UPBO US1 band reference PSD parameter b(0~4095) [1020]:> UPBO US2 band reference PSD parameter a(0~4095) [1650]:> UPBO US2 band reference PSD parameter b(0~4095) [615]:> UPBO US3 band reference PSD parameter a(0~4095) [0]:> UPBO US3 band reference PSD parameter b(0~4095) [0]:> Will you force the CPE to use the electrical length to compute the UPBO:> 1-forced, 2-auto(1~2) [2]:> Will you set RFI notch configuration parameter? (y/n) [n]:y> Please set the RFI notch band range, the format : tone index(0~4095)> or begin tone index-end tone index. Begin tone index must not be more> than end tone index, for example:20,25-30. You cannot set more than> 16 ranges:1-20,50-100,400-700,1000-2000> Will you set VDSL tone blackout configuration parameter? (y/n) [n]:y> Please set the VDSL tone blackout range, the format : tone index(0~4095)> or begin tone index-end tone index. Begin tone index must not be more> than end tone index, for example:20,25-30. You cannot set more than> 8 ranges:> Will you set mode-specific parameters? (y/n) [n]:y> Current configured modes:> 1-defmode> Please select 1-Add 2-Modify 3-Save and quit [3]:1> 2-adsl 3-adsl2Pots 4-adsl2Isdn> 5-adsl2PlusPots 6-adsl2PlusIsdn 7-adsl2ReachExtended> 8-vdsl2Pots 9-vdsl2Isdn> Please select [2]:7> Maximum nominal aggregate transmit power downstream> (0~205 0.1dBm) [145]:> Maximum nominal aggregate transmit power upstream> (0~205 0.1dBm) [145]:> Will you set PSD mask value downstream parameter? (y/n) [n]:> Will you set PSD mask value upstream parameter? (y/n) [n]:> Current configured modes:> 1-defmode 7-adsl2ReachExtended> Please select 1-Add 2-Modify 3-Delete 4-Save and quit [4]:Add profile 3 successfully

Step 5 Congure the VDSL2 channel prole.

Here, prole 3 is added.huawei(config)#vdsl channel-profile add 3Start adding profilePress ’Q’ to quit the current configuration and new configuration will be

neglected> Do you want to name the profile (y/n) [n]:



> Data path mode 1-ATM, 2-PTM, 3-Both (1~3) [3]:1> Will you set the minimum impulse noise protection? (y/n) [n]:y> Minimum impulse noise protection downstream:> 1-noProtection 2-halfSymbol 3-singleSymbol 4-twoSymbols> 5-threeSymbols 6-fourSymbols 7-fiveSymbols 8-sixSymbols> 9-sevenSymbols 10-eightSymbols 11-nineSymbols 12-tenSymbols> 13-elevenSymbols 14-twelveSymbols 15-thirteenSymbols 16-fourteenSymbols> 17-fifteenSymbols 18-sixteenSymbols> Please select (1~18) [1]:> Minimum impulse noise protection upstream:> 1-noProtection 2-halfSymbol 3-singleSymbol 4-twoSymbols> 5-threeSymbols 6-fourSymbols 7-fiveSymbols 8-sixSymbols> 9-sevenSymbols 10-eightSymbols 11-nineSymbols 12-tenSymbols> 13-elevenSymbols 14-twelveSymbols 15-thirteenSymbols 16-fourteenSymbols> 17-fifteenSymbols 18-sixteenSymbols> Please select (1~18) [1]:> Will you set interleaving delay parameters? (y/n) [n]:y> Maximum interleaving delay downstream (0~200 ms) [20]:> Maximum interleaving delay upstream (0~200 ms) [20]:> Will you set parameters for rate? (y/n) [n]:y> Minimum transmit rate downstream (128~100000 Kbps) [128]:> Maximum transmit rate downstream (128~100000 Kbps) [100000]:> Minimum transmit rate upstream (128~100000 Kbps) [128]:> Maximum transmit rate upstream (128~100000 Kbps) [100000]:Add profile 3 successfully

Step 6 Congure the VDSL2 line template.

Bind the congured line prole and channel prole. Assume that the index of the line templateis 3.huawei(config)#vdsl line-template add 3Start adding templatePress ’Q’ to quit the current configuration and new configuration will be

neglected> Do you want to name the template (y/n) [n]:> Please set the line-profile index (1~128) [1]:3> Will you set channel configuration parameters? (y/n) [n]:y> Please set the channel number (1~2) [1]:> Channel1 configuration parameters:> Please set the channel-profile index (1~128) [1]:3Add template 3 successfully

Step 7 Activate the VDSL2 port.

Use the new line template 3 to activate VDSL2 port 0/2/0.huawei(config)#interface vdslhuawei(config-if-vdsl-)#activate 0 template-index 3

Step 8 Bind the VDSL2 port with the alarm template.

NOTE

n In this example, the default alarm template is used.n To bind the port with an alarm template (not the default), such as prole 2, run the vdsl

alarm-template add command to add prole 2 and then run the alarm-cong command to bind theprole with the port.

n A VDSL2 alarm template must be bound with a port before this prole can take effect. By default,each port is bound with alarm template 1.

Step 9 Congure the MAC address pool.

Congure MAC address pool 0, with the start address of 0000-0000-0001.huawei(config)#mac-pool 0 0000-0000-0001

Step 10 Enable IPoA protocol switching.huawei(config)#ipoa enable

Step 11 Congure the IPoA default gateway.huawei(config)#ipoa default gateway 10.1.1.1

Step 12 Set the service encapsulation mode.Set the service encapsulation mode of VDSL2 port 0/2/0 as LLC.



Conguration Guide

huawei(config)#encapsulation 0/2/0 vpi 0 vci 35 type ipoa llc srcIP 10.1.1.20


—-End

Result

After the conguration, you can access the Internet through your PC in IPoA mode.

21.3 Conguration Example of the VDSL2 PPPoA ServiceThis example shows how to congure the VDSL2 PPPoE/IPoE service so that the user canaccess the Internet in PPPoA mode through VDSL2 lines.

Prerequisites


access.

Background InformationThe MA5600 can restrict the user rate through:n A specied trafc prolen A VDSL2 line proleWhen both the trafc prole and the VDSL2 line prole are used, the user bandwidth is thesmaller one of the rates restricted by the two proles.

NetworkingFigure 21-3 shows a sample network of the VDSL2 PPPoA service.



Figure 21-3 Sample network of the VDSL2 PPPoA service

Conguration FlowchartFigure 21-4 shows the owchart for conguring the VDSL2 PPPoA service.



Conguration Guide

Figure 21-4 Flowchart for conguring the VDSL2 PPPoA service



NOTE

Adding a service port can be performed in data channel mode: ATM mode or PTM mode. PTM modedoes not support PPPoA and IPoA access.

Data PlanTable 21-2 shows the data plan for conguring the VDSL2 PPPoA service.

Table 21-2 Data plan for conguring the VDSL2 PPPoA service


VLAN ID: 10 Should be the same as that of theupper layer device.

VDEA board



ProcedureStep 1 Add and conrm the board.

Insert the service board into the shelf, and the MA5600 detects it automatically.

Run the following command to conrm it.huawei(config)#board confirm 0/2

Step 2 Query if an appropriate trafc prole exists.If there is no appropriate trafc table, add one.huawei(config)#traffic table index 7 ip car 3072 priority 6priority-policy pvc-Setting

Step 3 Create VLAN 10 and add the upstream port 0/7/0 to it.

You can create a MUX VLAN or a smart VLAN.huawei(config)#vlan 10 muxhuawei(config)#port vlan 10 0/7 0

Step 4 Add the service port to VLAN 10.huawei(config)#service-port vlan 10 vdsl mode atm 0/2/0 vpi0 vci 35 rx-cttr 7 tx-cttr 7



neglected> Do you want to name the profile (y/n) [n]:> Transmission mode:> 0: Custom> 1: All (G992.1~5,T1.413,G993.2)> 2: Full rate(G992.1/3/5,T1.413,G993.2)> 3: G.DMT (G992.1/3/5,G993.2)> 4: G.HS (G992.1~5,G993.2)> 5: ADSL (G.992.1~5,T1.413)> 6: VDSL (G993.2)> Please select (0~6) [1]:0> Current configured modes:> 1-T1.413 2-G.992.1 (Annex A/B/C)> 3-G.992.2 (Annex A/C) 4-G.992.3 (Annex A/B/I/J/L/M)



Conguration Guide

> 5-G.992.4 (Annex A/I) 6-G.992.5 (Annex A/B/I/J/M)> 7-G.993.2 (Annex A/B/C)> Please select 1-Modify 2-Delete 3-Save and quit [3]:1> 1-T1.413 2-G.992.1 (Annex A/B/C)> 3-G.992.2 (Annex A/C) 4-G.992.3 (Annex A/B/I/J/L/M)> 5-G.992.4 (Annex A/I) 6-G.992.5 (Annex A/B/I/J/M)> 7-G.993.2 (Annex A/B/C)> Please select (1,2-3) [1]:2-6> G.992.1: 1-All Annex 2-AnnexA 3-AnnexB 4-AnnexC (1,2-3) [1]:> G.992.2: 1-All Annex 2-AnnexA 3-AnnexC (1,2-3) [1]:> G.992.3: 1-All Annex 2-AnnexA 3-AnnexB 4-AnnexI 5-AnnexJ 6-AnnexL> 7-AnnexM (1,2-3) [1]:2-6> G.992.4: 1-All Annex 2-AnnexA 3-AnnexI (1,2-3) [1]:> G.992.5: 1-All Annex 2-AnnexA 3-AnnexB 4-AnnexI 5-AnnexJ 6-AnnexM> (1,2-3) [1]:2-5> Current configured modes:> 1-T1.413 2-G.992.1 (Annex A/B/C)> 3-G.992.2 (Annex A/C) 4-G.992.3 (Annex A/B/I/J/L)> 5-G.992.4 (Annex A/I) 6-G.992.5 (Annex A/B/I/J)> 7-G.993.2 (Annex A/B/C)> Please select 1-Modify 2-Delete 3-Save and quit [3]:3> Please select the form of transmit rate adaptation downstream:> 1-fixed 2-adaptAtStartup (1~2) [2]:> Please select the form of transmit rate adaptation upstream:> 1-fixed 2-adaptAtStartup (1~2) [2]:> Will you set SNR margin parameters? (y/n) [n]:y> Target SNR margin downstream (0~310 0.1dB) [60]:> Minimum SNR margin downstream (0~60 0.1dB) [0]:> Maximum SNR margin downstream (60~310 0.1dB) [300]:> Target SNR margin upstream (0~310 0.1dB) [60]:> Minimum SNR margin upstream (0~60 0.1dB) [0]:> Maximum SNR margin upstream (60~310 0.1dB) [300]:> Will you set DPBO parameters? (y/n)[n]:y> DPBO E-side electrical length (0~511 0.5dB) [0]:> Will you set UPBO parameters? (y/n)[n]:y> UPBO reference PSD per band, each band consists of two parameters[a, b].






Here, prole 3 is added.huawei(config)#vdsl channel-profile add 3Start adding profilePress ’Q’ to quit the current configuration and new configuration will be

neglected> Do you want to name the profile (y/n) [n]:> Data path mode 1-ATM, 2-PTM, 3-Both (1~3) [3]:1> Will you set the minimum impulse noise protection? (y/n) [n]:y> Minimum impulse noise protection downstream:> 1-noProtection 2-halfSymbol 3-singleSymbol 4-twoSymbols> 5-threeSymbols 6-fourSymbols 7-fiveSymbols 8-sixSymbols> 9-sevenSymbols 10-eightSymbols 11-nineSymbols 12-tenSymbols> 13-elevenSymbols 14-twelveSymbols 15-thirteenSymbols 16-fourteenSymbols> 17-fifteenSymbols 18-sixteenSymbols> Please select (1~18) [1]:> Minimum impulse noise protection upstream:> 1-noProtection 2-halfSymbol 3-singleSymbol 4-twoSymbols> 5-threeSymbols 6-fourSymbols 7-fiveSymbols 8-sixSymbols> 9-sevenSymbols 10-eightSymbols 11-nineSymbols 12-tenSymbols> 13-elevenSymbols 14-twelveSymbols 15-thirteenSymbols 16-fourteenSymbols> 17-fifteenSymbols 18-sixteenSymbols> Please select (1~18) [1]:> Will you set interleaving delay parameters? (y/n) [n]:y> Maximum interleaving delay downstream (0~200 ms) [20]:> Maximum interleaving delay upstream (0~200 ms) [20]:> Will you set parameters for rate? (y/n) [n]:y> Minimum transmit rate downstream (128~100000 Kbps) [128]:> Maximum transmit rate downstream (128~100000 Kbps) [100000]:> Minimum transmit rate upstream (128~100000 Kbps) [128]:> Maximum transmit rate upstream (128~100000 Kbps) [100000]:Add profile 3 successfully




Step 8 Activate the VDSL2 port.

Use the new line template 3 to activate VDSL2 port 0/2/0.huawei(config)#interface vdsl 0/2huawei(config-if-vdsl-0/2)#activate 0 template-index 3


NOTE

n In this example, the default alarm template is used.n To bind the port with an alarm template (not the default), such as prole 2, run the vdsl



Step 10 Congure the MAC address pool.

Congure MAC address pool 0, with the start address of 0000-0000-0001.huawei(config)#mac-pool 0 0000-0000-0001

Step 11 Enable PPPoA protocol switching.huawei(config)#pppoa enable



Conguration Guide

Step 12 Set the service encapsulation mode.Set the service encapsulation mode of VDSL2 port 0/2/0 as LLC.huawei(config)#encapsulation 0/2/0 vpi 0 vci 35 type pppoa llc


—-End

Result

After the conguration, you can access the Internet through your PC in PPPoA mode.

21.4 Conguration Example of the VDSL2 PPPoE/IPoEService

This example shows how to congure the VDSL2 PPPoE/IPoE service so that the user canaccess the Internet in PPPoE/IPoE mode through VDSL2 lines.

Prerequisites


access.

Background InformationThe MA5600 can restrict the user rate through:n A specied trafc prolen A VDSL2 line proleWhen both the trafc prole and the VDSL2 line prole are used, the user bandwidth is thesmaller one of the rates restricted by the two proles.

NetworkingFigure 21-5 shows a sample network for conguring the VDSL2 PPPoE/IPoE service.



Figure 21-5 Sample network for conguring the VDSL2 PPPoE/IPoE service

Conguration FlowchartFigure 21-6 shows the owchart for conguring the VDSL2 PPPoE/IPoE service.



Conguration Guide

Figure 21-6 Flowchart for conguring the VDSL2 PPPoE/IPoE service



Data PlanTable 21-3 shows the data plan for conguring the VDSL2 PPPoE/IPoE service.

Table 21-3 Data plan for owchart for conguring the VDSL2 PPPoE/IPoE service


VLAN ID: 10 Should be the same as that ofthe upper layer device.

VDEA board



Procedure

Step 1 Add the board and conrm it.

Insert the service board into the shelf, and the MA5600 detects it automatically.

Run the following command to conrm it.huawei(config)#board confirm 0/2

Step 2 Query if an appropriate trafc prole exists.If there is no appropriate trafc prole, add one.huawei(config)#traffic table index 7 ip car 3072 priority 6priority-policy pvc-Setting

Step 3 Create the VLAN and add the ports to it.1. Create VLAN 10.

You can create a MUX VLAN or a Smart VLAN.huawei(config)#vlan 10 mux

2. Add the upstream port 0/7/0 to the VLAN.huawei(config)#port vlan 10 0/7 0

3. Add the service port to the VLAN.huawei(config)#service-port vlan 10 vdsl mode ptm 0/2/0 rx-cttr 7 tx-cttr 7



neglected> Do you want to name the profile (y/n) [n]:> Transmission mode:> 0: Custom> 1: All (G992.1~5,T1.413,G993.2)> 2: Full rate(G992.1/3/5,T1.413,G993.2)> 3: G.DMT (G992.1/3/5,G993.2)> 4: G.HS (G992.1~5,G993.2)> 5: ADSL (G.992.1~5,T1.413)> 6: VDSL (G993.2)> Please select (0~6) [1]:0> Current configured modes:> 1-T1.413 2-G.992.1 (Annex A/B/C)> 3-G.992.2 (Annex A/C) 4-G.992.3 (Annex A/B/I/J/L/M)> 5-G.992.4 (Annex A/I) 6-G.992.5 (Annex A/B/I/J/M)> 7-G.993.2 (Annex A/B/C)> Please select 1-Modify 2-Delete 3-Save and quit [3]:1



Conguration Guide

> 1-T1.413 2-G.992.1 (Annex A/B/C)> 3-G.992.2 (Annex A/C) 4-G.992.3 (Annex A/B/I/J/L/M)> 5-G.992.4 (Annex A/I) 6-G.992.5 (Annex A/B/I/J/M)> 7-G.993.2 (Annex A/B/C)> Please select (1,2-3) [1]:2-6> G.992.1: 1-All Annex 2-AnnexA 3-AnnexB 4-AnnexC (1,2-3) [1]:> G.992.2: 1-All Annex 2-AnnexA 3-AnnexC (1,2-3) [1]:> G.992.3: 1-All Annex 2-AnnexA 3-AnnexB 4-AnnexI 5-AnnexJ 6-AnnexL> 7-AnnexM (1,2-3) [1]:2-6> G.992.4: 1-All Annex 2-AnnexA 3-AnnexI (1,2-3) [1]:> G.992.5: 1-All Annex 2-AnnexA 3-AnnexB 4-AnnexI 5-AnnexJ 6-AnnexM> (1,2-3) [1]:2-5> Current configured modes:> 1-T1.413 2-G.992.1 (Annex A/B/C)> 3-G.992.2 (Annex A/C) 4-G.992.3 (Annex A/B/I/J/L)> 5-G.992.4 (Annex A/I) 6-G.992.5 (Annex A/B/I/J)> 7-G.993.2 (Annex A/B/C)> Please select 1-Modify 2-Delete 3-Save and quit [3]:3> Please select the form of transmit rate adaptation downstream:> 1-fixed 2-adaptAtStartup (1~2) [2]:> Please select the form of transmit rate adaptation upstream:> 1-fixed 2-adaptAtStartup (1~2) [2]:> Will you set SNR margin parameters? (y/n) [n]:y> Target SNR margin downstream (0~310 0.1dB) [60]:> Minimum SNR margin downstream (0~60 0.1dB) [0]:> Maximum SNR margin downstream (60~310 0.1dB) [300]:> Target SNR margin upstream (0~310 0.1dB) [60]:> Minimum SNR margin upstream (0~60 0.1dB) [0]:> Maximum SNR margin upstream (60~310 0.1dB) [300]:> Will you set DPBO parameters? (y/n)[n]:y> DPBO E-side electrical length (0~511 0.5dB) [0]:> Will you set UPBO parameters? (y/n)[n]:y> UPBO reference PSD per band, each band consists of two parameters[a, b].




Here, prole 3 is added.huawei(config)#vdsl channel-profile add 3



Start adding profilePress ’Q’ to quit the current configuration and new configuration will be

neglected> Do you want to name the profile (y/n) [n]:> Data path mode 1-ATM, 2-PTM, 3-Both (1~3) [3]:2> Will you set the minimum impulse noise protection? (y/n) [n]:y> Minimum impulse noise protection downstream:> 1-noProtection 2-halfSymbol 3-singleSymbol 4-twoSymbols> 5-threeSymbols 6-fourSymbols 7-fiveSymbols 8-sixSymbols> 9-sevenSymbols 10-eightSymbols 11-nineSymbols 12-tenSymbols> 13-elevenSymbols 14-twelveSymbols 15-thirteenSymbols 16-fourteenSymbols> 17-fifteenSymbols 18-sixteenSymbols> Please select (1~18) [1]:> Minimum impulse noise protection upstream:> 1-noProtection 2-halfSymbol 3-singleSymbol 4-twoSymbols> 5-threeSymbols 6-fourSymbols 7-fiveSymbols 8-sixSymbols> 9-sevenSymbols 10-eightSymbols 11-nineSymbols 12-tenSymbols> 13-elevenSymbols 14-twelveSymbols 15-thirteenSymbols 16-fourteenSymbols> 17-fifteenSymbols 18-sixteenSymbols> Please select (1~18) [1]:> Will you set interleaving delay parameters? (y/n) [n]:y> Maximum interleaving delay downstream (0~200 ms) [20]:> Maximum interleaving delay upstream (0~200 ms) [20]:> Will you set parameters for rate? (y/n) [n]:y> Minimum transmit rate downstream (128~100000 Kbps) [128]:> Maximum transmit rate downstream (128~100000 Kbps) [100000]:> Minimum transmit rate upstream (128~100000 Kbps) [128]:> Maximum transmit rate upstream (128~100000 Kbps) [100000]:Add profile 3 successfully




Step 7 Activate VDSL2 port 0/2/0.

Use the new line template 3 to activate the VDSL2 port.huawei(config)#interface vdsl 0/2huawei(config-if-vdsl-0/2)#activate 0 template-index 3


NOTE

n In this example, the default alarm prole is used.n To bind the port with an alarm template (not the default), such as prole 2, run the vdsl




—-End

Result

After the conguration, PC can access the Internet in the IPoE/PPPoE mode.



Conguration Guide

21.5 Adding a VDSL2 Line ProleThis operation enables you to add a VDSL2 line prole so as to include the majority ofparameters of all the VDSL2 ports in a line prole.

Background Informationn Up to 128 line proles can be added for the MA5600. Line prole 1 is the default, which

can be modied but cannot be deleted.n When the downstream channel mode is xed, the downstream maximum rate must be

equal to the minimum rate.n When setting the upstream/downstream SNR margin, make sure that the settings comply

with mini. SNR margin≤ target SNR margin≤ max. SNR margin.

Conguration FlowchartFigure 21-7 shows the owchart for adding a VDSL2 line prole.



Figure 21-7 Flowchart for adding a VDSL2 line prole

Procedure

Step 1 Run the vdsl line-prole add command to add a VDSL2 line prole.

Step 2 Run the display vdsl line-prole command to query the added VDSL2 line prole.

—-End



Conguration Guide

Examples

To add VDSL2 line prole 3, do as follows:huawei(config)#vdsl line-profile add 3Start adding profilePress ’Q’ to quit the current configuration and new configuration will be

neglected> Do you want to name the profile (y/n) [n]:> Transmission mode:> 0: Custom> 1: All (G992.1~5,T1.413,G993.2)> 2: Full rate(G992.1/3/5,T1.413,G993.2)> 3: G.DMT (G992.1/3/5,G993.2)> 4: G.HS (G992.1~5,G993.2)> 5: ADSL (G.992.1~5,T1.413)> 6: VDSL (G993.2)> Please select (0~6) [1]:0> Current configured modes:> 1-T1.413 2-G.992.1 (Annex A/B/C)> 3-G.992.2 (Annex A/C) 4-G.992.3 (Annex A/B/I/J/L/M)> 5-G.992.4 (Annex A/I) 6-G.992.5 (Annex A/B/I/J/M)> 7-G.993.2 (Annex A/B/C)> Please select 1-Modify 2-Delete 3-Save and quit [3]:1> 1-T1.413 2-G.992.1 (Annex A/B/C)> 3-G.992.2 (Annex A/C) 4-G.992.3 (Annex A/B/I/J/L/M)> 5-G.992.4 (Annex A/I) 6-G.992.5 (Annex A/B/I/J/M)> 7-G.993.2 (Annex A/B/C)> Please select (1,2-3) [1]:2-6> G.992.1: 1-All Annex 2-AnnexA 3-AnnexB 4-AnnexC (1,2-3) [1]:> G.992.2: 1-All Annex 2-AnnexA 3-AnnexC (1,2-3) [1]:> G.992.3: 1-All Annex 2-AnnexA 3-AnnexB 4-AnnexI 5-AnnexJ 6-AnnexL> 7-AnnexM (1,2-3) [1]:2-6> G.992.4: 1-All Annex 2-AnnexA 3-AnnexI (1,2-3) [1]:> G.992.5: 1-All Annex 2-AnnexA 3-AnnexB 4-AnnexI 5-AnnexJ 6-AnnexM> (1,2-3) [1]:2-5> Current configured modes:> 1-T1.413 2-G.992.1 (Annex A/B/C)> 3-G.992.2 (Annex A/C) 4-G.992.3 (Annex A/B/I/J/L)> 5-G.992.4 (Annex A/I) 6-G.992.5 (Annex A/B/I/J)> 7-G.993.2 (Annex A/B/C)> Please select 1-Modify 2-Delete 3-Save and quit [3]:3> Please select the form of transmit rate adaptation downstream:> 1-fixed 2-adaptAtStartup (1~2) [2]:> Please select the form of transmit rate adaptation upstream:> 1-fixed 2-adaptAtStartup (1~2) [2]:> Will you set SNR margin parameters? (y/n) [n]:y> Target SNR margin downstream (0~310 0.1dB) [60]:> Minimum SNR margin downstream (0~60 0.1dB) [0]:> Maximum SNR margin downstream (60~310 0.1dB) [300]:> Target SNR margin upstream (0~310 0.1dB) [60]:> Minimum SNR margin upstream (0~60 0.1dB) [0]:> Maximum SNR margin upstream (60~310 0.1dB) [300]:> Will you set DPBO parameters? (y/n)[n]:y> DPBO E-side electrical length (0~511 0.5dB) [0]:> Will you set UPBO parameters? (y/n)[n]:y> UPBO reference PSD per band, each band consists of two parameters[a, b].


> UPBO US1 band reference PSD parameter a(0~4095) [1650]:> UPBO US1 band reference PSD parameter b(0~4095) [1020]:> UPBO US2 band reference PSD parameter a(0~4095) [1650]:> UPBO US2 band reference PSD parameter b(0~4095) [615]:> UPBO US3 band reference PSD parameter a(0~4095) [0]:> UPBO US3 band reference PSD parameter b(0~4095) [0]:> Will you force the CPE to use the electrical length to compute the UPBO:> 1-forced, 2-auto(1~2) [2]:> Will you set RFI notch configuration parameter? (y/n) [n]:y> Please set the RFI notch band range, the format : tone index(0~4095)> or begin tone index-end tone index. Begin tone index must not be more> than end tone index, for example:20,25-30. You cannot set more than> 16 ranges:1-20,50-100,400-700,1000-2000> Will you set VDSL tone blackout configuration parameter? (y/n) [n]:y> Please set the VDSL tone blackout range, the format : tone index(0~4095)> or begin tone index-end tone index. Begin tone index must not be more> than end tone index, for example:20,25-30. You cannot set more than> 8 ranges:



> Will you set mode-specific parameters? (y/n) [n]:y> Current configured modes:> 1-defmode> Please select 1-Add 2-Modify 3-Save and quit [3]:1> 2-adsl 3-adsl2Pots 4-adsl2Isdn> 5-adsl2PlusPots 6-adsl2PlusIsdn 7-adsl2ReachExtended> 8-vdsl2Pots 9-vdsl2Isdn> Please select [2]:7> Maximum nominal aggregate transmit power downstream> (0~205 0.1dBm) [145]:> Maximum nominal aggregate transmit power upstream> (0~205 0.1dBm) [145]:> Will you set PSD mask value downstream parameter? (y/n) [n]:> Will you set PSD mask value upstream parameter? (y/n) [n]:> Current configured modes:> 1-defmode 7-adsl2ReachExtended> Please select 1-Add 2-Modify 3-Delete 4-Save and quit [4]:Add profile 3 successfully

huawei(config)#display vdsl line-profile{ <cr>|profile-index<L><1,128> }:3

Command:display vdsl line-profile 3

------------------------------------------------------------------------------Profile index: 3 Name: VDSL LINE PROFILE 3Transmission mode:T1.413 G.992.1(Annex A/B/C)G.992.2(Annex A/C) G.992.3(Annex A/B/I/J/L)G.992.4(Annex A/I) G.992.5(Annex A/B/I/J)G.993.2(Annex A/B/C)

Form of transmit rate adaptation downstream : AdaptAtStartupForm of transmit rate adaptation upstream : AdaptAtStartupTarget SNR margin downstream(0.1dB) : 60Minimum downstream SNR margin(0.1dB) : 0Maximum downstream SNR margin(0.1dB) : 300Target SNR margin upstream(0.1dB) : 60Minimum SNR margin upstream(0.1dB) : 0Maximum SNR margin upstream(0.1dB) : 300UPBO US1 band reference PSD parameters[a, b] : 1650,1020UPBO US2 band reference PSD parameters[a, b] : 1650,615UPBO US3 band reference PSD parameters[a, b] : 0,0UPBO use of electrical length to compute UPBO : AutoRFI notch configuration:Number Start Tone Stop Tone Start Frequency End Frequency

(KHz) (KHz)1 1 20 4.3 90.52 50 100 215.6 435.53 400 700 1725.0 3023.04 1000 2000 4312.5 8629.3

<defmode>G.993.2 profile : Profile12aVDSL2 PSD class mask : AnnexB998-M1x-A(B8-1)VDSL2 link use of U0 : UnusedMaximum nominal aggregate transmit powerdownstream(0.1dBm) : 145Maximum nominal aggregate transmit powerupstream(0.1dBm) : 145

<adsl2ReachExtended>Maximum nominal aggregate transmit powerdownstream(0.1dBm) : 145Maximum nominal aggregate transmit powerupstream(0.1dBm) : 145

------------------------------------------------------------------------------


Table 21-4 lists the parameters of a VDSL2 line prole.



Conguration Guide

Table 21-4 Parameters of a VDSL2 line prole

Parameter Description Defaultprole-index You can enter a prole index, or press Enter to

enable the system to allocate a prole index. Theprole index is unique.

-

prole-name You can enter a prole index, or press Enter toenable the system to allocate a prole name.

-

VDSL2 transmissionmode

Currently, there are six VDSL2 working modes:

n 0: Customn 1: All (G992.1~5,T1.413, G993.2)n 2: Full rate(G992.1/3/5, T1.413, G993.2)n 3: g.dmt (G992.1/3/5, G993.2)n 4: g.hs (G992.1~5, G993.2)n 5: ADSL (G.992.1~5, T1.413)n 6: VDSL (G993.2)

All

The form of transmitrate adaptationupstream/downstream

Options include 1-xed and 2-adaptAtStartup.

n In xed mode, the line must be activated withthe specied downstream activation rate.

n In adaptAtStartup mode, after the line training,the downstream activation rate is between theminimum activation rate and the maximumactivation rate, but cannot change during theshowtime. Otherwise, the line must be trainedagain.

AdaptAt-Startupmode

Minimum SNR margin indownstream/upstream

In the process of VDSL2 connection setup, if thecalculated SNR margin is lower than the presetone, the port cannot be activated.

0 dB

Maximal SNR margin indownstream/upstream

In the process of VDSL2 connection setup, if thecalculated target SNR margin of a VDSL2 line ishigher than the preset maximum SNR margin, thesystem will limit the downstream maximum SNRmargin to the preset maximum value.

300 dB

Target SNR margin indownstream/upstream

The target SNR margin is the preserved SNRmargin to ensure normal communication in the caseof line SNR deterioration. If the target SNR marginis large enough, the chance of the occurrence of theline error is reduced. Even if the system is the safer,the rate of data transmission is low. Therefore, thetarget SNR margin must be adjusted based on theactual line conditions.

60 dB



Parameter Description DefaultDPBO parameters n DPBO E-side electrical length. It ranges from 0

to 511 and the actual range is 0 dB-255.5 dB.If it is congured as 0, then DPBO function isdisabled and you can not congure the otherparameters.

n DPBO assumed exchange PSD mask.n Scalar A (Local cable feature parameter scalarA).

n Scalar B (Local cable feature parameter scalarB).

n Scalar C (Local cable feature parameter scalarC).

n DPBO minimum usable signal.n DPBO span minimum frequency. It ranges from0 to 2048 with the unit of 4.3125 KHz. So theactual range is 0 KHz-8832 KHz.

n DPBO span maximum frequency. It ranges from32 to 6956 with the unit of 4.3125 KHz. So theactual range is 138 KHz -29997.75 KHz.

-

UPBO parameters n UPBO US1 band reference PSD parameter a(upstream band 1 reference Power SpectralDensity parameter a). It ranges from 4000 to8096 with the unit of 0.01, so the actual valuerange is from 40.00 to 80.96.

n UPBO US1 band reference PSD parameter b(upstream band 1 reference Power SpectralDensity parameter b). Its value range is ditto.

n UPBO US2 band reference PSD parameter a(upstream band 2 reference Power SpectralDensity parameter a). Its value range is ditto.


n UPBO US3 band reference PSD parameter a(upstream band 3 reference Power SpectralDensity parameter a). Its value range is ditto.


n Sets whether VTU-R adjusts the UPBO usingthe electric distance congured by VTU-O.

-



Conguration Guide

Parameter Description Defaultmode-specic parametersfor modem

Power frequency spectrum setting. Each line canbe congured with multiple transmission modes.Each transmission mode has its correspondingfrequency parameters.There must be a group of default power frequencyspectrum parameters in a line. Mapping it to theprole, it is defmode. Not all transmission modesshall be congured with corresponding powerfrequency spectrum prole parameters. As denedin the standard, for a transmission mode, nd thecorresponding power frequency spectrum settingwith priority.If you do not nd it, use the default powerfrequency spectrum parameter, that is, theparameter of the defmode to activate the line.

-

RFI notch congurationfor modem

RFI notch is used to avoid amateur radiointerference. To avoid radio interference, setseveral frequency ranges. Each range consistsof the start tone and the end tone. Notch thecorresponding frequency ranges, that is, do not usethese frequency ranges. Up to 16 frequency rangescan be set.

Up to 16frequencyranges canbe set.

PSD mask valueupstream/downstream

The PSD mask denes the PSD of a seriesof breakpoints of transmit frequency bands.Determine the PSD of each sub-carrier byinterpolation between two breakpoints. There areup to 16 upstream breakpoints and there are up to32 downstream breakpoints.

Null forboth up-streamand down-streamPSD.

PBO control upstream This function guarantees that the SNR margin at theupstream channel receiver meets the upstream PSDmask requirements but reduces the transmit power.

Auto

Power cutbackdownstream

This function checks whether to enable thedownstream power cutback function.

Disabled

Related Operations

Table 21-5 lists the related operations for adding a VDSL2 line prole.

Table 21-5 Related operations for adding a VDSL2 line prole

To... Run the Command... RemarksDelete a VDSL2 lineprole

vdsl line-prole delete You cannot delete the defaultline proles or a referenced lineprole.

Modify a VDSL2 lineprole

vdsl line-prole modify After modication, the systemprompts that the modied proletakes effect immediately.

Quickly add a VDSL2line prole

vdsl line-prole quickadd The system adoptsnon-interactive mode forthe input of the parameter of thecommand. The command servesas a complement to the vdslline-prole add command.



To... Run the Command... RemarksQuickly modify aVDSL2 line prole

vdsl line-prolequickmodify

The system adoptsnon-interactive mode forthe input of the parameter of thecommand. The command servesas a complement to the vdslline-prole modify command.

Query a VDSL2 lineprole

display vdsl line-prole -

21.6 Adding a VDSL2 Channel ProleThis operation enables you to add a VDSL2 channel prole.

Background Informationn The system has a default channel prole. The parameters in the default prole are the

data for reference. You can create channel proles according to the line conditions.n The created channel proles are numbered from 2 to 128. You can specify the index or

press Enter to enable the system to allocate an index.n You can type in parameters in interactive mode.

Conguration FlowchartFigure 21-8 shows the owchart for adding a VDSL2 channel prole.



Conguration Guide

Figure 21-8 Flowchart for adding a VDSL2 channel prole

Procedure

Step 1 Run the vdsl channel-prole add command to add a VDSL2 channel prole.

Step 2 Run the display vdsl channel-prole command to query the added channel prole.

—-End

Example

To add VDSL2 channel prole 2, do as follows:

Add VDSL2 channel prole 2.huawei(config)#vdsl channel-profile add 2Start adding profilePress ’Q’ to quit the current configuration and new configuration will be

neglected> Do you want to name the profile (y/n) [n]:> Data path mode 1-ATM, 2-PTM, 3-Both (1~3) [3]:> Will you set the minimum impulse noise protection? (y/n) [n]:y> Minimum impulse noise protection downstream:> 1-noProtection 2-halfSymbol 3-singleSymbol 4-twoSymbols> 5-threeSymbols 6-fourSymbols 7-fiveSymbols 8-sixSymbols> 9-sevenSymbols 10-eightSymbols 11-nineSymbols 12-tenSymbols> 13-elevenSymbols 14-twelveSymbols 15-thirteenSymbols 16-fourteenSymbols> 17-fifteenSymbols 18-sixteenSymbols> Please select (1~18) [1]:> Minimum impulse noise protection upstream:> 1-noProtection 2-halfSymbol 3-singleSymbol 4-twoSymbols> 5-threeSymbols 6-fourSymbols 7-fiveSymbols 8-sixSymbols> 9-sevenSymbols 10-eightSymbols 11-nineSymbols 12-tenSymbols



> 13-elevenSymbols 14-twelveSymbols 15-thirteenSymbols 16-fourteenSymbols> 17-fifteenSymbols 18-sixteenSymbols> Please select (1~18) [1]:> Will you set interleaving delay parameters? (y/n) [n]:y> Maximum interleaving delay downstream (0~200 ms) [20]:> Maximum interleaving delay upstream (0~200 ms) [20]:> Will you set parameters for rate? (y/n) [n]:y> Minimum transmit rate downstream (128~100000 Kbps) [128]:> Maximum transmit rate downstream (128~100000 Kbps) [100000]:> Minimum transmit rate upstream (128~100000 Kbps) [128]:> Maximum transmit rate upstream (128~100000 Kbps) [100000]:Add profile 2 successfully

Query the added VDSL2 channel prole.huawei(config)#display vdsl channel-profile{ <cr>|profile-index<L><1,128> }:2

Command:display vdsl channel-profile 2

------------------------------------------------------------------------------Profile index: 2 Name: VDSL CHANNEL PROFILE 2Data path mode : BothMinimum impulse noise protection downstream : NoProtectionMinimum impulse noise protection upstream : NoProtectionMaximum interleaving delay downstream(ms) : 20Maximum interleaving delay upstream(ms) : 20Minimum transmit rate downstream(Kbps) : 128Maximum transmit rate downstream(Kbps) : 100000Minimum transmit rate upstream(Kbps) : 128Maximum transmit rate upstream(Kbps) : 100000------------------------------------------------------------------------------

Table 21-6 lists the parameters of a VDSL2 channel prole.

Table 21-6 Parameters of a VDSL2 channel prole

Parameter Description Defaultprole-index You can enter a prole index, or press Enter to

enable the system to allocate a prole index. Theprole index is unique.

-

prole-name You can enter a name or press Enter to enable thesystem to allocate a prole name.

-

Data path mode If the set mode is different from the mode supportedby the physical line, guarantee that the line activationwith priority, and set adapting the board to the modesupported.

-

Maximum inter-leaved delay down-stream/upstream

Interleaved delay in downstream or upstream. Itranges from 0 ms to 200 ms.

20 ms

Minimum impulsenoise protectiondownstream/up-stream

There are 18 options for downstream/upstream. The rst.

Minimum trans-mit rate down-stream/upstream

Ranges from 128 kbit/s to 100000 kbit/s. 128 kbit/s

Maximum trans-mit rate down-stream/upstream

Ranges from 128 kbit/s to 100000 kbit/s. 100000 kbit/s



Conguration Guide

Related Operations

Table 21-7 lists the related operations for adding a VDSL2 channel prole.

Table 21-7 Related operations for adding a VDSL2 channel prole

To... Run the Command... RemarksDelete a VDSL2 channelprole

vdsl channel-prole delete You cannot delete the defaultchannel proles or a referencedchannel prole.

Modify a VDSL2channel prole

vdsl channel-prole modify After modication, thesystem prompts that themodied prole takes effectimmediately.

Quickly add a VDSL2channel prole

vdsl channel-prole quickadd The system adoptsnon-interactive mode forthe input of the parameter ofthe command. The commandserves as a complement tothe vdsl channel-prole addcommand.

Quickly modify aVDSL2 channel prole

vdsl channel-prolequickmodify

The system adoptsnon-interactive mode forthe input of the parameter ofthe command. The commandserves as a complement to thevdsl channel-prole modifycommand.

Query a VDSL2 channelprole

display vdsl channel-prole -

21.7 Adding a VDSL2 Line TemplateThis operation enables you to add a VDSL2 line template. The line prole binds the speciedline prole and channel prole. Use the line prole to activate ports.

Prerequisite

The line prole and the channel prole have been congured.

Background Informationn The system has a default line template. The parameters in the default prole are the data

for reference. You can create line prole according to the line conditions.n The created channel proles are numbered from 2 to 128. When creating a prole, you

can specify the index or press Enter to enable the system to allocate an idle index.n You can type in parameters in interactive mode.

Procedure

Step 1 Run the vdsl line-template add command to add a VDSL2 line template.

Step 2 Run the display vdsl line-template command to query the added line template.

—-End



Examples

To add a VDSL2 line template, do as follows:huawei(config)#vdsl line-template add 2Start adding templatePress ’Q’ to quit the current configuration and new configuration will be


Query the added VDSL2 line template.huawei(config)#display vdsl line-template{ <cr>|template-index<L><1,128> }:2

Command:display vdsl line-template 2

------------------------------------------------------------------------------Template index: 2 Name: VDSL LINE TEMPLATE 2Line profile index : 3Channel1 profile index : 2Channel1 rate adaptation ratio downstream : -Channel1 rate adaptation ratio upstream : -------------------------------------------------------------------------------


Table 21-8 lists the parameters of a VDSL2 line template.

Table 21-8 Parameters of a VDSL2 line template

Parameter DescriptionProle index You can enter a line template index, or press Enter to enable the

system to allocate a prole index. The prole index is unique.Prole name You can enter a name or press Enter to enable the system to allocate

a prole name.Line prole index The index of the congured line prole.Channel number This enables you to set the number of channels the line supports.

You can congure the second channel only after you have conguredthe rst channel.When modifying the line template, if you input a channel numberthat is different from the last channel number, the system considersthat you will recongure the following channel number, and then thecongured parameters will be cleared.

Channel proleindex

The index of the congured channel prole.

Related Operations

Table 21-9 shows the related operations for conguring a VDSL2 line template.



Conguration Guide

Table 21-9 Related operations for conguring a VDSL2 line template

To... Run the Command... RemarksDelete a VDSL2 linetemplate

vdsl line-template delete You cannot delete a referencedextended line prole.

Modify a VDSL2 linetemplate

vdsl line-templatemodify

After modication, the systemprompts that the modied proletakes effect immediately.

Quickly add a VDSL2 linetemplate

vdsl line-templatequickadd

The system adopts non-interactivemode for the input of the parameterof the command. The commandserves as a complement to the vdslline-template add command.

Quickly modify a VDSL2line template

vdsl line-templatequickmodify

The system adopts non-interactivemode for the input of the parameterof the command. The commandserves as a complement to the vdslline-template modify command.

Query a VDSL2 linetemplate

display vdslline-template

-

21.8 Adding a VDSL2 Line Alarm ProleThis operation enables you to congure a VDSL2 line alarm prole so as to include themajority of parameters of all the VDSL2 ports in a line alarm prole. After the alarm prole iscongured successfully, it can be directly used to activate the ports.

Background Informationn The VDSL2 line alarm prole contains a series of alarm thresholds to measure and

monitor the performance of an activated VDSL2 line. When a statistic reaches thethreshold, the MA5600 sends the alarm to the log host and the NMS.

n When conguring a VDSL2 line alarm prole, you cannot delete prole 1, but you canmodify it. The created line alarm proles are numbered 2–50.

Conguration FlowchartFigure 21-9 shows the owchart for adding a VDSL2 line alarm prole.



Figure 21-9 Flowchart for adding a VDSL2 line alarm prole

Procedure

Step 1 Run the vdsl alarm-prole add command to add a VDSL2 line alarm prole.

Step 2 Run the display vdsl alarm-prole command to query the added VDSL2 line alarm prole.

—-End

Example

To add a VDSL2 line alarm prole, do as follows:

Add VDSL2 line alarm prole 2.huawei(config)#vdsl alarm-profile add 2Start adding profilePress ’Q’ to quit the current configuration and new configuration will be

neglected> Do you want to name the profile (y/n) [n]:> Will you set the line thresholds for CO? (y/n) [n]:y> The number of forward error correction seconds (0~900) [0]:10> The number of errored seconds (0~900) [0]:> The number of severely errored seconds (0~900) [0]:> The number of loss of signal seconds (0~900) [0]:> The number of unavailable seconds (0~900) [0]:> Will you set the line thresholds for CPE? (y/n) [n]:y> The number of forward error correction seconds (0~900) [0]:10> The number of errored seconds (0~900) [0]:10> The number of severely errored seconds (0~900) [0]:> The number of loss of signal seconds (0~900) [0]:> The number of unavailable seconds (0~900) [0]:> The number of failed full initialization (0~900) [0]:5Add profile 2 successfully



Conguration Guide

Query the added VDSL2 line alarm prole.huawei(config)#display vdsl alarm-profile{ <cr>|profile-index<L><1,50> }:2

Command:display vdsl alarm-profile 2

------------------------------------------------------------------------------Profile index: 2 Name: VDSL ALARM PROFILE 2<CO>The number of forward error correction seconds : 10The number of errored seconds : 0The number of severely errored seconds : 0The number of loss of signal seconds : 0The number of unavailable seconds : 0

<CPE>The number of forward error correction seconds : 10The number of errored seconds : 0The number of severely errored seconds : 0The number of loss of signal seconds : 0The number of unavailable seconds : 0

The number of failed full initialization : 5------------------------------------------------------------------------------

Table 21-10 lists parameters of a VDSL2 line alarm prole.

Table 21-10 Parameters of a VDSL2 line alarm prole

Parameter DescriptionProle index You can enter a prole index or press Enter to enable the

system to designate an index for it. The prole index is unique.Prole name The name of the congured line alarm prole.

Forward error correctionseconds

Within the 15-minute performance data collection period, ifthe forward error correction seconds exceed the threshold, analarm is reported. Otherwise, no alarm is reported.

Errored seconds Within the 15-minute performance data collection period, ifthe errored seconds exceed the threshold, an alarm is reported.Otherwise, no alarm is reported.

Severely errored seconds Within the 15-minute performance data collection period, ifthe severely errored seconds exceed the threshold, an alarm isreported. Otherwise, no alarm is reported.

Loss of signal seconds Within the 15-minute performance data collection period, ifthe loss of signal seconds exceeds the threshold, an alarm isreported. Otherwise, no alarm is reported.

The number of unavailableseconds

Within the 15-minute performance data collection period, if thenumber of unavailable seconds exceeds the threshold, an alarmis reported. Otherwise, no alarm is reported.

Failed full initialization Within the 15-minute performance data collection period, if thefailed full initialization times exceed the threshold, an alarm isreported. Otherwise, no alarm is reported.

Related Operations

Table 21-11 shows the related operations for adding a VDSL2 line alarm prole.



Table 21-11 Related operations for adding a VDSL2 line alarm prole

To... Run the Command... RemarksDelete a VDSL2 linealarm prole

vdsl alarm-prole delete You cannot delete the default line alarmproles or a referenced alarm prole.

Modify a VDSL2 linealarm prole

vdsl alarm-prolemodify

After modication, the system promptsthat the modied prole takes effectimmediately.

Quickly add a VDSL2line alarm prole

vdsl alarm-prolequickadd

The system adopts non-interactivemode for the input of the parameter ofthe command. The command serves asa complement to the vdsl alarm-proleadd command.

Quickly modify aVDSL2 line alarmprole

vdsl alarm-prolequickmodify

The system adopts non-interactivemode for the input of the parameter ofthe command. The command serves asa complement to the vdsl alarm-prolemodify command.

Query a VDSL2 linealarm prole

display vdslalarm-prole

-

21.9 Adding a VDSL2 Channel Alarm ProleThis operation enables you to add a channel alarm prole containing alarm thresholds forchannel parameters.

Background InformationYou cannot delete channel alarm prole 1, but you can modify it. The created alarm prolesare numbered 2 to 50.

Conguration FlowchartFigure 21-10 shows the owchart for adding a VDSL2 channel alarm prole.



Conguration Guide

Figure 21-10 Flowchart for adding a VDSL2 channel alarm prole

ProcedureStep 1 Run the vdsl channel-alarm-prole add command to add a VDSL2 channel alarm prole.

Step 2 Run the display vdsl channel-alarm-prole command to query the added VDSL2 channelalarm prole.

—-End

ExampleTo add channel alarm prole 2, do as follows:

Add channel alarm prole 2.huawei(config)#vdsl channel-alarm-profile add 2Start adding profilePress ’Q’ to quit the current configuration and new configuration will be

neglected> Do you want to name the profile (y/n) [n]:> Will you set the channel thresholds for CO? (y/n) [n]:y> The number of coding violations counts (0~60000) [0]:10> The number of corrected blocks counts (0~60000) [0]:> Will you set the channel thresholds for CPE? (y/n) [n]:y> The number of coding violations counts (0~60000) [0]:10> The number of corrected blocks counts (0~60000) [0]:10> The threshold of channel monitoring rate downstream> (0~100000Kbps) [0]:2048> The threshold of channel monitoring rate upstream> (0~100000Kbps) [0]:4096Add profile 2 successfully

Query the added VDSL2 channel alarm prole.huawei(config)#display vdsl channel-alarm-profile 2------------------------------------------------------------------------------Profile index: 2 Name: VDSL CHANNEL ALARM PROFILE 2<CO>The number of coding violations counts : 10The number of corrected blocks counts : 0

<CPE>The number of coding violations counts : 10The number of corrected blocks counts : 10

The threshold of channel monitoring rate downstream(Kbps) : 2048The threshold of channel monitoring rate upstream(Kbps) : 4096



------------------------------------------------------------------------------

Table 21-12 lists the parameters of VDSL2 channel alarm prole.

Table 21-12 Parameters of VDSL2 channel alarm prole

Parameter DescriptionProle index You can enter a prole index or press Enter to

enable the system to allocate an index for it. Theprole index is unique.

The number of coding violationscounts

Within the 15-minute performance data collectionperiod, if the number exceeds the set threshold, analarm is reported. 0 indicates no alarm is needed.

The number of corrected blocks counts Within the 15-minute performance data collectionperiod, if the number exceeds the set threshold, analarm is reported. 0 indicates no alarm is needed.

The threshold of channel monitoringrate upstream/downstream

If the activation rate of the current channel doesnot reach the set threshold, an alarm is reported. 0indicates no alarm is needed.

Related Operations

Table 21-13 lists the related operations for adding a VDSL2 alarm prole.

Table 21-13 Related operations for adding a VDSL2 channel alarm prole

To... Run the Command... RemarksDelete a VDSL2channel alarm prole

vdsl channel-alarm-prole delete

You cannot delete the default channelalarm proles and a reference channelalarm prole.

Modify a VDSL2channel alarm prole

vdsl channel-alarm-prole modify

After modication, the systemprompts the modied prole takeseffect immediately.

Quickly add a VDSL2channel alarm prole

vdsl channel-alarm-prole quickadd

The system adopts non-interactivemode for the input of the parameterof the command. The commandserves as a complement to thevdsl channel-alarm-prole addcommand.

Quickly modify aVDSL2 channel alarmprole

vdsl channel-alarm-prole quickmodify

The system adopts non-interactivemode for the input of the parameterof the command. The commandserves as a complement to the vdslchannel-alarm-prole modifycommand.

Query a VDSL2channel alarm prole

display vdslchannel-alarm-prole

-

21.10 Adding a VDSL2 Alarm TemplateThis operation enables you to add a VDSL2 alarm template.



Conguration Guide

Prerequisite

The required line alarm prole and channel alarm prole has been congured.

Background Informationn The new alarm template binds the specied line alarm prole and channel alarm prole.n If you do not specify the line alarm prole and alarm prole, the alarm template binds the

default line alarm prole and the channel alarm prole.

Procedure

Step 1 Run the vdsl alarm-template add command to add a VDSL2 alarm template.

Step 2 Run the display vdsl alarm-template command to query the VDSL2 alarm template.

—-End

Examples

To add an alarm template with index of 2, do as follows:huawei(config)#vdsl alarm-template add 2Start adding templatePress ’Q’ to quit the current configuration and new configuration will be

neglected> Do you want to name the template (y/n) [n]:> Please set the alarm-profile index (1~50) [1]:2> Will you set channel configuration parameters? (y/n) [n]:y> Please set the channel number (1~2) [1]:> Please set the channel1 alarm-profile index (1~50) [1]:2Add template 2 successfully

Query the alarm template 2.huawei(config)#display vdsl alarm-template 2------------------------------------------------------------------------------Template index: 2 Name: VDSL ALARM TEMPLATE 2Line alarm profile index : 2Channel1 alarm profile index : 2------------------------------------------------------------------------------


Table 21-14 lists all parameters of a VDSL2 alarm template.

Table 21-14 Parameters for conguring a VDSL2 alarm template

Parameter DescriptionProle index You can enter an alarm template index, or press Enter to

enable the system to allocate a prole index. The proleindex is unique.

Prole name You can enter a name or press Enter to enable the systemto allocate a prole name.

Line alarm prole index The index of the congured line alarm prole.



Parameter DescriptionChannel number n This enables you to set the number of channels the line

supports.n You can congure the second channel only after youhave congured the rst one.

n When modifying the alarm template, if you input achannel number that is different from the last, thesystem considers that you will recongure the followingchannel number, and then the congured parameterswill be cleared.

Channel alarm prole index The index of the congured channel alarm prole.

Related Operations

Table 21-15 lists the related operations for adding a VDSL2 alarm template.

Table 21-15 Related operations for add a VDSL2 alarm template

To... Run the Command... RemarksDelete a VDSL2 alarmtemplate

vdsl alarm-template delete You cannot delete the defaultalarm prole and the referencedalarm prole .

Modify a VDSL2 alarmtemplate

vdsl alarm-templatemodify

After modication, the systemprompts that the modiedtemplate takes effect immediately.

Quickly add a VDSL2alarm template

vdsl alarm-templatequickadd

The system adopts non-interactivemode for the input of theparameter of the command. Thecommand serves as a complementto the vdsl alarm-template addcommand.

Quickly modify aVDSL2 alarm template

vdsl alarm-templatequickmodify

The system adopts non-interactivemode for the input of theparameter of the command. Thecommand serves as a complementto the vdsl alarm-templatemodify command.

Query a VDSL2 alarmtemplate

display vdslalarm-template

-

Bind a VDSL2 alarmtemplate

alarm-cong A congured alarm prole cantake effect only after it is boundwith a VDSL2 port.

21.11 Activating a VDSL2 PortThis operation enables you to activate a VDSL2 port.

Prerequisite

The VDSL2 line template has been congured.



Conguration Guide

Background InformationActivation refers to the training between the VTU-C and VTU-R. During the training process,the system checks the line distance and line status based on settings included in the line prole,such as upstream/downstream line rate and SNR margin. The VTU-C negotiates with VTU-Rto check whether the system can work in the normal state under the existing conditions.n To activate a VDSL2 port, you need bind it with a VDSL2 line template. If the template

is not specied, the system uses the prole bound wit the port last time to activate aVDSL2 port.

n If the training succeeds, the VTU-C can communicate with VTU-R. At the moment, theport works in activated state, and is ready for service data communication.

n When the VTU-R is online, the activation process ends after the completion of thetraining. When the VTU-R gets ofine, the communication is terminated, and theVTU-C is in listening state. Once the VTU-T gets online, the training process beginsautomatically. When the training succeeds, the port is activated.

Procedure

Step 1 Run the active command to activate all port on the service board.

Step 2 Run the display port state command to query the port status and the line prole bound to it.

—-End

Example

To activate all port on the VDSL2 board in slot using line prole 1, do as follows:huawei(config)#interface vdslhuawei(config-if-vdsl-0/2)#activate all template-index 1

To query the port status and the line prole bound with it, do as follows:huawei(config-if-vdsl-)#display port state all-----------------------------------------------------------------Port Status Loopback Line Template Alarm Template-----------------------------------------------------------------

0 Activated Disable 1 11 Activated Disable 1 12 Activated Disable 1 13 Activated Disable 1 14 Activated Disable 1 15 Activated Disable 1 16 Activated Disable 1 17 Activated Disable 1 18 Activated Disable 1 19 Activated Disable 1 110 Activated Disable 1 111 Activated Disable 1 112 Activated Disable 1 113 Activated Disable 1 114 Activated Disable 1 115 Activated Disable 1 116 Activated Disable 1 117 Activated Disable 1 118 Activated Disable 1 119 Activated Disable 1 120 Activated Disable 1 121 Activated Disable 1 122 Activated Disable 1 123 Activated Disable 1 1

-----------------------------------------------------------------Total number of activated port : 24Total number of unactivated port: 0

Related Operations

Table 21-16 lists the related operations for activating a VDSL2 port.



Table 21-16 Related operations for activating a VDSL2 port

To... Run the Command...Activate a VDSL2 port deactivateLoopback a VDSL2 port loopback

21.12 Querying a VDSL2 portThis operation enables you to query a VDSL2 port.

Prerequisite

The VDSL2 line template has been congured.

Background InformationA VDSL2 port may be in activating, activated, deactivated or loopback state.

Inter-conversion between these statesFigure 21-11 shows the inter-conversion between these states.

Figure 21-11 Inter-conversion between these states

Procedure

Run the display port state command to query comprehensive information of a VDSL2 port.

—-End

Example

Example: To query a VDSL2 port0/2/0, do as follows:huawei(config)#interface vdslhuawei(config-if-vdsl-)#display port state 0-------------------------------------------------------------------Port Status Loopback Line_template Alm_template

-------------------------------------------------------------------0 Deactivated Local 1 1-------------------------------------------------------------------

Related Operations

Table 21-17 lists the related operations for querying a VDSL2 port.



Conguration Guide

Table 21-17 Related operations for querying a VDSL2 port

To... Run the Command...Query the settings of a VDSL2 port display parameterQuery the version of the VTU-C or VTU display inventory


SmartAX MA5600 Multi-service Access ModuleConguration Guide 22 Protection Conguration for Upstream Link

22 Protection Congurationfor Upstream Link


22.1 OverviewThis chapter describes the service protection mechanism of the upstream port on the MA5600.22.2 Conguration Example of the Upstream Link ProtectionThis example shows how to congure the upstream link protection.22.3 Conguring a Protection GroupThis operation enables you to congure a protection group. When the MA5600 is disconnectedwith the upper layer device physically due to some unknown causes, the MA5600 uses thestandby line to transmit the user services.


22 Protection Conguration for Upstream LinkSmartAX MA5600 Multi-service Access Module

Conguration Guide

22.1 OverviewThis chapter describes the service protection mechanism of the upstream port on the MA5600.

Service Descriptionn The broadband access service of Internet becomes more and more popular, and users

demand for both high performance and stable network access. As a result, carriers preferthe broadband access equipment that runs stably and has better automatic protectionand self-healing capability.

n The MA5600 adopts the active/standby mechanism to ensure the normal operation of theservice. In addition, it is designed with the service protection mechanism of the upstreamport. When the MA5600 is disconnected with the upper layer device physically due tosome unknown causes, the MA5600 uses the standby line to transmit the user services.

Service Specicationsn Port status detection mode: It means the two ports of a protection group, or the Tx ports of

the two boards are enabled. The port status determines whether to implement switchover.n Delay detection mode: It means only one Tx port in a protection group is enabled, and

the other one is disabled. If the status of the enabled Tx port is DOWN, then disabled it.Then, enable the other Tx port. If the status of the other Tx port is UP, then switchover isimplemented. Otherwise, detection proceeds.

Then Port status detection mode: It means the two ports of a protection group, or the Tx ports of

the two boards are enabled. The port status determines whether to implement switchover.n Delay detection mode: It means only one Tx port in a protection group is enabled, and

the other one is disabled. If the status of the enabled Tx port is DOWN, then disabled it.Then, enable the other Tx port. If the status of the other Tx port is UP, then switchover isimplemented. Otherwise, detection proceeds.

n Link Aggregation Control Protocol (LACP) detection mode: In this mode, the linkaggregation protocol control is performed, the port failure protocol detection is performed,and protection switchover function is triggered.

22.2 Conguration Example of the Upstream LinkProtection

This example shows how to congure the upstream link protection.

Background InformationTwo upstream ports can be in the same upstream board or in different upstream boards.

NetworkingFigure 22-1 shows a sample network for conguring the upstream link protection.



Figure 22-1 Sample network for conguring the upstream link protection

Conguration FlowchartFigure 22-2 shows the owchart for conguring the upstream link protection.

Figure 22-2 Flowchart for conguring the upstream link protection


22 Protection Conguration for Upstream LinkSmartAX MA5600 Multi-service Access Module

Conguration Guide

Data PlanTable 22-1 shows the data plan for conguring the upstream link protection.

Table 22-1 Data plan for conguring the upstream link protection

Item DataVLAN ID 10Upstream port 0/7/0 and 0/8/0Protection group mode Timedelay modeGateway IP address 10.1.1.1

Service port 0/2/0

Procedure

Step 1 Run the link-aggregation command to aggregate the upstream ports.huawei(config)#link-aggregation 0/7 0 0/8 0 egress-ingress workmode lacp-static

Step 2 Run the protect-group command to congure the protection group.huawei(config)#protecthuawei(config-protect)#protect-group first 0/7/0 second 0/8/0 eth workmodetimedelay enable

Step 3 Run the vlan command to create a VLAN.huawei(config-protect)#quithuawei(config)#vlan 10 smart

Step 4 Run the port vlan command to add the VLAN to the upstream port.huawei(config)#port vlan 10 0/7 0huawei(config)#port vlan 10 0/8 0

Step 5 Run the service-port command to add the service port to the VLAN.huawei(config)#service-port vlan 10 adsl 0/2/0 vpi 0 vci 35 rx-cttr 6 tx-cttr 6


—-End

Result

After the conguration, the user can access the Internet.

When the upstream port 0/7/0 fails, the system will automatically transfer the service to theupstream port 0/8/0. In this case, the user can still access the Internet.

22.3 Conguring a Protection GroupThis operation enables you to congure a protection group. When the MA5600 is disconnectedwith the upper layer device physically due to some unknown causes, the MA5600 uses thestandby line to transmit the user services.

Context

n The MA5600 supports the Timedelay mode. It means only one Tx port in a protectiongroup is enabled, and the other one is disabled. If the status of the enabled Tx port isDOWN, then disabled it. Then, enable the other Tx port. If the status of the other Tx portis UP, then switchover is implemented. Otherwise, detection proceeds.



n For the two upstream ports of a protection group, they must be on different upstreamboards, and the port type must be the same.

n The two ports in the protection group must be the only two ports in the same aggregationgroup.

Procedure

Step 1 Run the protect-group command to congure a protection group.

Step 2 Run the display protect-group command to query the protection group.

—-End

Example

To congure a protection group that consists of ports 0/7/0 and 0/8/0, do as follows:huawei(config-protect)#protect-group first 0/7/0 second 0/8/0eth workmode timedelay enablehuawei(config-protect)#display protect-group---------------------------------------------------------------------------NO. FirstIntf SecondIntf Enable ActiveFlag ProtectType WorkMode---------------------------------------------------------------------------0 0/7/0 0/8/0 Enable First ETH TimeDelay---------------------------------------------------------------------------Total : 1

Related Operations

Table 22-2 lists the related operations for conguring the protection group.

Table 22-2 Related operations for conguring the protection group

To... Run the Command...Delete a protection group undo protect-group

Switch over between the ports in a protectiongroup by force

protect-group switch-over


SmartAX MA5600 Multi-service Access ModuleConguration Guide 23 Device Subtending Conguration

23 Device Subtending Conguration


23.1 OverviewThis section describes the service description and service specications of the subtendingdevice.23.2 Conguration Example of the Subtended Network Through the SCU BoardThe example shows how to subtend two MA5600 devices.23.3 Conguration Example of Subtending Device Through the ETHA BoardThis operation enables you to subtend two MA5600 devices.23.4 Conguring the Physical Attributes of an Ethernet Port23.5 Enabling the Flow Control on an Ethernet PortThis operation enables the ow control on an Ethernet port.23.6 Enabling the Trafc SuppressionThis operation enables the trafc suppression on a port to guarantee the stable network services.23.7 Enabling the Ethernet Port AggregationThis operation enables Ethernet port aggregation.23.8 Mirroring an Ethernet PortThis operation enables the mirroring function of an Ethernet port. This helps analyze thecause of a faulty port.23.9 Adding an Ethernet Port to a VLANThis operation enables you to add Ethernet ports to a VLAN.23.10 Setting the Native VLAN for an Ethernet PortThis operation enables you to set the native VLAN for an Ethernet port.


23 Device Subtending CongurationSmartAX MA5600 Multi-service Access Module

Conguration Guide

23.1 OverviewThis section describes the service description and service specications of the subtendingdevice.

Service DescriptionThe MA5600 supports subtended through the Ethernet port. Multiple DSLAMs at differenttiers can be subtended through the GE/FE port to extend the network coverage and satisfy therequirements for a large capacity.

Service SpecicationsThe MA5600 provides Ethernet ports through the SCU board.

The Ethernet ports provided by the SCU are used for upstream service transmission andsubtended network conguration.

Table 23-1 lists the Ethernet ports of the MA5600

Table 23-1 Ethernet ports of the MA5600

Port Type Port Working Mode Rate100 Base-FX 100M single-

mode/multiple-modeoptical port

Full duplex 100 Mbit/s

1000 Base-TX 1000M electrical port n Full duplexn Half duplexn Auto negotiation

n 10 Mbit/sn 100 Mbit/sn 1000 Mbit/s

1000 Base-SX 1000M multiple-modeoptical port

n Full duplexn Auto negotiation

1000 Mbit/s

1000 Base-LX 1000M single-modeoptical port

n Full duplexn Auto negotiation

1000 Mbit/s

23.2 Conguration Example of the Subtended NetworkThrough the SCU Board

The example shows how to subtend two MA5600 devices.

Prerequisites

n All the network devices and lines are normal.n All the boards in the MA5600 are in the normal state.n The Ethernet port 0/7/1 of MA5600_A and the Ethernet port 0/7/0 of MA5600_B are of

the same port type.n The Ethernet port 0/7/1 of MA5600_A and the Ethernet port 0/7/0 of MA5600_B are of

the same auto-negotiation for their rates and duplex modes.

NetworkingFigure 23-1 show a sample network for conguring the subtended network.



Figure 23-1 Sample network for conguring the subtended network

Conguration FlowchartFigure 23-2 shows the owchart for conguring the subtended network.

Figure 23-2 Flowchart for conguring the subtended network

Procedure

Step 1 Create a standard VLANhuawei(config)#vlan 9 standard



Conguration Guide

Step 2 Add an upstream port to the VLANhuawei(config)#port vlan 9 0

Step 3 Add a subtending port to the VLANhuawei(config)#port vlan 9 1

NOTE

Perform the following tasks on MA5600_A. The MA5600_B need not be congured with a subtendedport. The other congurations of MA5600_B are the same as those of MA5600_A.

—-End

Result

After the conguration, you can congure various services through both the MA5600_A andMA5600_B. Users of MA5600_B can access the Internet.

23.3 Conguration Example of Subtending Device Throughthe ETHA Board

This operation enables you to subtend two MA5600 devices.

Prerequisites

n The network device and the line are in the normal state.n All boards of the MA5600 are in the normal state.n Ethernet port 0/6/0 on MA5600_A and Ethernet port 0/7/0 on MA5600_B are of the same

type, and the port rate and duplex mode is auto negotiation.n Conguration on MA5600_B is nished and it is not repeated here.

NetworkingFigure 23-3 shows a sample network for subtending devices



Figure 23-3 Sample network for subtending devices

Conguration FlowchartFigure 23-4 shows the owchart for conguring subtending devices

Figure 23-4 Flowchart for conguring subtending devices

NOTE

The mentioned conguration is performed on MA5600_A. No subtending port is needed to be conguredon MA5600_B. For other congurations, they are the same on MA5600_A and MA5600_B.



Conguration Guide

ProcedureStep 1 Create a standard VLAN.


Step 2 Add an upstream port.huawei(config)#port vlan 10 0/7 0

Step 3 Add a subtending port.huawei(config)#port vlan 9 0/6 1


—-End

ResultAfter the conguration, the subtended devices can be congured with services and usersconnected to MA5600_B can access the Internet.

23.4 Conguring the Physical Attributes of an Ethernet Port23.4.1 Setting the Auto-negotiation Mode of an Ethernet PortThis operation enables you to set the auto-negotiation mode of an Ethernet port.23.4.2 Setting the Duplex Mode of an Ethernet PortThis operation enables you to set the duplex mode of an Ethernet port.23.4.3 Setting the Rate of an Ethernet PortThis operation enables you to set the rate of an Ethernet port.23.4.4 Setting the Network Cable Type of an Ethernet PortThis operation enables you to set the network cable type of an Ethernet port.

23.4.1 Setting the Auto-negotiation Mode of an Ethernet PortThis operation enables you to set the auto-negotiation mode of an Ethernet port.

Background Informationn By default, the auto-neg switch of the Ethernet electric port is enabled.n By default, the auto-neg switch of the Ethernet optical port is disabled.

ProcedureStep 1 Run the auto-neg command to set the auto-negotiation mode of an Ethernet port.

Step 2 Run the display port state command to query the conguration of the Ethernet port.

—-End

ExampleTo disable the auto-negotiation mode of Ethernet port 0/7/1 on the SCU board, do as follows:huawei(config-if-scu-0/7)#auto-neg 1 disable

Run the display port state command to query the conguration of Ethernet port 0/7/1.huawei(config-if-scu-0/7)#display port state 1Optics module status is absenceThe port is activeNative VLAN ID is 1



Ethernet port is offlineEthernet port is full duplexEthernet port rate is 1000MEthernet port does not support flow controlEthernet port does not support line-selfadaptive

23.4.2 Setting the Duplex Mode of an Ethernet PortThis operation enables you to set the duplex mode of an Ethernet port.

Background Informationn The duplex of an Ethernet port can be full duplex, half duplex, or auto-negotiation. When

setting the duplex mode of an Ethernet port, make sure that the duplex of the Ethernetport must be the same as that of the interconnected port on the peer device. This preventscommunication failure.

n By default:– The FE/GE electrical port is in auto-negotiation mode.– The FE/GE optical port is in full duplex mode.

n When a port is in auto-negotiation mode, to change its duplex mode to full duplex, disablethe auto-negotiation mode of the port rst.

Procedure

Step 1 Run the auto-neg command to disable the auto negotiation mode of an Ethernet port.

Step 2 Run the duplex command to set the duplex mode of the Ethernet port.

Step 3 Run the display port state command to query the duplex mode of the port.

—-End

Example

To change the auto-negotiation mode of Ethernet port 0/7/1 to full duplex, do as follows:huawei(config-if-scu-0/7)#auto-neg 1 disablehuawei(config-if-scu-0/7)#duplex 1 full

Run the display port state command to query the conguration of Ethernet port 0/7/1.huawei(config-if-scu-0/7)#display port state 1Optics module status is normalThe port is activeNative VLAN ID is 1Ethernet port is offlineEthernet port is full duplexEthernet port rate is 1000MEthernet port does not support flow controlEthernet port does not support line-selfadaptive

23.4.3 Setting the Rate of an Ethernet PortThis operation enables you to set the rate of an Ethernet port.

Background InformationWhen setting the rate of an Ethernet port, make sure that the rate of the Ethernet port must bethe same as that of the interconnected port on the peer device. This prevents communicationfailure.

By default:



Conguration Guide

n The rate of the FE/GE electrical port is auto-negotiation.n The rate of the GE optical port is 1000 Mbit/s.n The rate of the FE optical port is 100 Mbit/s.n When a port is in auto-negotiation mode, to change its rate to a specic value, disable

the auto-negotiation mode rst.n The rate of the 1000 Mbit/s electrical port is not compulsorily 1000 Mbit/s but can be

auto-negotiated to 1000 Mbit/s.

Procedure

Step 1 Run the auto-neg command to set the rate of an Ethernet port.

Step 2 Run the speed command to query the congured rate of the Ethernet port.

—-End

Example

To set the rate of a GE optical port to 1000 Mbit/s, do as follows:huawei(config-if-scu-)#auto-neg 1 disablehuawei(config-if-scu-)#speed 1 1000

Run the display port state command to query the conguration of Ethernet port 0/19/1.huawei(config-if-scu-)#display port state 1Optics module status is normalThe port is activeNative VLAN ID is 1Ethernet port is offlineEthernet port is full duplexEthernet port rate is 1000MEthernet port does not support flow controlEthernet port does not support line-selfadaptive

23.4.4 Setting the Network Cable Type of an Ethernet PortThis operation enables you to set the network cable type of an Ethernet port.

Background Informationn The Ethernet electrical port uses a straight-through cable or a crossover cable. To set the

type of the network cable of the Ethernet port, run the mdi command.n The default network cable type is auto (auto-adaptive).n Such setting only applies to the Ethernet electrical port.n When the Ethernet electrical port is not in auto-negotiation mode, the network cable

type cannot be congured as auto.

Procedure

Step 1 Run the mdi command to set the network cable type of an Ethernet port.

Step 2 Run the display port state command to query the congured network cable type

—-End

Example

To set the network cable type of Ethernet electrical port 0/7/1 as straight-through cable, doas follows:huawei(config-if-scu-)#mdi 1 normal



Run the display port state command to query the conguration of Ethernet port 0/7/1.huawei(config-if-scu-)#display port state 1The port is activeNative VLAN ID is 1Ethernet port is onlineEthernet port is full duplexEthernet port rate is 100MEthernet port does not support flow controlLine-adaptive function of the ethernet port is normal

23.5 Enabling the Flow Control on an Ethernet PortThis operation enables the ow control on an Ethernet port.

Background InformationWhen the trafc exceeds a certain level (> 1 Gbit/s for the GE port or > 100 Mbit/s for theFE port), the MA5600 sends PAUSE frames to inform the remote PC to reduce the trafc soas to reduce the packet loss rate, and response to the PAUSE frames sent from remote PC.The process involved is called ow control.n The control function requires the supports from both the MA5600 and the peer device. If

the peer device supports ow control, enable the ow control of the MA5600 If the peerdevice does not support the ow control, disable the ow control of the MA5600.

n By default, the ow control on the Ethernet port is disabled.

Procedure

Step 1 Run the ow-control command to enable the ow control on an Ethernet port.

Step 2 Run the display port state command to query the set ow control.

—-End

Example

To enable the ow control on all ports, do as follows:huawei(config-if-scu-)#flow-control all

Related Operation

Run the display port state command and you can nd the set ow control.huawei(config-if-scu-)#display port state all-----------------------------------------------------------------------------Port Port Optic Native MDI Speed Duplex Flow- Active Link

Type Status VLAN (Mbps) Ctrl State-----------------------------------------------------------------------------

0 GE absence 1 - 1000 full on active offline1 GE absence 1 - 1000 full on active offline

-----------------------------------------------------------------------------

Related Operation

Table 23-2 lists the related operation for enabling the ow control of an Ethernet port.



Conguration Guide

Table 23-2 Related operation for enabling the ow control of an Ethernet port

To... Run the command...Disable the ow control on the Ethernet port undo ow-control

23.6 Enabling the Trafc SuppressionThis operation enables the trafc suppression on a port to guarantee the stable network services.

Background InformationThere are three trafc suppression modes available:n Broadcast storm suppression

Broadcast storm suppression refers to discarding broadcast trafc when it exceeds a presetthreshold to guarantee stable network services.

n Unknown unicast suppressionn Unknown multicast storm suppressionn By default, the level of broadcast storm suppression and unknown unicast suppression is 7.n It is suggested to enable broadcast storm suppression according to network conditions.n When IGMP Proxy or IGMP Snooping is enabled, unknown multicast packets are not

suppressed. When IGMP proxy and IGMP snooping are disabled, unknown multicastpackets are suppressed. By default, the level of unknown multicast suppression is 7.

Procedure

Step 1 Run the trafc-suppress command to enable the trafc suppression on a port.

Step 2 Run the display trafc-suppress command to query the conguration of the trafcsuppression.

—-End

Examples

To set broadcast storm suppression for all ports to level 1, do as follows:huawei(config-if-scu-0/7)#traffic-suppress all broadcast value 1huawei(config-if-scu-0/7)#display traffic-suppress 0Traffic suppression ID definition:---------------------------------------------------------------------NO. Min bandwidth(kbps) Max bandwidth(kbps) Package number(pps)---------------------------------------------------------------------

1 6 145 122 12 291 243 24 582 484 48 1153 955 97 2319 1916 195 4639 3827 390 9265 7638 781 18531 15269 1562 37063 305210 3125 74126 610411 6249 148241 1220712 12499 296483 24414

---------------------------------------------------------------------Current traffic suppression ID of broadcast : 1Current traffic suppression ID of multicast : 2Current traffic suppression ID of unicast : 3

To set unknown unicast suppression for port 0/7/0 to level 7, do as follows:huawei(config-if-scu-0/7)#traffic-suppress 0 unicast value 7huawei(config-if-scu-0/7)#display traffic-suppress 0



Traffic suppression ID definition:---------------------------------------------------------------------NO. Min bandwidth(kbps) Max bandwidth(kbps) Package number(pps)---------------------------------------------------------------------

1 6 145 122 12 291 243 24 582 484 48 1153 955 97 2319 1916 195 4639 3827 390 9265 7638 781 18531 15269 1562 37063 305210 3125 74126 610411 6249 148241 1220712 12499 296483 24414


To set multicast packet suppression for port 0/7/0 to level 7, do as follows:huawei(config-if-scu-0/7)#traffic-suppress 0 multicast value 7huawei(config-if-scu-0/7)#display traffic-suppress 0Traffic suppression ID definition:---------------------------------------------------------------------NO. Min bandwidth(kbps) Max bandwidth(kbps) Package number(pps)---------------------------------------------------------------------

1 6 145 122 12 291 243 24 582 484 48 1153 955 97 2319 1916 195 4639 3827 390 9265 7638 781 18531 15269 1562 37063 305210 3125 74126 610411 6249 148241 1220712 12499 296483 24414


Related Operations

Table 23-3 lists the related operations for enabling trafc suppression.

Table 23-3 Related operations for enabling trafc suppression

To... Run the Command...Disable unknown unicast packet suppression undo trafc-suppress unicastDisable unknown multicast packet suppression undo trafc-suppress multicastDisable broadcast storm suppression undo trafc-suppress broadcast

23.7 Enabling the Ethernet Port AggregationThis operation enables Ethernet port aggregation.

Background InformationPort aggregation means aggregation of multiple ports together to expand the bandwidth. Theinput and output load can be distributed among the member ports.n The SCU board supports up to 3 port aggregation groups.n One aggregation group supports up to 6 Ethernet ports.



Conguration Guide

n Link Aggregation Control Protocol (LACP) is run in the static port aggregation but notin the manual port aggregation.

When conguring the port aggregation, pay attention to the following points:n All the ports must work in full duplex mode.n The rates of all the ports must be the same, and cannot be congured as auto-negotiation.n The default VLAN (PVID) and VLAN attributes of all the ports must be the same.n One port belongs to only one aggregation group.n No mirror destination port is included.

Procedure

Step 1 Run the duplex command to set the duplex mode of the Ethernet port.

Step 2 Run the speed command to set the port rate.

Step 3 Run the link-aggregation command to set the port aggregation.

Step 4 Run the display link-aggregation command to query the related congured information.

—-End

Example

To set the Ethernet port aggregation, do as follows:huawei(config-if-scu-)#duplex 0 fullhuawei(config-if-scu-)#duplex 1 fullhuawei(config-if-scu-)#speed 0 1000huawei(config-if-scu-)#speed 1 1000huawei(config-if-scu-)#quithuawei(config)#link-aggregation 0-1 ingresshuawei(config)#display link-aggregation all------------------------------------------------------Master port link-aggregation mode Port NUM------------------------------------------------------0/7/1 egress-ingress 2------------------------------------------------------Total: 1 link-aggregation(s)

Related Operation

Table 23-4 lists the related operation for enabling the Ethernet port aggregation.

Table 23-4 Related operation for enabling the Ethernet port aggregation

To... Run the command...Delete the Ethernet port aggregation undo link-aggregation

23.8 Mirroring an Ethernet PortThis operation enables the mirroring function of an Ethernet port. This helps analyze thecause of a faulty port.

Background Informationn You can congure only one mirroring destination port on the SCU board or ETH board.n You can mirror multiple ports to one destination port.n The mirroring destination port cannot be the aggregated port.



Procedure

Step 1 Run the mirror port command to enable the mirroring function of an Ethernet port.

Step 2 Run the display mirror command to query the conguration of the Ethernet port.

—-End

Example

To mirror the transmit and receive packets of port 0 to port 1, do as follows:huawei(config-if-scu-)#mirror port 0 1 all

Run the display mirror command and you can nd that the port mirroring function is enabled.huawei(config-if-scu-)#display mirror------------------------------------------------Source port Direction Destination port------------------------------------------------

0 all 1------------------------------------------------

Related Operation

Table 23-5 lists the related operation for enabling the mirroring function of an Ethernet port.

Table 23-5 Related operation for enabling the mirroring function of an Ethernet port

To... Run the command...Display the mirroring of anEthernet port

display mirror

23.9 Adding an Ethernet Port to a VLANThis operation enables you to add Ethernet ports to a VLAN.

Procedure

Step 1 Run the port vlan command to add an Ethernet Port to a VLAN.

Step 2 Run the display vlan command to query the upstream port of a VLAN.

—-End

Example

To add Ethernet port 0/7/0 to VLAN 2, do as follows:huawei(config)#port vlan 2 0

Run the display vlan command to query the upstream port of the VLAN.huawei(config)#display vlan 2{ <cr>|to<K> }:Command:

display vlan 2VLAN ID: 2VLAN type: MUXVLAN attribute: common------------------------------F/S /P Native VLAN State------------------------------/0 1 up

------------------------------Standard port number: 1



Conguration Guide

Service virtual port number: 0

Related Operation

Table 23-6 lists the related operation for adding an Ethernet Port to a VLAN.

Table 23-6 Related operation for adding an Ethernet Port to a VLAN

To... Run the command...Delete a port from a VLAN undo port vlan

23.10 Setting the Native VLAN for an Ethernet PortThis operation enables you to set the native VLAN for an Ethernet port.

Background Informationn The default Native VLAN of the Ethernet ports is VLAN 1.n When the Ethernet port is used as the upstream port:

– If the native VLAN of the Ethernet port is the same as the VLAN to which this Ethernetport belongs, the Ethernet port will remove the VLAN Tag of the upstream packets.

– If the native VLAN of the Ethernet port is different from the VLAN to which thisEthernet port belongs, the Ethernet port will keep the VLAN Tag of the upstreampackets.

n Before specifying the native VLAN of an Ethernet port, the VLAN must be included inthe port.

n Whether the native VLAN must be set for the upstream port depends on the upper-layerequipment connected to the port.– If the upper-layer equipment supports the packets containing the VLAN tag, the native

VLAN of the upstream port of the MA5600 must be different from the VLAN towhich the upstream port belongs.

– If the upper-layer equipment does not support the packets containing the VLAN tag,the native VLAN of the upstream port of the MA5600 must be the same as the VLANto which the upstream port belongs.

Procedure

Step 1 Run the native-vlan command to set the native VLAN of an Ethernet port.

Step 2 Run the display port state command to query the conguration of the Native VLAN.

—-End

Example

To set the native VLAN of Ethernet port0/7/0 as VLAN 10, do as follows:huawei(config-if-scu-)#native-vlan 0 vlan 10

Run the display port state command and you can nd that the default VLAN has been set.huawei(config-if-scu-)#display port state 0Optics module status is normalThe port is activeNative VLAN ID is 10Ethernet port is onlineEthernet port is full duplexEthernet port rate is 1000MEthernet port does not support flow control



Ethernet port does not support line-selfadaptive


SmartAX MA5600 Multi-service Access ModuleConguration Guide 24 ATM-DSLAM Access Conguration

24 ATM-DSLAM Access Conguration


24.1 OverviewThis section describes ATM-DSLAM access service and specication on the MA5600.24.2 Conguration Example of the ATM-DSLAM AccessThis example shows how to congure the ATM-DSLAM so that the user can access theInternet in OPTIC, IMA and E3 modes .24.3 Setting the OPTIC Port ModeThis operation enables you to set the OPTIC port mode.24.4 Setting the OPTIC Port TypeThis operation enables you to set the optical port type.24.5 Adding an IMA GroupThis operation enables you to add an IMA group.24.6 Setting the IMA Group ModeThis operation enables you to set the clock mode, CRC4 multiframe and scramble of theIMA group.24.7 Adding an IMA LinkThis operation enables you to add an IMA link.24.8 Setting the Line Type for an E3 PortThis operation enables you to set the line type for an E3 port.24.9 Setting the E3 Port TypeThis operation enables you to set the E3 port type.24.10 Setting the Tx Clock of an E3 PortThis operation enables you to set the Tx clock of an E3 port.24.11 Clearing the Statistics of an E3 PortThis operation enables you to clear the statistics of an E3 port.


24 ATM-DSLAM Access CongurationSmartAX MA5600 Multi-service Access Module

Conguration Guide

24.1 OverviewThis section describes ATM-DSLAM access service and specication on the MA5600.

Service DescriptionIn the evolution from ATM networks to IP networks, carriers will replace their ATM-DSLAMnetwork devices in the access layer with IP network devices. In this evolution, a large numberof ATM network devices still exist in the network for a long time. The MA5600 provides ATMports for lower level ATM network devices to access the network.

Service SpecicationsThe MA5600 supports ATM access through the subboards on the AIUG board. The subboardsprovide 155M ATM ports, IMA E1 port or IMA E3 port to connect to the ATM-DSLAMdevices in the downstream direction.

Figure 24-1 shows a sample network of ATM-DSLAM access.

Figure 24-1 Sample network of the ATM-DSLAM access

The MA5600 provides two upstream modes: through FE/GE ports on the SCU board orthrough the MPLS module.n Through the FE/GE ports on the SCU

In the upstream direction, service trafc A from the ATM-DSLAM is directly sent to theupper layer device through the Ethernet switching module on the SCU.

n Through the MPLS module

In ATM over Ethernet mode, MPLS upstream supports mapping between PVC and PseudoWire (PW); while in Ethernet mode, MPLS supports mapping between VLAN and PW.

This chapter describes the conguration through the GE ports on the SCU board. For theconguration through the MPLS, see the chapter 25 MPLS Access Conguration.

24.2 Conguration Example of the ATM-DSLAM AccessThis example shows how to congure the ATM-DSLAM so that the user can access theInternet in OPTIC, IMA and E3 modes .



NetworkingFigure 24-2 shows a sample network for conguring the ATM-DSLAM access.

Figure 24-2 Sample network for conguring the ATM-DSLAM access

Data PlanTable 24-1 shows the data plan for conguring the ATM-DSLAM access.

Table 24-1 Data plan for conguring the ATM-DSLAM access

Item DataService port: 0/5/0AIUGOPTIC port type: UNI

SCU Upstream port: 0/7/0

NOTE

n In this example, only the conguration at the MA5600 side is introduced.n Different subboards are needed for conguring ATM DSLAM access in different modes.

Conguration FlowchartFigure 24-3 shows the owchart for conguring the ATM-DSLAM access.



Conguration Guide

Figure 24-3 Flowchart for conguring the ATM-DSLAM access

Procedure

Step 1 Congure the OPTIC port.1. Enter OPTIC cong mode.

huawei(config)#interface aiu 0/5huawei(config-if-aiu-0/5)#sub-interface optichuawei(config-if-aiu-0/5.optic)#

2. Congure the port mode.huawei(config-if-aiu-0/5.optic)#port mode 0 stm-1

3. Congure the port type.huawei(config-if-aiu-0/5.optic)#uni-nni-set 0 unihuawei(config-if-aiu-0/5.optic)#quithuawei(config-if-aiu-0/5)#quit

4. Create a VLAN.huawei(config)#vlan 10 mux

5. Add the upstream port to the VLAN.huawei(config)#port vlan 10 0

6. Add the service port to the VLAN.huawei(config)#service-port vlan 10 atm 0/5/0 vpi 1 vci 40 rx-cttr2 upc off tx-cttr 2 upc off

Step 2 Congure the IMA port.1. Enter IMA cong mode.

huawei(config)#interface aiu 0/5



huawei(config-if-aiu-0/5)#sub-interface imahuawei(config-if-aiu-0/5.ima)#

2. Add an IMA group.huawei(config-if-aiu-0/5.ima)#ima group add 0 version1.0 1 1 ctc 0 128 2 2 1

3. Add an IMA link.huawei(config-if-aiu-0/5.ima)#ima link add 0 0IMA link add successfullyhuawei(config-if-aiu-0/5.ima)#ima link add 0 1IMA link add successfully

huawei(config-if-aiu-0/5.ima)#ima link add 0 2IMA link add successfully

huawei(config-if-aiu-0/5.ima)#ima link add 0 3IMA link add successfully

4. Congure the clock mode.huawei(config-if-aiu-0/5.ima)#ima group mode clockmode 0 systemSet IMA group transmit clock successfully

5. Create a VLAN.huawei(config-if-aiu-0/5.ima)#quithuawei(config-if-aiu-0/5)#quithuawei(config)#vlan 10 mux


7. Add the service port to the VLAN.huawei(config)#service-port vlan 10 atm 0/5/0 vpi 1 vci 40 rx-cttr2 upc off tx-cttr 2 upc off

Step 3 Congure the E3 port.1. Enter E3 cong mode.

huawei(config)#interface aiu 0/5huawei(config-if-aiu-0/5)#sub-interface e3huawei(config-if-aiu-0/5.e3)#

2. Congure the port line type.

To set the line type for the port, run the linetype command. The line types includee3other, e3Framed, and e3Plcp. By default, the line type is e3Framed.

For example, to set the line type to e3plcp, do as follows:huawei(config-if-aiu-0/5.e3)#linetype{ portId<0,3> }:0{ linetype<E><e3other,e3Framed,e3Plcp> }:e3plcp

In this example, the default line type is used, so you do not need to congure the line type.3. Congure the clock mode.

huawei(config-if-aiu-0/5.e3)#tx clock 0 line

4. Congure the port type.huawei(config-if-aiu-0/5.e3)#uni-nni-set 0 uni

5. Create a VLAN.huawei(config-if-aiu-0/5.e3)#quithuawei(config-if-aiu-0/5)#quithuawei(config)#vlan 10 mux


7. Add the service port to the VLAN.huawei(config)#service-port vlan 10 e30/5/0 vpi 1 vci 40 rx-cttr2 upc off tx-cttr 2 upc off

—-End



Conguration Guide

Result

After the conguration, the users of the ATM DSLAM can access the Internet in OPTIC,IMA and E3 modes.

24.3 Setting the OPTIC Port ModeThis operation enables you to set the OPTIC port mode.

Background Information155M ATM port supports C-3c/STS-3c mode and STM-1 mode.n OC-3c is a signal rate level at the optical port of the Synchronous Optical Network

(SONET), the rate is 155 Mbit/s. STS-3c is the signal rate at the electrical port thatcorresponds to OC-3c level.

n STM-1 is a signal rate level of the STM (Synchronous Transport Module) dened in SDH(Synchronous Digital Hierarchy). The rate is 155 Mbit/s.

Procedure

Step 1 Run the port mode command to congure the OPTIC port mode.

Step 2 Run the display board command to query the congured OPTIC port mode.

—-End

Example

To set port AIUG 0/5/0 mode as STM-1, do as follows:huawei(config)#interface aiu 0/5huawei(config-if-aiu-0/5)#sub-interface optichuawei(config-if-aiu-0/5.optic)#port mode 1 stm-1

Run the display board command and you can nd the OPTIC port mode is set successfully.huawei(config-if-aiu-0/5.optic)#quithuawei(config-if-aiu-0/5)#quithuawei(config)#display board 0/5---------------------------------------Board Name : H561AIUGBoard Status : Normal---------------------------------------Subboard[0]: H511O1CTG Status: Failed--------------------------------------------------------------------

Port Port Port Line Port Loop Optical Phy Line Rate IFType Status Signal Clock Type Type Type Type (Mbps) Type

--------------------------------------------------------------------0 ATM Fail No System No Single Optical STM-1 155 UNI--------------------------------------------------------------------

Related Operation

Table 24-2 lists the related operation for setting the OPTIC port mode.

Table 24-2 Related operation for setting the OPTIC port mode

To... Run the Command...Set the OPTIC port type uni-nni-set



24.4 Setting the OPTIC Port TypeThis operation enables you to set the optical port type.

Prerequisite

The port type shall be the same as that of the peer.

Background InformationThe MA5600 supports User Network Interface (UNI) and Network Node Interface (NNI).n When you set the port type as UNI, the VPI value of the port shall be from 0 to 255, the

VCI value of the port shall be from 32 to 1023.n When you set the port type as NNI, the VPI value of the port shall be from 0 to 4095, the

VCI value of the port shall be from 32 to 1023.

Procedure

Step 1 Run the ni-nni-set command to set the OPTIC port type.

Step 2 Run the display board command to query the congured OPTIC port type.

—-End

Example

To set the type of port AIUG 0/5/0 as UNI, do as follows:huawei(config-if-aiu-0/5.optic)#uni-nni-set 0 uni

Run the display board command and you can nd the OPTIC port type is set successfully.huawei(config-if-aiu-0/5.optic)#quithuawei(config-if-aiu-0/5)#quithuawei(config)#display board 0/5---------------------------------------Board Name : H561AIUGBoard Status : Normal---------------------------------------Subboard[0]: H511O1CTG Status: Failed

--------------------------------------------------------------------Port Port Port Line Port Loop Optical Phy Line Rate IF

Type Status Signal Clock Type Type Type Type (Mbps) Type--------------------------------------------------------------------0 ATM Fail No System No Single Optical STM-1 155 UNI--------------------------------------------------------------------

Related Operation

Table 24-3 lists the related operation for setting the OPTIC port type.

Table 24-3 Related operation for setting the OPTIC port type

To... Run the Command...Set the OPTIC port mode port mode

24.5 Adding an IMA GroupThis operation enables you to add an IMA group.



Conguration Guide

Background InformationThe AIUG provides IMA ports through the subboards on the AIUG board.n The AIUG board supports up to four IMA groups through the E8IT subboard.n Each IMA group can be congured with one to eight E1 links.n Each E1 link belongs to one IMA group only.

Procedure

Step 1 Run the ima group add command to add an IMA group.

Step 2 Run the display ima group command to query the IMA group conguration.

—-End

Example

To add IMA group 0, do as follows:huawei(config)#interface aiu 0/5huawei(config-if-aiu-0/5)#sub-interface imahuawei(config-if-aiu-0/5.ima)#ima group add{ groupIndex<0,7> }:0{ version<E><version1.1,version1.0> }:version1.0{ minTxLinks<1,8> }:2{ minRxLinks<1,8> }:2{ clock<E><ctc,itc> }:itc{ imaId<0,255> }:0{ framelength<E><32,64,128,256> }:256{ <cr>|alpha_value<1,2> }:Command:

ima group add 0 version1.0 2 2 itc 0 256IMA group add successfully

Run the display ima group command to query the conguration of the IMA group.huawei(config-if-aiu-0/5.ima)#display ima group parameter 0Command:

display ima group parameter 0--------------------------------------------------------------------NE symmetry : both config and operation symmetryFE symmetry : NULLMin Tx link : 2Min Rx link : 2NE clock : ITCFE clock : NULLTx reference link : NULLRx reference link : NULLTx IMA ID : 0Rx IMA ID : NULLTx frame length : 256Rx frame length : NULLMaximum differential delay(ms): 40Alpha : 2Beta : 2Gamma : 1Tx protocol version : 1.0Rx protocol version : NULL

--------------------------------------------------------------------


Table 24-4 lists parameters of an IMA group.



Table 24-4 Parameters of an IMA group

Parameter DescriptionVersion Version 1.0 and version 1.1 are two IMA protocol versions dened

by ATM Forum. IMA groups supporting different versions cannotinteroperate with each other.

Link number MinTxLinks and minRxLinks represent the minimum number of linksfor sending and receiving signals in the IMA group. When the numberof activated links reaches the minimum link number you set for anIMA group, the IMA group is activated. The value of minTxLinks andminRxLinks must be the same.

Clock mode CTC and ITC are two clock modes.In common transmit clock (CTC) mode, all the links in an IMA grouphave the same clock source. In independent transmit clock (ITC) mode,clock sources for different links in an IMA group are different. ITC isrecommended if you set an IMA group to link clock mode.

Frame length Framelength is the size of an IMA frame. It represents the number ofcells carried in an IMA frame. The value can be 32, 64, 128, or 256. Youare recommended to set it to 128.

Invalid ICP cells Alpha_value indicates the number of invalid ICP cells, and therecommended setting is 2.Beta_value indicates the number of errored ICP cells, and therecommended setting is 2.Gamma_value indicates the number of valid ICP cells, and the defaultsetting is 1.

Related Operations

Table 24-5 lists the related operations for add an IMA group.

Table 24-5 Related operations for adding an IMA group

To... Run the Command... RemarksDelete an IMAgroup

ima group delete -

Block an IMAgroup

ima group block Make sure that an IMA groupcontains links before blocking it.

Add an IMA link ima link add -

Delete an IMAlink

ima link delete If a link is the last one in an IMAgroup, the ima link delete commandcannot delete the link. Run the imagroup delete command to delete theIMA group and the link.

24.6 Setting the IMA Group ModeThis operation enables you to set the clock mode, CRC4 multiframe and scramble of theIMA group.

Prerequisite

The IMA subboard clock comes from the line recovery clock.



Conguration Guide

Background InformationThe clock mode of the IMA subboard includes are system and line.n System

– This is the default clock mode for an IMA subboard. If there is a clock subboard, theclock subboard provides clock signals for the IMA subboard. If there is no clocksubboard, an IMA subboard itself provides clock signals.

n Line– By default, CRC4 multiframe is disabled (the CRC4 switch is off).– When the MA5600 interoperates with the devices of other vendors, make sure the

E1 settings are the same at both sides. If the other side enables CRC4 multiframe,you need to enable it on the MA5600.

– The setting of scramble must be the same for the two sides. That is, the scrambleswitch must be on or off at the same time for both sides. By default, the scrambleswitch is off.

n Make sure the clock mode for an IMA group is system at one end of the link, and line atthe other end.

Procedure

Step 1 Run the ima group mode command to set the IMA group mode.

Step 2 Run the display ima cong command to query the conguration of the IMA group mode.

—-End

Examples

To set the clock mode of an IMA group, do as follows:huawei(config-if-aiu-0/5.ima)#ima group mode clockmode 0 lineSet IMA group transmit clock successfully

To enable CRC4 multiframe for an IMA group, do as follows:huawei(config-if-aiu-0/5.ima)#ima group mode crc4-multiframe 0 onSet CRC4 switch successfully

To enable scramble on an IMA Group, do as follows:huawei(config-if-aiu-0/5.ima)#ima group mode scramble 0 onSet scramble switch successfully

Run the display ima cong command and you can nd the IMA group mode is set successfully.huawei(config-if-aiuu-0/5.ima)#display ima config-------------------------------------------------------------------GroupIndex State Loopback CRC4 Scramble TxClock Links-------------------------------------------------------------------

0 Config - On On Line -1 - - - - - -2 - - - - - -3 - - - - - -

------------------------------------------------------------------------------------------------Link ID Tx state Rx state------------------------------

0 - -1 - -2 - -3 - -4 - -5 - -6 - -7 - -

------------------------------



Related Operations

Table 24-6 lists the related operations for setting the IMA group mode.

Table 24-6 Related operations for setting the IMA group mode

To... Run the Command...Add an IMA group uni-nni-setDelete an IMA group ima group delete

24.7 Adding an IMA LinkThis operation enables you to add an IMA link.

Background Informationn On the E1 cables of the MA5600 you can see signs of T0, R0, T1, R1, and so on. Tx and

Rx belong to the same E1 link. When you congure IMA links, make sure that Tx at thelocal end connects with Ry at the remote end, while Rx at the local end connects with Tyat the remote end (x and y indicate link numbers).

n Add an IMA group before adding IMA links.n If an IMA group has no links, you cannot add PVC to the group, loopback or block

the group.

Procedure

Step 1 Run the ima link add command to add an IMA link.

Step 2 Run the display ima cong command to query the conguration of the IMA link.

—-End

Example

To add a link 0 to IMA group 0, do as follows:huawei(config-if-aiu-0/5.ima)#ima link add 0 0IMA link add successfully

Run the display ima cong command and you can nd that the system prompts the IMAlink is added successfully.huawei(config-if-aiu-0/5.ima)#display ima config-------------------------------------------------------------------GroupIndex State Loopback CRC4 Scramble TxClock Links-------------------------------------------------------------------

0 Config - On On Line 01 - - - - - -2 - - - - - -3 - - - - - -

------------------------------------------------------------------------------------------------Link ID Tx state Rx state------------------------------

0 Config Config1 - -2 - -3 - -4 - -5 - -6 - -7 - -

------------------------------



Conguration Guide

Related OperationsTable 24-7 lists the related operations for adding an IMA link.

Table 24-7 Related operations for adding an IMA link

To... Run the Command... RemarksAdd an IMA group Ima group add -

Delete an IMA link ima link delete n To delete a link from one groupand add the link to anothergroup, rst delete the link fromboth the local and remote ends,and then add the link again.

n If a link is the last one in anIMA group, the ima link deletecommand cannot delete thelink. Run the ima group deletecommand to delete the IMAgroup and the link.

Block an IMA link ima link block -

24.8 Setting the Line Type for an E3 PortThis operation enables you to set the line type for an E3 port.

Background InformationThe E3 port supports three line types: e3other, e3Framed and e3Plcp.n e3other complies with G.832.n e3Framed complies with G.751 and does not adopt PLCP encapsulation.n e3Plcp complies with G.751 and adopts PLCP encapsulation.n By default, the line type of the E3 port is e3Framed.

ProcedureStep 1 Run the linetype command to set the line type for an E3 port.

Step 2 Run the display board command to query the congured line type of the E3 port.

—-End

ExampleTo set the line type of the E3 port as e3plcp, do as follows:huawei(config-if-aiu-0/5.e3)#linetype 0 e3plcp

Run the display board command and you can nd the line type of the E3 port is conguredsuccessfully.huawei(config-if-aiu-0/5.e3)#display board 0/5

---------------------------------------Board Name : H561AIUGBoard Status : Failed---------------------------------------

Subboard[0]: H511E13T Status: Failed--------------------------------------------------------------------Port Port Port Line Port Loop Line Line Rate IF



Type Status Signal Clock Type Type Code (Kbps) Type--------------------------------------------------------------------

0 E3 Fail No System No e3Plcp(G.751) HDB3 30528 UNI--------------------------------------------------------------------

Related Operations

Table 24-8 lists the related operations for setting the line type of the E3 port.

Table 24-8 Related operations for setting the line type of an E3 port

To... Run the Command...Set the E3 port type uni-nni-setSet the Tx clock of an E3 port tx clock

24.9 Setting the E3 Port TypeThis operation enables you to set the E3 port type.

Background InformationThe MA5600 supports User Network Interface (UNI) and Network Node Interface (NNI).n When you set the port type as UNI, the VPI value of the port shall be from 0 to 255.n When you set the port type as NNI, the VPI value of the port shall be from 0 to 4095.n When you set the port type as UNI or NNI, the VCI value of the port shall be from 32

to 1023.n The E3 port type shall be the same as that of the peer end.The default port type is UNI.

Procedure

Step 1 Run the uni-nni-set command to set the E3 port type.

Step 2 Run the display board command to query the conguration the E3 port.

—-End

Example

To set the E3 port type as UNI, do as follows:huawei(config-if-aiu-0/5.e3)#uni-nni-set 0 uni

Run the display board command and you can nd the E3 port type is set successfully.huawei(config-if-aiu-0/5.e3)#display board 0/5




0 E3 Fail No System No e3Plcp(G.751) HDB3 30528 UNI--------------------------------------------------------------------



Conguration Guide

Related Operation

Table 24-9 lists the related operation for setting the E3 port type.

Table 24-9 Related operation for setting the E3 port type

To... Run the Command...Set the Tx clock of an E3 port tx clock

24.10 Setting the Tx Clock of an E3 PortThis operation enables you to set the Tx clock of an E3 port.

Background Informationn The Tx clock includes two types: system and line.n By default, the Tx clock is system.

Procedure

Step 1 Run the tx clock command to set the Tx clock of an E3 port.

Step 2 Run the display board 0/5 command to query the congured Tx clock of the port.

—-End

Example

To set the Tx clock for port 0 as line, do as follows:huawei(config-if-aiu-0/5.e3)#tx clock 0 line

Run the display board command and you can nd that the Tx clock of the E3 port is setsuccessfully.huawei(config-if-aiu-0/5.e3)#display board 0/5




0 E3 Fail No Line No e3Plcp(G.751) HDB3 30528 UNI--------------------------------------------------------------------

Related Operations

Table 24-10 lists the related operations for setting the Tx clock of an E3 port.

Table 24-10 Related operations for setting the Tx clock of an E3 port

To... Run the Command...Setting the line type of an E3 port linetypeSetting the E3 port type uni-nni-set



24.11 Clearing the Statistics of an E3 PortThis operation enables you to clear the statistics of an E3 port.

Procedure

Step 1 Run the clear statistics command to clear the statistics of an E3 port.

Step 2 Run the display statistic command to query the port statistics.

—-End

Example

To clear the statistics of port 0, do as follows:huawei(config-if-aiu-0/5.e3)#clear statistics 0

Run the display statistics command and you can nd that the E3 port performance statistics iscleared successfully.huawei(config-if-aiu-0/5.e3)#display statistics 0--------------------------------------------Line coding violation events :0Frame head bit errored events :0Excessive zero of frame events :0Parity check errored events :0Far end block errored events :0BIP errored of PLCP layer events :0PLCP layer errored events :0FEBE of PLCP layer events :0Sent cells :0Received cells :0HEC bit errored corrected events :0HEC bit errored uncorrected events :0Receiving idle cells :0-------------------------------------------


SmartAX MA5600 Multi-service Access ModuleConguration Guide 25 MPLS Access Conguration

25 MPLS Access Conguration


25.1 OverviewThis section describes MPLS access service and its specications on the MA5600.25.2 Conguration Example of MPLS - Based on Binding the PVC with the PW ProleThe example shows how to set up the label distribution protocol (LDP) remote session, labelswitching paths (LSP) and PW between the MA5600 and the router.25.3 Conguration Example of MPLS- Based on Binding the VLAN with the PW ProleThe example shows how to set up the LDP remote session, LSP and PW between the MA5600and the router.25.4 Basic Conguration of MPLSThis section describes basic conguration of MPLS.25.5 Static LSP CongurationThis section describes how to congure a static LSP.25.6 MPLS LDP CongurationThis section describes how to congure MPLS LDP.25.7 PW CongurationThis section describes how to congure a PW template.


25 MPLS Access CongurationSmartAX MA5600 Multi-service Access Module

Conguration Guide

25.1 OverviewThis section describes MPLS access service and its specications on the MA5600.

Service DescriptionMultiprotocol Label Switching (MPLS) is derived from Internet Protocol version 4 (IPv4).The core technology of MPLS involves multiple network protocols, including:n Internet Protocol version 6 (IPv6)n Internet Packet Exchange (IPX)n Appletalkn DECnetn Connectionless Network Protocol (CLNP)

Service SpecicationsThe MA5600 provides the MPLS function through the MPLS subboard attached to the SCUboard. MPLS architecture consists of the following two planes:n Control Plane: The Control Plane is connectionless. It distributes labels by using the

current IP network.n Forwarding Plane (also known as Data Plane): The forwarding plane is

connection-oriented. Through layer 2 network, such as ATM network, this plane forwardspackets rapidly based on the label forwarding table.

For more details, refer to RFC3031 Multiprotocol Label Switching Architecture.

NOTE

n To provide the MPLS function, the MA5600 can serve as only a provider edge (PE) device.n For the MA5600, to subtend slave shelves,

– Only the master shelf supports MPLS function.– The master shelf supports the ETH PWE3 and the ATM PWE3 services, and the slave shelf

supports only the ETH PWE3 service. (To support the ATM PWE3 service, a slave shelf must beseparately congured with the and the AIUG subboard, so as to serve as an independent PE toprovide MPLS upstream function.)

25.2 Conguration Example of MPLS - Based on Bindingthe PVC with the PW Prole

The example shows how to set up the label distribution protocol (LDP) remote session, labelswitching paths (LSP) and PW between the MA5600 and the router.

NetworkingFigure 25-1 shows a sample network of MPLS based on binding the PVC with the PW prole



Figure 25-1 Sample network of MPLS based on binding the PVC with the PW prole

Data PlanTable 25-1 shows the data plan for conguring the MPLS based on binding the PVC withthe PW prole.

Table 25-1 Data plan for conguring the MPLS based on binding the PVC with the PW prole

Item DataLsr id: 4.4.4.4/32VLAN Type: standard VLANVLAN ID: 140L3 interface IP address: 10.11.0.214/30

MPLS

PW prole name: pwtRemote address: 3.3.3.8Type: ATM SDU

SCU Upstream port: 0/7/2VLAN ID of the upstream port: 140Native VLAN ID of the upstream port: 140

AIUG Port: 0/5/0VPI/VCI: 1/40

Router name Lsr id: 3.3.3.8/32

Conguration FlowchartFigure 25-2 shows the owchart for conguring the MPLS based on binding the PVC with thePW template.



Conguration Guide

Figure 25-2 Flowchart for conguring the MPLS based on binding the PVC with the PWtemplate

Procedure

Step 1 Congure OSPF.huawei(config)#ospfhuawei(config-ospf-1)#area 0huawei(config-ospf-1-area-0.0.0.0)#network 4.4.4.4 0.0.0.0huawei(config-ospf-1-area-0.0.0.0)#network 10.11.0.0 0.0.255.255huawei(config-ospf-1-area-0.0.0.0)#quithuawei(config-ospf-1)#quit

Step 2 Congure the loopback interface.huawei(config)#interface loopback 1



huawei(config-if-loopback1)#ip address 4.4.4.4 32huawei(config-if-loopback1)#quit

Step 3 Congure the Lsr id.huawei(config)#mpls lsr-id 4.4.4.4

Step 4 Enable MPLS.huawei(config)#mplshuawei(config-mpls)#quithuawei(config)#vlan 140 standardhuawei(config)#mpls vlan 140huawei(config)#interface vlanif 140huawei(config-if-vlanif140)#ip address 10.11.0.214 30huawei(config-if-vlanif140)#mplshuawei(config-if-vlanif140)#quit

Step 5 Congure the VLAN interface.huawei(config)#port vlan 140 0/7 2huawei(config)#interface scu 0/7huawei(config-if-scu-0/7)#native-vlan 2 vlan 140huawei(config-if-scu-0/7)#quit

Step 6 Enable the MPLS LDP.huawei(config)#mpls ldphuawei(config-mpls-ldp)#quithuawei(config)#interface vlanif 140huawei(config-if-vlanif140)#mpls ldphuawei(config-if-vlanif140)#quit

Step 7 Enable the remote peer.huawei(config)#mpls ldp remote-peer routerhuawei(config-mpls-ldp-remote-router)#remote-ip 3.3.3.8huawei(config-mpls-ldp-remote-router)#quit

Step 8 Congure the MPLS LDP triggering mechanism.huawei(config)#mplshuawei(config-mpls)#lsp-trigger hosthuawei(config-mpls)#label advertise non-nullhuawei(config-mpls)#quit

Step 9 Enable the MPLS L2VPN.huawei(config)#mpls l2vpn

Step 10 Create a VLAN.huawei(config)#service-port vlan aoe atm 0/5/0 vpi 1 vci 40 rx-cttr2 upc off tx-cttr 2 upc off

Step 11 Create a PW template.huawei(config)#pw-template pwthuawei(config-pw-template-pwt)#peer-address 3.3.3.8huawei(config-pw-template-pwt)#pw-type atm sduhuawei(config-pw-template-pwt)#quit

Step 12 Bind the PVC with the PW prole.huawei(config)#pw-ac-binding pvc 0/5/0 vpi 1 vci 40 pw 106 pw-template pwt

—-End

Result

After the conguration, the MA5600 can set up the LDP remote session with the router.

The LSP and PW can be created, and the PW is in up state.



Conguration Guide

25.3 Conguration Example of MPLS- Based on Bindingthe VLAN with the PW Prole

The example shows how to set up the LDP remote session, LSP and PW between the MA5600and the router.

NetworkingFigure 25-3 show a sample network of the MPLS based on binding the VLAN with the PWtemplate.

Figure 25-3 Sample network of the MPLS based on binding the VLAN with the PW template

Data PlanTable 25-2 shows the data plan for conguring the MPLS based on binding the VLAN withthe PW prole.

Table 25-2 Data plan for conguring the MPLS based on binding the VLAN with the PWprole

Item DataLsr id: 4.4.4.4/32VLAN type: standard VLANVLAN ID: 140IP address: 10.11.0.214/30

MPLS

PW prole name: pwtRemote address: 3.3.3.8Type: Ethernet Tagged

SCU Upstream port: 0/7/2VLAN ID of the upstream port: 140Native VLAN ID of the upstream port: 140



Item DataADSL Port: 0/2/0

VPI/VCI: 1/100Router Name Lsr id: 3.3.3.8/32

Conguration FlowchartFigure 25-4 shows the owchart for conguring the MPLS based on binding the VLAN withthe PW template.

Figure 25-4 Flowchart for conguring the MPLS based on binding the VLAN with the PWprole



Conguration Guide

Procedure

Step 1 Congure OSPF.huawei(config)#ospfhuawei(config-ospf-1)#area 0huawei(config-ospf-1-area-0.0.0.0)#network 4.4.4.4 0.0.0.0huawei(config-ospf-1-area-0.0.0.0)#network 10.11.0.0 0.0.255.255huawei(config-ospf-1-area-0.0.0.0)#quithuawei(config-ospf-1)#quit

Step 2 Congure the loopback interface.huawei(config)#interface loopback 1huawei(config-if-loopback1)#ip address 4.4.4.4 32huawei(config-if-loopback1)#quit

Step 3 Congure MPLS Lsr id.huawei(config)#mpls lsr-id 4.4.4.4

Step 4 Enable MPLS.huawei(config)#mplshuawei(config-mpls)#quithuawei(config)#vlan 140 standardhuawei(config)#mpls vlan 140huawei(config)#interface vlanif 140huawei(config-if-vlanif140)#ip address 10.11.0.214 30huawei(config-if-vlanif140)#mplshuawei(config-if-vlanif140)#quit

Step 5 Congure the VLAN interface.huawei(config)#port vlan 140 0/7 2huawei(config)#interface scu 0/7huawei(config-if-scu-0/7)#native-vlan 2 vlan 140huawei(config-if-scu-0/7)#quit

Step 6 Enable the MPLS LDP.huawei(config)#mpls ldphuawei(config-mpls-ldp)#quithuawei(config)#interface vlanif 140huawei(config-if-vlanif140)#mpls ldphuawei(config-if-vlanif140)#quit

Step 7 Enable the remote peer.huawei(config)#mpls ldp remote-peer Routerhuawei(config-mpls-ldp-remote-Router)#remote-ip 3.3.3.8huawei(config-mpls-ldp-remote-Router)#quit

Step 8 Congure the MPLS LDP triggering mechanism.huawei(config-mpls)#lsp-trigger host

Step 9 Enable the MPLS L2VPN.huawei(config)#mpls l2vpn

Step 10 Create a VLAN.huawei(config)#vlan 100 muxhuawei(config)#service-port vlan 100 adsl 0/2/0 vpi 1 vci 100 rx-cttr 2 tx-cttr 2

Step 11 Create a PW template.huawei(config)#pw-template pwethhuawei(config-pw-template-pweth)#peer-address 3.3.3.8huawei(config-pw-template-pweth)#pw-type ethernet taggedhuawei(config-pw-template-pweth)#quit

Step 12 Bind the VLAN with the PW template.huawei(config)#pw-ac-binding vlan 100 pw 107 pw-template pweth

—-End

Result

After the conguration, the MA5600 can set up the LDP remote session with the router.



The LSP and PW can be created, and the PW is in up state.

25.4 Basic Conguration of MPLSThis section describes basic conguration of MPLS.

Background InformationNOTE

Before you congure other MPLS features, you must perform basic MPLS conguration on all routersinvolved in MPLS forwarding in the MPLS domain.

25.4.1 Conguring the LSR IDThis operation enables you to congure the label switching router (LSR) ID.25.4.2 Enabling MPLSThis operation enables the MPLS function.

25.4.1 Conguring the LSR IDThis operation enables you to congure the label switching router (LSR) ID.

Background Informationn In general, the address of the loopback interface is used as the LSR ID.n An LSR has no default ID. Therefore, you must congure it manually.n After conguring the LSR ID, you need to enable MPLS. Then you can congure the

other MPLS features.n You must enable the global MPLS rst, and then enable the interface MPLS.n The LSR ID is unique in the MPLS domain. By combining with the 2-byte label space

serial number, it forms the LDP identier, which is used to identify the label space usedby the LSR, and to set up and maintain LDP session between LSRs.

Procedure

Step 1 Run the mpls lsr-id command to congure the LSR ID.

Step 2 Run the display current-conguration command and you can nd the conguration of LSRID is successful.

—-End

Example

To congure the LSR ID as 4.4.4.4, do as follows:huawei(config)#mpls lsr-id 4.4.4.4huawei(config)#display current-configuration section mpls{ <cr>||<K> }:

Command:display current-configuration section mpls[MA5600V300R003: 3002]

#[mpls]<mpls>mpls lsr-id 4.4.4.4#return



Conguration Guide

Related Operations

Table 25-3 shows the related operations for conguring the LSR ID.

Table 25-3 Related operations for conguring the LSR ID

To... Run the Command...Enable/Disable MPLS (undo) mplsEnable/Disable the MPLS VLAN (undo) mpls vlan

25.4.2 Enabling MPLSThis operation enables the MPLS function.

Background Informationn You must enable the global MPLS rst and then enable the interface MPLS.n You can only enable the MPLS of the standard VLAN.

Procedure

n In global cong mode, run the mpls command to enable the MPLS globally.

n In global cong mode, run the mpls vlan command to enable the MPLS of the VALN.1. Run the mpls command to enable the MPLS of the VLAN.2. Run the display mpls vlan command to query the MPLS state of the VLAN.

n In VLAN interface mode, run the mpls command to enable the MPLS of an interface.1. Run the interface vlanif command to enter VLAN interface mode.2. Run the mpls command to enable the MPLS.3. Run the display mpls interface command to query the information about the

interface whose MPLS function is enabled.

—-End

Examples

To enable the MPLS function globally, do as follows:huawei(config)#mpls

To enable the MPLS function of VLAN 140, do as follows:huawei(config)#mpls vlan 140huawei(config)#display mpls vlan 140Vlan 140 is enabled MPLS

To enter interface mode and enable the MPLS of a VLAN, do as follows:huawei(config)#interface vlanif 140huawei(config-if-vlanif140)#mplshuawei(config-if-vlanif140)#quithuawei(config)#display mpls interface vlanif 140 verboseNo : 1Interface : vlanif140Status : DownTE Attribute : DisableLSPCount : 0CR-LSPCount : 0MPLS Config MTU : 1500Interface MTU : 1500MPLS Effective MTU : 1500TE FRR : Disabled



Related Operations

Table 25-4 shows the related operations for enabling MPLS.

Table 25-4 Related operations for enabling MPLS

To... Run the Command...Congure the LSR ID mpls lsr-idDisable MPLS undo mpls

Disable the MPLS VLAN undo mpls vlan

25.5 Static LSP CongurationThis section describes how to congure a static LSP.

25.5.1 OverviewThis section describes LSP types and commands for conguring the static LSP.25.5.2 Conguring the Ingress LSR of the Static LSPThis operation enables you to congure the ingress LSR of the static LSP.25.5.3 Conguring the Egress LSR of the Static LSPThis operation enables you to congure the egress LSR of the static LSP.25.5.4 Conguring the LSP CARThis operation enables you to congure the LSP Committed Access Rate (CAR).

25.5.1 OverviewThis section describes LSP types and commands for conguring the static LSP.

There are two types of LSPs: static LSP and dynamic LSP.n Static LSP is congured manually.n After you congure all LSRs along the static LSP, the LSP can work in the normal state.n Dynamic LSP is generated by the routing protocol dynamically.Table 25-5 lists the related commands for conguring the static LSP.

Table 25-5 Related commands for conguring the static LSP

To... Run the Command...Congure the ingress LSR of the static LSP static-lsp ingressCongure the egress LSR of the static LSP static-lsp egressCongure/Remove LSP CAR (undo) mpls car-lspQuery the static LSP display mpls static-lsp

25.5.2 Conguring the Ingress LSR of the Static LSPThis operation enables you to congure the ingress LSR of the static LSP.

Background InformationIf you specify the next hop address when conguring the static LSP, then you must specifythe next hop address when conguring the IP static route. Similarly, if you specify the egresswhen conguring the static LSP, then you must specify the egress when conguring the IPstatic route.



Conguration Guide

Procedure

Step 1 Run the static-lsp ingress command to congure the ingress LSR of the static LSP.

Step 2 Run the display mpls static-lsp command to query the congured ingress LSR of the staticLSP.

—-End

Example

To congure ingress LSR of the static LSP, do as follows:huawei(config)#static-lsp ingress staticlsp1 destination 3.3.3.3 32nexthop 10.11.11.213 out-label 8500huawei(config)#display mpls static-lsp<cr>|string<S><1,15>|verbose<K>|include<K>|exclude<K> }:Command:display mpls static-lspName FEC I/O Label I/O If Statstaticlsp1 3.3.3.3/32 NULL/8500 -/- Down

Related Operations

Table 25-6 lists the related operations for conguring ingress LSR of the static LSP.

Table 25-6 Related operations for conguring ingress LSR of the static LSP

To... Run the Command...Congure the egress LSR of the static LSP static-lsp egressEnable/Disable LSP CAR (undo) mpls car-lsp

25.5.3 Conguring the Egress LSR of the Static LSPThis operation enables you to congure the egress LSR of the static LSP.

Procedure

Step 1 Run the static-lsp egress command to congure the egress LSR of the static LSP.

Step 2 Run the display mpls static-lsp command to query the congured egress LSR of the static LSP.

—-End

Example

To congure egress LSR of the static LSP, do as follows:huawei(config)#static-lsp egress staticslp3 incoming-interfacevlanif 140 in-label 8400huawei(config)#display mpls static-lsp{ <cr>|string<S><1,15>|verbose<K>|include<K>|exclude<K> }:

Command:display mpls static-lsp

Name FEC I/O Label I/O If Statstaticlsp1 3.3.3.3/32 NULL/8500 -/- Downstaticslp3 -/- 8400/NULL Vlanif140/- Up

Related Operations

Table 25-7 lists the related operations for conguring egress LSR of the static LSP.



Table 25-7 Related operations for conguring egress LSR of the static LSP

To... Run the Command...Congure egress LSR of the static LSP static-lsp ingressEnable/Disable the LSP CAR (undo) mpls car-lsp

25.5.4 Conguring the LSP CARThis operation enables you to congure the LSP Committed Access Rate (CAR).

Procedure

Step 1 Run the mpls car-lsp static command to congure the LSP CAR.

Step 2 Run the display mpls car-lsp command and you can nd the conguration of the LSP CAR issuccessful.

—-End

Example

To congure the bandwidth of static LSP staticlsp1 as 1000×64 kbit/s, do as follows. And thesystem determines the burst value automatically based on the bandwidth.huawei(config)#mpls car-lsp static lspname staticlsp1 burst 0 bandwidth 1000huawei(config)#display mpls car-lsp static lspname staticlsp1Static Lsp CAR TableTotal: 1----------------------------------------------------Lsp Name Burst(2KB) Bandwidth(64kbps)----------------------------------------------------*staticlsp1 AUTO 1000----------------------------------------------------Note: A ’*’ before an LSP-CAR means the CAR is invalid.

Related Operations

Table 25-8 lists the related operations for conguring the LSP CAR.

Table 25-8 Related operations for conguring LSP CAR

To... Run the Command...Congure the ingress of thestatic LSP

static-lsp ingress

Congure the egress of the staticLSP

static-lsp egress

Query a static LSP display mpls static-lspDisable parameters of the LSPCAR

undo mpls car-lsp

25.6 MPLS LDP CongurationThis section describes how to congure MPLS LDP.

25.6.1 Overview25.6.2 Enabling the MPLS LDPThis operation enables the MPLS LDP.



Conguration Guide

25.6.3 Conguring Parameters of the LDP Basic DiscoveryThis operation enables you to congure parameters of the LDP basic discovery.25.6.4 Conguring Parameters of the LDP Extended DiscoveryThis operation enables you to congure the parameters of the LDP extended discovery.25.6.5 Conguring Parameters of the LDP Basic SessionThis operation enables you to congure parameters for the LDP basic session.25.6.6 Conguring Parameters of the LDP Extended SessionThis operation enables you to congure parameters of the LDP extended session.25.6.7 Conguring the LDP LSP Triggering PolicyThis operation enables you to congure the LDP LSP triggering policy.25.6.8 Conguring the LDP Label Retention ModeThis operation enables you to congure the LDP label retention mode.25.6.9 Conguring the LDP Loopback DetectionThis operation enables you to congure the LDP loopback detection.25.6.10 Conguring the LDP MD5 AuthenticationThis operation enables you to congure the LDP MD5 authentication.25.6.11 Enable the LDP MTU Signaling FunctionThis operation enables the LDP MTU signaling function.

25.6.1 Overview

If the LDP is adopted as the label distribution protocol in an MPLS domain to set up LSP, LDPsessions should be established between LSRs along the LSP to perform information exchangesuch as label mapping and release.

The LDP uses Hello hold timer to maintain the LDP adjacency and session hold timer tomaintain the LDP session. In most applications, you can adopt the default value of the twotimers. In some special cases, you can modify the parameter as required. Modifying the holdtimer may cause the original session to be recreated. The LSP originally created on the basis ofthis session will be deleted and needs to be recreated.

25.6.2 Enabling the MPLS LDP

This operation enables the MPLS LDP.

Background Informationn You must enable the MPLS rst and then enable the MPLS LDP.n You can only enable the MPLS of the standard VLAN.

Procedure

n In the global cong mode:1. Run the mpls ldp command to enable the MPLS LDP globally.2. Run the display current-conguration command and you can query the global

MPLS LDP is enabled successfully.

n In VLAN interface mode:1. Run the mpls ldp command to enable the MPLS LDP of a VLAN interface.2. Run the display mpls interface command and you can query the MPLS LDP of

the VLAN interface is enabled successfully.

—-End



Examples

To enable the MPLS LDP globally, do as follows:huawei(config)#mpls ldphuawei(config)#display current-configuration section mpls[MA5600V300R003: 3002]#[mpls]<mpls>mpls lsr-id 4.4.4.4mpls#[mpls-ldp]<mpls-ldp>

mpls ldp#return

To enable the MPLS LDP of VLAN interface 140, do as follows:huawei(config)#interface vlanif{ <1-4000> }:140

huawei(config-if-vlanif140)#mpls ldphuawei(config-if-vlanif140)#quithuawei(config)#display mpls interface vlanif 140{ <cr>|verbose<K> }:

Command:display mpls interface vlanif 140

Interface Status TE Attr LSP Count CRLSP Count Effective MTUVlanif140 Down Dis 0 0 1500

Related Operations

Table 25-9 lists the related operations for enabling the MPLS LDP.

Table 25-9 Related operations for enabling the MPLS LDP

To... Run the Command... RemarksQuery information ofMPLS LDP

display mpls ldp -

Query information ofthe peer session

display mpls ldp session -

Disable the MPLSLDP

undo mpls ldp Disabling LDP on the interfacewill interrupt all LDP sessionson the interface. All the LSPsbased on these sessions will bedeleted accordingly.

25.6.3 Conguring Parameters of the LDP Basic Discovery

This operation enables you to congure parameters of the LDP basic discovery.

Background Informationn In the VLAN interface, the link Hello timer can be congured. In remote peer mode,

the target Hello timer can be congured.n By default, the link Hello duration is 15s, and the target Hello duration is 45s.



Conguration Guide

n Generally, the default can meet the requirement. Modifying the Hello timer duration willresult in recreating the original session, and all the LSPs based on the session will bedeleted and needs to be recreated.

n Run the mpls ldp transport-address command to congure the LDP transmissionaddress. By default, the address is the local LSR ID.

Procedure

n Set the Hello timer duration.1. Run the mpls ldp timer command to set the Hello timer duration.2. Run the display mpls ldp command to query the conguration of the Hello timer

duration.

n Congure the LDP transmission address.1. Run the mpls ldp transport-address command to congure the LDP transmission

address.2. Run the display mpls ldp command to query the conguration of the LDP

transmission address.

—-End

Examples

To set the Hello timer duration, do as follows:huawei(config-if-vlanif140)#mpls ldp timer hello-hold 15huawei(config-if-vlanif140)#quithuawei(config)#display mpls ldp interface vlanif 140{ <cr>||<K> }:Command:

display mpls ldp interface vlanif 140LDP Interface Information

--------------------------------------------------------------------Interface Name : vlanif140LDP ID : 4.4.4.4:0 Transport Address : 4.4.4.4Entity Status : Inactive Interface MTU : 1500Configured Hello Timer : 15 SecNegotiated Hello Timer : 15 SecConfigured Keepalive Timer : 45 SecLabel Advertisement Mode : Downstream UnsolicitedHello Message Sent/Rcvd : 0/0 (Message Count)--------------------------------------------------------------------

To congure the LDP transmission address, do as follows:huawei(config-if-vlanif140)#mpls ldp transport-address vlanif 140huawei(config-if-vlanif140)#quithuawei(config)#display mpls ldp interface vlanif 140{ <cr>||<K> }:Command:



Related Operations

Table 25-10 lists the related operations for conguring parameters of the LDP basic discovery.



Table 25-10 Related operations for conguring parameters of LDP basic discovery

To... Run the Command...Query information of the peersession

display mpls ldp session

Query an MPLS LSP display mpls lsp

25.6.4 Conguring Parameters of the LDP Extended DiscoveryThis operation enables you to congure the parameters of the LDP extended discovery.

Background InformationOnly one local session or one remote session can exist between two LSRs. The local sessionhas a higher priority than the remote session.n When a local adjacency already exists with the remote peer, the remote adjacency will

not be created.n When a remote adjacency exists and a local adjacency is created for the remote peer,

the remote peer will be deleted.

Procedure

n Set the Hello timer duration.1. Run the mpls ldp remote-peer remotepeer command to enter MPLS LDP remote

peer mode.2. Run the mpls ldp timer command to set the Hello timer duration.

n Congure the LDP transmission address.1. Run the interface vlanif command to enter VLAN interface mode.2. Run the mpls ldp transport-address command to congure the LDP transmission

address.

—-End

Examples

To set the Hello timer duration, do as follows:huawei(config)#mpls ldp remote-peer remotepeerhuawei(config-mpls-ldp-remote-remotepeer)#mpls ldp timer hello-hold 45

To congure the LDP transmission address, do as follows:huawei(config)#interface vlanif 20huawei(config-if-vlanif20)#mpls ldp transport-address vlanif 140

Verication

After you specify the remote LSR ID as the remote-ip, the local LSR will send LDP TargetedHello message to the remote-ip, thus discovering the LDP neighbor and establishing theremote session.

Related Operations

Table 25-11 lists the related operations for conguring the parameters of the LDP extendeddiscovery.



Conguration Guide

Table 25-11 Related operations for conguring the parameters of the LDP extended discovery



Query the MPLS LSP display mpls lspQuery the MPLS LDP display mpls ldp

25.6.5 Conguring Parameters of the LDP Basic Session

This operation enables you to congure parameters for the LDP basic session.

Background Informationn By default, the value of the timer keepalive-hold is 45s.n If there are more than one enabled LDP links between two LSRs, the keepalive-hold time

of all links must be the same. Otherwise, the session may be unstable.

Procedure

Step 1 Run the interface vlanif command to enter vlan interface mode.

Step 2 Run the mpls ldp timer keepalive-hold command to congure the timer keepalive-holdduration.

Step 3 Run the display mpls ldp command to query the conguration of the timer keepalive-holdduration.

—-End

Example

To set the Hello timer duration, do as follows:huawei(config)#interface vlanif 140huawei(config-if-vlanif140)#mpls ldp timer keepalive-hold 45huawei(config)#display mpls ldp interface vlanif 140{ <cr>||<K> }:Command:



Related Operations

Table 25-12 lists the related operations for conguring parameters of the LDP basic session.



Table 25-12 Related operations for conguring parameters of the LDP basic session



Query the MPLS LSP display mpls lsp

25.6.6 Conguring Parameters of the LDP Extended SessionThis operation enables you to congure parameters of the LDP extended session.

ProcedureStep 1 Run the mpls ldp remote-peer remotepeer command to enter MPLS LDP remote peer mode.

Step 2 Run the mpls ldp timer keepalive-hold command to set the Hello timer duration.

—-End

ExampleTo set the Hello timer duration, do as follows:huawei(config)#mpls ldp remote-peer remotepeerhuawei(config-mpls-ldp-remote-remotepeer)#mpls ldp timer keepalive-hold 45

Related OperationsTable 25-13 lists the related operations for conguring parameters of the LDP extended session.

Table 25-13 Related operations for conguring parameters of the LDP extended session




25.6.7 Conguring the LDP LSP Triggering PolicyThis operation enables you to congure the LDP LSP triggering policy.

Background Informationn The IGP route entry that is included in the host or IP address prex list can trigger LDP to

set up an LSP.n By default, no route entry can trigger LDP to set up an LSP.n The host or IP address prex list is only effective on the static route and the IGP route.

ProcedureStep 1 Run the mpls command to enter MPLS mode.

Step 2 Run the lsp-trigger command to congure the LDP LSP triggering policy.

Step 3 Run the display current-conguration command to query the conguration of the LDPLSP triggering policy.



Conguration Guide

—-End

Example

To congure the triggering policy based on the host, do as follows:huawei(config)#mplshuawei(config-mpls)#lsp-trigger hosthuawei(config)#display current-configuration section mpls[MA5600V300R003: 3002]#[mpls]<mpls>mpls lsr-id 4.4.4.4mplslsp-trigger host

#[mpls-ldp]<mpls-ldp>

mpls ldp#[mpls-ldp-remote]<mpls-ldp-remote-remotepeer>mpls ldp remote-peer remotepeer#return

Related Operations

Table 25-14 lists the related operations for conguring the LDP LSP triggering policy.

Table 25-14 Related operations for conguring the LDP LSP triggering policy




25.6.8 Conguring the LDP Label Retention ModeThis operation enables you to congure the LDP label retention mode.

Background InformationThere are two label retention modes:n liberal: For the label mapping received from the neighboring LSR, the LSR will retain

it, no matter whether the neighboring LSR is at its next hop. Therefore, the LSR canaccommodate itself to the route changes rapidly.

n conservative: For the label mapping received from the neighboring LSR, the LSR willretain it only when the neighboring LSR is at its next hop. Therefore, the LSR candistribute and retain fewer labels.

Procedure

Step 1 Run the mpls ldp command to enable the MPLS LDP globally.

Step 2 Run the label-retention command to congure the LDP label retention mode.

Step 3 Run the display mpls ldp command to query the conguration of the LDP label retentionmode.



—-End

Examples

To set the LDP label retention mode as liberal, do as follows:huawei(config)#mpls ldphuawei(config-mpls-ldp)#label-retention liberalhuawei(config)#display mpls ldp{ <cr>||<K>|all<K>|verbose<K>|interface<K>|peer<K>|session<K>|remote-peer<K>|lsp<K> }:Command:

display mpls ldpLDP Global Information

--------------------------------------------------------------------Protocol Version : V1 Neighbor Liveness : 600 SecGraceful Restart : Off FT Reconnect Timer : 300 SecMTU Signaling : On Recovery Timer : 300 Sec

LDP Instance Information--------------------------------------------------------------------Instance ID : 0 VPN-Instance :Instance Status : Active LSR ID : 4.4.4.4Hop Count Limit : 32 Path Vector Limit : 32Loop Detection : OffDU Re-advertise Timer : 10 Sec DU Re-advertise Flag : OnDU Explicit Request : Off Request Retry Flag : OnLabel Distribution Mode : Independent Label Retention Mode : Liberal--------------------------------------------------------------------

Related Operation

Table 25-15 lists the related operations for conguring the LDP label retention mode.

Table 25-15 Related operations for conguring the LDP label retention mode

To... Run the Command...Query information of the peer session display mpls ldp sessionQuery the MPLS LSP display mpls lsp

25.6.9 Conguring the LDP Loopback DetectionThis operation enables you to congure the LDP loopback detection.

Prerequisites

There are two types of the LDP loopback detection: maximum hops and path vectors.n Maximum hops: If the specied value is exceeded, the system considers that the loopback

occurs, and the LSP fails to set up. By default, the maximum hop is 32.n Path vectors: The maximum value of LSP shall be specied. By default, the maximum

path vector is 32.

Background Informationn Before starting the loopback detection for the MPLS domain, it is required that all LSRs

be congured with loopback detection function. However, in setting up an LDP session,the loopback detection conguration of both sides can be different.

n By default, the loopback detection is disabled.n The loopback detection conguration is only effective on the established LSP.n The system considers that the loopback occurs in any of the following conditions, and

the LSP fails to set up:– The LSR record already exists in the path vector table.



Conguration Guide

– The maximum value of the path hop is exceeded.

Procedure


Step 2 Run the loop-detect command to start the loopback detection.

Step 3 Run the hops-count command to set the maximum hops for the loopback detection.

Step 4 Run the path-vectors command to set the maximum value of path vectors.

Step 5 Run the display mpls ldp command to query the conguration of the LDP loopback detection.

—-End

Example

To congure the LDP loopback detection with the maximum hop of 30 and the maximumpath vector of 30, do as follows:huawei(config)#mpls ldphuawei(config-mpls-ldp)#loop-detecthuawei(config-mpls-ldp)#hops-count30huawei(config-mpls-ldp)#path-vectors30huawei(config)#display mpls ldp{ <cr>||<K>|all<K>|verbose<K>|interface<K>|peer<K>|session<K>|remote-peer<K>|lsp<K> }:Command:



LDP Instance Information--------------------------------------------------------------------Instance ID : 0 VPN-Instance :Instance Status : Active LSR ID : 4.4.4.4Hop Count Limit : 30 Path Vector Limit : 30Loop Detection : OnDU Re-advertise Timer : 10 Sec DU Re-advertise Flag : OnDU Explicit Request : Off Request Retry Flag : OnLabel Distribution Mode : Independent Label Retention Mode : Liberal--------------------------------------------------------------------

Related Operations

Table 25-16 lists the related operations for conguring the LDP loopback detection.

Table 25-16 Related operations for conguring the LDP loopback detection

To... Run the Command...Query information of the peer session display mpls ldp sessionQuery a MPLS LSP display mpls lsp

25.6.10 Conguring the LDP MD5 AuthenticationThis operation enables you to congure the LDP MD5 authentication.

Background Informationn To enhance the security of the LDP session connection, you can congure MD5

authentication to the TCP used by the LDP.



n By default, the LDP MD5 authentication is not congured.

Procedure


Step 2 Run the md5-password command to congure the LDP MD5 authentication.

Step 3 Run the display current-conguration command to query the conguration of the LDPMD5 authentication.

—-End

Example

To congure the connection password of the TCP used by the LDP as password, which isdisplayed in cipher text, and the peer LSR ID as 3.3.3.3, do as follows:huawei(config)#mpls ldphuawei(config-mpls-ldp)#md5-password cipher 3.3.3.3 passwordhuawei(config-mpls-ldp)#quithuawei(config)#display current-configuration section mpls[MA5600V300R003: 3002][device-config]<device-config>board add 0/4 ADE[vlan-config]<vlan-config>vlan 140 muxport vlan 2 0/7 2[config]<config>mplsvlan 2stp enable[mpls]<mpls>mpls lsr-id 4.4.4.2mplslabel advertisenon-nulllsp-triggerhostmplsl2vpn[mpls-ldp]<mpls-ldp>mpls ldpmd5-password cipher 3.3.3.3 S;IKAY5^0NWQ=^Q‘MAF4<1!!

md5-password cipher 10.1.1.3 S;IKAY5^0NWQ=^Q‘MAF4<1!!

[vlanif]<vlanif2>

interface vlanif2descriptionHUAWEI, MA5600 Series, Vlanif2 Interfaceipaddress 10.1.1.2 255.255.255.0mplsmpls ldp[meth]<meth0>

interfacemeth0descriptionHUAWEI, MA5600 Series, MEth0 Interfaceipaddress 192.168.1.2 255.255.255.0#return

Related Operations

Table 25-17 lists the related operations for conguring the LDP MD5 authentication.



Conguration Guide

Table 25-17 Related operations for conguring the LDP MD5 authentication




25.6.11 Enable the LDP MTU Signaling FunctionThis operation enables the LDP MTU signaling function.

Background Informationn To detect path MTU correctly, the IP router needs to know the MTU of each link

connected to it.n The LDP can automatically calculate the minimum MTU value of all the interfaces on

each LSP. At the ingress LSR, the MPLS determines the size of the forwarded packetsbased on the calculated minimum MTU value. In this way, the system can avoid sendinglarger packets at the ingress LSR, which may result in forwarding failure at the transitLSR.

n By default, the LDP MTU signaling is enabled.n Enabling/Disabling MTU signaling function may result in recreating original session.

LSPs that are created based on this session will be deleted and needs to be recreated.

Procedure


Step 2 Run the mtu-signaling command to enable the LDP MTU signaling function.

Step 3 Run the display mpls ldp command and you can query the conguration of the LDP MTUsignaling function.

—-End

Example

To enable the LDP MTU signaling function, do as follows:huawei(config)#mpls ldphuawei(config-mpls-ldp)#mtu-signalinghuawei(config)#display mpls ldp{ <cr>||<K>|all<K>|verbose<K>|interface<K>|peer<K>|session<K>|remote-peer<K>|lsp<K> }:Command:



LDP Instance Information--------------------------------------------------------------------Instance ID : 0 VPN-Instance :Instance Status : Active LSR ID : 4.4.4.4Hop Count Limit : 30 Path Vector Limit : 30Loop Detection : OnDU Re-advertise Timer : 10 Sec DU Re-advertise Flag : OnDU Explicit Request : Off Request Retry Flag : OnLabel Distribution Mode : Independent Label Retention Mode : Liberal--------------------------------------------------------------------



Related Operation

Table 25-18 lists the related operation for enabling the LDP MD5 MTU signaling function.

Table 25-18 Related operation for enabling the LDP MD5 MTU signaling function

To... Run the Command...Disable the LDP MTU signalingfunction

undo mtu-signaling

25.7 PW CongurationThis section describes how to congure a PW template.

25.7.1 Enable the MPLS L2VPNThis operation enables the MPLS L2VPN.25.7.2 Conguring a PW TemplateThis operation enables you to congure a PW template.25.7.3 Binding a PVC with a PW TemplateThis operation enables you to bind a PVC with a PW template.25.7.4 Binding a VLAN with a PW TemplateThis operation enables you to bind a VLAN with a PW template.

25.7.1 Enable the MPLS L2VPNThis operation enables the MPLS L2VPN.

Procedure

Step 1 Run the mpls l2vpn command to enable the MPLS L2VPN.

Step 2 Run the display current-conguration command and you can nd the MPLS L2VPN isenabled successfully.

—-End

Example

To enable the MPLS L2VPN, do as follows:huawei(config)#mpls l2vpnhuawei(config)#display current-configuration section mpls[MA5600V300R003: 3002]#[mpls]<mpls>mpls lsr-id 4.4.4.4mplslsp-trigger hostmpls l2vpn#[mpls-ldp]<mpls-ldp>

mpls ldploop-detecthops-count 30path-vectors 30#[mpls-ldp-remote]<mpls-ldp-remote-remotepeer>mpls ldp remote-peer remotepeer#return



Conguration Guide

Related Operation

Table 25-19 lists the related operation for enabling the MPLS L2VPN.

Table 25-19 Related operation for enabling the MPLS L2VPN

To... Run the Command...Disable the MPLS L2VPN undo mpls l2vpn

25.7.2 Conguring a PW TemplateThis operation enables you to congure a PW template.

Procedure

Step 1 Run the pw-template command to create a PW template.

Step 2 Run the peer-address command to specify the peer IP address.

Step 3 Run the pw-type command to specify the PW template type.

Step 4 Run the display pw-template command to query the PW template.

—-End

Example

To create PW prole pwt1 with the peer IP address of 3.3.3.3 and the prole type of ATM inSDU mode, do as follows:huawei(config)#pw-template pwt1huawei(config-pw-template-pwt1)#peer-address 3.3.3.3huawei(config-pw-template-pwt1)#pw-type atm sduhuawei(config)#display pw-template{ <cr>|string<S><1,19> }:Command:

display pw-templateTotal PW template number : 1PW Template Name : pwt1PeerIP : 3.3.3.3Tnl Policy Name : --PW Type : atm sduCtrlWord : EnableMTU : 1500MaxAtmCells : 1Total PW : 0, Static PW : 0, LDP PW : 0

Related Operations

Table 25-20 lists the related operations for conguring a PW template.

Table 25-20 Related operations for conguring a PW template

To... Run the Command...Bind PVC with PW template pw-ac-binding pvc egressBind VLAN with PW template pw-ac-binding vlanQuery binding of PW with PVC/VLAN display pw-ac-binding

25.7.3 Binding a PVC with a PW TemplateThis operation enables you to bind a PVC with a PW template.



Background InformationYou can bind a PVC with a PW template in the following two modes:n NTO1 mode: One PW template can be bound with multiple PVCs. To differentiate PVCs,

the VPI and VCI values must be changed at the egress of the PW template.n SDU mode: One PW template can be bound with a PVC. The VPI and VCI values remain

unchanged at the egress of the PW template.

Procedure

Step 1 Run the pw-ac-binding pvc command to bind a PVC with a PW prole.

Step 2 Run the display pw-ac-binding command and you can nd a PVC is bound with a PWtemplate successfully.

—-End

Example

To bind the PVC between the ADSL port 0/2/0 and the control board with PW templatePWT1, do as follows:huawei(config)#pw-ac-binding pvc{ frame/slot/port<S><1,15>|frame/slot<S><1,15> }:0/2/0{ vpi<K> }:vpi 0{ vci<K> }:vci 35{ pw<K>|outvpi<K> }:pw{ pw-id<1,4294967294> }:10{ pw-template<K> }:pw-template{ pw-template-name<S><1,19> }:pwt1huawei(config)#display pw-ac-binding pw 10Total : 1 (Up/Down : 1/0 Static/Dynamic : 0/1)-------------------------------------------------------------------------AC PW PW PW RECEIVE TRNS TEMPLATEID ID STATE TYPE LABEL LABEL NAME--------------------------------------------------------------------------0/2/0 0 35 10 up dynamic 9351 19 pwt1--------------------------------------------------------------------------Note : AC ID should be:

F/S/P VPI VCI (F--Frame, S--Slot, P--Port)F/S/G VPI VCI (F--Frame, S--Slot, G--IMA GROUPINDEX)VLAN ID

Related Operations

Table 25-21 lists the related operations for binding a PVC with a PW template.

Table 25-21 Related operations for binding a PVC with a PW template

To... Run the Command...Create a PW template pw-template

Bind a VLAN with a PW template pw-ac-binding vlan

25.7.4 Binding a VLAN with a PW TemplateThis operation enables you to bind a VLAN with a PW template.

Procedure

Step 1 Run the pw-ac-binding vlan command to bind a VLAN with a PW prole.

Step 2 Run the display pw-ac-binding command and you can nd the VLAN is bound with thePW template successfully.



Conguration Guide

—-End

Example

To bind standard VLAN 20 with PW template PWT1, do as follows:huawei(config)#pw-ac-binding vlan 20 pw 100 pw-template pwt1huawei(config)#display pw-ac-binding pw 100Total : 1 (Up/Down : 1/0 Static/Dynamic : 0/1)-------------------------------------------------------------------------AC PW PW PW RECEIVE TRNS TEMPLATEID ID STATE TYPE LABEL LABEL NAME--------------------------------------------------------------------------0/2/0 0 35 100 up dynamic 9351 19 pwt1--------------------------------------------------------------------------Note : AC ID should be:

F/S/P VPI VCI (F--Frame, S--Slot, P--Port)F/S/G VPI VCI (F--Frame, S--Slot, G--IMA GROUPINDEX)VLAN ID

Related Operations

Table 25-22 lists the related operations for binding a VLAN with a PW template.

Table 25-22 Related operations for binding a VLAN with a PW template

To... Run the Command...Create a PW template pw-template

Bind a PVC with a PW template pw-ac-binding pvc


SmartAX MA5600 Multi-service Access ModuleConguration Guide 26 MPLS RSVP-TE Conguration

26 MPLS RSVP-TE Conguration


26.1 OverviewThis section describes applications of extended Resource ReSerVation Protocol (RSVP-TE)to the MA5600.26.2 Conguration Example for Establishing an MPLS TE Tunnel by Using RSVP-TEThis example shows how to establish an MPLS TE tunnel by using RSVP-TE.26.3 Conguring Basic MPLS TE CapabilityThis operation enables you to congure basic MPLS TE capability.26.4 Conguring an MPLS TE Tunnel by Using Dynamic SignalingThis operation enables you to congure an MPLS TE tunnel by using dynamic signaling.26.5 Conguring Advanced RSVP-TE FeaturesThis operation enables you to congure the advanced RSVP-TE features.26.6 Tuning the Establishment of CR-LSPThis operation enables you to tune the establishment of CR-LSP.26.7 Tuning the Establishment of an MPLS TE TunnelThis operation enables you to tune the establishment of an MPLS TE tunnel.


26 MPLS RSVP-TE CongurationSmartAX MA5600 Multi-service Access Module

Conguration Guide

26.1 OverviewThis section describes applications of extended Resource ReSerVation Protocol (RSVP-TE)to the MA5600.

Service DescriptionMPLS TE is a technology that integrates TE with MPLS. Through the MPLS TE technology,you can create an LSP tunnel to a specied path, to reserve resources and implementre-optimization.

Service SpecicationIn the case of resource scarcity, MPLS TE helps to preempt the bandwidth resource of theLSP tunnels with low priority based on the priority and preemption parameter. This meetsthe demands for the LSPs with large bandwidth or VIP customers. MPLS TE also providesprotection against link or node failure through the use of path backup and fast reroute (FRR).With MPLS TE, administrators must create some LSPs and bypass congestion nodes, thuseliminating network congestion.

MPLS TE has the following two major functions:n Static LSP processing: It creates and deletes LSPs.n Constrained Route-Label Switched Path (CR-LSP) processing: It processes various

kinds of CR-LSPs.NOTE

For details of MPLS TE, refer to RFC2702 (Requirements for Trafc Engineering Over MPLS).n To provide the MPLS function, the MA5600 can serve as only a PE device.n For the MA5600, to subtend slave shelves,

– Only the master shelf supports MPLS function.– The master shelf supports the ETH PWE3 and the ATM PWE3 services, and the slave shelf

supports only the ETH PWE3 service. (To support the ATM PWE3 service, a slave shelf must beseparately congured with the and the AIUG subboard, so as to serve as an independent PE toprovide MPLS upstream function.)

26.2 Conguration Example for Establishing an MPLS TETunnel by Using RSVP-TE

This example shows how to establish an MPLS TE tunnel by using RSVP-TE.

NetworkingFigure 26-1 shows the sample network for establishing an MPLS TE tunnel by using RSVP-TE.



Figure 26-1 Sample network for establishing an MPLS TE tunnel by using RSVP-TE

Data PlanTable 26-1 lists the data plan for establishing an MPLS TE tunnel by using RSVP-TE.

Table 26-1 Data plan for establishing an MPLS TE tunnel by using RSVP-TE

Item Datalsr-id: 1.1.1.1/32MA5600_A

Port: 0/7/2VLAN: 10IP address of layer 3 interface (interface connected with router):10.1.1.1/24lsr-id: 3.3.3.3/32MA5600_B

Port: 0/7/2VLAN: 20IP address of layer 3 interface (interface connected with router):10.1.2.2/24lsr-id: 2.2.2.2/32IP address of the interface connected with MA5600_A: 10.1.1.2/24

Router

IP address of the interface connected with MA5600_B: 10.1.2.1/24

Background InformationBefore establishing an MPLS TE tunnel, make sure that:n The network device and the line are in the normal state.n IP addresses and masks of interfaces are congured as the sample network. After the

conguration, LSRs can ping each other successfully.n The OSPF protocol is congured on all MA5600 devices and routers, and the congured

routes are advertised successfully. Otherwise, the static routes are congured.

Conguration FlowchartFigure 26-2 shows the owchart for establishing an MPLS TE tunnel.



Conguration Guide

Figure 26-2 Flowchart for establishing an MPLS TE tunnel

Procedure

Step 1 Congure the MPLS basic capability, and enable MPLS TE, RSVP-TE and CSPF.1. Enable globally the MPLS basic functions and the MPLS TE basic functions.

MA5600_A(config)#mpls lsr-id 1.1.1.1MA5600_A(config)#mplsMA5600_A(config-mpls)#mpls teMA5600_A(config-mpls)#mpls rsvp]-teMA5600_A(config-mpls)#mpls te cspfMA5600_A(config-mpls)#quit

2. Enable the MPLS basic functions and the MPLS TE functions on interfaces.MA5600_A(config)#vlan 10 standardMA5600_A(config)#mpls vlan 10MA5600_A(config)#port vlan 10 0/7 0MA5600_A(config)#interface vlanif 10MA5600_A(config-if-vlanif10)#ip address 10.1.1.1 24MA5600_A(config-if-vlanif10)#mplsMA5600_A(config-if-vlanif10)#mpls teMA5600_A(config-if-vlanif10)#mpls rsvp-teMA5600_A(config-if-vlanif10)#mpls te cspf

NOTE

The conguration of MA5600_B is the same as that of MA5600_A. So, it is not described here.

Step 2 Congure OSPF TE.MA5600_A(config)#ospf 100MA5600_A(config-ospf-100)#opaque-capability enableMA5600_A(config-ospf-100)#area 0MA5600_A(config-ospf-100-area-0.0.0.0)#mpls-te enable standard-complyingMA5600_A(config-ospf-100-area-0.0.0.0)#quit

NOTE

The conguration of MA5600_B is the same as that of MA5600_A. So, it is not described here.



Step 3 Congure the MPLS TE attribute of links on MA5600_A and MA5600_B respectively.MA5600_A(config)#interface vlanif 10MA5600_A(config-if-vlanif10)#mpls te max-link-bandwidth 2048MA5600_A(config-if-vlanif10)#mpls te max-reservable-bandwidth 1024MA5600_A(config-if-vlanif10)#quit

MA5600_B(config)#interface vlanif 20MA5600_B(config-if-vlanif20)#mpls te max-link-bandwidth 2048MA5600_B(config-if-vlanif20)#mpls te max-reservable-bandwidth 1024MA5600_B(config-if-vlanif20)#quit

Step 4 Congure the MPLS TE tunnel from MA5600_A to MA5600_B.MA5600_A(config)#interface tunnel 10MA5600_A(config-if-tunnel10)#tunnel-protocol mpls teMA5600_A(config-if-tunnel10)#destination 3.3.3.3MA5600_A(config-if-tunnel10)#mpls te tunnel-id 10MA5600_A(config-if-tunnel10)#mpls te signal-protocol rsvp-teMA5600_A(config-if-tunnel10)#mpls te bandwidth bc0 512MA5600_A(config-if-tunnel10)#mpls te commitMA5600_A(config-if-tunnel10)#quit

Step 5 Save the data.MA5600_A(config)#saveMA5600_B(config)#save

—-End

Result

After the conguration, do as follows to display the conguration result on MA5600_A:n Run the display interface tunnel command and you can nd that the state of the tunnel

interface is UP.n Run the display mpls te tunnel-interface tunnel command and you can nd the

conguration of the tunnel.

26.3 Conguring Basic MPLS TE CapabilityThis operation enables you to congure basic MPLS TE capability.

Background InformationThe conguration of basic MPLS TE capability is required in various MPLS TE featurecongurations. To use the MPLS TE features, you need to perform further congurationbesides basic conguration.

26.3.1 Enabling MPLS TE FeatureThis operation enables the MPLS TE feature.26.3.2 Creating an MPLS TE TunnelThis operation enables you to create an MPLS TE tunnel.

26.3.1 Enabling MPLS TE FeatureThis operation enables the MPLS TE feature.

Background Informationn You must enable the basic MPLS TE capability before enabling MPLS TE feature.n You must globally enable MPLS TE and then enable the feature on corresponding

interfaces.



Conguration Guide

n In the MPLS view, once the MPLS TE feature is disabled, the feature on correspondinginterfaces is disabled and the CR-LSP tunnels are deleted.

n The CR-LSPs on the interface are deleted once the MPLS TE feature is disabled in theinterface view.

n By default, the MPLS TE feature is disabled.

Procedure

n In the MPLS view, run the mpls te command to globally enable the MPLS TE feature.1. Enter the MPLS mode.2. In the MPLS view, run the mpls te command to globally enable the MPLS TE

feature.

n In the interface view, run the mpls te command to enable the MPLS TE feature on theinterface.1. Enter VLAN interface mode.2. Run the mpls te command to enable the MPLS TE feature on the interface.3. Run the display mpls interface command to display information about the

interface whose MPLS TE feature has been enabled.

—-End

Examples

To globally enable the MPLS feature, do as follows:huawei(config)#mpls{ car-lsp<K>|qos<K>|lsr-id<K>|oam<K>|<cr>|ldp<K>|l2vpn<K>|te<K> }:

Command:mpls

huawei(config-mpls)#mpls te{ tie-breaking<K>|path<K>|cspf<K>|<cr> }:

Command:mpls te

Info: Mpls te starting, please wait... OK!

To enter the interface mode and enable the MPLS TE feature of the VLAN interface, doas follows:huawei(config)#interface vlanif 20huawei(config-if-vlanif20)#mpls te{ max-reservable-bandwidth<K>|max-link-bandwidth<K>|link<K>|bandwidth<K>|metric<K>|<cr> }:

Command:mpls te

huawei(config)#display mpls interface vlanif 20{ <cr>|verbose<K> }:verbose

Command:display mpls interface vlanif 20 verbose

No : 1Interface : vlanif20Status : UpTE Attribute : EnableLSPCount : 0CR-LSPCount : 0MPLS Config MTU : Please set the MPLS MTU!Interface MTU : 1500MPLS Effective MTU : 1500TE FRR : Disabled

Related Operation

Table 26-2 lists the related operation for enabling MPLS TE feature.



Table 26-2 Related operation for enabling MPLS TE feature

To... Run the Command...Disable MPLS TE feature undo mpls te

26.3.2 Creating an MPLS TE TunnelThis operation enables you to create an MPLS TE tunnel.

Background Informationn To implement trafc forwarding, the tunnel interface must have an IP address. However,

because the MPLS TE tunnel is unidirectional, no peer address exists.n The destination address of the tunnel is LSR ID of the egress node.n If MPLS TE parameters on a tunnel interface change, run the mpls te commit command

to validate them.

Procedure

Step 1 Run the interface tunnel command to create a tunnel interface and enter tunnel interface mode.

Step 2 Run the tunnel-protocol mpls te command to congure tunnel protocol to be MPLS TE.

Step 3 Run the destination command to congure the destination address of the tunnel.

Step 4 Run the mpls te tunnel-id command to congure tunnel ID.

Step 5 Run the mpls te commit command to commit the current tunnel conguration.

Step 6 Run the display current-conguration command to display information about the tunnel.

—-End

Example

Assume that:n Destination address: 202.100.100.100n Tunnel name: 100n Tunnel ID: 100To create the MPLS TE tunnel, do as follows:huawei(config)#interface tunnel 100huawei(config-if-tunnel100)#tunnel-protocol mpls tehuawei(config-if-tunnel100)#destination 202.100.100.100huawei(config-if-tunnel100)#mpls te tunnel-id 100huawei(config-if-tunnel100)#mpls te commithuawei(config-if-tunnel100)#quithuawei(config)#display current-configuration section tunnel[MA5600V300R003: 3002]#[tunnel]<tunnel100>

interface tunnel100description tunnel-100tunnel-protocol mpls tedestination 202.100.100.100mpls te tunnel-id 100#return

Related Operation

Table 26-3 lists the related operation for creating an MPLS TE tunnel.



Conguration Guide

Table 26-3 Related operation for creating an MPLS TE tunnel

To... Run the Command...Congure LSR ID mpls lsr-id

26.4 Conguring an MPLS TE Tunnel by Using DynamicSignaling

This operation enables you to congure an MPLS TE tunnel by using dynamic signaling.

Background InformationThe dynamic signaling protocol adjusts the path of an TE tunnel based on dynamic changes ofthe network, and applies advanced features such as backup and FRR.

The process for conguring an MPLS TE through the dynamic signaling protocol is as follows:

26.4.1 Conguring Bandwidth of LinksThis operation enables you to congure bandwidth of links.26.4.2 Enabling OSPF TEThis operation enables you to enable OSPF TE.26.4.3 Conguring the MPLS TE Explicit PathThis operation enables you to congure the MPLS TE explicit path.26.4.4 Conguring Constraints of an MPLS TE TunnelThis operation enables you to congure constraints for an MPLS TE tunnel.26.4.5 Conguring CSPFThis operation enables you to congure CSPF algorithm of an MPLS.26.4.6 Establishing an MPLS TE Tunnel by Using RSVP-TEThis operation enables you to establish an MPLS TE tunnel by using RSVP-TE.

26.4.1 Conguring Bandwidth of LinksThis operation enables you to congure bandwidth of links.

Background Informationn The mpls te max-link-bandwidth bandwidth-value command is used to set the

maximum bandwidth of MPLS TE links. The bandwidth applies to both MPLS trafcand common Best-Effort trafc.

n The mpls te max-reservable-bandwidth command is used to congure the maximumreservation bandwidth of MPLS TE links. The bandwidth applies to only MPLS trafc.

Procedure

n Congure the maximum bandwidth of MPLS TE links.1. Run the mpls te max-link-bandwidth bandwidth-value command to congure

the maximum bandwidth of MPLS TE links.2. Run the display current-conguration command to display the maximum

bandwidth of MPLS TE links.

n Congure the maximum reservation bandwidth.1. Run the mpls te max-reservable-bandwidth bandwidth-value command to

congure the maximum reservation bandwidth of MPLS TE links.



2. Run the display current-conguration command to display maximum reservationbandwidth of MPLS TE links.

—-End

Examples

To set the maximum bandwidth of both MPLS TE links 4096 kbit/s and BC1 as 2048 kbit/s,do as follows:huawei(config)#interface vlanif 20huawei(config-if-vlanif20)#mpls te max-link-bandwidth 4096 bc1 2048huawei(config-if-vlanif20)#quithuawei(config)#display current-configuration section vlanif[MA5600V300R003: 3002]#[vlanif]<vlanif20>

interface vlanif20ip address 202.100.100.1 255.255.255.0mplsmpls templs te max-link-bandwidth 4096 bc1 2048#<vlanif30>

interface vlanif30#return

To set the maximum reservation bandwidth of both MPLS TE links 1024 kbit/s and BC1 as512 kbit/s, do as follows:huawei(config)#interface vlanif 20huawei(config-if-vlanif20)#mpls te max-reservable-bandwidth 1024 bc1 512huawei(config-if-vlanif20)#quithuawei(config)#display current-configuration section vlanif[MA5600V300R003: 3002]#[vlanif]<vlanif20>

interface vlanif20ip address 202.100.100.1 255.255.255.0mplsmpls templs te max-link-bandwidth 4096 bc1 2048mpls te max-reservable-bandwidth 1024 bc1 512#<vlanif30>


Related Operations

Table 26-4 lists the related operations for conguring bandwidth of links.

Table 26-4 Related operations for conguring bandwidth of links

To... Run the Command...Cancel the conguration ofmaximum bandwidth on MPLSTE links

undo mpls te max-link-bandwidth

Cancel the congurationof maximum reservationbandwidth on MPLS TE links

undo mpls te max-reservable-bandwidth



Conguration Guide

26.4.2 Enabling OSPF TE

This operation enables you to enable OSPF TE.

Background InformationBy default, the OSPF TE capability is disabled.

Procedure

Step 1 Run the ospf command to enter OSPF mode.

Step 2 Run the opaque-capability enable command to enable the OSPF opaque capability.

Step 3 Run the area command to enter the OSPF area view.

Step 4 Run the mpls-te enable command to enable TE in current OSPF area.

Step 5 Run the display current-conguration command to display the conguration of the currentOSPF.

—-End

Example

To enable TE in OSPF area 100, do as follows:huawei(config)#ospf 100huawei(config-ospf-100)#opaque-capability enablehuawei(config-ospf-100)#area 100huawei(config-ospf-100-area-0.0.0.100)#mpls-te enable standard-complyinghuawei(config)#display current-configuration section ospf[MA5600V300R003: 3002]#[ospf]<ospf-100>

ospf 100opaque-capability enablearea 0.0.0.100mpls-te enable standard-complying

#return

Related Operations

Table 26-5 lists the related operations for enabling OSPF TE.

Table 26-5 Related operations for enabling OSPF TE

To... Run the Command... RemarksDisable the MPLS TE featurein the current OSPF area

undo mpls-te In the OSPF area view

Display the conguration ofthe OSPF

display ospf -

26.4.3 Conguring the MPLS TE Explicit Path

This operation enables you to congure the MPLS TE explicit path.



Background Informationn MPLS TE explicit path is congured on the ingress node.n The explicit path consists of a series of nodes. IP address in the explicit path is the IP

address of interface on the node. In general, the address of the loopback interface on anode are used as the destination address.

n The two kinds of relations that exist between adjacent nodes on an explicit path are asfollows:– Strict next-hop: The two nodes must be connected directly.– Loose next-hop: Other routers exist between the two nodes.

n By default, the explicit path includes the next hop in strict mode. The explicit pathspecies nodes that must be passed or cannot be passed to reach a destination.

Procedure

Step 1 Run the explicit-path enable command to create an explicit path and enter explicit path view.

Step 2 Run the next hop command to specify the next hop of the explicit path.

Step 3 Run the list hop command to display the conguration of the MPLS TE explicit path.

—-End

Example

To congure an MPLE TE path named huaweipath with IP addresses 202.100.100.100 and202.100.200.200, do as follows:huawei(config)#explicit-path huaweipath enablehuawei(config-explicit-path-huaweipath)#next hop 202.100.100.100 include stricthuawei(config-explicit-path-huaweipath)#next hop 202.100.200.200 include loosehuawei(config-explicit-path-huaweipath)#list hop{ <cr>|ip_addr<X.X.X.X> }:

Command:list hop

Path Name : huaweipath Path Status : Enabled1 202.100.100.100 Strict Include2 202.100.200.200 Loose Include

Related Operations

Table 26-6 lists the related operations for conguring the MPLS TE explicit path.

Table 26-6 Related operations for conguring the MPLS TE explicit path

To... Run the Command...Display the conguration of theexplicit path

display explicit-path

Delete an MPLS TE explicit path undo explicit-pathInsert a node to the explicit path add hop

Modify the node address of explicitaddress

modify hop

Delete a node from the explicit path delete hop



Conguration Guide

26.4.4 Conguring Constraints of an MPLS TE TunnelThis operation enables you to congure constraints for an MPLS TE tunnel.

Procedure

Step 1 Run the interface tunnel command to create or enter the tunnel interface view of the MPLSTE tunnel.

Step 2 Run the mpls te bandwidth command to congure bandwidth for the tunnel.

Step 3 Run the mpls te path explicit-path command to congure the explicit path used for theMPLS TE tunnel.


Step 5 Run the display current-conguration command to display the information about the tunnel.

—-End

Example

To congure the constraints for an MPLS TE tunnel, do as follows:huawei(config)#interface tunnel 10huawei(config-if-tunnel10)#mpls te bandwidth bc0 8192huawei(config-if-tunnel10)#mpls te path explicit-path huaweipathhuawei(config-if-tunnel10)#mpls te commithuawei(config-if-tunnel100)#quithuawei(config)#display current-configuration section tunnel[MA5600V300R003: 3002]#[tunnel]<tunnel10>

interface tunnel10description tunnel-10tunnel-protocol mpls tedestination 202.100.100.100mpls te tunnel-id 10mpls te bandwidth bc0 8192mpls te path explicit-path huaweipath#return

Related Operation

Table 26-7 lists the related operations for conguring constraints for an MPLS TE tunnel.

Table 26-7 Related operations for conguring constraints for an MPLS TE tunnel

To... Run the Command...Cancel the conguration ofbandwidth for an MPLS TE tunnel

undo mpls te bandwidth

Cancel the conguration of theexplicit path used by an MPLS TEtunnel

undo mpls te path

26.4.5 Conguring CSPFThis operation enables you to congure CSPF algorithm of an MPLS.

Background Informationn You must enable CSPF rst and then you can congure relevant CSPF functions.



n Whenever a link goes Down, a CSPF failed link timer starts. If the IGP deletes ormodies this link before the timer expires, then the deletion or modication is informedto the CSPF. The CSPF updates the link in the TEDB and stops the timer. If the timerexpires and the IGP does not delete the link, the status of the link becomes Up.

n By default, CSPF of an MPLS area is disabled and the interval for starting up the failedtimer is 10s.

Procedure

Step 1 Run the mpls command to enter the MPLS view.

Step 2 Run the mpls te cspf command to enable CSPF of the node.

Step 3 Run the mpls te cspf timer failed-link command to set the interval for starting up to thefailed timer.

Step 4 Run the display current-conguration command to display CSPF conguration of the MPLS.

—-End

Example

To enable CSPF of an MPLS and set the interval for starting up the failed timer as 100s,do as follows:huawei(config)#mplshuawei(config-mpls)#mpls te cspfhuawei(config-mpls)#mpls te cspf timer failed-link 100huawei(config-mpls)#quithuawei(config)#display current-configuration section mpls[MA5600V300R003: 3002]#[mpls]<mpls>mpls lsr-id 100.10.10.10mplsmpls templs te cspfmpls te cspf timer failed-link 100

#return

Related Operations

Table 26-8 lists the related operations for conguring the CSPF of an MPLS.

Table 26-8 Related operations for conguring CSPF of an MPLS

To... Run the Command...Disable the CSPF of an MPLS undo mpls te cspfRestore the default interval forstarting up the failed timer

undo mpls te cspf timer failed-link

26.4.6 Establishing an MPLS TE Tunnel by Using RSVP-TEThis operation enables you to establish an MPLS TE tunnel by using RSVP-TE.

Background Informationn In the MPLS view, run thempls rsvp-te command to enable the RCVP-TE feature. In the

VLAN interface view, run the mpls rsvp-te command to enable the RSVP-TE featureof interfaces.



Conguration Guide

n In the MPLS view, once the RSVP-TE feature is disabled globally, the RSVP-TE featureon each interface is disabled at the same time.

n By default, the RSVP-TE feature is disabled.n To run the mpls rsvp-te command, run the mpls command and the mpls te command

to enable the MPLS and the MPLS TE features. Enable RSVP-TE feature rst beforeconguring other RSVP-TE functions.

Procedure


Step 2 Run the mpls rsvp-te command to enable RSVP-TE.

Step 3 In VLAN interface mode, run the mpls rsvp-te command to enable RSVP-TE on the VLANinterface.

Step 4 In tunnel interface mode, run the mpls te signal-protocol rsvp-te command to specifyRSVP-TE as the signaling of the tunnel.

Step 5 In tunnel interface mode, run the mpls te commit command to commit the current tunnelconguration.

—-End

Example

To establish an MPLS TE tunnel by using RSVP-TE, do as follows:huawei(config)#mplshuawei(config-mpls)#mpls rsvp-tehuawei(config-mpls)#quithuawei(config)#interface vlanif 20huawei(config-if-vlanif20)#mpls rsvp-tehuawei(config-if-vlanif20)#quithuawei(config)#interface tunnel 100huawei(config-if-tunnel100)#mpls te signal-protocol rsvp-te

Related Operation

Table 26-9 lists the related operation for establishing an MPLS TE tunnel by using RSVP-TE.

Table 26-9 Related operation for establishing an MPLS TE tunnel by using RSVP-TE

To... Run the Command...Disable RSVP-TE feature undo mpls rsvp-te

26.5 Conguring Advanced RSVP-TE FeaturesThis operation enables you to congure the advanced RSVP-TE features.

Background InformationRSVP-TE provides diversied conguration options. It guarantees reliability and networkresource availability, and offers some applications of MPLS TE advanced features.

PrerequisitesBefore conguring advanced RSVP-TE features, complete the following tasks:n Conguring the MPLS basic capabilityn Conguring the basic MPLS TE capability



n Using RSVP-TE to establish the MPLS TE tunnel

26.5.1 Conguring RSVP Hello ExtensionThis operation enables you to congure RSVP Hello extension.26.5.2 Conguring RSVP Resource Reservation StyleThis operation enables you to congure RSVP resource reservation style.26.5.3 Conguring RSVP TimersThis operation enables you to congure RSVP timers, including conguring the refreshinterval for Path and Resv messages, timeout multiplier of PSB and RSB and timeoutmultiplier of blockade state.26.5.4 Enabling RSVP Message Transmission ReliabilityThis operation enables the reliability of RSVP message transmission.26.5.5 Enabling RSVP-TE Srefresh FunctionThis operation enables RSVP-TE Summary Refresh (Srefresh) function.26.5.6 Enabling RSVP-TE Reservation Conrmation MechanismThis operation enables RSVP-TE reservation conrmation mechanism.26.5.7 Enabling RSVP AuthenticationThis operation enables RSVP authentication.

26.5.1 Conguring RSVP Hello ExtensionThis operation enables you to congure RSVP Hello extension.

Background Informationn The RSVP Hello extension is used to detect the reachability of RSVP neighboring nodes.

Before enabling RSVP Hello extension, you must enable RSVP-TE feature rst. Onlyafter the RSVP Hello extension is enabled, you can congure parameters.

n In the MPLS view, run the mpls rsvp-te hello command to globally enable the RSVPHello mechanism. Then, run the mpls rsvp-te hello command to enable the RSVP Hellomechanism in the VLAN interface view.

n By default, the RSVP Hello extension is disabled. Once the RSVP Hello extension isenabled, the refresh interval of Hello message is 3 seconds.

n By default, the maximum loss times of Hello message is 3.

Procedure


Step 2 Run the mpls rsvp-te hello command to globally enable RSVP Hello extension.

Step 3 Run the mpls rsvp-te hello-lost command to congure the maximum loss times of Hellomessage.

Step 4 Run thempls rsvp-te timer hello command to congure the refresh interval of Hello message.

Step 5 In the VLAN interface view, run the mpls rsvp-te hello command to enable the RSVP Helloextension of the VLAN interface.

Step 6 Run the display current-conguration command to display the conguration.

—-End

Example

Assume that:n VLAN interface: 20n Maximum times for consecutively receiving no Hello message: 6



Conguration Guide

n Refresh interval of Hello message: 10sTo congure the RSVP Hello extension, do as follows:huawei(config)#mplshuawei(config-mpls)#mpls rsvp-te hellohuawei(config-mpls)#mpls rsvp-te hello-lost 6huawei(config-mpls)#mpls rsvp-te timer hello 10huawei(config-mpls)#quithuawei(config)#interface vlanif 20huawei(config-if-vlanif20)#mpls rsvp-te hellohuawei(config-if-vlanif20)#quithuawei(config)#display current-configuration section mpls[MA5600V300R003: 3002]#[mpls]<mpls>mpls lsr-id 100.10.10.10mplsmpls templs rsvp-templs rsvp-te hellompls rsvp-te timer hello 10mpls rsvp-te hello-lost 6mpls te cspfmpls te cspf timer failed-link 100#

returnhuawei(config)#display current-configuration section vlanif[MA5600V300R003: 3002]#[vlanif]<vlanif20>

interface vlanif20ip address 202.100.100.1 255.255.255.0mplsmpls templs te max-link-bandwidth 4096 bc1 4096mpls te max-reservable-bandwidth 1024 bc1 1024mpls rsvp-templs rsvp-te hello#<vlanif30>


Related Operations

Table 26-10 lists the related operations for conguring RSVP Hello extension.

Table 26-10 Related operations for conguring RSVP Hello extension

To... Run the Command...Disable RSVP Hello extensionmechanism

undo mpls rsvp-te hello

Restore the default loss times ofHello message

undo mpls rsvp-te hello-lost

Restore the default refresh intervalof Hello message

undo mpls rsvp-te timer hello

26.5.2 Conguring RSVP Resource Reservation StyleThis operation enables you to congure RSVP resource reservation style.

Background Informationn By default, the resource reservation style is Shared-Explicit (SE) style.



n Only the RSVP-TE protocol has resource reservation style and styles available are: SEstyle and xed lter (FF) style.

Procedure

Step 1 Run the interface command to enter the tunnel interface view.

Step 2 Run the mpls te resv-style command to specify resource reservation style for the tunnel.


Step 4 In global cong mode, run the display current-conguration command to display theconguration.

—-End

Example

To specify resource reservation style FF for establishing a CR-LSP tunnel, do as follows:huawei(config)#interface tunnel 200huawei(config-if-tunnel200)#mpls te resv-style ffhuawei(config-if-tunnel200)#mpls te commithuawei(config-if-tunnel200)#quithuawei(config)#display current-configuration section tunnel[MA5600V300R003: 3002]#<tunnel100>

interface tunnel100description tunnel-100#<tunnel200>

interface tunnel200tunnel-protocol mpls tedestination 100.10.10.10mpls te tunnel-id 200mpls te resv-style ffmpls te commit#return

Related Operation

Table 26-11 lists the related operation for conguring the resource reservation style.

Table 26-11 Related operation for conguring the resource reservation style

To... Run the Command...Restore the default resource reservationstyle

undo mpls te resv-style

26.5.3 Conguring RSVP Timers

This operation enables you to congure RSVP timers, including conguring the refreshinterval for Path and Resv messages, timeout multiplier of PSB and RSB and timeoutmultiplier of blockade state.

Background Informationn RSVP maintains path and resource through refresh message. The mpls rsvp-te timer

refresh command is used to congure refresh interval, that is, the interval for sendinga refresh message.



Conguration Guide

n ResvErr message creates blockade state on a node to solve the problem of "killerreservation" and forward or create smaller requests. Blockade state timeout = Blockstatetimeout multiplier x Path/Resv message refresh-time.

n The mpls rsvp-te keep-multiplier command is used to congure timeout multiplier ofPSB and RSB. Timeout time = (keep-multiplier + 0.5) x 1.5 x refresh-time. If no refreshmessage is received within the timeout time, fault occurs to the link and the reservedresource must be deleted.

n By default, the refresh interval of Path/Resv message is 30 seconds; the timeout multiplierof PSB and RSB is 3; the timeout multiplier of blockade state is 4.

Procedure


Step 2 Run the mpls rsvp-te timer refresh command to congure the refresh interval for Path andResv messages.

Step 3 Run the mpls rsvp-te keep-multiplier command to congure the timeout multiplier of PSBand RSB.

Step 4 Run the mpls rsvp-te blockade-multiplier command to congure the timeout multiplier ofblockade state.


—-End

Example

To set the refresh interval for Path and Resv message to 50s, the timeout multiplier of PSB andRSB to 5 and the timeout multiplier of blockade state to 5, do as follows:huawei(config)#mplshuawei(config-mpls)#mpls rsvp-te timer refresh 50huawei(config-mpls)#mpls rsvp-te keep-multiplier 5huawei(config-mpls)#mpls rsvp-te blockade-multiplier 5huawei(config-mpls)#quithuawei(config)#display current-configuration section mpls[MA5600V300R003: 3002]#[mpls]<mpls>mpls lsr-id 100.10.10.10mplsmpls templs rsvp-templs rsvp-te hellompls rsvp-te timer refresh 50mpls rsvp-te timer hello 10mpls rsvp-te hello-lost 6mpls rsvp-te keep-multiplier 5mpls rsvp-te blockade-multiplier 5mpls te cspfmpls te cspf timer failed-link 100#

return

Related Operations

Table 26-12 lists the related operations for conguring RSVP timers.



Table 26-12 Related operations for conguring RSVP timers

To... Run the Command...Restore the default refresh intervalfor Path and Resv messages

undo mpls rsvp-te timer refresh

Restore the default timeout multiplierof PSB and RSB

undo mpls rsvp-te keep-multiplier

Restore the default timeout multiplierof blockade state

undo mpls rsvp-te blockade-multiplier

26.5.4 Enabling RSVP Message Transmission ReliabilityThis operation enables the reliability of RSVP message transmission.

Background Informationn Reliability refers to the Message_ID extension mechanism and it is used to conrm the

RSVP message. Thus, the transmission reliability of the RSVP message is improved.Before enabling the Message-ID mechanism, you must enable RSVP-TE feature rst.After enabling the Message_ID mechanism on the interface, you can congure theretransmission parameters.

n By default, the reliability function of an interface is disabled; The retransmission intervaland increment are 600 ms and 1 ms respectively.

Procedure

Step 1 Run the interface command to enter VLAN interface mode.

Step 2 Run the mpls rsvp-te reliability command to enable reliability on the interface.

Step 3 Run thempls rsvp-te timer retransmission command to congure retransmission parameters.


—-End

Example

To enable the reliability on the VLAN interface 20 and set the retransmission interval andincrement to 600 ms and 2 ms respectively, do as follows:huawei(config)#interface vlanif 20huawei(config-if-vlanif20)#mpls rsvp-te reliabilityhuawei(config-if-vlanif20)#mpls rsvp-te timer retransmission retransmit-value600 increment-value 2huawei(config-if-vlanif20)#quithuawei(config)#display current-configuration section vlanif[MA5600V300R003: 3002]#[vlanif]<vlanif2>

interface vlanif2#<vlanif20>

interface vlanif20ip address 202.100.100.1 255.255.255.0mplsmpls templs te max-link-bandwidth 4096 bc1 4096mpls te max-reservable-bandwidth 1024 bc1 1024mpls rsvp-templs rsvp-te hellompls rsvp-te reliabilitympls rsvp-te timer retransmission retransmit-value 600 increment-value 2#



Conguration Guide

<vlanif30>interface vlanif30#return

Related Operations

Table 26-13 lists the related operations for conguring RSVP message transmission reliability.

Table 26-13 Related operations for conguring RSVP message transmission reliability

To... Run the Command...Disable RSVP message transmissionreliability

undo mpls rsvp-te reliability

Cancel the conguration ofretransmission parameters

undo mpls rsvp-te timer retransmission

26.5.5 Enabling RSVP-TE Srefresh FunctionThis operation enables RSVP-TE Summary Refresh (Srefresh) function.

Background Informationn Enabling Srefresh will prohibit the traditional time-driving refresh on the current

interface. Srefresh message is used to refresh the state of path and reserved resources.n By default, Srefresh is disabled on the interface.

Procedure


Step 2 Run the mpls rsvp-te srefresh command to enable Srefresh on the interface.


—-End

Example

To enable RSVP-TE Srefresh on VLAN interface 20, do as follows:huawei(config)#interface vlanif 20huawei(config-if-vlanif20)#mpls rsvp-te srefreshhuawei(config-if-vlanif20)#quithuawei(config)#display current-configuration section vlanif[MA5600V300R003: 3002]#[vlanif]<vlanif2>


interface vlanif20ip address 202.100.100.1 255.255.255.0mplsmpls templs te max-link-bandwidth 4096 bc1 4096mpls te max-reservable-bandwidth 1024 bc1 1024mpls rsvp-templs rsvp-te hellompls rsvp-te srefreshmpls rsvp-te reliabilitympls rsvp-te timer retransmission retransmit-value 600 increment-value 2#<vlanif30>




Related Operation

Table 26-14 lists the related operation for enabling RSVP-TE Srefresh.

Table 26-14 Related operation for enabling RSVP-TE Srefresh

To... Run the Command...Disable RSVP-TE Srefresh function undo mpls rsvp-te srefresh

26.5.6 Enabling RSVP-TE Reservation Conrmation MechanismThis operation enables RSVP-TE reservation conrmation mechanism.

Background Informationn The reservation conrmation is initiated by the receiver of Path message. An object that

requires conrming the reservation is carried along the Resv message sent by the receiver.n By default, RSVP-TE reservation conrmation function is disabled.

NOTE

Receiving the ResvConf message does not mean that resource reservation succeeds. It only means thatresources are reserved successfully on the farthest upstream node where this Resv message arrives. Theseresources may still be preempted by other applications later.

Procedure


Step 2 Run the mpls rsvp-te resvconrm command to enable the reservation conrmationmechanism of the node.


—-End

Example

To enable the reservation conrmation mechanism on a node, do as follows:huawei(config)#mplshuawei(config-mpls)#mpls rsvp-te resvconfirmhuawei(config-mpls)#quithuawei(config)#display current-configuration section mpls[MA5600V300R003: 3002]#[mpls]<mpls>mpls lsr-id 100.10.10.10mplsmpls templs rsvp-templs rsvp-te hellompls rsvp-te resvconfirmmpls rsvp-te timer refresh 50mpls rsvp-te timer hello 10mpls rsvp-te hello-lost 6mpls rsvp-te keep-multiplier 10mpls rsvp-te blockade-multiplier 10mpls te cspfmpls te cspf timer failed-link 100#

return



Conguration Guide

Related Operation

Table 26-15 lists the related operation for enabling RSVP-TE reservation conrmationmechanism.

Table 26-15 Related operation for enabling RSVP-TE reservation conrmation mechanism

To... Run the Command...Disable RSVP-TE reservationconrmation mechanism

undo mpls rsvp-te resvconrm

26.5.7 Enabling RSVP Authentication

This operation enables RSVP authentication.

Background Informationn Before enabling RSVP authentication on a VLAN interface, enable RSVP-TE feature rst.n After RSVP authentication is enabled, RSVP-TE transmits authentication summary

generated by authentication key and hash algorithm. Summaries of all messages receivedat or sent from the interface will be calculated by using the authentication key.

n By default, the RCVP authentication is disabled.

Procedure


Step 2 Run the mpls rsvp-te authentication command to enable RSVP authentication.


—-End

Example

To enable the RSVP authentication on a node, do as follows:huawei(config)#interface vlanif 20huawei(config-if-vlanif20)#mpls rsvp-te authentication cipher huaweiuserhuawei(config-mpls)#quithuawei(config)#display current-configuration section vlanif[MA5600V300R003: 3002]#[vlanif]<vlanif2>


interface vlanif20ip address 202.100.100.1 255.255.255.0mplsmpls templs te max-link-bandwidth 4096 bc1 4096mpls te max-reservable-bandwidth 1024 bc1 1024mpls rsvp-templs rsvp-te hellompls rsvp-te srefreshmpls rsvp-te authentication cipher TBESB1:RIXa"..$6++O5YQ!!mpls rsvp-te reliabilitympls rsvp-te timer retransmission retransmit-value 600 increment-value 2#return



Related Operation

Table 26-16 lists the related operation for enabling RSVP authentication.

Table 26-16 Related operation for enabling RSVP authentication

To... Run the Command...Disable the RSVP authentication undo mpls rsvp-te authentication

26.6 Tuning the Establishment of CR-LSPThis operation enables you to tune the establishment of CR-LSP.

Background InformationCSPF uses the TEDB and constraints to calculate the appropriate paths and establishesCR-LSP through the signaling protocol. MPLS TE provides many ways to inuence the CSPFcomputation for tuning the CR-LSP establishment.n Tie-breaking

CSPF only calculates the shortest path to reach the tunnel destination. During the pathcomputation, if there are several paths with the same metric, you can select one of them.

n Route pinning

The feature that a CR-LSP is not reestablished as routes change is called route pinning.n Administrative group and afnity property

The afnity property of the MPLS TE tunnel determines the links that the tunnel uses.The afnity property cooperates with link administrative group to decide what linksthe tunnel uses.

n Reoptimization

Dynamically optimizing CR-LSP is to periodically recompute routes for CR-LSP. If theroute by recomputation is better than the route in use, then a new CR-LSP is established,according to the route recomputed. Meanwhile, services are switched from the oldCR-LSP to the new CR-LSP, and the old one is deleted.

NOTE

The conguration described in this section needs to be used together with the CSPF and the CR-LDPor RSVP-TE protocol.

26.6.1 Conguring Tie-Breaking of CSPFThis operation enables you to congure tie-breaking of CSPF.26.6.2 Conguring Route Pinning of CSPFThis operation enables you to congure the route pining of CSPF.26.6.3 Conguring Administrative Group and Afnity PropertyThis operation enables you to congure administrative group and afnity property.26.6.4 Conguring Reoptimization for CR-LSPThis operation enables you to congure reoptimization for CR-LSP.

26.6.1 Conguring Tie-Breaking of CSPFThis operation enables you to congure tie-breaking of CSPF.

Background Informationn The default setting in the MPLS view is random.



Conguration Guide

n The tunnel takes the tie-breaking policy congured in its tunnel interface view as apriority. If there is no related conguration in that view, it uses the method in the MPLSview.

Procedure

Step 1 Run the mpls command to enter MPLS view.

Step 2 Run the mpls te tie-breaking command to congure tie-breaking methods on the current nodefor selecting the path policy when there are several paths with the same metric.

Step 3 In tunnel interface mode, run the mpls te tie-breaking command to congure tie-breakingmethods on the tunnel interface for selecting the path policy when there are several pathswith the same metric.

Step 4 Run the mpls te commit command to commit the current conguration.


—-End

Example

To set the tie-breaking method on the current node to random and that on tunnel 100 asmaximal ratio of the idle bandwidth, do as follows:huawei(config)#mplshuawei(config-mpls)#mpls te tie-breaking randomhuawei(config-mpls)#quithuawei(config)#interface tunnel 100huawei(config-if-tunnel100)#mpls te tie-breaking least-fillhuawei(config-if-tunnel100)#mpls te commithuawei(config-if-tunnel100)#quithuawei(config)#display current-configuration section mpls[MA5600V300R003: 3002]#[mpls]<mpls>mpls lsr-id 100.10.10.10mplsmpls templs rsvp-templs rsvp-te hellompls rsvp-te resvconfirmmpls rsvp-te timer refresh 50mpls rsvp-te timer hello 10mpls rsvp-te hello-lost 6mpls rsvp-te keep-multiplier 10mpls rsvp-te blockade-multiplier 10mpls te cspfmpls te cspf timer failed-link 100#

returnhuawei(config)#display current-configuration section tunnel[MA5600V300R003: 3002]#[tunnel]<tunnel100>

interface tunnel100description tunnel-100tunnel-protocol mpls tedestination 202.100.100.100mpls te tunnel-id 100mpls te bandwidth bc0 8192mpls te path explicit-path huaweipathmpls te tie-breaking least-fillmpls te commit#return



Related Operation

Table 26-17 lists the related operation for conguring tie-breaking of CSPF.

Table 26-17 Related operation for conguring tie-breaking of CSPF

To... Run the Command...Restore the default tie-breaking methods forselecting a path

undo mpls te tie-breaking

26.6.2 Conguring Route Pinning of CSPFThis operation enables you to congure the route pining of CSPF.

Background Informationn By default, route pinning is disabled.n If the route pinning is enabled, then the MPLS TE reoptimization or auto bandwidth

adjustment cannot be used at the same time.

Procedure

Step 1 Run the interface command to enter the tunnel interface view of the MPLS TE tunnel.

Step 2 Run the mpls te route-pinning command to enable the route pining function.

Step 3 In the Tunnel interface view, run the mpls te commit command to commit the currentconguration.


—-End

Example

To enable the tunnel pining of tunnel 100, do as follows:huawei(config)#interface tunnel 100huawei(config-if-tunnel100)#mpls te route-pinninghuawei(config-if-tunnel100)#mpls te commithuawei(config-if-tunnel100)#quithuawei(config)#display current-configuration section tunnel[MA5600V300R003: 3002]#[tunnel]<tunnel100>

interface tunnel100description tunnel-100tunnel-protocol mpls tedestination 202.100.100.100mpls te tunnel-id 100mpls te bandwidth bc0 8192mpls te path explicit-path huaweipathmpls te tie-breaking least-fillmpls te commit#return

Related Operation

Table 26-18 lists the related operation for conguring route pining.



Conguration Guide

Table 26-18 Related operation for conguring route pining

To... Run the Command...Disable the route pining of a tunnel interface undo mpls te route-pinning

26.6.3 Conguring Administrative Group and Afnity PropertyThis operation enables you to congure administrative group and afnity property.

Background Informationn By default, the values of administrative group, afnity property and mask are all 0x0.n The modication of administrative group and afnity attribute is valid only for new

LSPs but not for the established ones. Modifying the afnity property of the tunnelaffects the established LSP after the modication is committed, and TE tunnel path willbe calculated again.

ProcedureStep 1 Run the interface command to enter VLAN interface mode.

Step 2 Run the mpls te link administrative group command to congure administrative group ofthe VLAN interface.

Step 3 In tunnel interface mode, run the mpls te afnity property command to congure afnityproperty for the tunnel.

Step 4 In tunnel interface mode, run the mpls te commit command to commit the currentconguration.


—-End

ExampleTo set the values of administrative group and afnity property to 0x0101 and the mask to0x303, do as follows:huawei(config)#interface vlan 20huawei(config-if-vlanif20)#mpls te link administrative group0x0101Info: The configuration will take into effect ONLY for the newly created LSP.huawei(config-if-vlanif20)#quithuawei(config)#interface tunnel 100huawei(config-if-tunnel100)#mpls te affinity property 0x101 mask 0x303huawei(config-if-tunnel100)#mpls te commithuawei(config-if-tunnel100)#quithuawei(config)#display current-configuration section vlanif[MA5600V300R003: 3002]#[vlanif]<vlanif2>


interface vlanif20ip address 202.100.100.1 255.255.255.0mplsmpls templs te link administrative group 101mpls te max-link-bandwidth 4096 bc1 4096mpls te max-reservable-bandwidth 1024 bc1 1024mpls rsvp-templs rsvp-te hellompls rsvp-te srefresh



mpls rsvp-te authentication cipher TBESB1:RIXa"..$6++O5YQ!!mpls rsvp-te reliabilitympls rsvp-te timer retransmission retransmit-value 600 increment-value 2#<vlanif30>

interface vlanif30---- More ( Press ’Q’ to break ) ----huawei(config)#display current-configuration section tunnel[MA5600V300R003: 3002]#[tunnel]<tunnel100>

interface tunnel100description tunnel-100tunnel-protocol mpls tedestination 202.100.100.100mpls te tunnel-id 100mpls te bandwidth bc0 8192mpls te path explicit-path huaweipathmpls te affinity property 101 mask 303mpls te tie-breaking least-fillmpls te commit#return

Related Operations

Table 26-19 lists the related operations for conguring administrative group and afnityproperty.

Table 26-19 Related operations for conguring administrative group and afnity property

To... Run the Command...Restore the default administrative group undo mpls te link administrative groupRestore the default afnity property of anMPLS TE tunnel

undo mpls te afnity property

26.6.4 Conguring Reoptimization for CR-LSPThis operation enables you to congure reoptimization for CR-LSP.

Background Informationn By default, reoptimization is disabled. The default timing reoptimization interval is 3600s.n After conguring the timing reoptimization in the tunnel view, return to the user view

and run the mpls te reoptimization command to re-optimize the optimized tunnelsimmediately. Once the reoptimization is executed, the timing reoptimization timer willreset and start to count time again.

n The CR-LSP reoptimization cannot be congured when the route pining is enabled.

Procedure

Step 1 Run the interface command to enter tunnel interface mode.

Step 2 Run the mpls te reoptimization command to enable periodic reoptimization of the MPLSTE tunnel.


Step 4 (Optional) Run the mpls te reoptimization command to reoptimize the TE tunnel.




Conguration Guide

—-End

Example

To reoptimize the tunnel 100 and set the periodic reoptimization interval to 1000s, do asfollows:huawei(config)#interface tunnel 100huawei(config-if-tunnel100)#mpls te reoptimization frequency 1000huawei(config-if-tunnel100)#mpls te commithuawei(config-if-tunnel100)#quithuawei(config)#display current-configuration section tunnel[MA5600V300R003: 3002]#[tunnel]<tunnel100>

interface tunnel100description tunnel-100tunnel-protocol mpls tedestination 202.100.100.100mpls te tunnel-id 100mpls te bandwidth bc0 8192mpls te path explicit-path huaweipathmpls te affinity property 101 mask 303mpls te tie-breaking least-fillmpls te reoptimization frequency 1000mpls te commit#return

Related Operation

Table 26-20 lists the related operation for conguring reoptimization of CR-LSP.

Table 26-20 Related operation for conguring reoptimization of CR-LSP

To... Run the Command...Disable the reoptimization of CR-LSP ona tunnel

undo mpls te reoptimization

26.7 Tuning the Establishment of an MPLS TE TunnelThis operation enables you to tune the establishment of an MPLS TE tunnel.

Background InformationDuring the establishment of the MPLS TE tunnel, certain specic conguration is required forpractical application to ensure the security and stability of data transmission.

NOTE

The congurations introduced in this section must be used together with the CR-LDP or the RSVP-TEprotocol (The MA5600 supports only the RSVP-TE protocol).

26.7.1 Conguring Loop DetectionThis operation enables you to congure loop detection.26.7.2 Conguring the Route Record and the Label RecordThis operation enables you to congure the route record and the label record.26.7.3 Conguring Parameters of Tunnel ReestablishmentThis operation enables you to congure parameters of tunnel reestablishment.26.7.4 Conguring Tunnel PriorityThis operation enables you to congure tunnel setup priority and hold priority.



26.7.1 Conguring Loop DetectionThis operation enables you to congure loop detection.

Background Informationn By default, loop detection is disabled.n The loop detection mechanism of TE allows a maximum hop count of 32. If the path

information table contains the record of the local LSR, or the hop count of the path exceedsthe maximum value, it is considered that a loop occurs and the establishment of LSP fails.

Procedure


Step 2 Run the mpls te loop-detection command to enable loop detection on tunnel creation.



—-End

Example

To enable loop detection on tunnel 100, do as follows:huawei(config)#interface tunnel 100huawei(config-if-tunnel100)#mpls te loop-detectionhuawei(config-if-tunnel100)#mpls te commithuawei(config-if-tunnel100)#quithuawei(config)#display current-configuration section tunnel[MA5600V300R003: 3002]#[tunnel]<tunnel100>

interface tunnel100description tunnel-100tunnel-protocol mpls tedestination 202.100.100.100mpls te tunnel-id 100mpls te loop-detectionmpls te bandwidth bc0 8192mpls te path explicit-path huaweipathmpls te affinity property 101 mask 303mpls te tie-breaking least-fillmpls te reoptimization frequency 1000mpls te commit#return

Related Operation

Table 26-21 lists the related operation for conguring loop detection.

Table 26-21 Related operation for conguring loop detection

To... Run the Command...Disable loop detection undo mpls te loop-detection

26.7.2 Conguring the Route Record and the Label RecordThis operation enables you to congure the route record and the label record.



Conguration Guide

Background InformationBy default, the route record and the label record are disabled.

Procedure

Step 1 Run the interface command to enter the tunnel interface view of the MPLS TE tunnel.

Step 2 Run the mpls te record-route command to enable the route record and the label record ontunnel establishment.



—-End

Example

To enable the route record and label record for tunnel 100 on tunnel establishment, do asfollows:huawei(config)#interface tunnel 100huawei(config-if-tunnel100)#mpls te record-route labelhuawei(config-if-tunnel100)#mpls te commithuawei(config-if-tunnel100)#quithuawei(config)#display current-configuration section tunnel[MA5600V300R003: 3002]#[tunnel]<tunnel100>

interface tunnel100description tunnel-100tunnel-protocol mpls tedestination 202.100.100.100mpls te tunnel-id 100mpls te loop-detectionmpls te record-route labelmpls te bandwidth bc0 8192mpls te path explicit-path huaweipathmpls te affinity property 101 mask 303mpls te tie-breaking least-fillmpls te reoptimization frequency 1000mpls te commit#return

Related Operation

Table 26-22 lists the related operation for conguring route record and label record.

Table 26-22 Related operation for conguring route record and label record

To... Run the Command...Disable route record and label record ontunnel establishment

undo mpls te record-route

26.7.3 Conguring Parameters of Tunnel ReestablishmentThis operation enables you to congure parameters of tunnel reestablishment.

Background Informationn If the establishment of a tunnel fails, the system attempts to re-establish the tunnel within

a certain interval until the attempts exceed the maximum reestablishment times.



n By default, the creation retry times are 5 and the interval for tunnel reestablishmentis 10 seconds.

Procedure


Step 2 Run the mpls te retry command to specify the retry times for tunnel reestablishment.

Step 3 Run the mpls te timer retry command to specify the interval for tunnel reestablishment.



—-End

Example

To specify the retry times for tunnel establishment as 3 and the interval for tunnelreestablishment as 5s, do as follows:huawei(config)#interface tunnel 100huawei(config-if-tunnel100)#mpls te retry 3huawei(config-if-tunnel100)#mpls te timer retry 5huawei(config-if-tunnel100)#mpls te commithuawei(config-if-tunnel100)#quithuawei(config)#display current-configuration section tunnel[MA5600V300R003: 3002]#[tunnel]<tunnel100>

interface tunnel100description tunnel-100tunnel-protocol mpls tedestination 202.100.100.100mpls te tunnel-id 100mpls te loop-detectionmpls te record-route labelmpls te bandwidth bc0 8192mpls te path explicit-path huaweipathmpls te retry 3mpls te timer retry 5mpls te affinity property 101 mask 303mpls te tie-breaking least-fillmpls te reoptimization frequency 1000mpls te commit#return

Related Operations

Table 26-23 lists the related operations for conguring parameters of tunnel reestablishment.

Table 26-23 Related operations for conguring parameters of tunnel establishment

To... Run the Command...Restore the default retry times for tunnelreestablishment

undo mpls te retry

Restore the default interval for tunnelreestablishment

undo mpls te timer retry

26.7.4 Conguring Tunnel PriorityThis operation enables you to congure tunnel setup priority and hold priority.



Conguration Guide

Background Informationn Both the setup priority and the hold priority range from 0 to 7. The smaller the value is,

the higher the priority is. By default, both the setup priority and the hold priority are 7.n If only the tunnel setup priority is congured, the hold priority is the same as the setup

priority.n The setup priority should not be higher than the hold priority.

Procedure


Step 2 Run the mpls te priority command to congure the setup priority and hold priority for theMPLS TE tunnel.

Step 3 Run the mpls te timer retry command to congure the interval for tunnel reestablishment.



—-End

Example

To congure the setup priority as 6 and hold priority as 3 for tunnel 100, do as follows:huawei(config)#interface tunnel 100huawei(config-if-tunnel100)#mpls te priority 6 3huawei(config-if-tunnel100)#mpls te commithuawei(config-if-tunnel100)#quithuawei(config)#display current-configuration section tunnel[MA5600V300R003: 3002]#[tunnel]<tunnel100>

interface tunnel100description tunnel-100tunnel-protocol mpls tedestination 202.100.100.100mpls te tunnel-id 100mpls te loop-detectionmpls te record-route labelmpls te bandwidth bc0 8192mpls te path explicit-path huaweipathmpls te retry 3mpls te timer retry 5mpls te priority 6 3mpls te affinity property 101 mask 303mpls te tie-breaking least-fillmpls te reoptimization frequency 1000mpls te commit#return

Related Operation

Table 26-24 lists the related operation for conguring tunnel priority.

Table 26-24 Related operation for conguring tunnel priority

To... Run the Command...Restore the default setup priority and holdpriority of an MPLS TE tunnel

undo mpls te priority


SmartAX MA5600 Multi-service Access ModuleConguration Guide 27 Multi-ISP Wholesale Access Conguration

27 Multi-ISP WholesaleAccess Conguration


27.1 OverviewThis chapter describes the multi-ISP wholesale access and its application to the MA5600.27.2 Conguration ExampleThis example shows how to congure multi-ISP wholesale access so that users can accessthe ISPs in batches.


27 Multi-ISP Wholesale Access CongurationSmartAX MA5600 Multi-service Access Module

Conguration Guide

27.1 OverviewThis chapter describes the multi-ISP wholesale access and its application to the MA5600.

Service DescriptionIn a layer 2 Metropolitan Area Network (MAN), there may exist multiple Internet serviceproviders (ISPs). With the wholesale service function, users can be connected to different ISPsin batches based on certain rules.

Service SpecicationThe MA5600 offers the VLAN stacking function to realize the multi-ISP wholesale access.It can identify the ISP that a user belongs to by the outer VLAN ID of the VLAN stacking,and identify the user by the inner VLAN ID.

In the wholesale service, the upper layer device must work in L2 mode, and forwards packetsbased on the VLAN and the MAC address.

27.2 Conguration ExampleThis example shows how to congure multi-ISP wholesale access so that users can accessthe ISPs in batches.

NetworkingFigure 27-1 shows a sample network for conguring the multi-ISP wholesale access.

Figure 27-1 Sample network for conguring the multi-ISP wholesale access

Data PlanTable 27-1 lists the data plan for conguring the multi-ISP wholesale access.


SmartAX MA5600 Multi-service Access ModuleConguration Guide 27 Multi-ISP Wholesale Access Conguration

Table 27-1 Data plan for conguring the multi-ISP wholesale access

Item DataWholesale user: ISP 1Connects to: MA5600_AADSL2+ port: 0/2/0Upstream port: 0/7/0VLAN ID: 60

Company A

Inner VLAN ID: 10Wholesale user: ISP 2Connects to: MA5600_BADSL2+ port: 0/2/0Upstream port: 0/7/0VLAN ID: 61

Company B

Inner VLAN ID: 11

NOTE

The example is based on the conguration of MA5600_A. The conguration procedure also appliesto MA5600_B.The BRASs of two ISP 1 and ISP 2 must be congured with different stacking VLANs for authenticatingenterprise A and enterprise B respectively.For the conguration of the BRAS, see the related documents of the BRAS.

Conguration FlowchartFigure 27-2 shows the owchart for conguring the multi-ISP wholesale access.


27 Multi-ISP Wholesale Access CongurationSmartAX MA5600 Multi-service Access Module

Conguration Guide

Figure 27-2 Flowchart for conguring the multi-ISP wholesale access

Procedure

Step 1 Create a VLAN.huawei(config)#vlan 60 smart

Step 2 Set the VLAN attribute.huawei(config)#vlan attrib 60 stacking

Step 3 Add the upstream port to the VLAN.huawei(config)#port vlan 60 0/7 0

Step 4 Add the service port to the VLAN.huawei(config)#service-port vlan 60 adsl 0/2/0 vpi 0 vci 35 rx-cttr 0 tx-cttr 0

NOTE

Make sure that the VPI and VCI values are the same as those on the modem.

Step 5 Set the inner tag of the service port.huawei(config)#stacking label vlan 60 baselabel 10


—-End

Result

After the conguration, Company A can access ISP 1 and Company B can access ISP 2.


SmartAX MA5600 Multi-service Access ModuleConguration Guide 28 Leased Line Access Conguration

28 Leased Line Access Conguration


28.1 OverviewThis chapter describes the leased line access and its application to the MA5600.28.2 Conguration ExampleThis example shows how to congure transparent transmission of private network VLANsand services to the peer end. Then, users can communicate with each other through a privatenetwork.28.3 Enabling Transparent Transmission of BPDUsThis operation enables transparent transmission of Bridge Protocol Data Units (BPDUs).Then, the BPDUs of private networks (upstream/downstream packets with the MAC addressesranging from 01-80-c2-00-00-00 to 01-80-c2-00-00-2f) can be transparently transmitted basedon the QinQ function of the public network.


28 Leased Line Access CongurationSmartAX MA5600 Multi-service Access Module

Conguration Guide

28.1 OverviewThis chapter describes the leased line access and its application to the MA5600.

Service DescriptionLeased line access satises the requirements for transparent transmission of service data andVLANs of private networks to the peer end.

Service SpecicationThe MA5600 provides leased line access through QinQ VLAN.n Upon receiving a packet with a private VLAN tag, the MA5600 adds an additional VLAN

tag (QinQ VLAN tag) to the packet.n The packet is forwarded by its outer VLAN tag in the public network.n When the packet reaches the peer MA5600, the MA5600 extracts the outer VLAN tag,

thus realizing transparent transmission of the service and VLAN of a private network.

NOTE

For normal applications based on QinQ VLAN, make sure that the ONT at the access end supportsEthernet packets with VLAN tags.

28.2 Conguration ExampleThis example shows how to congure transparent transmission of private network VLANsand services to the peer end. Then, users can communicate with each other through a privatenetwork.

Prerequisites

n The network devices and lines are in the normal state.n The service boards are in the normal state.n The upper layer network is in L2 mode, and forwards packets based on the VLAN and

the MAC address.

NetworkingFigure 28-1 shows a sample network for conguring the leased line access.



Figure 28-1 Sample network for conguring the leased line access

Data PlanTable 28-1 lists data plan for conguring the leased line access.

Table 28-1 Data plan for conguring the leased line access

Item DataSHEA port: 0/5/0Upstream port: 0/7/0

MA5600_A

SP VLAN ID: 50SHEA port: 0/5/0Upstream port: 0/7/0

MA5600_B

SP VLAN ID: 50

Conguration FlowchartFigure 28-2 shows the owchart for conguring leased line access.


28 Leased Line Access CongurationSmartAX MA5600 Multi-service Access Module

Conguration Guide

Figure 28-2 Flowchart for conguring leased line access

Procedure

Step 1 Enable transparent transmission of BPDUs.huawei(config)#bpdu tunnel enable

Step 2 Create a VLAN.huawei(config)#vlan 50 smart

Step 3 Set the VLAN attribute.huawei(config)#vlan attrib 50 q-in-q

Step 4 Add the upstream port to the VLAN.huawei(config)#port vlan 50 0/7/0

Step 5 Add the service port to the VLAN.huawei(config)#service-port vlan 50 shdsl 0/5/0 vpi 0 vci 35 rx-cttr 7 tx-cttr 7

NOTE

Make sure that the VPI and VCI values are the same as those on the modem.


—-End

Result

After the conguration, the two branches of the company can communicate with each other.

28.3 Enabling Transparent Transmission of BPDUsThis operation enables transparent transmission of Bridge Protocol Data Units (BPDUs).Then, the BPDUs of private networks (upstream/downstream packets with the MAC addresses



ranging from 01-80-c2-00-00-00 to 01-80-c2-00-00-2f) can be transparently transmitted basedon the QinQ function of the public network.

Background Informationn When the transparent transmission of BPDUs is enabled, the layer 2 BPDUs under the

QinQ VLAN can be transparently transmitted.n Otherwise, these BPDUs cannot be transparently transmitted.

Procedure

Step 1 Run the bpdu tunnel enable command to enable transparent transmission of BPDUs.

Step 2 Run the display bpdu tunnel cong command to display transparent transmission statusof BPDUs.

—-End

Example

To enable transparent transmission of the L2 BPDUs, do as follows:huawei(config)#bpdu tunnel enablehuawei(config)#display bpdu tunnel configBPDU tunnel function is enabled

Related Operation

Table 28-2 lists the related operation for enabling transparent transmission of BPDUs.

Table 28-2 Related operation for enabling transparent transmission of BPDUs

To… Run the Command…Disable transparent transmission of BPDUs bpdu tunnel disable


SmartAX MA5600 Multi-service Access ModuleConguration Guide 29 Multicast Service Conguration

29 Multicast Service Conguration


29.1 OverviewThis chapter describes multicast and its application in the MA5600.29.2 Conguration Example of IGMP ProxyThis example shows how to realize the IGMP proxy multicast service.29.3 Conguration Example of IGMP SnoopingThis example shows how to congure the IGMP snooping multicast service.29.4 Conguration Example of Multicast Service in Subtending ModeThis example shows how to congure the multicast service in subtending mode.29.5 Conguring Multicast Service in MSTP NetworkingThis operation enables you to congure multicast service in MSTP networking.29.6 Setting the IGMP ModeThis operation enables you to set the IGMP mode.29.7 Conguring an IGMP Upstream PortThis operation enables you to add an IGMP upstream port and set its mode and assignedbandwidth rate.29.8 Specifying a Subtending PortThis operation enables you to specify a subtending port. To subtend the MA5600 to a slaveshelf with multicast service users, you need to dene the port connecting to the slave shelfas a subtending port.29.9 Conguring a Program for a Static Subtending PortThis operation enables you to add a program for a static subtending port.29.10 Conguring IGMP Global ParametersThis section describes how to congure the IGMP global parameters.29.11 Adding a ProgramThis operation enables you to add one or more programs to the program library.29.12 Managing Multicast BandwidthThis section describes how to manage multicast bandwidth.29.13 Conguring an Authority ProleThis section describes how to congure an authority prole.29.14 Conguring Multicast UsersThis section describes how to congure multicast users.29.15 Conguring the Preview FunctionThis section describes how to congure the preview function.29.16 Conguring the Logging FunctionThis section describes how to congure the logging function.


29 Multicast Service CongurationSmartAX MA5600 Multi-service Access Module

Conguration Guide

29.1 OverviewThis chapter describes multicast and its application in the MA5600.

Service DescriptionWith the advent of multimedia, video, and data warehouse in the Internet, the multicast serviceis becoming increasingly popular in service applications. It is widely applied in streaming,remote learning, video conferencing, Video On Demand (VOD), net gaming, Internet DataCentre (IDC), and other point-to-multipoint elds.

Service SpecicationDesigned with carrier-class multicast operability, the MA5600 supports multicast protocols(from user to network), paving the way for provisioning value-added broadband multicastservices.

The MA5600 supports:n Operable and manageable controlled multicast servicesn IGMP V1/V2n IGMP proxy and IGMP snoopingn 1024 multicast groupsn Multicast preview, with the maximum number of congurable previews in a day, preview

duration and preview intervaln Easy channel management, in which audience statistics is supportedn Controllable multicast to control users’ access to multicast groupsn Authority proles consists of watch, preview, forbidden and idle. The priorities of

the four types of authority proles are congurable to satisfy different requirementsfor multicast operations.

29.2 Conguration Example of IGMP ProxyThis example shows how to realize the IGMP proxy multicast service.

Prerequisites

Before conguring IGMP proxy, make sure that:n The network devices and lines are normal.n There exists the multicast source in the network and its IP address is known.n The related service boards are normal.

NetworkingFigure 29-1 shows the sample network the IGMP proxy application.



Figure 29-1 Sample network of the IGMP proxy application

Data PlanTable 29-1 lists the data plan for conguring IGMP proxy.

Table 29-1 Data plan for conguring IGMP proxy

Item DataSmart VLAN VLAN ID: 2Upstream port 0/7/1Program library The video server provides three programs. Upstream port 0/7/1

and VLAN 2 are bound.program1: 224.1.1.1program2: 224.1.1.2program 3: 224.1.1.3

Authority prole Prole 0In authority prole 0, the user is allowed to access program1(224.1.1.1) and program2 (224.1.1.2) in the program library.

User Multicast user 1, with service port of 0/2/0, VPI/VCI of 0/35 andbound with authority prole 0Multicast user 2, with service port of 0/2/1, VPI/VCI of 0/35,with no authentication.

Port (on the upper layerrouter) connected to theMA5600

IP address: 10.0.0.254

Modem VPI/VCI of modem connected to the port: 0/35.

Conguration FlowchartFigure 29-2 shows the owchart for conguring IGMP proxy.



Conguration Guide

Figure 29-2 Flowchart for conguring IGMP proxy

Procedure

Step 1 Congure the xDSL port.

In this example, the default ADSL2+ line prole (line prole 1002) is used. Therefore, you donot have to congure a line prole.

Step 2 Congure a VLAN.1. Create a VLAN.

huawei(config)#vlan 2 smart

2. Add an upstream port to the VLAN.huawei(config)#port vlan 2 0/7 1

3. Congure the native VLAN of the port.huawei(config)#interface scu 0/7huawei(config-if-scu-0/7)#native-vlan 1 vlan 2

4. Add service ports to the VLAN.huawei(config)#service-port vlan 2 adsl 0/2/0 vpi 0 vci 35 rx-cttr 6 tx-cttr 6huawei(config)#service-port vlan 2 adsl 0/2/1 vpi 0 vci 35 rx-cttr 6 tx-cttr 6

Step 3 Congure the multicast service.1. Set the multicast mode.

huawei(config)#btvhuawei(config-btv)#igmp mode proxy

NOTE

By default, the multicast mode is proxy. Therefore, you do not have to set it usually.

2. Congure the IGMP upstream port.huawei(config-btv)#igmp uplink-port-mode programhuawei(config-btv)#igmp uplink-port 0/7/1 100

3. Congure the global parameters.

For details, see 29.10 Conguring IGMP Global Parameters.4. Congure the program library.

huawei(config-btv)#igmp program add name program1 ip 224.1.1.1vlan 2 bind 0/7/1 hostip 10.0.0.254huawei(config-btv)#igmp program add name program2 ip 224.1.1.2vlan 2 bind 0/7/1 hostip 10.0.0.254huawei(config-btv)#igmp program add name program3 ip 224.1.1.3vlan 2 bind 0/7/1 hostip 10.0.0.254



5. Congure the authority prole.huawei(config-btv)#igmp profile profile-name profile0program-name program1 watchhuawei(config-btv)#igmp profile profile-name profile0program-name program2 watch

6. Congure the multicast users.huawei(config-btv)#igmp user add port 0/2/1 adsl 0 35 no-auth max-program 8huawei(config-btv)#igmp user add port 0/2/0 adsl 0 35 auth max-program 8huawei(config-btv)#igmp user bind-profile port 0/2/0 profile-name profile0

—-End

ResultAfter the conguration:n User 1 can access program1 and program2, but cannot access program3.n User 2 can access all the programs.

29.3 Conguration Example of IGMP SnoopingThis example shows how to congure the IGMP snooping multicast service.

PrerequisitesBefore conguring IGMP snooping, make sure that:n The network devices and lines are normal.n There exists the multicast source in the network and its IP address is known.n The related service boards are normal.

NetworkingFigure 29-3 shows the sample network for conguring the IGMP snooping.

Figure 29-3 Sample network for conguring the IGMP snooping



Conguration Guide

Data PlanTable 29-2 lists the data plan for conguring IGMP snooping.

Table 29-2 Data plan for conguring IGMP snooping

Item DataSmart VLAN VLAN ID: 2Upstream port 0/7/1Program library The video server provides three programs. Upstream port 0/7/1

and VLAN 2 are bound.program1: 224.1.1.1program2: 224.1.1.2program3: 224.1.1.3

Authority prole Prole 0In authority prole 0, the user is allowed to access program1(224.1.1.1) and program2 (224.1.1.2) in the program library.

User Multicast user 1, with service port of 0/2/0, VPI/VCI of 0/35, andbound with authority prole 0.Multicast user 2, with service port of 0/2/1, VPI/VCI of 0/35,with no authentication.

Port (on the upper layerrouter) connected to theMA5600

IP address: 10.0.0.254

Modem VPI/VCI of modem connected to the port: 0/35.

Conguration FlowchartFigure 29-4 shows the owchart for conguring the IGMP snooping.

Figure 29-4 Flowchart for conguring the IGMP snooping



Procedure

Step 1 Congure the xDSL port.

In this example, the default ADSL2+ line prole (line prole 1002) is used. Therefore, you donot have to congure a line prole.

Step 2 Congure a VLAN.1. Create a VLAN.


2. Add an upstream port to the VLAN.huawei(config)#port vlan 2 0/7 0

3. Congure the native VLAN of the port.huawei(config)#interface scu 0/7huawei(config-if-scu-0/7)#native-vlan 1 vlan 2

4. Add service ports to the VLAN.huawei(config)#service-port vlan 2 adsl 0/2/0 vpi 0 vci 35 rx-cttr 6 tx-cttr 6huawei(config)#service-port vlan 2 adsl 0/2/1 vpi 0 vci 35 rx-cttr 6 tx-cttr 6

Step 3 Congure the multicast service.1. Set the multicast mode.

huawei(config)#btvhuawei(config-btv)#igmp mode snooping

2. Congure the IGMP upstream port.huawei(config-btv)#igmp uplink-port-mode programhuawei(config-btv)#igmp uplink-port 0/7/1 100

3. Congure the global parameters.

For details, see 29.10 Conguring IGMP Global Parameters.4. Congure the program library.

huawei(config-btv)#igmp program add name program1 ip 224.1.1.1vlan 2 bind 0/7/1 hostip 10.0.0.254huawei(config-btv)#igmp program add name program2 ip 224.1.1.2vlan 2 bind 0/7/1 hostip 10.0.0.254huawei(config-btv)#igmp program add name program3 ip 224.1.1.3vlan 2 bind 0/7/1 hostip 10.0.0.254

5. Congure the authority prole.huawei(config-btv)#igmp profile profile-name profile0program-name program1 watchhuawei(config-btv)#igmp profile profile-name profile0program-name program2 watch

6. Congure the multicast users.huawei(config-btv)#igmp user add port 0/2/1 adsl 0 35 no-auth max-program 8huawei(config-btv)#igmp user add port 0/2/0 adsl 0 35 auth max-program 8huawei(config-btv)#igmp user bind-profile port 0/2/0 profile-name profile0

—-End

Result

After the conguration:n User 1 can access program1 and program2, but cannot access program3.n User 2 can access all the programs.

29.4 Conguration Example of Multicast Service inSubtending Mode

This example shows how to congure the multicast service in subtending mode.



Conguration Guide

NetworkingFigure 29-5 shows a sample network for conguring the subtended multicast service.

Figure 29-5 Sample network for conguring the subtended multicast service

Data PlanTable 29-3 lists the data plan for conguring the subtended multicast service.



Table 29-3 Data plan for conguring the subtended multicast service

Item DataSCU boardThe SCU board provides an upstream port (0/7/0) to connect to the upperlayer multicast router (with IP address of 10.0.0.254) and a subtendingport (0/7/1) to connect to the MA5600_B.VLANAdd port 0 on the SCU board to VLAN 100 as the upstream port of thisVLAN.Add port 1 on the SCU board to VLAN 100 as the subtending port.

MA5600_A

Program libraryThe video server provides three programs. The programs have differentmulticast addresses (224.1.1.1–224.1.1.3).The upstream port 0/7/0 and VLAN 100 are bound.VLANAdd port 0 on the SCU board to VLAN 100 as the upstream port of thisVLAN.Program libraryThe video server provides three program channels. The program channelshave different multicast addresses (224.1.1.1–224.1.1.3).The upstream port 0/7/0 and VLAN 100 are bound.Authority proleSet prole 0 as the authority prole. Based on this prole, users can watchprogram1 (224.1.1.1) and program2 (224.1.1.2) in the program library.ADSL boardIn slot 0/2, the ADSL board is bound with the default line prole (prole1). The VPI/VCI of the modem connected to the ADSL port is 0/35(default).

MA5600_B

UserAdd two users 0/2/0 and 0/2/1. Bind port 0/2/0 with prole 0 and port0/2/1 does not need authentication.

Conguration FlowchartFigure 29-6 and Figure 29-7 show the owchart for conguring multicast service in subtendingmode.



Conguration Guide

Figure 29-6 Flowchart for conguring multicast service in subtending mode (MA5600_A)

Figure 29-7 Flowchart for conguring multicast service in subtending mode (MA5600_B)

Procedure

n Procedure for conguring MA5600_A1. Congure a VLAN.

– Create a VLAN.huawei(config)#vlan 100 standard

– Add upstream ports to the VLAN.huawei(config)#port vlan 100 0/7 0-1

– Set the native VLAN of the ports.



huawei(config)#interface scu 0/7huawei(config-if-scu-0/7)#native-vlan 0 vlan 100huawei(config-if-scu-0/7)#native-vlan 1 vlan 100

2. Congure the multicast service.– Set the multicast mode.


– Congure the IGMP upstream ports.huawei(config-btv)#igmp uplink-port-mode programhuawei(config-btv)#igmp uplink-port 0/7/0 100

– Congure the program library.huawei(config-btv)#igmp program add name program1 ip 224.1.1.1vlan 100 bind 0/7/0 hostip 10.0.0.254huawei(config-btv)#igmp program add name program2 ip 224.1.1.2vlan 100 bind 0/7/0 hostip 10.0.0.254huawei(config-btv)#igmp program add name program3 ip 224.1.1.3vlan 100 bind 0/7/0 hostip 10.0.0.254

– Congure the multicast subtending port.huawei(config-btv)#igmp cascade-port 0/7/1 static enable

n Procedure for conguring MA5600_B1. Congure the xDSL port.

In this example, the ADSL port is bound with the default line prole (prole 1002).2. Congure a VLAN.

– Create a VLAN.huawei(config)#vlan 100 smart

– Add an upstream port to the VLAN.huawei(config)#port vlan 100 0/7 0

– Set the native VLAN of the port.huawei(config)#interface scu 0/7huawei(config-if-scu-0/7)#native-vlan 0 vlan 100

– Add service ports to the VLAN.huawei(config)#service-port vlan 100 adsl 0/2/0 vpi 0 vci35 rx-cttr 6 tx-cttr 6huawei(config)#service-port vlan 100 adsl 0/2/1 vpi 0 vci35 rx-cttr 6 tx-cttr 6



– Congure the IGMP upstream porthuawei(config-btv)#igmp uplink-port 0/7/0 100huawei(config-btv)#igmp uplink-port-mode program

– Congure the program library.huawei(config-btv)#igmp program add name program1 ip224.1.1.1 vlan 100 bind 0/7/0huawei(config-btv)#igmp program add name program2 ip224.1.1.2 vlan 100 bind 0/7/0huawei(config-btv)#igmp program add name program3 ip224.1.1.3 vlan 100 bind 0/7/0

– Congure the authority prole.huawei(config-btv)#igmp profile profile-name profile0program-name program1 watchhuawei(config-btv)#igmp profile profile-name profile0program-name program2 watch

– Congure multicast users.huawei(config-btv)#igmp user add port 0/2/1 adsl 0 35 no-authhuawei(config-btv)#igmp user add port 0/2/0 adsl 0 35 authhuawei(config-btv)#igmp user bind-profile port 0/2/0profile-name profile0

—-End



Conguration Guide

Result

User 0/2/1 can watch all programs.

User 0/2/0 can watch program1 and program2 but fails to watch program3.

29.5 Conguring Multicast Service in MSTP NetworkingThis operation enables you to congure multicast service in MSTP networking.

Prerequisites

n The network devices and lines are normal.n There exists the multicast source in the network and its IP address is known.n The related service boards are normal.

NetworkingFigure 29-8 shows the sample network of the multicast service in MSTP networking.

Three MA5600 devices (MA5600_A, MA5600_B and MA5600_C) make up the MSTPring network. All services are transmitted upstream to the IP network through MA5600_A.MA5600_C subtends MA5600_D through the GE port.



In this gure:

MA5600_A, MA5600_B and MA5600_C are congured in a same MSTP region named hwrg. Instance 1is created, the VLAN to which the upstream ports and subtending ports of the devices belong is mapped toinstance 1. MA5600_A is congured as the CIST root, and as the region root of instance 1.

Figure 29-8 Sample network of the multicast service in MSTP networking

Data PlanTable 29-4 lists the data plan for the sample network of the multicast service in MSTPnetworking.



Conguration Guide

Table 29-4 Data plan for the sample network of the multicast service in MSTP networking

Item DataThe SCU board:

n Provides the upstream port 0/7/0 to interconnect with the upper layermulticast router (10.0.0.254).

n Provides the port 0/7/1 to connect with MA5600_B.n Provides the port 0/7/2 to connect with MA5600_D.n Provides the port 0/7/3 to connect with MA5600_C.VLAN:Add the ports 0/7/0, 0/7/1 and 0/7/2 on the SCU board to VLAN 100, whichare used as the upstream port of the VLAN.The native VLAN of the port is set to 100.

MA5600_A

Program library:

n The IP address of program1 is 224.1.1.1.n The IP address of program2 is 224.1.1.2.n The IP address of program3 is 224.1.1.3.

All of the program is bound with the program upstream port 0/7/0 andVLAN 100.The SCU board:

n Provides the port 0/7/0 to connect with MA5600_A.n Provides the port 0/7/1 to connect with MA5600_C.n Provides the port 0/7/2 to connect with MA5600_D.VLAN:

n Add the ports 0/7/0 and 0/7/1 on the SCU board to VLAN 100, which areused as the upstream port of the VLAN.

n The native VLAN of the port is set to 100.

MA5600_B

Program library:


All of the program is bound with VLAN 100.The SCU board:

n Provides the port 0/7/0 to connect with MA5600_A.n Provides the port 0/7/1 to connect with MA5600_B.n Provides the port 0/7/2 to connect with MA5600_D.VLAN:

n Add the ports 0/7/0 and 0/7/1 on the SCU board to VLAN 100, which areused as the upstream port of the VLAN.

n Provides the port 0/7/2 to connect with MA5600_D.n The native VLAN of the port is set to 100.

n Add the ports 0/7/0, 0/7/1 and 0/7/2 on the SCU board to VLAN 100,which are used as the upstream port of the VLAN.

MA5600_C

Program library:



Item Data


All of the program is bound with VLAN 100.VLAN:Add the port 0/7/0 on the SCU board to VLAN 100, which is used as theupstream port of the VLAN.Program library:


All of the program is bound with program upstream port0/7/0 and VLAN100.Authority prole: Users bound with authority prole prole0 can watchprogram1 and program2, and preview program3.Modem: The VPI/VCI of the modem connected to the port is 0/35.

MA5600_D

Multicast user:

n Multicast user 1: The service virtual port is 0/2/0, VPI/VCI is 0/35, andauthority prole prole0 is bounded.

n Multicast user 2: The service virtual port is 0/2/1, VPI/VCI is 0/35,without authentication.

Conguration FlowchartFigure 29-9 and Figure 29-10 show the owchart for conguring the multicast service in andMSTP networking mode.

Figure 29-9 Flowchart for conguring multicast service in MSTP networking on MA5600_A,MA5600_B and MA5600_C



Conguration Guide

Figure 29-10 Flowchart for conguring multicast service in MSTP networking on MA5600_D

Procedure

n Conguration of MA5600_A.1. Enable MSTP.

– Enable the MSTP function.huawei(config)#stp enable

– Congure the MSTP region name.huawei(config)#stp region-configurationhuawei(stp-region-configuration)#region-name hwrg

– Congure MSTP instance 1.huawei(stp-region-configuration)#instance 1 vlan 100

– Activate MSTP region conguration.huawei(stp-region-configuration)#active region-configurationSTP actives region configuration, it may take several minutes,are

you sure to active region configuration? [Y/N][N]y

– Congure the priority of MA5600_A in the instance.huawei(stp-region-configuration)#quithuawei(config)#stp instance 0 priority 0huawei(config)#stp instance 1 priority 0

2. Congure the VLAN.– Create the VLAN.


– Add the upstream port.huawei(config)#port vlan 100 0/70-2

– Set the native VLAN of the upstream port.huawei(config)#interface scu 0/7huawei(config-if-scu-0/7)#native-vlan 0 vlan 100huawei(config-if-scu-0/7)#native-vlan 1 vlan 100huawei(config-if-scu-0/7)#native-vlan 2 vlan 100





– Congure the IGMP upstream port.huawei(config-btv)#igmp uplink-port-mode mstphuawei(config-btv)#igmp uplink-port 0/7/1 100

– Congure the program library.huawei(config-btv)#igmp program add name program1 ip 224.1.1.1vlan 100 bind 0/7/0 hostip 10.0.0.254huawei(config-btv)#igmp program add name program2 ip 224.1.1.2vlan 100 bind 0/7/0 hostip 10.0.0.254huawei(config-btv)#igmp program add name program3 ip 224.1.1.3vlan 100 bind 0/7/0 hostip 10.0.0.254

– Congure the multicast subtending port.huawei(config-btv)#igmp cascade-port 0/7/1 static enablehuawei(config-btv)#igmp cascade-port 0/7/2 static enable

n Conguration of MA5600_B.1. Enable MSTP.




– Activate the MSTP region conguration.huawei(stp-region-configuration)#active region-configurationSTP actives region configuration, it may take several minutes,are




– Add the upstream port.huawei(config)#port vlan 100 0/7 0-1

– Set the native VLAN of the upstream port.huawei(config)#interface scu 0/7huawei(config-if-scu-0/7)#native-vlan 0 vlan 100huawei(config-if-scu-0/7)#native-vlan 1 vlan 100

3. Congure the multicast service.– Select the multicast mode.


– Congure the IGMP upstream port.huawei(config-btv)#igmp uplink-port-mode mstphuawei(config-btv)#igmp uplink-port 0/7/0 100huawei(config-btv)#igmp uplink-port 0/7/1 100

– Congure the program library.huawei(config-btv)#igmp program add name program1ip 224.1.1.1 vlan 100huawei(config-btv)#igmp program add name program2ip 224.1.1.2 vlan 100huawei(config-btv)#igmp program add name program3ip 224.1.1.3 vlan 100

– Congure the multicast subtending port.huawei(config-btv)#igmp cascade-port 0/7/1 static enable

n Conguration of MA5600_C.1. Enable MSTP.






Conguration Guide

– Activate the MSTP region conguration.huawei(stp-region-configuration)#active region-configurationSTP actives region configuration, it may take several minutes,are




– Add the upstream port.huawei(config)#port vlan 100 0/70-1

– Set the native VLAN of the upstream port.huawei(config)#interface scu 0/7huawei(config-if-scu-0/7)#native-vlan 0 vlan 100huawei(config-if-scu-0/7)#native-vlan 1 vlan 100

3. Congure the multicast service.– Select the multicast mode.


– Congure the IGMP upstream port.huawei(config-btv)#igmp uplink-port-mode mstphuawei(config-btv)#igmp uplink-port 0/7/0 100huawei(config-btv)#igmp uplink-port 0/7/1 100

– Congure the program library.huawei(config-btv)#igmp program add name program1ip 224.1.1.1 vlan 100huawei(config-btv)#igmp program add name program2ip 224.1.1.2 vlan 100huawei(config-btv)#igmp program add name program3ip 224.1.1.3 vlan 100

– Congure the multicast subtending port.huawei(config-btv)#igmp cascade-port 0/7/2 static enablehuawei(config-btv)#quithuawei(config)#interface scu 0/7huawei(config-if-scu-0/7)#native-vlan 2 vlan 100

n Conguration of MA5600_D.1. Congure the xDSL port.

In this example, the ADSL2+ port uses the system default line prole (prole 1002).2. Congure the VLAN.

– Create the VLAN.huawei(config)#vlan 100 standard

– Add the upstream port.huawei(config)#port vlan 100 0/7 0

– Set the native VLAN of the upstream port.huawei(config)#interface scu 0/7huawei(config-if-scu-0/7)#native-vlan 0 vlan 100

– Add the service virtual port.huawei(config)#service-port vlan 100 adsl 0/2/0 vpi 0 vci35 rx-cttr 6 tx-cttr 6huawei(config)#service-port vlan 100 adsl 0/2/1 vpi 0 vci35 rx-cttr 6 tx-cttr 6



– Congure the IGMP upstream port.huawei(config-btv)#igmp uplink-port 0/7/0 100huawei(config-btv)#igmp uplink-port-mode program

– Congure the program library.huawei(config-btv)#igmp program add name program1 ip224.1.1.1 vlan 100 bind 0/7/0huawei(config-btv)#igmp program add name program2 ip224.1.1.2 vlan 100 bind 0/7/0



huawei(config-btv)#igmp program add name program3 ip224.1.1.3 vlan 100 bind 0/7/0

– Congure the authority prole.huawei(config-btv)#igmp profile profile-name profile0program-name program1 watchhuawei(config-btv)#igmp profile profile-name profile0program-name program2 watchhuawei(config-btv)#igmp profile profile-name profile0program-name program3 preview

– Congure the preview parameters.

NOTE

♦ Congure the preview parameters as follows: The preview time for program 3 is150s, the preview attempts are 6 times, and the permitted interval for preview is 60s.

♦ Run the igmp preview auto-reset-time command to set the time to reset the previewattempt. In this example, set the time to 00:00:00 every day.

huawei(config-btv)#igmp preview program name program3preview-duration 150huawei(config-btv)#igmp preview program name program3 preview-times 6huawei(config-btv)#igmp preview program name program3preview-interval 60huawei(config-btv)#igmp preview auto-reset-time 00:00:00

– Congure the multicast users.huawei(config-btv)#igmp user add port 0/2/1 adsl 0 35 no-authhuawei(config-btv)#igmp user add port 0/2/0 adsl 0 35 authhuawei(config-btv)#igmp user bind-profile port 0/2/0profile-name profile0

—-End

Result

n User 1 can watch program1 and program2, and preview program3.n User 2 can watch all of the program.

29.6 Setting the IGMP ModeThis operation enables you to set the IGMP mode.

Background Informationn The conguration in IGMP snooping is the same as that in IGMP proxy. The difference

only lies in the internal protocol processing.n In IGMP snooping mode, the host function, prejoin function, unsolicited report function

and static program adding function are not available.

Procedure

Step 1 Run the igmp mode command to set the IGMP mode.

Step 2 Run the display igmp proxy command to query the current multicast mode.

—-End

Example

To set the IGMP proxy mode, do as follows:huawei(config-btv)#igmp mode proxyAre you sure to change IGMP mode?(y/n)[n] y

huawei(config-btv)#display igmp proxy



Conguration Guide

--------------------------------------------------------Program number of license : 1024IGMP mode : proxyAuthorization : enableRobustness variable : 2General query interval(s) : 125General query response time(0.1s) : 100Specific query interval(0.1s) : 10Specific query response time(0.1s) : 8Specific query number : 2V1 router present timeout(s) : 400Unsolicited report interval(s) : 10Uplink port mode : programLog switch : enableUser action report switch : disablePreview switch : enableRecognition time(s) : 30The time of reset preview-count : 04:00:00Auto create log interval(h) : 2Right mode : profile modeBandwidth management switch : enableBandwidth assigned for user(%) : 100Report proxy switch : disableLeave proxy switch : disableIGMP Packet encapsulation : allIGMP ECHO switch : disable

---------------------------------------------------------

29.7 Conguring an IGMP Upstream PortThis operation enables you to add an IGMP upstream port and set its mode and assignedbandwidth rate.

Background InformationThe IGMP upstream port works in any of the following modes:n Program moden MSTP moden broadcast or protect modeIn program mode, the IGMP upstream port is the port that is specied when you congure theprogram.

In MSTP mode, the IGMP upstream port is the root port used by MSTP.

In broadcast mode, the IGMP packets are transmitted from the specied VLAN to upstreamdirection, and the upper layer device species the upstream port that receives the multicaststream.

In protect mode, the IGMP upstream port supports the port protection group function.

By default, the IGMP upstream port works in program mode.

If you set a port to a subtending port, then it cannot be used as an upstream port that works inprogram or protect mode, but it can work in broadcast or MSTP mode.

Procedure

Step 1 Run the igmp uplink-port-mode command to set the upstream port mode.

Step 2 Run the igmp uplink-port command to add an IGMP upstream port.

Step 3 Run the display igmp uplink-port command to query the details of the IGMP upstream port.

—-End



Example

To set that the IGMP upstream port works in program mode, set port 0/7/0 as the upstreamport, and set the assigned bandwidth rate as 100%, do as follows:huawei(config-btv)#igmp uplink-port-mode programhuawei(config-btv)#igmp uplink-port 0/7/0 100huawei(config-btv)#display igmp uplink-port 0/7/0----------------------------------------IGMP version : IGMP V2Program number : 2V1 router present timer(s) : 0Assigned bandwidth(%) : 100%Used bandwidth(%) : 0.5000%----------------------------------------

Related Operations

Table 29-5 lists the related operations for conguring the IGMP upstream port.

Table 29-5 Related operations for conguring the IGMP upstream port

To... Run the Command...Delete an IGMP upstreamport

undo igmp uplink-port

Modify an IGMP upstreamport

igmp uplink-port modify

29.8 Specifying a Subtending PortThis operation enables you to specify a subtending port. To subtend the MA5600 to a slaveshelf with multicast service users, you need to dene the port connecting to the slave shelfas a subtending port.

Background Informationn An upstream port that works in program, broadcast or protect mode cannot be specied as

a subtending port.n If a port has been congured as an upstream port which works in program mode,

broadcast mode or protect mode, the port cannot be congured as a subtending port.n If a subtending port is congured with the static attribute, the MA5600 will not process

any leave packet because the programs added to the port are not subject to aging, unlessthe subtending port or the program is deleted manually.

n If a subtending port is congured with the quick leave attribute, when receiving leavepackets, the MA5600 will cut off the video stream, instead of sending specic groupqueries.

n The priority of the static attribute is higher than that of the quick leave attribute.n You can run the mode mode command to congure the application mode of the

subtending port in IGMP snooping.– In snooping mode, the IGMP packets reported by user will be processed in normal

snooping mode.– In forward mode, the IGMP packets are forwarded without process.– In discard mode, the IGMP packets are denied for process.

Procedure

Step 1 Run the igmp cascade-port command to congure a static subtending port.



Conguration Guide

Step 2 Run the display igmp cascade-port command to query the IGMP subtending port.

—-End

Example

To specify a subtending port of the 0/7/1. do as follows:huawei(config-btv)#igmp cascade-port 0/7/1 static enablehuawei(config-btv)#display igmp cascade-port 0/7/1-------------------------------------------Port : 0/7/1IGMP version : IGMP V2V1 router present timer(0.1s) : 0Static join : enableQuick leave : disablePort Mode : discard-------------------------------------------

Related Operation

Table 29-6 lists the related operation for specifying a subtending port.

Table 29-6 Related operation for conguring a subtending port

To... Run the Command...Delete an IGMP subtending port undo igmp cascade-port

29.9 Conguring a Program for a Static Subtending PortThis operation enables you to add a program for a static subtending port.

Background InformationWhen adding or deleting a program to or from a subtending port, make sure that the subtendingport is congured with static attributes.

Procedure

Step 1 Run the igmp static-join cascade-port command to congure a program for a staticsubtending port.

Step 2 Run the display igmp cascade-port command to display the settings of the IGMP subtendingport, as well as the number of programs sent to the port.

—-End

Example

To add program 224.1.1.1 to static subtending port 0/7/1, do as follows:huawei(config-btv)#igmp static-join cascade-port 0/7/1 ip 224.1.1.1huawei(config-btv)#display igmp cascade-port 0/7/1-------------------------------------------Port : 0/7/1IGMP version : IGMP V2V1 router present timer(0.1s) : 0Static join : enableQuick leave : disablePort Mode : discard-------------------------------------------Active Program list:Index Program Name IP----------------------------------------1 PROGRAM-1 224.1.1.1



----------------------------------------Total: 1

Related Operation

Table 29-7 lists the related operation for conguring a program for a static subtending port.

Table 29-7 Related operation for conguring a program for a static subtending port

To... Run the Command...Delete a program from the static subtending port undo igmp static-join cascade-port

29.10 Conguring IGMP Global ParametersThis section describes how to congure the IGMP global parameters.

29.10.1 Enabling the IGMP Proxy AuthorizationThis operation enables the IGMP proxy authorization.29.10.2 Setting the Robustness VariableThis operation enables you to set the robustness variable.29.10.3 Setting the General Query IntervalThis operation enables you to set the general query interval.29.10.4 Setting the Maximum Response Time to the General QueryThis operation enables you to set the maximum response time to the general query.29.10.5 Setting the Number of Specic QueriesThis operation enables you to set the number of specic queries.29.10.6 Setting the Specic Query IntervalThis operation enables you to set the specic query interval.29.10.7 Setting the Maximum Response Time to the Specic QueryThis operation enables you to set the maximum response time to a specic query. After thesystem issues a specic query, the user must respond to the query within the maximumresponse time.29.10.8 Setting the Unsolicited Report IntervalThis operation enables you to set the unsolicited report interval.29.10.9 Setting the TTL for a V1 RouterThis operation enables you to set the TTL for a V1 router.29.10.10 Setting the Preview Recognition TimeThis operation enables you to set the preview recognition time. When the preview recognitiontime is set, any preview that is not exceeding this duration will not be considered as valid, andwill not be logged.29.10.11 Enabling the User Action Report FunctionThis operation enables the user action report function.29.10.12 Enabling the Proxy of the IGMP Report PacketThis operation enables the proxy of the IGMP report packets.29.10.13 Enabling the Proxy of the IGMP Leave PacketThis operation enables the proxy of the IGMP leave packet.29.10.14 Set the Permitted Encapsulation Mode of IGMP PacketsThis operation enables you to set the permitted encapsulation mode of IGMP packets.29.10.15 Enabling IGMP Echo FunctionThis operation enables you to enable the IGMP Echo function.



Conguration Guide

29.10.1 Enabling the IGMP Proxy Authorization

This operation enables the IGMP proxy authorization.

Background InformationBy default, the IGMP proxy authorization is enabled.

To enable authentication of the “auth” users, you need to enable the IGMP proxyauthorization.

Procedure

Step 1 Run the igmp proxy authorization enable command to enable the IGMP proxy authorization.

Step 2 Run the display igmp proxy command to check if the IGMP proxy authorization is enabled.

—-End

Example

To enable the IGMP proxy authentication, do as follows:huawei(config-btv)#igmp proxy authorization enablehuawei(config-btv)#display igmp proxy--------------------------------------------------------Program number of license : 1024IGMP mode : proxyAuthorization : enable

Robustness variable : 2General query interval(s) : 125General query response time(0.1s) : 100Specific query interval(0.1s) : 10Specific query response time(0.1s) : 8Specific query number : 2V1 router present timeout(s) : 400Unsolicited report interval(s) : 10Uplink port mode : programLog switch : enableUser action report switch : disablePreview switch : enableRecognition time(s) : 30The time of reset preview-count : 04:00:00Auto create log interval(h) : 2Right mode : profile modeBandwidth management switch : enableBandwidth assigned for user(%) : 100Report proxy switch : disableLeave proxy switch : disable

IGMP Packet encapsulation : allIGMP ECHO switch : disable

---------------------------------------------------------

Related Operation

Table 29-8 lists the related operation for enabling the IGMP proxy authorization.

Table 29-8 Related operation for enabling the IGMP proxy authorization

To... Run the Command...Disable the IGMP proxy authentication igmp proxy authorization disable



29.10.2 Setting the Robustness Variable

This operation enables you to set the robustness variable.

Background Informationn The robustness variable denes the reliability of a system. It determines the aging time of

a member and the packet retransmit count. If a subnet is unstable, and prone to packetloss, you need to enhance the robustness.

n By default, the variable is 2.

Procedure

Step 1 Run the igmp proxy router robustness command to set the robustness variable of the system.

Step 2 Run the display igmp proxy command to display the robustness variable.

—-End

Example

To set the robustness variable of the system to 5, do as follows:huawei(config-btv)#igmp proxy router robustness 5huawei(config-btv)#display igmp proxy--------------------------------------------------------Program number of license : 1024IGMP mode : proxyAuthorization : enableRobustness variable : 5General query interval(s) : 125General query response time(0.1s) : 100Specific query interval(0.1s) : 10Specific query response time(0.1s) : 8Specific query number : 2V1 router present timeout(s) : 400Unsolicited report interval(s) : 10Uplink port mode : programLog switch : enableUser action report switch : disablePreview switch : enableRecognition time(s) : 30The time of reset preview-count : 04:00:00Auto create log interval(h) : 2Right mode : profile modeBandwidth management switch : enableBandwidth assigned for user(%) : 100Report proxy switch : disableLeave proxy switch : disableIGMP Packet encapsulation : allIGMP ECHO switch : disable

---------------------------------------------------------

Related Operation

Table 29-9 lists the related operation for setting the robustness variable.

Table 29-9 Related operation for setting the robustness variable

To… Run the Command…Restore the default robustness variable undo igmp proxy router robustness



Conguration Guide

29.10.3 Setting the General Query IntervalThis operation enables you to set the general query interval.

Background InformationBy default, the general query interval 125s.

Procedure

Step 1 Run the igmp proxy router gen-query-interval command to set the interval of the generalquery issued by the querier.

Step 2 Run the display igmp proxy command to display the set interval.

—-End

Example

To set the query interval as 200s, do as follows:huawei(config-btv)#igmp proxy router gen-query-interval 200huawei(config-btv)#display igmp proxy--------------------------------------------------------Program number of license : 1024IGMP mode : proxyAuthorization : enableRobustness variable : 2General query interval(s) : 200General query response time(0.1s) : 100Specific query interval(0.1s) : 10Specific query response time(0.1s) : 8Specific query number : 2V1 router present timeout(s) : 400Unsolicited report interval(s) : 10Uplink port mode : programLog switch : enableUser action report switch : disablePreview switch : enableRecognition time(s) : 30The time of reset preview-count : 04:00:00Auto create log interval(h) : 2Right mode : profile modeBandwidth management switch : enableBandwidth assigned for user(%) : 100Report proxy switch : disableLeave proxy switch : disableIGMP Packet encapsulation : allIGMP ECHO switch : disable

---------------------------------------------------------

Related Operation

Table 29-10 lists the related operation for setting the general query interval.

Table 29-10 Related operation for setting the general query interval

To… Run the Command…Restore the default general query interval undo igmp proxy gen-query-interval

29.10.4 Setting the Maximum Response Time to the General QueryThis operation enables you to set the maximum response time to the general query.



Background InformationThe maximum response time determines the time taken by a multicast user in responding to aquery packet. By increasing the maximum response time, you can reduce the burst of responsepacket trafc.

The default setting is 100 in the unit of 0.1s, that is, 10s.

The maximum response time to the general query must be smaller than the general queryinterval.

Procedure

Step 1 Run the igmp proxy router gen-response-time command to set the maximum responsetime to the general query.

Step 2 Run the display igmp proxy command to display the maximum response time to the generalquery.

—-End

Example

To set the maximum response time as 20s, do as follows:huawei(config-btv)#igmp proxy router gen-response-time 200huawei(config-btv)#display igmp proxy--------------------------------------------------------Program number of license : 1024IGMP mode : proxyAuthorization : enableRobustness variable : 2General query interval(s) : 125General query response time(0.1s) : 200Specific query interval(0.1s) : 10Specific query response time(0.1s) : 8Specific query number : 2V1 router present timeout(s) : 400Unsolicited report interval(s) : 10Uplink port mode : programLog switch : enableUser action report switch : disablePreview switch : enableRecognition time(s) : 30The time of reset preview-count : 04:00:00Auto create log interval(h) : 2Right mode : profile modeBandwidth management switch : enableBandwidth assigned for user(%) : 100Report proxy switch : disableLeave proxy switch : disableIGMP Packet encapsulation : allIGMP ECHO switch : disable

---------------------------------------------------------

Related Operation

Table 29-11 lists the related operation for setting the maximum response time to the generalquery.

Table 29-11 Related operation for setting the maximum response time to the general query

To… Run the Command…Restore the default maximum responsetime for the general query

undo igmp proxy router gen-response-time



Conguration Guide

29.10.5 Setting the Number of Specic QueriesThis operation enables you to set the number of specic queries.

Background InformationAfter receiving a leave packet from a user, the MA5600 sends a query packet to the user, aslong as the attribute of such a leave packet is not "fast leave". With the set query number, theMA5600 considers that the user has left if response is not received after it has queried theuser according to the set specic query count and waited for a period equal to the maximumresponse time.

The default setting is 2.

Procedure

Step 1 Run the igmp proxy router sp-query-number command to set the number of specic queries.

Step 2 Run the display igmp proxy command to display the number of specic queries.

—-End

Example

To set the specic query count to 5, do as follows:huawei(config-btv)#igmp proxy router sp-query-number 5huawei(config-btv)#display igmp proxy--------------------------------------------------------Program number of license : 1024IGMP mode : proxyAuthorization : enableRobustness variable : 2General query interval(s) : 125General query response time(0.1s) : 100Specific query interval(0.1s) : 10Specific query response time(0.1s) : 8Specific query number : 5V1 router present timeout(s) : 400Unsolicited report interval(s) : 10Uplink port mode : programLog switch : enableUser action report switch : disablePreview switch : enableRecognition time(s) : 30The time of reset preview-count : 04:00:00Auto create log interval(h) : 2Right mode : profile modeBandwidth management switch : enableBandwidth assigned for user(%) : 100Report proxy switch : disableLeave proxy switch : disableIGMP Packet encapsulation : allIGMP ECHO switch : disable

---------------------------------------------------------

Related Operation

Table 29-12 lists the related operation for setting the number of specic queries.

Table 29-12 Related operation for setting the number of specic queries

To… Run the Command…Restore the default number of specicqueries

undo igmp proxy router sp-query-number



29.10.6 Setting the Specic Query IntervalThis operation enables you to set the specic query interval.

Background InformationThe default setting is 10 in the unit of 0.1s, namely 1s.

Procedure

Step 1 Run the igmp proxy router sp-query-interval command to set the specic query interval.

Step 2 Run the display igmp proxy command to display the specic query interval.

—-End

Example

To set the specic query interval to 2s, do as follows:huawei(config-btv)#igmp proxy router sp-query-interval 20huawei(config-btv)#display igmp proxy--------------------------------------------------------Program number of license : 1024IGMP mode : proxyAuthorization : enableRobustness variable : 2General query interval(s) : 125General query response time(0.1s) : 100Specific query interval(0.1s) : 20Specific query response time(0.1s) : 8Specific query number : 2V1 router present timeout(s) : 400Unsolicited report interval(s) : 10Uplink port mode : programLog switch : enableUser action report switch : disablePreview switch : enableRecognition time(s) : 30The time of reset preview-count : 04:00:00Auto create log interval(h) : 2Right mode : profile modeBandwidth management switch : enableBandwidth assigned for user(%) : 100Report proxy switch : disableLeave proxy switch : disableIGMP Packet encapsulation : allIGMP ECHO switch : disable

---------------------------------------------------------

Related Operation

Table 29-13 lists the related operation for setting the specic query interval.

Table 29-13 Related operation for setting the specic query interval

To… Run the Command…Restore the default specic query interval undo igmp proxy router sp-query-interval

29.10.7 Setting the Maximum Response Time to the Specic QueryThis operation enables you to set the maximum response time to a specic query. After thesystem issues a specic query, the user must respond to the query within the maximumresponse time.



Conguration Guide

Background InformationThe default setting is 8 in the unit of 0.1s, that is, 0.8s.

The maximum response time to a specic query shall be smaller than the specic query interval.

Procedure

Step 1 Run the igmp proxy router sp-response-time command to set the maximum response timeto a specic query.

Step 2 Run the display igmp proxy command to display the maximum response time to a specicquery.

—-End

Example

To set the maximum response time for a specic query as 5 (namely 0.5s), do as follows:huawei(config-btv)#igmp proxy router sp-response-time 5huawei(config-btv)#display igmp proxy--------------------------------------------------------Program number of license : 1024IGMP mode : proxyAuthorization : enableRobustness variable : 2General query interval(s) : 125General query response time(0.1s) : 100Specific query interval(0.1s) : 10Specific query response time(0.1s) : 5Specific query number : 2V1 router present timeout(s) : 400Unsolicited report interval(s) : 10Uplink port mode : programLog switch : enableUser action report switch : disablePreview switch : enableRecognition time(s) : 30The time of reset preview-count : 04:00:00Auto create log interval(h) : 2Right mode : profile modeBandwidth management switch : enableBandwidth assigned for user(%) : 100Report proxy switch : disableLeave proxy switch : disableIGMP Packet encapsulation : allIGMP ECHO switch : disable

---------------------------------------------------------

Related Operation

Table 29-14 lists the related operation for setting the maximum response time for the specicquery.

Table 29-14 Related operation for setting the maximum response time for the specic query

To… Run the Command…Restore the default maximum responsetime for the specic query

undo igmp proxy router sp-response-time

29.10.8 Setting the Unsolicited Report IntervalThis operation enables you to set the unsolicited report interval.



Background InformationWhen the IGMP proxy works in unsolicited report mode, it sends reports to the upper layerrouter at the set interval.

By default, the report interval is 10s.

Procedure

Step 1 Run the igmp proxy router report-interval to set the unsolicited report interval.

Step 2 Run the display igmp proxy command to display the unsolicited report interval.

—-End

Example

To set the unsolicited report interval as 200s, do as follows:huawei(config-btv)#igmp proxy router report-interval 200huawei(config-btv)#display igmp proxy--------------------------------------------------------Program number of license : 1024IGMP mode : proxyAuthorization : enableRobustness variable : 2General query interval(s) : 125General query response time(0.1s) : 100Specific query interval(0.1s) : 10Specific query response time(0.1s) : 8Specific query number : 2V1 router present timeout(s) : 400Unsolicited report interval(s) : 200Uplink port mode : programLog switch : enableUser action report switch : disablePreview switch : enableRecognition time(s) : 30The time of reset preview-count : 04:00:00Auto create log interval(h) : 2Right mode : profile modeBandwidth management switch : enableBandwidth assigned for user(%) : 100Report proxy switch : disableLeave proxy switch : disableIGMP Packet encapsulation : allIGMP ECHO switch : disable

---------------------------------------------------------

Related Operation

Table 29-15 lists the related operation for setting the unsolicited report interval.

Table 29-15 Related operation for setting the unsolicited report interval

To… Run the Command…Restore the default unsolicited reportinterval

undo igmp proxy router report-interval

29.10.9 Setting the TTL for a V1 Router

This operation enables you to set the TTL for a V1 router.



Conguration Guide

Background InformationThe TTL refers to the period between a router receiving an IGMPv2 query and sending anIGMPV2 report. Upon receiving a V1 query from an upper layer router, the MA5600 enablesits aging timer. When the timer expires, the MA5600 sends a V1 report through the upstreamport.

By default, the time to live (TTL) for a V1 router is 400s.

Procedure

Step 1 Run the igmp proxy router time-to-live command to set the TTL for a V1 router.

Step 2 Run the display igmp proxy command to display the TTL of the V1 router.

—-End

Example

To set the TTL of V1 packets to 200s, do as follows:huawei(config-btv)#igmp proxy router time-to-live 200huawei(config-btv)#display igmp proxy--------------------------------------------------------Program number of license : 1024IGMP mode : proxyAuthorization : enableRobustness variable : 2General query interval(s) : 125General query response time(0.1s) : 100Specific query interval(0.1s) : 10Specific query response time(0.1s) : 8Specific query number : 2V1 router present timeout(s) : 200Unsolicited report interval(s) : 10Uplink port mode : programLog switch : enableUser action report switch : disablePreview switch : enableRecognition time(s) : 30The time of reset preview-count : 04:00:00Auto create log interval(h) : 2Right mode : profile modeBandwidth management switch : enableBandwidth assigned for user(%) : 100Report proxy switch : disableLeave proxy switch : disableIGMP Packet encapsulation : allIGMP ECHO switch : disable

---------------------------------------------------------

Related Operation

Table 29-16 lists the related operation for setting the TTL for a V1 router.

Table 29-16 Related operation for setting the TTL for a V1 router

To… Run the Command…Restore the default TTL for a V1 router undo igmp proxy router time-to-live

29.10.10 Setting the Preview Recognition TimeThis operation enables you to set the preview recognition time. When the preview recognitiontime is set, any preview that is not exceeding this duration will not be considered as valid, andwill not be logged.



Background InformationBy default, the recognition time is 30s.

Procedure

Step 1 Run the igmp proxy recognition-time command to preview recognition time.

Step 2 Run the display igmp proxy command to display the preview recognition time.

—-End

Example

To set the preview recognition time to 20s, do as follows:huawei(config-btv)#display igmp proxy--------------------------------------------------------Program number of license : 1024IGMP mode : proxyAuthorization : enableRobustness variable : 2General query interval(s) : 125General query response time(0.1s) : 100Specific query interval(0.1s) : 10Specific query response time(0.1s) : 8Specific query number : 2V1 router present timeout(s) : 400Unsolicited report interval(s) : 10Uplink port mode : programLog switch : enableUser action report switch : disablePreview switch : enableRecognition time(s) : 20The time of reset preview-count : 04:00:00Auto create log interval(h) : 2Right mode : profile modeBandwidth management switch : enableBandwidth assigned for user(%) : 100Report proxy switch : disableLeave proxy switch : disableIGMP Packet encapsulation : allIGMP ECHO switch : disable

---------------------------------------------------------

Related Operation

Table 29-17 lists the related operation for setting the preview recognition time.

Table 29-17 Related operation for setting the preview recognition time

To… Run the Command…Restore the default preview recognitiontime

undo igmp proxy recognition-time

29.10.11 Enabling the User Action Report Function

This operation enables the user action report function.

Background InformationBy default, the action report function for the BTV user is disabled.



Conguration Guide

Procedure

Step 1 Run the igmp user-action-report command to set the user action report function.

Step 2 Run the display igmp proxy command to display the status of the user action report function.

—-End

Example

To enable the BTV user action report function, do as follows:huawei(config-btv)#igmp user-action-report enablehuawei(config-btv)#display igmp proxy--------------------------------------------------------Program number of license : 1024IGMP mode : proxyAuthorization : enableRobustness variable : 2General query interval(s) : 125General query response time(0.1s) : 100Specific query interval(0.1s) : 10Specific query response time(0.1s) : 8Specific query number : 2V1 router present timeout(s) : 400Unsolicited report interval(s) : 10Uplink port mode : programLog switch : enableUser action report switch : enablePreview switch : enableRecognition time(s) : 30The time of reset preview-count : 04:00:00Auto create log interval(h) : 2Right mode : profile modeBandwidth management switch : enableBandwidth assigned for user(%) : 100Report proxy switch : disableLeave proxy switch : disableIGMP Packet encapsulation : allIGMP ECHO switch : disable

---------------------------------------------------------

Related Operation

Table 29-18 lists the related operation for enabling the user action report function.

Table 29-18 Related operation for enabling the user action report function

To… Run the Command…Disable the user action report function igmp user-action-report disable

29.10.12 Enabling the Proxy of the IGMP Report PacketThis operation enables the proxy of the IGMP report packets.

Prerequisite

The proxy of the IGMP report packet takes effect only in IGMP snooping mode.

Background Informationn With the proxy of the IGMP Report packet enabled, when the report packet of the user is

sent, the system checks whether this user is the rst to order the program.– − If yes, the packet is forwarded to the upstream direction.



– −If no, the packet is dropped.n With the proxy enabled, the proxy substitutes the user to create the IGMP report packet

in response to the upstream query packet, and only forwards the packet of adding therst user.

n With the proxy disabled, all the legal user’s IGMP report packets are forwarded tothe upstream direction.

n The proxy can only create and forward the IPoE IGMP Report packets.

Procedure

Step 1 Run the igmp report-proxy command to enables the proxy of the IGMP report packets.

Step 2 Run the display igmp proxy command to display status of the proxy.

—-End

Example

To enable the proxy of the IGMP report packet, do as follows:huawei(config-btv)#igmp report-proxy enablehuawei(config-btv)#display igmp proxy--------------------------------------------------------Program number of license : 1024IGMP mode : proxyAuthorization : enableRobustness variable : 2General query interval(s) : 125General query response time(0.1s) : 100Specific query interval(0.1s) : 10Specific query response time(0.1s) : 8Specific query number : 2V1 router present timeout(s) : 400Unsolicited report interval(s) : 10Uplink port mode : programLog switch : enableUser action report switch : enablePreview switch : enableRecognition time(s) : 30The time of reset preview-count : 04:00:00Auto create log interval(h) : 2Right mode : profile modeBandwidth management switch : enableBandwidth assigned for user(%) : 100Report proxy switch : disableLeave proxy switch : disableIGMP Packet encapsulation : allIGMP ECHO switch : disable

---------------------------------------------------------

Related Operation

Table 29-19 lists the related operation for enabling the proxy of the IGMP report packet.

Table 29-19 Related operation for enabling the proxy of the IGMP report packet

To… Run the Command…Disable the proxy of the IGMP reportpacket

igmp report-proxy disable

29.10.13 Enabling the Proxy of the IGMP Leave PacketThis operation enables the proxy of the IGMP leave packet.



Conguration Guide

Background Informationn With the proxy enabled, only the IPoE leave packets of the user are created and forwarded.n With the proxy disabled, all of the IPoE packets of the user are forwarded.n The proxy of the IGMP leave packet has no effect on the PPPoE packets.

Procedure

Step 1 Run the igmp leave-proxy command to enable the proxy of the IGMP leave packet.

Step 2 Run the display igmp proxy command to display the status of the proxy.

—-End

Example

To enable the proxy of the IGMP Leave packet, do as follows:huawei(config-btv)#igmp leave-proxy enablehuawei(config-btv)#display igmp proxy--------------------------------------------------------Program number of license : 1024IGMP mode : proxyAuthorization : enableRobustness variable : 2General query interval(s) : 125General query response time(0.1s) : 100Specific query interval(0.1s) : 10Specific query response time(0.1s) : 8Specific query number : 2V1 router present timeout(s) : 400Unsolicited report interval(s) : 10Uplink port mode : programLog switch : enableUser action report switch : disablePreview switch : enableRecognition time(s) : 30The time of reset preview-count : 04:00:00Auto create log interval(h) : 2Right mode : profile modeBandwidth management switch : enableBandwidth assigned for user(%) : 100Report proxy switch : disableLeave proxy switch : enableIGMP Packet encapsulation : allIGMP ECHO switch : disable

---------------------------------------------------------

Related Operation

Table 29-20 lists the related operation for enabling the proxy of the IGMP leave packet.

Table 29-20 Related operation for enabling the proxy of the IGMP leave packet

To… Run the Command…Disable the proxy of the IGMP leavepacket

igmp leave-proxy disable

29.10.14 Set the Permitted Encapsulation Mode of IGMP Packets

This operation enables you to set the permitted encapsulation mode of IGMP packets.



Background Informationn By default, the default encapsulation mode of IGMP packets is all, that is, the permitted

encapsulation modes of user-side packets are: PPPoE, IPoA and IPoE.n When the permitted encapsulation mode of IGMP packets is PPP, the permitted

encapsulation mode of user-side packets is PPPoE.n When the permitted encapsulation mode of IGMP packets is IP, the permitted

encapsulation mode of user-side packets is IPoA and IPoE.

Procedure

Step 1 Run the igmp encapsulation command to set the permitted encapsulation mode of IGMPpackets.

Step 2 Run the display igmp proxy command to query the permitted encapsulation mode of IGMPpackets.

—-End

Example

To set the permitted encapsulation mode of IGMP packets as ppp, do as follows:huawei(config-btv)#igmp encapsulation ppphuawei(config-btv)#display igmp proxy--------------------------------------------------------Program number of license : 1024IGMP mode : proxyAuthorization : enableRobustness variable : 2General query interval(s) : 125General query response time(0.1s) : 100Specific query interval(0.1s) : 10Specific query response time(0.1s) : 8Specific query number : 2V1 router present timeout(s) : 400Unsolicited report interval(s) : 10Uplink port mode : programLog switch : enableUser action report switch : disablePreview switch : enableRecognition time(s) : 30The time of reset preview-count : 04:00:00Auto create log interval(h) : 2Right mode : profile modeBandwidth management switch : enableBandwidth assigned for user(%) : 100Report proxy switch : disableLeave proxy switch : disableIGMP Packet encapsulation : pppIGMP ECHO switch : disable

---------------------------------------------------------

29.10.15 Enabling IGMP Echo FunctionThis operation enables you to enable the IGMP Echo function.

Background Informationn By default, the IGMP Echo function is disabled.n The IGMP Echo function takes effect only in snooping mode.

– When the IGMP Echo is enabled, the system sends IGMP over PPP message andIGMP over IP message to the upper layer device.

– When the IGMP Echo is disabled, the system sends only IGMP over PPP message tothe upper layer device.



Conguration Guide

Procedure

Step 1 Run the igmp echo command to enable the IGMP Echo function.

Step 2 Run the display igmp proxy command to query the state of the IGMP Echo function.

—-End

Example

To enable the IGMP Echo function, do as follows:huawei(config-btv)#igmp echo enablehuawei(config-btv)#display igmp proxy--------------------------------------------------------Program number of license : 1024IGMP mode : proxyAuthorization : enableRobustness variable : 2General query interval(s) : 125General query response time(0.1s) : 100Specific query interval(0.1s) : 10Specific query response time(0.1s) : 8Specific query number : 2V1 router present timeout(s) : 400Unsolicited report interval(s) : 10Uplink port mode : programLog switch : enableUser action report switch : disablePreview switch : enableRecognition time(s) : 30The time of reset preview-count : 04:00:00Auto create log interval(h) : 2Right mode : profile modeBandwidth management switch : enableBandwidth assigned for user(%) : 100Report proxy switch : disableLeave proxy switch : disableIGMP Packet encapsulation : pppIGMP ECHO switch : enable

---------------------------------------------------------

29.11 Adding a ProgramThis operation enables you to add one or more programs to the program library.

Background Informationn When adding a program, congure the attributes of the program. The congurable

attributes include program name, multicast IP address, uplink port bound to a program,VLAN ID of the program and so on.

n A program name contains up to 16 characters.n The congured upstream port of the program must be the same as that planned in the

actual networking.n The multicast IP address segment 224.0.0.1–224.0.0.255 is used for transmitting the local

protocol packets. Do not assign the IP address in this segment to the multicast programs.n The last 23 bits of the multicast IP address will vary with different multicast programs.

Otherwise, the mapping MAC addresses will conict.

Procedure

Step 1 Run the igmp program add command to add a program.



Step 2 Run the display igmp program command to display the program.

—-End

Example

Assume that:n Program name: BTV-100n IP address of the program: 224.1.1.2n VLAN ID of the program: 1n Upstream port bound: 0/7/0n Bandwidth of the program: 2 Mbit/sn Host function: enabledn Prejoin function: enabledn Unsolicited report: disabledn Logging function: enabledn Cross-VLAN forwarding: enabledn Other parameters: default settingsThen, to add a program to the program library, do as follows:huawei(config-btv)#igmp program add name BTV-100 ip 224.1.1.2 vlan1 bind 0/7/0 bandwidth 2048 host enable prejoin enable unsoliciteddisable log enable across-vlan enablehuawei(config-btv)#display igmp program ip 224.1.1.2---------------------------------------------Program index : 2Validity : validProgram name : BTV-100IP address : 224.1.1.2Uplink port : 0/7/0VLAN ID : 1Host attribute : enableLog attribute : enablePrejoin attribute : enableAcross VLAN attribute : enableUnsolicited attribute : disablePreview duration(s) : 120Preview times : 8Preview interval(s) : 120Priority : 7Host IP : 0.0.0.0Bandwidth(kbps) : 2048Numbers of watching : 0---------------------------------------------

Related Operations

Table 29-21 lists the related operations for adding a program.

Table 29-21 Related operations for adding a program

To… Run the Command… RemarksRename a program igmp program rename A program name uniquely

identies a program in theprogram library.



Conguration Guide

To… Run the Command… RemarksDelete a program igmp program delete Deleting a program that a user

is watching will force the userofine.

Modify a program igmp program modify n You can modify only oneprogram attribute at a time.

n Batch modication ofthe program name is notallowed.

n Modication of program IPaddress is not allowed.

n Modifying the VLAN,upstream port or prioritybound with a program willget the associated userofine.

29.12 Managing Multicast BandwidthThis section describes how to manage multicast bandwidth.

29.12.1 Enabling the Bandwidth Management FunctionThis operation enables multicast bandwidth management.29.12.2 Setting Upstream Port BandwidthThis operation enables you to set the bandwidth of the upstream port. For details, see 29.7Conguring an IGMP Upstream Port.29.12.3 Setting User BandwidthThis operation enables you to congure the user bandwidth.29.12.4 Setting Program BandwidthThis operation enables you to set program bandwidth. For details, see "29.11 Adding aProgram."

29.12.1 Enabling the Bandwidth Management Function

This operation enables multicast bandwidth management.

Background Informationn Multicast bandwidth management involves:

– Upstream port bandwidth– User bandwidth

n When the multicast bandwidth management function is disabled, the system does notcheck the upstream port bandwidth and user bandwidth.– If the number of the programs being watched is smaller than the maximum number of

the programs that can be watched, the user can get online even if the user bandwidthexceeds the limited value.

– If the number of programs being watched exceeds the maximum number of theprograms that can be watched, the user cannot get online.

n When the multicast bandwidth management function is enabled, the system checks onlythe upstream port bandwidth. When the user gets online and the CAC function is enabled,the system checks the user bandwidth.



– If the bandwidth used by the upstream port exceeds the allocated value, the programordered by the user will be suspended in descending order of the program index. Oncethe bandwidth used by the upstream port is equal to the allocated one, the suspendedprogram can be replayed.

– If the bandwidth used by the upstream port does not exceed the allocated value, thesystem checks the user bandwidth when the user gets online. The user can get onlineonly when the used bandwidth is less than the allocated one.

n If the used bandwidth exceeds the allocated one, the system checks as follows.– If the number of the programs being watched exceeds the maximum value, the system

delivers the specic group query message to all the programs being watched. If thereare some programs which are not being watched (while the system has regarded thembeing watched), the system deletes them from the user program list. In this case, thenumber of programs being watched can be released.

– If the user’s residual bandwidth is not enough, the system delivers the specicgroup query message to all the programs being watched. If there are some programswhich are not being watched while the system has regarded them being watched forsome reason, the system deletes them from the user program list. In this case, someoccupied bandwidth can be released.

Procedure

Step 1 Run the igmp bandwidthCAC command to enable the bandwidth management function.

Step 2 Run the display igmp proxy command to display the bandwidth management function.

—-End

Example

To enable bandwidth management of IGMP Proxy, do as follows:huawei(config-btv)#igmp bandwidthCAC enablehuawei(config-btv)#display igmp proxy--------------------------------------------------------Program number of license : 1024IGMP mode : proxyAuthorization : enable



---------------------------------------------------------



Conguration Guide

Related Operation

Table 29-22 lists the related operation for enabling the bandwidth management function.

Table 29-22 Related operation for enabling the bandwidth management function

To… Run the Command…Disable IGMP proxy bandwidthmanagement

igmp bandwidthCAC disable

29.12.2 Setting Upstream Port BandwidthThis operation enables you to set the bandwidth of the upstream port. For details, see 29.7Conguring an IGMP Upstream Port.

29.12.3 Setting User BandwidthThis operation enables you to congure the user bandwidth.

Background InformationThis function takes effect when the multicast CAC function is enabled. The utilization is theratio of the multicast CAC bandwidth to the physical port line rate.n For an ADSL user, the utilization is the ratio of multicast CAC bandwidth to the

activation rate of the ADSL port.n For an SHDSL user, the utilization is the ratio of multicast CAC bandwidth to the

maximum downstream rate specied in the line prole of the SHDSL port.

Procedure

Step 1 Run the igmp user-bandwidth-utilization command to set the user bandwidth.

Step 2 Run the display igmp proxy command to display the user bandwidth.

—-End

Example

To set user bandwidth utilization to 50%, do as follows:huawei(config-btv)#igmp user-bandwidth-utilization 50huawei(config-btv)#display igmp proxy--------------------------------------------------------Program number of license : 1024IGMP mode : proxyAuthorization : enableRobustness variable : 2General query interval(s) : 125General query response time(0.1s) : 100Specific query interval(0.1s) : 10Specific query response time(0.1s) : 8Specific query number : 2V1 router present timeout(s) : 400Unsolicited report interval(s) : 10Uplink port mode : programLog switch : enableUser action report switch : disablePreview switch : enableRecognition time(s) : 30The time of reset preview-count : 04:00:00Auto create log interval(h) : 2Right mode : profile modeBandwidth management switch : enable



Bandwidth assigned for user(%) : 50Report proxy switch : disableLeave proxy switch : disableIGMP Packet encapsulation : allIGMP ECHO switch : disable

---------------------------------------------------------

29.12.4 Setting Program BandwidthThis operation enables you to set program bandwidth. For details, see "29.11 Adding aProgram."

29.13 Conguring an Authority ProleThis section describes how to congure an authority prole.

29.13.1 Setting the Authority ModeThis operation enables you to set the authority mode.29.13.2 Modifying an Authority ProleThis operation enables you to modify an authority prole.29.13.3 Renaming an Authority ProleThis operation enables you to rename an authority prole.

29.13.1 Setting the Authority ModeThis operation enables you to set the authority mode.

Background InformationThe MA5600 supports two authority modes:n User mode (usermode): used for multicast user management.n Prole mode (prolemode): used for multicast prole management.The default is prole mode.

Some multicast conguration commands can be used in certain authority mode. For example:n igmp prole rename, igmp prole { prole-name | prole-index }, and igmp user

bind-prole must be run in authority mode.n igmp user grant-program must be run in user mode.

Procedure

Step 1 Run the igmp right-mode command to set the authority mode.

Step 2 Run the display igmp proxy command to display the authority mode.

—-End

Example

To set the authority mode as prole mode, do as follows:huawei(config-btv)#igmp right-mode profilemodeThe profile data will lose after this operation,are you sure to change the right mode?(y/n)[n]:y

huawei(config-btv)#display igmp proxy--------------------------------------------------------Program number of license : 1024IGMP mode : proxy



Conguration Guide

Authorization : enableRobustness variable : 2General query interval(s) : 125General query response time(0.1s) : 100Specific query interval(0.1s) : 10Specific query response time(0.1s) : 8Specific query number : 2V1 router present timeout(s) : 400Unsolicited report interval(s) : 10Uplink port mode : programLog switch : enableUser action report switch : disablePreview switch : enableRecognition time(s) : 30The time of reset preview-count : 04:00:00Auto create log interval(h) : 2Right mode : profile modeBandwidth management switch : enableBandwidth assigned for user(%) : 100Report proxy switch : disableLeave proxy switch : disableIGMP Packet encapsulation : allIGMP ECHO switch : disable

---------------------------------------------------------

29.13.2 Modifying an Authority ProleThis operation enables you to modify an authority prole.

Background InformationBy default, the system names the 1024 proles as prole 1, prole 2,…, and prole N.

The program authority can only be any one of watch, preview, forbidden and idle.

When modifying the program authority of an authority prole, make sure that the authoritymode is prole mode.

Procedure

Step 1 Run the igmp prole command to add the authority to watch program“BTV-1” to prole 1.

Step 2 Run the display igmp prole command to display the conguration of the authority prole.

—-End

Example

To add program“BTV1” with authority of watch to prole 1, do as follows:huawei(config-btv)#igmp profile profile-name profile1 program-name BTV-1 watchhuawei(config-btv)#display igmp profile profile-name profile1Profile index : 1Profile name : Profile1Program number : 1User Reference Number : 0Program list-----------------------------------------------Program name IP address Right-----------------------------------------------BTV-1 224.1.1.1 watch-----------------------------------------------Total:1

Related Operation

Table 29-23 lists the related operation for modifying an authority prole.



Table 29-23 Related operation for modifying an authority prole

To... Run the Command...Set the priority for user authorities igmp right-priority

29.13.3 Renaming an Authority ProleThis operation enables you to rename an authority prole.

Background Informationn When renaming the program authority of an authority prole, make sure that the authority

mode is prole mode.n The new authority prole name cannot be identical to an existing one.n The authority prole name is case insensitive.

Procedure

Step 1 Run the igmp prole rename command to rename an authority prole.

Step 2 Run the display igmp prole command to display the authority prole.

—-End

Example

To rename prole 1 as “VIP-channel”, do as follows:huawei(config-btv)#igmp profile rename profile1 VIP-channelhuawei(config-btv)#display igmp profile all----------------------------------------------------------------------index Profile name Program number User Reference Number----------------------------------------------------------------------

0 Profile0 1 01 VIP-channel 0 02 Profile2 0 03 Profile3 0 04 Profile4 0 05 Profile5 0 06 Profile6 0 07 Profile7 0 08 Profile8 0 09 Profile9 0 010 Profile10 0 011 Profile11 0 012 Profile12 0 013 Profile13 0 014 Profile14 0 015 Profile15 0 016 Profile16 0 017 Profile17 0 018 Profile18 0 019 Profile19 0 0


29.14 Conguring Multicast UsersThis section describes how to congure multicast users.

29.14.1 Adding a BTV UserThis operation enables you to add a BTV user, congure the attributes of the user, and grantthe user the authorities to watch the programs.



Conguration Guide

29.14.2 Modifying the Attributes of a UserThis operation enables you to modify the attributes of a user.29.14.3 Blocking a BTV UserThis operation enables you to block a BTV user. A blocked user cannot watch a programuntil the user is unblocked.29.14.4 Binding a User with an Authority ProleThis operation enables you to bind an auth user with an authority prole. An auth usercan watch programs of an authority prole only when the user is bound with the prolein authority prole mode.29.14.5 Granting Program Authorities to a UserThis operation enables you to grant program authorities to a user or to modify the grantedprogram authorities.29.14.6 Enabling the Function of Monitoring the BTV UserThis operation enables the function of monitoring the BTV user.

29.14.1 Adding a BTV UserThis operation enables you to add a BTV user, congure the attributes of the user, and grantthe user the authorities to watch the programs.

Background Informationn When adding a BTV user, you must specify a PVC for carrying IGMP packets for this

user.n Each BTV user can watch up to eight programs at the same time. By default, a BTV user

can watch eight programs at the same time.n An authentication (auth) user must be bound with some authority proles to watch the

programs. The user who does not need authentication (no-auth) can watch all programs inthe multicast server. In this case, no authority needs to be congured for the user.

n To authorize a user with the authority to watch a program:– Select prolemode if you bind the line prole to the user port.– Select usermode if you bind the program to the user port.

n The congured authority proles will be removed if you change the authority modefrom the prole mode to the user mode.

n You can add a user only when both the PVC for carrying IGMP packets and the PVC forcarrying the program stream exist.

n A BTV user can be added only when there are PVCs carrying both IGMP packets andprogram stream.

Procedure

Step 1 Run the igmp user add command to add a BTV user.

Step 2 Run the display igmp user command to display the BTV user.

—-End

Example

To add a user under port 0/2/0 as a BTV user (no-auth user), do as follows:huawei(config-btv)#igmp user add port 0/2/0 adsl 0 35 no-authhuawei(config-btv)#display igmp user allOperation is running, please waiting...----------------------------------------------------------------------------User Bind State Auth Quick IGMP Log Available

profiles leave Interface switch programs----------------------------------------------------------------------------



0/2/0 - offline no-auth enable auto enable 8----------------------------------------------------------------------------Total: 1Note : IGMP Interface--VPI/VCI or VLAN ID or EPON ID.

Related Operation

Table 29-24 lists the related operation for adding a BTV user.

Table 29-24 Related operation for adding a BTV user

To... Run the Command...Delete a BTV user igmp user delete

29.14.2 Modifying the Attributes of a User

This operation enables you to modify the attributes of a user.

Background InformationThe user attributes include PVC, authorization, quick leave, log switch, and maximum numberof channel programs to be watched.

You can modify only one attribute of a user at a time.

Procedure

Step 1 Run the igmp user modify command to modify the attributes of a user.

Step 2 Run the display igmp user command to query the multicast user information.

—-End

Example

To dene user 0/2/0 as a user who needs authorization, do as follows:huawei(config-btv)#igmp user modify port 0/2/0 authAre you sure to modify user by port?(y/n)[n]:yOperation is running, please waiting...

huawei(config-btv)#display igmp user allOperation is running, please waiting...----------------------------------------------------------------------------User Bind State Auth Quick IGMP Log Available

profiles leave Interface switch programs----------------------------------------------------------------------------0/2/0 0 offline auth enable auto enable 8----------------------------------------------------------------------------Total: 1Note : IGMP Interface--VPI/VCI or VLAN ID or EPON ID.

Related Operations

Table 29-25 lists the related operations for modifying the attributes of a user.



Conguration Guide

Table 29-25 Related operations for modifying the attributes of a user

To… Run the Command…Add a BTV user igmp user addDelete a BTV user igmp user deleteDisplay the IGMP user information display igmp user

29.14.3 Blocking a BTV User

This operation enables you to block a BTV user. A blocked user cannot watch a programuntil the user is unblocked.

Background InformationAfter a BTV user is blocked, the user is disconnected from the program that the user iswatching.n If the IP address or index of the program being watched is not specied, the system will

block the user port. In addition, the user’s access requests for any program after he goesofine will be denied until the user is unblocked.

n If the IP address or index of the program being watched is specied, the system will onlyblock the specied program. After the user gets ofine, the user still can demand anyprogram except the blocked one.

Procedure

Step 1 Run the igmp user block command to block a BTV user.

Step 2 Run the display igmp user command to display the information on the BTV user.

—-End

Example

To block user 0/2/0, do as follows:huawei(config-btv)#igmp proxy authorization enablehuawei(config-btv)#igmp user block port 0/2/0huawei(config-btv)#display igmp user port 0/2/0{ <cr>|epon<K>|grant-program-list<K> }:

Command:display igmp user port 0/2/0

User : 0/2/0State : blockAuthentication : no-authQuick leave : enableIGMP Interface : 0/35Type of service port : -Parameter of service port: -Log switch : enableBind profiles : -IGMP version : -Available programs : 1Mode : snoopingProcess After Auth Fail : discardUsed bandwidth(kbps) : 0The percentage of usedbandwidth to port rate(%): 0quick leave time(0.1s) : 0Note : IGMP Interface--VPI/VCI or VLAN ID or EPON ID



Related OperationTable 29-26 lists the related operation for blocking a BTV user.

Table 29-26 Related operation for blocking a BTV user

To… Run the Command…Unblock a BTV user undo igmp user block

29.14.4 Binding a User with an Authority ProleThis operation enables you to bind an auth user with an authority prole. An auth usercan watch programs of an authority prole only when the user is bound with the prolein authority prole mode.

Background InformationA user port can be bound with multiple proles. However, "no-auth" user cannot be boundwith any prole.

Up to 256 proles can be bound to a user.

When binding an authority prole with a BTV user, make sure that the authority mode isprole mode.

ProcedureStep 1 Run the igmp user bind-prole command to bind an authority prole.

Step 2 Run the display igmp user command to display the authority prole bound with the user.

—-End

ExampleTo bind user 0/2/0with “prole0”, do as follows:huawei(config-btv)#igmp user bind-profile port 0/2/0 profile-name profile0huawei(config-btv)#display igmp user port 0/2/0{ <cr>|epon<K>|grant-program-list<K> }:

Command:display igmp user port 0/2/0

User : 0/2/0State : offlineAuthentication : authQuick leave : enableIGMP Interface : 0/35Type of service port : -Parameter of service port: -Log switch : enableBind profiles : 1IGMP version : -Available programs : 1Mode : snoopingProcess After Auth Fail : discardUsed bandwidth(kbps) : 0The percentage of usedbandwidth to port rate(%): 0quick leave time(0.1s) : 0Bind profile list---------------------------------------------index Profile name Program number---------------------------------------------

0 Profile0 0---------------------------------------------Total: 1Note : IGMP Interface--VPI/VCI or VLAN ID or EPON ID



Conguration Guide

Related Operation

Table 29-27 lists the related operation for binding a user with an authority prole.

Table 29-27 Related operation for binding a user with an authority prole

To... Run the Command...Unbind an authority prole from a user undo igmp user bind-prole

29.14.5 Granting Program Authorities to a User

This operation enables you to grant program authorities to a user or to modify the grantedprogram authorities.

Background Informationn You can grant program authorities to a user based on the port, slot or Smart VLAN.

Or you can grant program authorities to all users using the igmp user grant-programall command.

n In terms of the validity preference, program authorities can be divided into forbidden,preview, watch and idle .

n When granting program authorities to a user or when modifying the granted programauthorities, make sure that the authority mode is user mode.

Procedure

Step 1 Run the igmp user grant-program command to grant program authorities to a user.

Step 2 Run the display igmp user port grant-program-list command to display the user programauthorities.

—-End

Example

To grant users under port 0/2/0 with the authorities to watch programs from 224.1.1.1 to224.1.2.1, do as follows:huawei(config-btv)#igmp user grant-program port 0/2/0 ip224.1.1.1 to-ip 224.1.2.1 watchhuawei(config-btv)#igmp proxy authorization enablehuawei(config-btv)#display igmp user port 0/2/0 grant-program-list---------------------------------------------Program name IP address Right---------------------------------------------PROGRAM-0 224.1.1.1 watchPROGRAM-1 224.1.2.1 watch---------------------------------------------Total:2

29.14.6 Enabling the Function of Monitoring the BTV User

This operation enables the function of monitoring the BTV user.



Background InformationBefore enabling the function of monitoring the BTV user, you must perform the followingoperations:n Run the terminal debugging command to enable the debugging information output

function.n Run the debugging igmp all to enable the function of monitoring all BTV users.

Procedure

Run the debugging igmp command to enable the function of monitoring the BTV user.

—-End

Example

To monitor a BTV user port, do as follows:huawei(config)#debugging igmp port 0/2/0

Related Operation

Table 29-28 lists the related operation for enabling the function of monitoring BTV users.

Table 29-28 Related operation for enabling the function of monitoring BTV users

To… Run the Command…Disable the function of monitoring BTVusers

undo debugging igmp

29.15 Conguring the Preview FunctionThis section describes how to congure the preview function.

29.15.1 Enabling the Preview FunctionThis operation enables the preview function.29.15.2 Setting the Preview ParametersThis operation enables you to set the preview parameters, including preview duration, previewtimes, and preview interval.29.15.3 Setting the Preview Auto Reset TimeThis operation enables you to set the preview auto reset time.29.15.4 Clearing the Preview Logout Time Records ManuallyThis operation enables you to clear all preview logout time records manually.

29.15.1 Enabling the Preview FunctionThis operation enables the preview function.

Background InformationWith the preview function disabled, users with preview authority cannot view any program.

Procedure

Step 1 Run the igmp preview enable command to enable the IGMP preview function.

Step 2 Run the display igmp proxy command to check if the preview function is enabled.



Conguration Guide

—-End

Example

To enable the IGMP preview function, do as follows:huawei(config-btv)#igmp preview enablehuawei(config-btv)#display igmp proxy--------------------------------------------------------Program number of license : 1024IGMP mode : proxyAuthorization : enable



---------------------------------------------------------

Related Operation

Table 29-29 lists the related operation for enabling the preview function.

Table 29-29 Related operation for enabling the preview function

To… Run the Command…Disable the IGMP preview function igmp preview disable

29.15.2 Setting the Preview Parameters

This operation enables you to set the preview parameters, including preview duration, previewtimes, and preview interval.

Background InformationWhen the preview function is disabled, all the users with the preview authority cannot watchany program.

By default:n The preview duration is 120s.n The preview times are eight.n The preview interval is 120s.



Procedure

Step 1 Run the igmp preview program command to congure the preview parameters.

Step 2 Run the display igmp program command to display the preview parameters.

—-End

Example

To set the preview duration of program1 to 150s, do as follows:huawei(config-btv)#igmp preview program index 1 preview-duration 150huawei(config-btv)#display igmp program index 1---------------------------------------------Program index : 1Validity : validProgram name : cctv-1IP address : 224.1.1.1Uplink Port : 0/7/0VLAN ID : 1Host attribute : enableLog attribute : enablePrejion attribute : disableAcross VLAN attribute : enableUnsolicited attribute : disablePreivew duration(s) : 150Preivew times : 8Preivew interval(s) : 120Priority : 0Numbers of watching : 0---------------------------------------------Watching IGMP cascade port :0/7/1---------------------------------------------

29.15.3 Setting the Preview Auto Reset TimeThis operation enables you to set the preview auto reset time.

Background InformationWhen the preview auto reset time is set, the system will clear the preview count to zero at thespecied time.

By default, the preview auto reset time is 04:00:00 am each day.

Procedure

Step 1 Run the igmp preview auto-reset-time command to set the preview auto reset time.

Step 2 Run the display igmp proxy command to display the display the preview auto reset time.

—-End

Example

To set the preview auto reset time as 05:00:00 am each day, do as follows:huawei(config-btv)#igmp preview auto-reset-time 05:00:00huawei(config-btv)#display igmp proxy--------------------------------------------------------Program number of license : 1024IGMP mode : proxyAuthorization : enableRobustness variable : 2General query interval(s) : 125General query response time(0.1s) : 100



Conguration Guide

Specific query interval(0.1s) : 10Specific query response time(0.1s) : 8Specific query number : 2V1 router present timeout(s) : 400Unsolicited report interval(s) : 10Uplink port mode : programLog switch : enableUser action report switch : disablePreview switch : enableRecognition time(s) : 30The time of reset preview-count : 05:00:00Auto create log interval(h) : 2Right mode : profile modeBandwidth management switch : enableBandwidth assigned for user(%) : 100Report proxy switch : disableLeave proxy switch : disableIGMP Packet encapsulation : allIGMP ECHO switch : disable

---------------------------------------------------------

Related Operation

Table 29-30 lists the related operation for setting the preview auto reset time.

Table 29-30 Related operation for setting the preview auto reset time

To… Run the Command…Restore the default preview auto resettime

undo igmp preview auto-reset-time

29.15.4 Clearing the Preview Logout Time Records ManuallyThis operation enables you to clear all preview logout time records manually.

Background InformationThe system records the last preview logout time automatically. If a user previews a program atan interval smaller than the value preset using the igmp preview program command, the userwill not be allowed to preview the program again.

Procedure

Run the igmp preview reset record command to clear all preview logout time recordsmanually.

—-End

Example

To clear all preview logout records, do as follows:huawei(config-btv)#igmp preview reset record

29.16 Conguring the Logging FunctionThis section describes how to congure the logging function.

29.16.1 Enabling the Logging FunctionThis operation enables you to enable the logging function so that the operations can be logged.



29.16.2 Setting the Logging IntervalThis operation enables you to set the automatic log generation interval for a long-time onlineuser.29.16.3 Conguring Log ReportingThis operation enables you to congure the log reporting function.29.16.4 Collecting Log StatisticsThis operation enables you to collect statistics on user logs for audience statistics.

29.16.1 Enabling the Logging Function

This operation enables you to enable the logging function so that the operations can be logged.

Background InformationBy default, the logging function is enabled.

Procedure

Step 1 Run the igmp proxy log enable command to enable the logging function.

Step 2 Run the display igmp proxy command to display the status of the logging switch.

—-End

Example

To enable the IGMP proxy logging function, do as follows:huawei(config-btv)#igmp proxy log enablehuawei(config-btv)#display igmp proxy--------------------------------------------------------Program number of license : 1024IGMP mode : proxyAuthorization : enableRobustness variable : 2General query interval(s) : 125General query response time(0.1s) : 100Specific query interval(0.1s) : 10Specific query response time(0.1s) : 8Specific query number : 2V1 router present timeout(s) : 400Unsolicited report interval(s) : 10Uplink port mode : programLog switch : enableUser action report switch : disablePreview switch : enableRecognition time(s) : 30The time of reset preview-count : 04:00:00Auto create log interval(h) : 2Right mode : profile modeBandwidth management switch : enableBandwidth assigned for user(%) : 100Report proxy switch : disableLeave proxy switch : disableIGMP Packet encapsulation : allIGMP ECHO switch : disable

---------------------------------------------------------

Related Operations

Table 29-31 lists the related operations for enabling the logging function.



Conguration Guide

Table 29-31 Related operations for enabling the logging function

To… Run the Command…Disable the IGMP proxy logging function igmp proxy log disableDisplay the logs of IGMP users display igmp log

29.16.2 Setting the Logging IntervalThis operation enables you to set the automatic log generation interval for a long-time onlineuser.

Background InformationThe MA5600 can record the logs automatically. When a user watches a program for a longtime, and the time exceeds the time interval for generating the log, the system generates a logautomatically. This log can be used for billing in case that no log is generated when a userbecomes ofine abnormally after watching a program for a long time.

By default, the logging interval is two hours.

Procedure

Step 1 Run the igmp proxy log-interval command to set the logging interval.

Step 2 Run the display igmp proxy command to display the set logging interval.

—-End

Example

To set the log generation interval as one hour, do as follows:huawei(config-btv)#igmp proxy log-interval 1huawei(config-btv)#display igmp proxy--------------------------------------------------------Program number of license : 1024IGMP mode : proxyAuthorization : enableRobustness variable : 2General query interval(s) : 125General query response time(0.1s) : 100Specific query interval(0.1s) : 10Specific query response time(0.1s) : 8Specific query number : 2V1 router present timeout(s) : 400Unsolicited report interval(s) : 10Uplink port mode : programLog switch : enableUser action report switch : disablePreview switch : enableRecognition time(s) : 30The time of reset preview-count : 04:00:00Auto create log interval(h) : 1Right mode : profile modeBandwidth management switch : enableBandwidth assigned for user(%) : 100Report proxy switch : disableLeave proxy switch : disableIGMP Packet encapsulation : allIGMP ECHO switch : disable

---------------------------------------------------------

Related Operation

Table 29-32 lists the related operation for setting the logging interval.



Table 29-32 Related operation for setting the logging interval

To… Run the Command…Restore the default logging interval undo igmp proxy log-interval

29.16.3 Conguring Log ReportingThis operation enables you to congure the log reporting function.

Background InformationThe logs are reported based on the combination of port, program IP address, and time range.

Procedure

Run the igmp log report command to congure the log reporting function.

—-End

Example

To report the logs of program 225.1.1.1 generated during the period from 2006-1-10 9:00:00 to2006-1-10 18:30:00, do as follows:huawei(config-btv)#igmp log report ip 225.1.1.1 time 2006-1-109:00:00 end 2006-1-10 18:30:00Reporting log has finishedReported log number: 50

Related Operations

Table 29-33 lists the related operations for conguring log reporting.

Table 29-33 Related operations for conguring log reporting

To… Run the Command… RemarksStopping log reporting igmp log stop-report If the system is reporting the

user log, the command stopsthe log reporting. If not, thesystem prompts errors.

Clear user logs igmp log reset -

Display the log statistics display igmp log statistic -

29.16.4 Collecting Log StatisticsThis operation enables you to collect statistics on user logs for audience statistics.

Background InformationThe log statistics mainly include the programs ordered and related time parameters, can beregarded as the dynamic on-demand information.

You can collect the statistics based on a pot, an IP address, or all users.

Procedure

Run the display igmp log command to display the logs.



Conguration Guide

—-End

Example

To collect statistics on all user logs, do as follows:huawei(config-btv)#display igmp log all{ <cr>||<K> }:

Command:display igmp log all

-----------------------------------------------------------------------------Port Program-IP Mode Join-time Leave-time----------------------------------------------------------------------------0/3/0 10.10.10.1 W 2006-04-15 19:29:48 2006-04-15 19:39:320/3/0 10.10.10.1 W 2006-04-15 19:26:25 2006-04-15 19:29:460/3/0 10.10.10.1 W 2006-04-15 18:51:58 2006-04-15 19:26:240/3/0 10.10.10.1 W 2006-04-15 18:43:14 2006-04-15 18:51:57-----------------------------------------------------------------------------Total: 4Note: P(Mode) indicates preview, W(Mode) indicates watch,

N(Mode) indicates no authorityF(Mode) indicates preview times full out


SmartAX MA5600 Multi-service Access ModuleConguration Guide 30 Triple Play Service Conguration

30 Triple Play Service Conguration


30.1 OverviewThis section describes the description and specications of the triple play service.30.2 Conguration Example of Triple Play - Multiple PVCs for Multiple ServicesThis example shows how to congure the triple play service - multiple PVCs for multipleservices.30.3 Conguration Example of Triple Play - Based on the User-Side VLANThis example shows how to congure the triple play service - single PVC for multiple services(based on the user-side VLAN).30.4 Conguration Example of Triple Play - Based on 802.1pThis operation shows how to congure the triple play service by means of single PVC formultiple services based on 802.1p.


30 Triple Play Service CongurationSmartAX MA5600 Multi-service Access Module

Conguration Guide

30.1 OverviewThis section describes the description and specications of the triple play service.

Service DescriptionWith the rapid development of the broadband services, more and more users demand highbandwidth for abundant services such as video service, voice service, and data service.

Service SpecicationsThe MA5600 can support the triple play service.

In the triple play application, the VoIP, IPTV, and Internet services are transmitted over onecable to the MA5600 through the home gateway or the optical access modem in a centralizedmanner.n The VoIP and IPTV services adopt DHCP method. The DHCP option60 domain is used

to identify different terminals. The MA5600 can identify different DHCP option60domains, and transmit packets of different terminals to different DHCP servers. In thisway, the terminals can obtain IP addresses from the corresponding DHCP servers.

n Point-to-Point over Ethernet (PPPoE) is used for Internet service access.Table 30-1 shows the modes supported by the MA5600 to provide the triple player service.

Table 30-1 Modes to provide the triple play service

Mode DescriptionMultiple PVC for multipleservices

It needs to congure the existing modem.It adopts different PVCs to differentiate the service trafc.

Single PVC for multipleservices

It is unnecessary to congure the existing modem. The PVCresources are saved.

n When it differentiates the service trafc based on user-sideVLAN:

It differentiates the service trafc based on the VLAN IDcontained in the packets sent from the user port PVC. Theuser packets are labeled with different upstream VLANIDs, and the previous VLAN IDs in the user packets areremoved.

n When it differentiates the service trafc based on user-sideencapsulation type:

It differentiates the service trafc based on theencapsulation type (IPoE/PPPoE) of the user packets sentfrom the user port PVC. The user packets are labeled withdifferent upstream VLAN IDs.

30.2 Conguration Example of Triple Play - Multiple PVCsfor Multiple Services

This example shows how to congure the triple play service - multiple PVCs for multipleservices.



Prerequisites

Before conguring the triple play service, make sure that:n The network devices and lines are normal.n All kinds of boards of the device run in the normal state.

NetworkingFigure 30-1 shows a sample network for conguring the triple play service-multiple PVCsfor multiple services.

Figure 30-1 Sample network for conguring the triple play service -multiple PVCs formultiple services

In Figure 30-1, both user 1 (home gateway 1) and user 2 (home gateway 2) adopt triple playnetworking.

Data PlanTable 30-2 shows the data plan for conguring the triple play service -multiple PVCs formultiple services.

Table 30-2 Data plan for conguring the triple play service -multiple PVCs for multipleservices

Item DataDownstream ports 0/2/0 and 0/2/1. The ports use the default lineprole.Internet: VPI/VCI 0/37VoIP: VPI/VCI 0/36

ADEF board

IPTV: VPI/VCI 0/35Internet: 1 Mbit/sVoIP: 1 Mbit/s

CAR in the trafcprole

IPTV: no restrictionUplink port 0/7/0

Internet: smart VLAN 2VoIP: smart VLAN 3

VLAN

IPTV: smart VLAN 4VoIP: DHCP option60 domain voice, Gateway 10.1.1.1.DHCP server group 1, IP addresses of DHCP server group:20.1.1.2 and 20.1.1.3.

DHCP

IPTV: DHCP option60 domain of STB video, gateway 10.2.2.1.DHCP server group 2, IP addresses of DHCP server group:20.2.2.2 and 20.2.2.3.Program BTV-1, multicast address 224.1.1.1, bind upstream port0/7/0 with VLAN 4.

Program library

Program BTV-2, multicast address 224.1.1.2, bind upstreamport0/7/0 with VLAN 4.



Conguration Guide

Item DataAuthority prole Prole 0, prole 0 has the authority to watch program 0.

User 1 connected to port 0/2/0 can watch all programs.IGMP user

User 2 connected to port 0/2/1 can watch program BTV-1 only.Priority 802.1p priority: VoIP 6, IPTV 5, Internet 1.

Background Informationn DHCP option60 domain value of the Set Top Box (STB) and Ethernet Phone (Ephone)

varies with the terminals. In the actual application, refer to the user guides of the STBand the Ephone.

n Run the dhcp domain command to set the DHCP domain name. The congured domainname is a character string containing no space.

n Ensure that before conguring triple play service, the service board and the upstreamboard have been added correctly.

Conguration FlowchartFigure 30-2 shows the owchart for conguring the triple play service-multiple PVCs formultiple services.

Figure 30-2 Flowchart for conguring the triple play service-multiple PVCs for multipleservices



Procedure

n Congure Internet service.1. Congure the VLAN and the upstream port.

huawei(config)#vlan 2 smarthuawei(config)#port vlan 2 0/7 0

2. Congure the trafc prole.

Because VoIP, IPTV and Internet services are transmitted through the same port, itis necessary to set the 802.1p priority for each service.

In general, the VoIP service has the highest priority, and the Internet service has thelowest priority. In this example, set the trafc prole index as 7, and the priority ofthe Internet service as 1.huawei(config)#traffic table index 7 ip car 1024 priority 1priority-policy pvc-Setting

3. Congure the service port.

Add the service port to the VLAN and use the trafc prole created in the previousstep.huawei(config)#service-port vlan 2 adsl 0/2/0 vpi 0 vci37 rx-cttr 7 tx-cttr 7huawei(config)#service-port vlan 2 adsl 0/2/1 vpi 0 vci37 rx-cttr 7 tx-cttr 7


n Congure VoIP service.1. Create the VLAN and its upstream port.



Set the trafc prole index as 8, and the priority of the VoIP service as 6.huawei(config)#traffic table index 8 ip car 1024 priority 6priority-policy pvc-Setting


Add the service port to the VLAN, and use the trafc prole created in the previousstep.huawei(config)#service-port vlan 3 adsl 0/2/0 vpi 0 vci36 rx-cttr 8 tx-cttr 8huawei(config)#service-port vlan 3 adsl 0/2/1 vpi 0 vci36 rx-cttr 8 tx-cttr 8

4. Congure DHCP relay.

The VoIP service and the video service adopt DHCP mode. The DHCP option60domain is used to differentiate the service type. In this example, set the DHCPoption60 domain of the VoIP service as voice.huawei(config)#dhcp mode layer-3 option-60huawei(config)#dhcp-server 1 ip 20.1.1.2 20.1.1 3huawei(config)#dhcp domain voicehuawei(config-dhcp-domain-voice)# dhcp-server 1huawei(config)#interface vlanif 3huawei(config-if-Vlanif3)#ip address 10.1.1.1 24huawei(config-if-Vlanif3)#dhcp domain voice gateway 10.1.1.1


n Congure IPTV service.1. Create the VLAN and its upstream port.




Conguration Guide


In this example, set the trafc prole index as 9 and the priority of IPTV serviceas 5.huawei(config)#traffic table index 9 ip car off priority 5priority-policy pvc-Setting


CAUTION

On the MA5600, if the PVC is congured with priority, the priority of the multicastpackets borne by the PVC takes no effect.

Add the service port to the VLAN and use trafc prole 9.huawei(config)#service-port vlan 4 adsl 0/2/0 vpi 0 vci35 rx-cttr 9 tx-cttr 9huawei(config)#service-port vlan 4 adsl 0/2/1 vpi 0 vci35 rx-cttr 9 tx-cttr 9


In this example, set the DHCP option60 domain of the IPTV as video.huawei(config)#dhcp mode layer-3 option-60huawei(config)#dhcp-server 2 ip 20.2.2.2 20.2.2.3huawei(config)#dhcp domain videohuawei(config-dhcp-domain-video)# dhcp-server 2huawei(config)#interface vlanif 4huawei(config-if-Vlanif4)#ip address 10.2.2.1 24huawei(config-if-Vlanif4)#dhcp domain video gateway 10.2.2.1

5. Congure the multicast data.

To provision video service, the multicast proxy and programs need to be set.huawei(config)#interface scu 0/7huawei(config-if-scu-0/7)#native-vlan 0 vlan 4huawei(config-if-scu-0/7)#quit

huawei(config)#btvhuawei(config-btv)#igmp mode proxyhuawei(config-btv)#igmp uplink-port-mode programhuawei(config-btv)#igmp uplink-port 0/7/0 100huawei(config-btv)#igmp program add name BTV-1 ip224.1.1.1 vlan 4 bind 0/7/0huawei(config-btv)#igmp program add name BTV-2 ip224.1.1.2 vlan 4 bind 0/7/0huawei(config-btv)#igmp profile profile-name profile0program-name BTV-1 watchhuawei(config-btv)#igmp user add port 0/2/0 adsl 0 35 no-authhuawei(config-btv)#igmp user add port 0/2/1 adsl 0 35 authhuawei(config-btv)#igmp user bind-profile port 0/2/1profile-name profile0


—-End

Result

After the conguration, the triple play service (Internet, VoIP and IPTV) is available.n The Internet user can realize dial-up access to the Internet in the PPPoE mode.n The VoIP user can make VoIP phones.n The IPTV user connected to port 0/2/0 can watch all programs. and the user connected to

port 0/2/1 can watch program1 only.



30.3 Conguration Example of Triple Play - Based on theUser-Side VLAN

This example shows how to congure the triple play service - single PVC for multiple services(based on the user-side VLAN).

Prerequisites

Before conguring the triple play service, make sure that:n The network devices and lines are normal.n All kinds of boards of the device run in the normal state.

NetworkingFigure 30-3 shows a sample network for conguring the triple play service - single PVCfor multiple services.

Figure 30-3 Sample network for conguring the triple play service - single PVC for multipleservices

In the Figure 30-3, both user1 (home gateway 1) and user2 (home gateway 2) adopt the tripleplay networking.

Data PlanTable 30-3 shows the data plan for conguring the triple play service - single PVC for multipleservices.

Table 30-3 Data plan for conguring the triple play service - single PVC for multiple services

Item DataADEF board Service port 0/2/0 and 0/3/0. The ports use the default line prole.

VPI/VCI: 0/35CAR in the trafcprole

Internet: 1 Mbit/sVoIP: 1 Mbit/sIPTV: no restriction

Upstream port 0/7/0Upstream VLAN Internet: smart VLAN 102

VoIP: smart VLAN 103IPTV: smart VLAN 104

User-side VLAN Internet: smart VLAN 2VoIP: smart VLAN 3IPTV: smart VLAN 4

DHCP VoIP:DHCP option60 domain voice, gateway 10.1.1.1. DHCP servergroup 1, IP addresses are 20.1.1.2 and 20.1.1.3.IPTV:DHCP option60 domain for STB video, gateway 10.2.2.1. DHCPserver group 2, IP addresses are 20.2.2.2 and 20.2.2.3.



Conguration Guide

Item DataProgram library Program BTV-1, multicast address 224.1.1.1, bind upstream port

0/7/0 with VLAN 4.Program BTV-2, multicast address 224.1.1.2, bind upstream port0/7/0 and VLAN 4.

Authority prole Prole 0, prole 0 can watch program BTV-1 in the programlibrary.

IGMP user User 1 connected to port 0/2/0 can watch all programs.User 2 connected to port 0/3/0 can watch program BTV-1 only.

Priority 802.1p priority: VoIP 6, IPTV 5, Internet 1.

Background Informationn DHCP option60 domain value of the STB and Ephone varies with the terminals. In the

actual application, refer to the user guides of the STB and the Ephone.n Run the dhcp domain command to set the DHCP domain name. The congured domain

name is a character string containing no space.n Before conguring the triple play services, make sure that the service boards and the

upstream board are added correctly.


In this conguration, the service trafc is differentiated based on the user-side VLAN.

Figure 30-4 shows the owchart for conguring the triple play service - single PVC formultiple services.

Figure 30-4 Flowchart for conguring the triple play service - single PVC for multiple services



Procedure

n Congure Internet service.1. Congure the VLAN and its upstream port.



Because the VoIP, IPTV, and Internet services are transmitted through the sameport, it is necessary to set the 802.1p priority for each service.



Add the service port to the VLAN and use the trafc prole created in the previousstep.huawei(config)#service-port vlan 102 adsl 0/2/0 vpi 0 vci 35multi-service user-vlan 2 rx-cttr 7 tx-cttr 7huawei(config)#service-port vlan 102 adsl 0/3/0 vpi 0 vci 35multi-service user-vlan 2 rx-cttr 7 tx-cttr 7


n Congure VoIP service.1. Congure the VLAN and its upstream port.



Set the trafc prole index as 8 and the priority of the VoIP service as 6.huawei(config)#traffic table index 8 ip car 1024 priority 6priority-policy pvc-Setting




The VoIP service and the video service adopt DHCP mode. The DHCP option60domain is used to differentiate the service type. In this example, set the DHCPoption60 domain of the VoIP service as voice.huawei(config)#dhcp mode layer-3 option-60huawei(config)#dhcp-server 1 ip 20.1.1.2 20.1.1 3huawei(config)#dhcp domain voicehuawei(config-dhcp-domain-voice)# dhcp-server 1huawei(config)#interface vlanif 103huawei(config-if-Vlanif103)#ip address 10.1.1.1 24huawei(config-if-Vlanif103)#dhcp domain voice gateway 10.1.1.1


n Congure IPTV service.1. Congure the VLAN and its upstream port.




Conguration Guide


In this example, set the trafc prole index as 9, the priority of IPTV service as 5.huawei(config)#traffic table index 9 ip car off priority 5priority-policy pvc-Setting



CAUTION



In this example, set the DHCP option60 domain of the IPTV service as video.huawei(config)#dhcp mode layer-3 option-60huawei(config)#dhcp-server 2 ip 20.2.2.2 20.2.2.3huawei(config)#dhcp domain videohuawei(config-dhcp-domain-video)# dhcp-server 2huawei(config)#interface vlanif 104huawei(config-if-Vlanif104)#ip address 10.2.2.1 24huawei(config-if-Vlanif104)#dhcp domain video gateway 10.2.2.1

5. Set multicast data.

To provision the IPTV service, the multicast proxy and programs need to be set.huawei(config)#interface scu 0/7huawei(config-if-scu-0/7)#native-vlan 0 vlan 4huawei(config-if-scu-0/7)#quit

huawei(config)#btvhuawei(config-btv))#igmp mode proxyhuawei(config-btv)#igmp uplink-port-mode programhuawei(config-btv)#igmp uplink-port 0/7/0 100huawei(config-btv)#igmp video-port vpi 0 vci 35 user-vlan 4huawei(config-btv)#igmp program add name BTV-1 ip 224.1.1.1vlan 104 bind 0/7/0huawei(config-btv)#igmp program add name BTV-2 ip224.1.1.2 vlan 104 bind 0/7/0huawei(config-btv)#igmp profile profile-name profile0program-name BTV-1 watchhuawei(config-btv)#igmp user add port 0/2/0 adsl 0 35 user-vlan4 no-auth max-program 8huawei(config-btv)#igmp user add port 0/3/0 adsl 0 35 user-vlan 4 authhuawei(config-btv)#igmp user bind-profile port 0/3/0profile-name profile0


—-End

Result

After the conguration, the triple play service (Internet, VoIP and IPTV) is available.n The Internet user can realize dial-up access to the Internet in PPPoE mode.n The VoIP user can make VoIP phones.n The IPTV user connected to port 0/2/0 can watch all programs. The user connected to

port 0/3/0 can watch program BTV-1 only.



30.4 Conguration Example of Triple Play - Based on 802.1pThis operation shows how to congure the triple play service by means of single PVC formultiple services based on 802.1p.

Prerequisites

Before conguring the triple play service, make sure that:n The network device and the line are in the normal state.n All boards are in the normal state.

NetworkingFigure 30-5 shows the sample network for conguring the triple play service by means ofsingle PVC for multiple services.

Figure 30-5 Sample network for conguring the triple play service by means of single PVCfor multiple services

In Figure 30-5, both user 1 (home gateway 1) and user 2 (home gateway 2) adopt the tripleplay networking.

Data PlanTable 30-4 shows the data plan for conguring the triple play service by means of singlePVC for multiple services.

Table 30-4 Data plan for conguring the triple play service by means of single PVC formultiple services

Item DataADEF Service ports 0/2/0 and 0/3/0 applies the default line prole.

VPI/VCI: 0/35CAR of the trafcprole

Internet service: 1 Mbit/sVoIP service: 1 Mbit/sIPTV service: not limited

Upstream port 0/7/0Upstream VLAN Internet service: smart VLAN 102

VoIP service: smart VLAN 103IPTV service: smart VLAN 104

User VLAN Internet service: smart VLAN 2VoIP service: smart VLAN 3IPTV service: smart VLAN 4

User-side 802.1p Internet service: 2VoIP service: 3IPTV service: 4



Conguration Guide

Item DataVoIP:

n DHCP option60 domain: voice gateway: 10.1.1.1n DHCP server group: 1n IP addresses of DHCP server group 1: 20.1.1.2 and 20.1.1.3

DHCP

IPTV:

n DHCP option60 domain of STB: videon Gateway: 10.2.2.1n DHCP server group: 2n IP addresses of DHCP server group 2: 20.2.2.2 and 20.2.2.3Program BTV-1:

n Multicast address: 224.1.1.1n Bind upstream port 0/7/0 with VLAN 4.

Program library

Program BTV-2:

n Multicast address: 224.1.1.2n Bind upstream port 0/7/0 with VLAN 4.

Authority prole Prole 0: Prole 0 has the authority to watch program BTV-1.IGMP user User1: Port 0/2/0 can watch all the programs.

User2: Port 0/3/0 can watch only BTV-1.Priority 802.1p priority:

n VoIP: 6n IPTV: 5n Internet: 1

Background Informationn DHCP option60 domain value of the STB and IP phone varies with the terminals. In the

actual application, refer to the user guides of the STB and the IP phone.n Run the dhcp domain command to set the DHCP domain name. The domain name

is a character string containing no space.n Before conguring the service, make sure that service boards and the upstream board

have been added correctly.

Conguration Flowchart

NOTE

In this conguration, the service trafc is differentiated based on the user-side VLAN.

Figure 30-6 shows the owchart for conguring the triple play service-single-PVC formulti-service.



Figure 30-6 Flowchart for conguring the triple play service-single-PVC for multi-service

Procedure

n Congure the Internet service.1. Congure the VLAN and its upstream port.



Because the VoIP, IPTV, and Internet services are transmitted through the sameport, it is necessary to set the 802.1p priority for each service.



Add the service port to the VLAN, and use the trafc prole created in the previousstep.huawei(config)#service-port vlan 102 adsl 0/2/0 vpi 0 vci 35multi-service user-8021p 2 user-vlanuser-vlan 2 rx-cttr 7 tx-cttr 7huawei(config)#service-port vlan 102 adsl 0/3/0 vpi 0 vci 35multi-service user-8021p 2 user-vlan 2 rx-cttr 7 tx-cttr 7


n Congure the VoIP service.1. Congure the VLAN and its upstream port.





Conguration Guide

In this example, set the trafc prole index as 8 and the priority of the VoIP serviceas 6.huawei(config)#traffic table index 8 ip car 1024 priority 6priority-policy pvc-Setting


Add the service port to the VLAN, and use the trafc prole created in the previousstep.huawei(config)#service-port vlan 103 adsl 0/2/0 vpi 0 vci 35multi-service user-8021p 3 user-vlan 3 rx-cttr 8 tx-cttr 8huawei(config)#service-port vlan 103 adsl 0/3/0 vpi 0 vci 35multi-service user-8021p 3 user-vlan 3 rx-cttr 8 tx-cttr 8

4. Set DHCP relay.

The VoIP service and VoIP service adopt DHCP mode. The DHCP option60domain is used to differentiate the service type. In this example, set the DHCPoption60 domain of the VoIP service as voice.huawei(config)#dhcp mode layer-3 option-60huawei(config)#dhcp-server 1 ip 20.1.1.2 20.1.1 3huawei(config)#dhcp domain voice //huawei(config-dhcp-domain-voice)#dhcp-server 1huawei(config-dhcp-domain-voice)#quithuawei(config)#interface vlanif 103huawei(config-if-vlanif103)#ip address 10.1.1.1 24huawei(config-if-vlanif103)#dhcp domain voice gateway 10.1.1.1huawei(config-if-vlanif103)#quit


n Congure the IPTV service.1. Congure the VLAN and its upstream port.



In this example, set the trafc prole index as 9 and the priority of the VoIP serviceas 5.huawei(config)#traffic table index 9 ip car off priority 5priority-policy pvc-Setting


Add the service port to the VLAN, and use the trafc prole created in the previousstep.huawei(config)#service-port vlan 104 adsl 0/2/0 vpi 0 vci 35multi-service user-8021p 4 user-vlan 4 rx-cttr 9 tx-cttr 9huawei(config)#service-port vlan 104 adsl 0/3/0 vpi 0 vci 35multi-service user-8021p 4 user-vlan 4 rx-cttr 9 tx-cttr 9

CAUTION


4. Set DHCP relay.

In this example, set the DHCP optio60 domain of the IPTV service as video.huawei(config)#dhcp mode layer-3 option-60huawei(config)#dhcp-server 2 ip 20.2.2.2 20.2.2.3huawei(config)#dhcp domain videohuawei(config-dhcp-domain-video)# dhcp-server 2huawei(config)#interface vlanif 104huawei(config-if-vlanif104)#ip address 10.2.2.1 24huawei(config-if-vlanif104)#dhcp domain video gateway 10.2.2.1



5. Set multicast data.

To provision the IPTV service, the multicast proxy and programs need to be set.huawei(config)#interface scu 0/7huawei(config-if-scu-0/7)#native-vlan 0 vlan 4huawei(config-if-scu-0/7)#quit

huawei(config)#btvhuawei(config-btv))#igmp mode proxyhuawei(config-btv)#igmp uplink-port-mode programhuawei(config-btv)#igmp uplink-port 0/7/0 100huawei(config-btv)#igmp video-port vpi 0 vci 35 user-vlan 4huawei(config-btv)#igmp program add name BTV-1 ip 224.1.1.1vlan 104 bind 0/7/0huawei(config-btv)#igmp program add name BTV-2 ip224.1.1.2 vlan 104 bind 0/7/0huawei(config-btv)#igmp profile profile-name profile0program-name BTV-1 watchhuawei(config-btv)#igmp user add port 0/2/0 adsl 0 35 user-vlan4 no-auth max-program 8huawei(config-btv)#igmp user add port 0/3/0 adsl 0 35 user-vlan 4 authhuawei(config-btv)#igmp user bind-profile port 0/3/0profile-name profile0


—-End

Result

After the conguration, the triple play service (Internet, VoIP, and IPTV) is available.n Internet users can access the Internet through PPPoE dial-up.n VoIP users can set conversation to each other.n IPTV users: the user connected at port 0/2/0 can watch all the programs, and the user

connected at 0/3/0 can watch BTV-1 only.


SmartAX MA5600 Multi-service Access ModuleConguration Guide 31 Built-in ISU Service Conguration

31 Built-in ISU Service Conguration


31.1 OverviewThis section describes the service description and service specications of built-in ISU.31.2 Conguration Example of a Single ISUThis example shows how to congure a single ISU so that the user can access the Internetdirectly through the ISU board.31.3 Conguration Example of Dual ISUsThis example shows how to congure the dual ISUs so that when the upstream port of the activeISU board fails, the standby ISU board will function automatically to replace the faulty one.


31 Built-in ISU Service CongurationSmartAX MA5600 Multi-service Access Module

Conguration Guide

31.1 OverviewThis section describes the service description and service specications of built-in ISU.

Service DescriptionThe Intelligent Service Unit (ISU) is a built-in BRAS server of the MA5600. The ISU enablesthe service management, bandwidth management and security management, thus providing abypass solution for business users.

The ISU can separate the trafc of common users from that of business users. The two types oftrafc have different routes:n The trafc of common users rst passes through the SCU board, and then goes upstream

to the convergence layer (layer 3) or an external BRAS for authentication, and nallyconnects to the Internet.

n The trafc of business users is rst processed by ISU, and then directly passed to theMAN through FE or GE port of the ISU without any processing by an external BRAS.

The ISU board of the MA5600 supports multiple authentication means, such as:n PPPoE authenticationn VLAN binding authenticationn VLAN + Web (forced portal, built-in portal)It also supports accounting based on the trafc volume or service duration.

Service SpecicationsThere are two types of ISU boards: ISUA and ISUE. Both of them can provide two subslots tohold different FE/GE subboards:n On the ISUA, subslot 1 holds an FE or GE optical subboard, and subslot 2 holds an FE

optical board.n On the ISUE, subslot 2 holds a 4-port FE subboard.n The FE port number of the ISU board is 1 to 8.n The GE port number of the ISU board is 9 to 10 ( GE Port 10 connects to the SCU board

through the backplane of the shelf).The ISU board always resides in slot 14 or 15 of the MA5600.

The ISU board communicates with the SCU board through the GE bus of the backplane ofthe frame. In this way, it is used as slot 6 of the SCU board.

NOTE

The ISU provides a serial port and a network port for you to congure and maintain it. For details,see Intelligent Service Unit Operation Manual.

31.2 Conguration Example of a Single ISUThis example shows how to congure a single ISU so that the user can access the Internetdirectly through the ISU board.

NetworkingFigure 31-1 shows a sample network for conguring a single ISU.



Figure 31-1 Sample network for conguring a single ISU

The following describes the sample network:n Ports 0 of the ADEF boards in slot 2 and slot 3 are connected to PC 1 and PC 2

respectively.n Port 0/7/0 of the MA5600 connects upstream to the BRAS. The ISU connects upstream

to the IP network.n PC 1 connects to the SCU, and PC 2 connects to the ISU.

Data PlanTable 31-1 shows the data plan for conguring a single ISU.

Table 31-1 Data plan for conguring a single ISU

Item DataMUX VLAN 20 VPI/VCI: 0/35

Upstream port: 0/7/0Virtual port: 0/2/0

MUX VLAN 21 VPI/VCI: 0/35Upstream port: 0/15/0/6Virtual port: 0/3/0


The following describes the conguration of ISU at the MA5600 side. For more details about how tocongure ISU, see Intelligent Service Unit Operation Manual.

Figure 31-2 shows the owchart for conguring a single ISU.



Conguration Guide

Figure 31-2 Flowchart for conguring a single ISU

Procedure

Step 1 Add the ISU board and the associated subboard.huawei(config)#board add 0/15 H531ISUA sub0 o2gaa

Step 2 Create a VLAN.huawei(config)#vlan 20 to 21 mux

Step 3 Add the upstream port and the virtual port to VLAN 20.huawei(config)#port vlan 20 0/7 0huawei(config)#service-port vlan 20 adsl 0/2/0 vpi 0 vci 35 rx-cttr 6 tx-cttr 6

Step 4 Add the upstream port and the virtual port to VLAN 21.huawei(config)#port vlan 21 0/15 0huawei(config)#service-port vlan 21 adsl 0/3/0 vpi 0 vci 35 rx-cttr 6 tx-cttr 6


—-End

Result

After the conguration, both PC 1 and PC 2 can access the Internet.

31.3 Conguration Example of Dual ISUsThis example shows how to congure the dual ISUs so that when the upstream port of the activeISU board fails, the standby ISU board will function automatically to replace the faulty one.

NetworkingFigure 31-3 show a sample network for conguring dual ISUs.



Figure 31-3 Sample network for conguring dual ISUs

If the upstream port of the active ISU board fails, the standby ISU board will functionautomatically to replace the faulty one.

Data PlanTable 31-2 shows the data plan for conguring dual ISUs.

Table 31-2 Data plan for conguring dual ISUs

Item DataISU1 Slot: 0/14ISU2 Slot: 0/15ADEF ADSL2+ port: 0/2/0

VLAN ID: 20SCU Upstream port: 0/7/0

Background Informationn You must add an ISU to slot 15 rst, and then to slot 14.n If you want to delete the ISUs, delete the ISU in slot 14 rst, and then the ISU in slot 15.

Conguration Flowchart

NOTE

The following describes the conguration of ISU at the MA5600 side. For more details about how tocongure ISU, see Intelligent Service Unit Operation Manual.

Figure 31-4 shows the owchart for conguring dual ISUs.



Conguration Guide

Figure 31-4 Flowchart for conguring dual ISUs.

Procedure

Step 1 Add the ISU board and the associated subboard.huawei(config)#board add 0/15 H531ISUA sub0 o4fbfhuawei(config)#board add 0/144 H531ISUA sub0 o4fbf

Step 2 Create VLAN 20.huawei(config)#vlan 20 mux

Step 3 Add the upstream port and service port to the VLAN.huawei(config)#port vlan 20 0/7 0huawei(config)#service-port vlan 20 adsl 0/2/0 vpi 0 vci 35 rx-cttr 0 tx-cttr 0

Step 4 Enable HRP.

Enable HRP to achieve the dual ISUs active/standby switchover function.huawei(config)#misu enable

NOTE

n By default, HRP is disabled.n When dual ISUs working with the SCU, set port 10 of the ISU board to work in the forced mode,

with auto negotiation function disabled.n After HRP is enabled, the ISU board residing in slot 15 works as the active board.n After HRP is enabled, manage the standby ISU board in outband NMS mode.


—-End

Result

After the system runs in the normal state, follow the steps to check whether dual ISUsconguration is successful.1. Run the display misu command to query the ISU board.

huawei(config)#display misu[MISU information]

function status: Enableshakehand timer: 3 (sec)Slot 14 ISU board status is Unknown



Slot 15 ISU board status is Normaluplink-port of Slot 15 ISU board is up

The upstream port of the active ISU board is enabled, and that of the standby ISU board isdisabled.

2. Dial up to access the network through the modem, and IP address is obtained.3. Unplug the network cable connected to the upstream port of ISU 1 board. Wait some time

(by default, this duration is three times that set by the command misu timer) until theupstream link of the SCU board is switched over to the ISU 2 automatically.

4. Disconnect the modem, and then redial. The access proves successful.


SmartAX MA5600 Multi-service Access ModuleConguration Guide 32 Ethernet OAM Conguration

32 Ethernet OAM Conguration


32.1 OverviewThis chapter describes Ethernet Operation Administration & Maintenance (OAM) and itsapplication to the MA5600.32.2 Conguration Example of Ethernet OAMThis example shows how to congure the Ethernet OAM on the MA5600.32.3 Creating an MDThis operation enables you to create an MD.32.4 Creating an MAThis operation enables you to create an MA.32.5 Creating an MEPThis operation enables you to create an MEP.32.6 Creating an RMEPThis operation enables you to create an RMEP.32.7 Enabling the CFM GloballyThis operation enables the CFM globally.32.8 Enabling the CFM Alarm GloballyThis operation enables the CFM alarm globally.32.9 Enabling the Administration Function of an MEPThis operation enables the administration function of an MEP.32.10 Enabling the CC Transmission of a MEPThis operation enables the CC transmission of an MEP.32.12 Conguring Priorities for Transmitting CCMs/LTMsThis operation enables you to congure priorities for transmitting CCMs/LTMs of an MEP.32.13 Conguring the Interval for an MA to Transmit a CCThis operation enables you to congure the interval for an MA to transmit a CC.32.14 Conguring the Base Address of Multicast Destination MAC Addresses of CCMs/LTMsTo send CCMs/LTMs, an MEP need to be specied with a multicast address. Because theprotocol does not specify the format of it, the multicast address is congurable to enhancethe intercommunication and compatibility of the MA5600. This operation enables you tocongure the base address of multicast destination MAC addresses of CCMs/LTMs.32.15 Conguring Loop Detection FunctionLoopback Message (LBM) helps an MEP to locate a fault in an MA. This operation enablesyou to congure loop detection function.


32 Ethernet OAM CongurationSmartAX MA5600 Multi-service Access Module

Conguration Guide

32.16 Conguring Linktrace FunctionLTMs are used to detect the MIP path between two MEPs. This operation enables you tocongure an LTM.



32.1 OverviewThis chapter describes Ethernet Operation Administration & Maintenance (OAM) and itsapplication to the MA5600.

Service DescriptionOAM is an effective method to reduce the cost on network maintenance and it connects tothe access convergence network through the upstream network port. OAM starts from orterminates at the upstream network port. You can perform OAM conguration managementthrough NMS. NMS maintains the network based on the reported information of OAM statusand alarms.

Service SpecicationIEEE P802.1ag CFM provides an end-to-end fault detection method.

Connectivity Fault Management (CFM) denes the process for diagnosing a fault in anEthernet domain. CFM is a multipoint-to-multipoint application scenario and it providesend-to-end fault detection and diagnosis for the entire Ethernet network.

The MA5600 supports Ethernet OAM mechanism of CFM protocol, including fault detectionand diagnosis methods, such as connectivity check, loop detection and link trace.

32.2 Conguration Example of Ethernet OAMThis example shows how to congure the Ethernet OAM on the MA5600.

NetworkingFigure 32-1 shows the sample network for conguring Ethernet OAM.

Figure 32-1 Sample network for conguring Ethernet OAM

Data PlanTable 32-1 lists the data plan for conguring Ethernet OAM.



Conguration Guide

Table 32-1 Data plan for conguring Ethernet OAM

Item DataMA5600_A Port: 0/7/0

Smart VLAN: 100MEP: 2/6/0, MEP-id: 260, RMEP-id: 2260, CC-interval: 1m

MA5600_B Port: 0/7/1Smart VLAN: 200MEP: 2/6/0, MEP-id: 2260, RMEP-id: 260, CC-interval: 1m

Background InformationBefore you conguring Ethernet OAM, make sure that:n The network devices and the lines are normal.n The router supports Ethernet OAM.

Conguration FlowchartFigure 32-2 shows the owchart for conguring Ethernet OAM.



Figure 32-2 Flowchart for conguring Ethernet OAM

Procedure

Step 1 Create and congure a VLAN.huawei(config)#vlan 100 smarthuawei(config)#port vlan 100 0/7 0

Step 2 Congure a Maintenance Domain (MD).huawei(config)#cfm md 2 name-format string huawei level 3

Step 3 Congure a Maintenance Association (MA).huawei(config)#cfm ma 2/6 name-format string huawei-6 vlan 100

Step 4 Congure a Maintenance association End Point (MEP).huawei(config)#cfm mep 2/6/0 mepid 260 direction outward port0/7/0 priority 7

Step 5 Congure a Remote MEP (RMEP).huawei(config)#cfm remote-mep 2/6/0 remote-mepid 2260

Step 6 (Optional) Congure interval for the MA to transmit Continuity Check Messages (CCMs).huawei(config)#cfm ma 2/6 cc-interval 1m

Step 7 Enable local CFM globally.



Conguration Guide

huawei(config)#cfm enable

Step 8 Enable remote CFM globally.huawei(config)#cfm remote-mep-detect enable


NOTE

Conguration on MA5600_B is the same as that on MA5600_A and it is not repeated here.

—-End

Result

After the conguration, run the display cfm statistics mep command on the MA5600_A orMA5600_B and you can nd packet statistics. Of the statistics, neither "CCM Sent Pkt Num"nor "CCM Received Pkt Num" values zero.

32.3 Creating an MDThis operation enables you to create an MD.

Background Informationn Ethernet CFM provides a fault diagnosis process in an Ethernet domain. It divides the

network into up to eight levels. Multiple levels can exist on a bridge simultaneously tomanage different MDs.

n Up to three MDs can be created in the system.n The administration domain of CFM comprises bridges while the maintenance domain is

combined by bridges and maintenance levels.TIP

It is recommended to classify the administrator domain into three levels: customer domain, providerdomain and operator domain, which use 7-5, 4-3 and 2-0 levels respectively.

Procedure

Step 1 Run the cfm md command to create an MD.

Step 2 Run the display cfm md command to query the conguration state of the MD.

—-End

Example

Assume that:n MD index: 2n Name type: stringn Name: huawein Level: 3To create the MD, do as follows:huawei(config)#cfm md 2 name-format string huawei level 3huawei(config)#display cfm md{ <cr>|mdindex<0,2> }:

Command:



display cfm md-----------------------------------------------------------------------MD MD MD MDIndex NameType Name Level-----------------------------------------------------------------------0 dns 1 71 dns feifei 62 string huawei 3-----------------------------------------------------------------------Total: 3

Related Operation

Table 32-2 lists the related operation for creating an MD.

Table 32-2 Related operation for creating an MD

To... Run the Command... RemarksDelete an MD undo cfm md The deleted MD must not be

congured with any MA.

32.4 Creating an MAThis operation enables you to create an MA.

Background Informationn The created MA must belong to an existing MD and associate with an existing VLAN.

The VLAN must not associate with any other MA.n By default, the interval for sending a CCM is 60s.n By default, detection of the remote MEP in an MA is enabled.n The system supports 48 MAs and each MD can be congured with up to 48 MAs.

Procedure

Step 1 Run the cfm ma command to create an MA.

Step 2 Run the display cfm md command to query the conguration state of the MA.

—-End

Example

Assume that:n MA index: 2/47n MA name type: stringn MA name: huawei-ma-10n MA VLAN ID: 20To create the MA, do as follows:huawei(config)#cfm ma 2/10 name-format string huawei-ma-10 vlan 20huawei(config)#display cfm ma 2/10MA Index : 2/10MA NameType : stringMA Name : huawei-ma-10MA VlanID : 20MA CC Interval : 1mMA Remote-mep-detect : enable



Conguration Guide

Related Operations

Table 32-3 lists the related operations for creating an MA.

Table 32-3 Related operations for creating an MA

To... Run the Command... RemarksDelete an MA undo cfm ma The deleted MA must not be

congured with any MEP orRMEP.

Congure the intervalfor an MA to send CCMs

cfm mamdindex/maindexcc-interval

Enable the detection ofremote MEP in an MA

cfm ma mdin-dex/maindexremote-mep-de-tect enable

You can congure only thecreated MA.

32.5 Creating an MEPThis operation enables you to create an MEP.

Background Informationn MA consists of Maintenance Points (MPs) and MP is dened to be on ports of bridges.

So, MP is the combination of bridge port, VLAN and maintenance level.n MP can be an MEP or a Maintenance association Interspace Point (MIP). MEP initiates

and responds to CFM messages while MIP does not initiate CFM messages buttransparently transmits or responds to CFM messages.

n Currently, ports on the MA5600 can function as only MEP.n Only one MEP can be created within an MA.n By default, the administrative state of MEP is enabled, the priority of CFM message is 7

and the transmission of CCMs is enabled.n To create an MEP, the associated MD and MA must be created successfully. Moreover,

on the VLAN that associates with the MA, there must be a port to be associated with thecreated MEP.

Procedure

Step 1 Run the cfm mep command to create an MEP.

Step 2 Run the display cfm mep command to query the conguration state of the MEP.

—-End

Example

Assume that:n MEP index: 2/4/0n MEP ID: 100n MEP direction: outwardn MEP port: 0/15/0n MEP priority: 5To create the MEP, do as follows:



huawei(config)#cfm mep 2/4/0 mepid 100 direction outward port 0/15/0 priority 5huawei(config)#display cfm mep 2/4/0Command:

display cfm mep 2/4/0MEP Index : 2/4/0MEP ID : 100MEP Direction : outwardMEP Port : 0/15/0MEP Admin Status : enableMEP CC Status : enableMEP Priority : 5MEP Alarm Status : -

Related Operation

Table 32-4 lists the related operation for creating an MEP.

Table 32-4 Related operation for creating an MEP

To... Run the Command...Delete an MEP undo cfm mep

32.6 Creating an RMEPThis operation enables you to create an RMEP.

Background Informationn Same MEP IDs cannot exist in an MA.n A local MEP can be associated with up to six RMEPs.n MEPs mutually remote to each other must be in the same MA.

Procedure

Step 1 Run the cfm remote-mep command to create an RMEP.


—-End

Example

To create an RMEP with remote-mepid 200 for local MEP 2/4/0, do as follows:huawei(config)#cfm remote-mep 2/4/5 remote-mepid 200huawei(config)#display cfm ma 2/4MA Index : 2/4MA NameType : stringMA Name : huawei-ma-4MA VlanID : 50MA CC Interval : 1mMA Remote-mep-detect : enable-----------------------------------------------------------------------MEP MEP MEP Admin CC AlarmIndex MEPID Direction Port Status Status Priority Status-----------------------------------------------------------------------2/4/0 100 outward 0/7/0 enable enable 5 ------------------------------------------------------------------------Total: 1-----------------------------------------------------------------------Remote MEP Remote MEP Remote MEPIndex MEPID Mac-address-----------------------------------------------------------------------2/4/5 200 ------------------------------------------------------------------------Total: 1



Conguration Guide

Related Operation

Table 32-5 lists the related operation for creating an RMEP.

Table 32-5 Related operation for creating an RMEP

To... Run the Command...Delete an RMEP undo cfm remote-mep

32.7 Enabling the CFM GloballyThis operation enables the CFM globally.

Background Informationn When the CFM is enabled, the CFM packets are to be captured and functions of

Continuity Check, loop detection and linktrace are enabled.n When the CFM is disabled, the CFM packets are not to be captured and functions of

Continuity Check, loop detection and linktrace are enabled.n By default, the CFM is disabled.

Procedure

Step 1 Run the cfm enable command to enable the CFM globally.

Step 2 Run the display cfm command to query the conguration state of the CFM.

—-End

Example

To enable the CFM globally, do as follows:huawei(config)#cfm enablehuawei(config)#display cfm{ <cr>|md<K>|ma<K>|mep<K>|statistics<K> }:

Command:display cfm

CFM Global Status : enableRemote-mep-detect Status : disableAlarm Status : enableCC/LT Base-mac-address : 0180-c200-0100

Related Operation

Table 32-6 lists the related operation for enabling the CFM globally.

Table 32-6 Related operation for enabling the CFM globally

To... Run the Command...Disable CFM switch globally cfm disable

32.8 Enabling the CFM Alarm GloballyThis operation enables the CFM alarm globally.



Background Informationn When the CFM alarm is enabled, alarms detected by the CFM will be reported.n When the CFM is disabled, alarms detected by the CFM will not be reported.n By default, the CFM alarm is enabled globally.

Procedure

Step 1 Run the cfm alarm enable command to enable the CFM alarm globally.

Step 2 Run the display cfm command to query the conguration state of the CFM.

—-End

Example

To enable the CFM alarm globally, do as follows:huawei(config)#cfm alarm enablehuawei(config)#display cfm{ <cr>|md<K>|ma<K>|mep<K>|statistics<K> }:

Command:display cfm


Related Operation

Table 32-7 lists the related operation for enabling CFM alarm globally

Table 32-7 Related operation for enabling CFM alarm globally

To... Run the Command...Disable the CFM alarm globally cfm alarm disable

32.9 Enabling the Administration Function of an MEPThis operation enables the administration function of an MEP.

Background Informationn MEP administrative state identies the availability of MEP function. When the

administrative function of an MEP is disabled, the MEP stops to send and receive CCMs,and functions of loop detection and linktrace are prohibited.

n By default, the administration function of an MEP is enabled.

Procedure

Step 1 Run the cfm mep enable command to enable the administration function of an MEP.


—-End



Conguration Guide

Example

To enable the administration function of MEP 2/4/0, do as follows:huawei(config)#cfm mep 2/4/0 enablehuawei(config)#display cfm mep 2/4/0

Command:display cfm mep 2/4/0

MEP Index : 2/4/0MEP ID : 100MEP Direction : outwardMEP Port : 0/7/0MEP Admin Status : enableMEP CC Status : enableMEP Priority : 5MEP Alarm Status : -

Related Operation

Table 32-8 lists the related operation for enabling the administration function of an MEP.

Table 32-8 Related operation for enabling the administration function of an MEP

To... Run the Command...Disable the administration function ofan MEP

cfm mep mindex/maindex/mepindex disable

32.10 Enabling the CC Transmission of a MEPThis operation enables the CC transmission of an MEP.

Background InformationBy default, the CC transmission of an MEP is enabled.

Procedure

Step 1 Run the cfm mep cc enable command to enable the CC transmission of an MEP.


—-End

Example

To enable the CC transmission of MEP 2/4/0, do as follows:huawei(config)#cfm mep 2/4/0 cc enablehuawei(config)#display cfm mep 2/4/0MEP Index : 2/4/0MEP ID : 100MEP Direction : outwardMEP Port : 0/7/0MEP Admin Status : enableMEP CC Status : enableMEP Priority : 5MEP Alarm Status : -

Related Operation

Table 32-9 lists the related operation for enabling the CC transmission of an MEP.



Table 32-9 Related operation for enabling the CC transmission of an MEP

To... Run the Command...Disable the CC transmission of an MEP cfm mep mindex/maindex/mepindex cc disable

32.11 Enabling RMEP Detection FunctionThis operation enables the detection function of the RMEP.

Background Informationn When the detection function of the RMEP is enabled, the RMEP congured in the MA

will be detected. Alarms are generated when the CC loss or RDI error occurs.n When the detection function of the RMEP is disabled, the RMEP congured in the MA

will not be detected.n By default, the detection function of the RMEP is enabled.

Procedure

Step 1 Run the cfm ma remote-mep-detect enable command to enable the detection functionof the RMEP.

Step 2 Run the display cfm ma command to query the conguration state of the MA.

—-End

Example

To enable the detection function of MA 2/4, do as follows:huawei(config)#cfm ma 2/4 remote-mep-detect enablehuawei(config)#display cfm ma 2/4MA Index : 2/4MA NameType : stringMA Name : huawei-ma-4MA VlanID : 50MA CC Interval : 1mMA Remote-mep-detect : enable-----------------------------------------------------------------------MEP MEP MEP Admin CC AlarmIndex MEPID Direction Port Status Status Priority Status-----------------------------------------------------------------------2/4/0 100 outward 0/7/0 enable enable 5 ------------------------------------------------------------------------Total: 1-----------------------------------------------------------------------Remote MEP Remote MEP Remote MEPIndex MEPID Mac-address-----------------------------------------------------------------------2/4/5 200 ------------------------------------------------------------------------Total: 1

Related Operation

Table 32-10 lists the related operation for enabling detection function of the RMEP.



Conguration Guide

Table 32-10 Related operation for enabling detection function of the RMEP

To... Run the Command...Disable the detection of the RMEP cfm mep mindex/maindex remote-mep-detect

disable

32.12 Conguring Priorities for Transmitting CCMs/LTMsThis operation enables you to congure priorities for transmitting CCMs/LTMs of an MEP.

Background InformationThe priority for transmitting CCMs/LTMs of an MEP ranges 0-7. The smaller the priorityvalue, the higher priority. By default, the priority for transmitting CCMs/LTMs of an MEP is 7.

Procedure

Step 1 Run the cfm mep priority command to congure the priorities for transmitting CCMS/LTMsof an MEP.


—-End

Example

To set the priorities for transmitting CCMs/LTMs of MEP 2/4/0 to 3, do as follows:huawei(config)#cfm mep 2/4/0 priority 3huawei(config)#display cfm mep 2/4/0MEP Index : 2/4/0MEP ID : 100MEP Direction : outwardMEP Port : 0/7/0MEP Admin Status : enableMEP CC Status : enableMEP Priority : 3MEP Alarm Status : -

Related Operation

Table 32-11 lists the related operation for conguring the priorities for transmittingCCMs/LTMs of an MEP.

Table 32-11 Related operation for conguring the priorities for transmitting CCMs/LTMsof an MEP

To... Run the Command...Enable the administration function ofan MEP

cfm mep enable

32.13 Conguring the Interval for an MA to Transmit a CCThis operation enables you to congure the interval for an MA to transmit a CC.

Prerequisite

Before you congure the interval, the CC transmission state of MEPs in the MA must bedisabled.



Background Informationn By default, the interval for an MA management entity to transmit a CC is 1 minute.n At present, intervals of 1 minute and 10 minutes are supported.

Procedure

Step 1 Run the cfm ma cc-interval command to congure the interval for an MA to transmit a CC.

Step 2 Run the display cfm ma command to query the conguration state of the MA.

—-End

Example

To set the interval for an MA to send a CC to 10 minutes, do as follows:huawei(config)#cfm ma 2/4 cc-interval 10mhuawei(config)#display cfm ma 2/4MA Index : 2/4MA NameType : stringMA Name : huawei-ma-4MA VlanID : 50MA CC Interval : 10mMA Remote-mep-detect : enable-----------------------------------------------------------------------MEP MEP MEP Admin CC AlarmIndex MEPID Direction Port Status Status Priority Status-----------------------------------------------------------------------2/4/0 100 outward 0/7/0 enable disable 3 ------------------------------------------------------------------------Total: 1-----------------------------------------------------------------------Remote MEP Remote MEP Remote MEPIndex MEPID Mac-address-----------------------------------------------------------------------2/4/5 200 ------------------------------------------------------------------------Total: 1

Related Operation

Table 32-12 lists the related operation for conguring the interval for an MA to transmit a CC.

Table 32-12 Related operation for conguring the interval for an MA to transmit a CC

To... Run the Command...Congure CC transmission state of anMEP

cfm mep mdindex/maindex/mepindex cc { enable| disable }

32.14 Conguring the Base Address of MulticastDestination MAC Addresses of CCMs/LTMs

To send CCMs/LTMs, an MEP need to be specied with a multicast address. Because theprotocol does not specify the format of it, the multicast address is congurable to enhancethe intercommunication and compatibility of the MA5600. This operation enables you tocongure the base address of multicast destination MAC addresses of CCMs/LTMs.

Background Informationn By default, the base multicast destination MAC address is 0180-C200-0000.n Currently, the format of the base MAC address is 0180-C2xx-xxx0. The part of 0180-C2

is specied in the protocol and the part of xxx-xxx in the middle needs to be congured.



Conguration Guide

NOTE

The base address of multicast destination MAC addresses is for MEPs in different MDs. The multicastaddresses used for sending CCMs/LTMs derive from the base multicast destination MAC address bychanging the last digit of it. The last digit of the multicast address used by MEP to send CCMs isconsistent with the MD level (0–7) which the MEP belongs to, while that used by the MEP to LTMsequals the MD level plus 8 (8–F).

Procedure

Step 1 Run the cfm base-mac-address command to congure the base multicast destination MACaddress.

Step 2 Run the display cfm command to query the conguration status of the CFM.

—-End

Example

To congure the base multicast destination MAC address as 0180-C211-1110, do as follows:huawei(config)#cfm base-mac-address 0180-C211-1110huawei(config)#display cfm{ <cr>|md<K>|ma<K>|mep<K>|statistics<K> }:

Command:display cfm


32.15 Conguring Loop Detection FunctionLoopback Message (LBM) helps an MEP to locate a fault in an MA. This operation enablesyou to congure loop detection function.

Prerequisite

Before enabling the MEP loop detection function, you must enable the CFM function globallyand enable the administrative state of the corresponding MEP.

Background Informationn LBM is a unicast message and the unicast MAC address is the address of MEP or MIP

discovered by Continuity Check (CC) or linktrace (LT). The MEP at the source endgenerates an LBM, adds the MD and MA names to it, and then sends the LBM. Atthe same time, the timer is triggered to calculate the time. When the destination MEPreceives the LBM, it sends a Loopback Reply (LBR) to the source MEP. Then, theloopback succeeds.

n By default, the count of LBMs to be sent is 4; the interval for sending LBMs is 1 x 100ms; the priority of LBM is the same as that of CCM.

Procedure

Step 1 Run the cfm loopback command to congure the loop detection function.

Step 2 Run the display cfm statistics command to query the statistics of CFM.

—-End



Example

Assume that:n Count of LBMs: 5n Interval: 1000 msn Priority: 6To congure that LBM from MEP 2/4/0 is sent to the equipment with the MAC address0000-0000-0009, do as follows:huawei(config)#cfm loopback mep 2/4/0 dst-mac-address 0000-0000-0009count 5 interval 10 priority 6LBR Lost : Sequence-Num = 1LBR Lost : Sequence-Num = 2LBR Lost : Sequence-Num = 3LBR Lost : Sequence-Num = 4LB Operation: LBM-Sent = 4 , LBR-Received = 0 , LBR-Lost = 4

huawei(config)#display cfm statistics mep 2/4/0Command:

display cfm statistics mep 2/4/0CCM Sent Pkt Num : 5037CCM Received Pkt Num : 0CCM Xcon Pkt Received Num : 0CCM Error Pkt Received Num : 0CCM Wrong Pattern Drop Num : 0LBM Sent Pkt Num : 9LBM Received Pkt Num : 0LBM Wrong Pattern Drop Num : 0LBM DstMac Mismatch Drop Num : 0LBR Sent Pkt Num : 0LBR Received Pkt Num : 0LBR Out of Order Num : 0LBR Wrong Pattern Drop Num : 0LBR Not Work Drop Num : 0LBR DstMAC Mismatch Drop Num : 0LBR SrcMAC Mismatch Drop Num : 0LBR Wrong TransID Drop Num : 0LBR Level Mismatch Drop Num : 0LTM Sent Pkt Num : 0LTM Received Pkt Num : 0


Related Operations

Table 32-13 lists the related operations for conguring loop detection function.

Table 32-13 Related operations for conguring loop detection function

To... Run the Command...Congure linktrace function cfm link-traceEnable administration function of CFMglobally

cfm enable

Enable the administration of an MEP cfm mep enable

32.16 Conguring Linktrace FunctionLTMs are used to detect the MIP path between two MEPs. This operation enables you tocongure an LTM.

Background Informationn An LTM is the message with known multicast address. But LTM is not multicasted and

additional information on the message indicates the destination MAC address of theMEP. When the LTM is forwarded by MPs to the destination MEP in a unicast way,



Conguration Guide

each MP along the path responds an LTR to the source MEP. In this way, the sourceMEP obtains the information of MPs along the transmission path and records the MACaddresses of these MPs.

n By default, the priority of an LTM is the same as that of a CCM.n Before enabling the loop detection of an MEP, you must enable CFM function globally

and enable the administration of the corresponding MEP.

Procedure

Step 1 Run the cfm link-trace command to congure Linktrace function.

Step 2 Run the display cfm statistics command to query the statistics of CFM packets.

—-End

Example

To set that LT packet from MEP 0/2/4 is sent to the equipment with MAC address0000-0000-0001 and the priority is 6, do as follows:huawei(config)#cfm link-trace mep 2/4/0 dst-mac-address 0000-0000-0001priority 6huawei(config)#display cfm statistics mep 2/4/0Command:

display cfm statistics mep 2/4/0CCM Sent Pkt Num : 5037CCM Received Pkt Num : 0CCM Xcon Pkt Received Num : 0CCM Error Pkt Received Num : 0CCM Wrong Pattern Drop Num : 0LBM Sent Pkt Num : 9LBM Received Pkt Num : 0LBM Wrong Pattern Drop Num : 0LBM DstMac Mismatch Drop Num : 0LBR Sent Pkt Num : 0LBR Received Pkt Num : 0LBR Out of Order Num : 0LBR Wrong Pattern Drop Num : 0LBR Not Work Drop Num : 0LBR DstMAC Mismatch Drop Num : 0LBR SrcMAC Mismatch Drop Num : 0LBR Wrong TransID Drop Num : 0LBR Level Mismatch Drop Num : 0LTM Sent Pkt Num : 1LTM Received Pkt Num : 0


Related Operation

Table 32-14 lists the related operations for conguring Linktrace function.

Table 32-14 Related operations for conguring Linktrace function

To... Run the Command…Congure loop detection function cfm loopbackEnable administration of CFM globally cfm enableEnable administration of an MEP cfm mep enable


SmartAX MA5600 Multi-service Access ModuleConguration Guide 33 MPLS OAM Conguration

33 MPLS OAM Conguration


33.1 OverviewThis section describes the MPLS OAM function and its applications on the MA5600.33.2 Conguration Example of Detection of MPLS OAM for Static LSP ConnectivityThis example shows how to congure the function of MPLS OAM to detect the static LSPconnectivity.33.3 Conguration Example of MPLS OAM Protection SwitchoverThis example shows how to congure MPLS OAM protection switchover.33.4 Conguring the MPLS OAM Function of the IngressThis operation enables you to congure the MPLS OAM function of the ingress.33.5 Conguring the MPLS OAM Function of the EgressThis operation enables you to congure the MPLS OAM function of the egress.33.6 Conguring the Tunnel Protection GroupThis operation enables you to congure the tunnel protection group.33.7 Switching Over Protection Group ManuallyThis operation enables you to switch over the protection group manually. In this case, thetrafc in the protection group can be switched over to the related channel.33.8 Enabling the Protection Group to Output the Debugging InformationThis operation enables the protection group to output the debugging information.


33 MPLS OAM CongurationSmartAX MA5600 Multi-service Access Module

Conguration Guide

33.1 OverviewThis section describes the MPLS OAM function and its applications on the MA5600.

Service DescriptionOperation Administration & Maintenance (OAM) is a key method to reduce the networkmaintenance cost. The MPLS OAM mechanism is designed for this purpose.

Service SpecicationMPLS supports multiple layer 2 (L2) and layer 3 (L3) protocols. It provides the OAMmechanism independent of any upper or lower layer.

By the MPLS OAM mechanism, the MA5600 detects and locates effectively the defects insidethe network at the MPLS layer. Then, it reports and handles the defects. When the fault occurs,the system triggers the protection switchover.

33.2 Conguration Example of Detection of MPLS OAMfor Static LSP Connectivity

This example shows how to congure the function of MPLS OAM to detect the static LSPconnectivity.

NetworkingFigure 33-1 shows a sample network of detection of MPLS OAM for static LSP connectivity.

Figure 33-1 Sample network of detection of MPLS OAM for static LSP connectivity

Data PlanTable 33-1 shows the data plan for detection of MPLS OAM for static LSP connectivity.



Table 33-1 Data plan for detection of MPLS OAM for static LSP connectivity

Item Datalsr-id: 1.1.1.1/32Port: 0/7/2VLAN: 10IP address of the port connecting to Router A: 10.1.2.1/24Port: 0/7/3VLAN: 11IP address of the port connecting to Router B: 10.1.1.1/24

MA5600_A

The static LSP passes Router A and targets MA5600_B.lsr-id: 3.3.3.3/32Port: 0/7/2VLAN: 30IP address of the port connecting to Router A: 10.1.3.2/24Port: 0/7/3VLAN: 31IP address of the port connecting to Router B: 10.1.4.2/24

MA5600_B

The static LSP passes Router B and targets MA5600_Alsr-id: 2.2.2.2/32IP address of the port connecting to MA5600_A: 10.1.2.2/24

Router A

IP address of the port connecting to MA5600_B: 10.1.3.1/24lsr-id: 4.4.4.4/32IP address of the port connecting to MA5600_A: 10.1.1.2/24Router B

IP address of the port connecting to MA5600_B: 10.1.4.1/24

PrerequisiteBefore the conguration, make sure that:n The network device and the line are in the normal state.n Set the IP addresses and the masks of the ports based on the sample network. After

that, LSRs can ping the peer LSRs.n Congure the OSPF protocol on all MA5600 devices and routers, and the congured

routes are declared successfully.

Conguration FlowchartFigure 33-2 shows the owchart for detection of MPLS OAM for static LSP connectivity.



Conguration Guide

Figure 33-2 Flowchart for detection of MPLS OAM for static LSP connectivity

Procedure

Step 1 Enable the basic function of MPLS and the function of MPLS TE.1. Enable the basic function of MPLS and the function of MPLS TE globally.

MA5600_A(config)#mpls lsr-id 1.1.1.1MA5600_A(config)#mplsMA5600_A(config-mpls)#mpls teMA5600_A(config-mpls)#quit

2. Enable the basic function of MPLS and the function of MPLS TE of the interface.MA5600_A(config)#vlan 10 standardMA5600_A(config)#mpls vlan 10MA5600_A(config)#port vlan 10 0/7 0MA5600_A(config)#interface vlanif 10MA5600_A(config-if-vlanif10)#ip address 10.1.1.1 24MA5600_A(config-if-vlanif10)#mplsMA5600_A(config-if-vlanif10)#mpls teMA5600_A(config-if-vlanif10)#quit

MA5600_A(config)#vlan 11 standardMA5600_A(config)#mpls vlan 11MA5600_A(config)#port vlan 11 0/7 1MA5600_A(config)#interface vlanif 11MA5600_A(config-if-vlanif11)#ip address 10.1.2.1 24MA5600_A(config-if-vlanif11)#mplsMA5600_A(config-if-vlanif11)#mpls teMA5600_A(config-if-vlanif11)#quit

NOTE

The conguration of MA5600_A is the same as that of MA5600_B. This procedure usesMA5600_A as an example

Step 2 Congure the static LSP to be detected. The ingress is MA5600_A, the intermediate node ofthe LSP is Router A, and the egress is MA5600_B.



1. On MA5600_A, use the static LSP to congure the MPLS TE tunnel targetingMA5600_B.MA5600_A(config)#interface tunnel 20MA5600_A(config-if-tunnel20)#tunnel-protocol mpls teMA5600_A(config-if-tunnel20)#destination 3.3.3.3MA5600_A(config-if-tunnel20)#mpls te tunnel-id 20MA5600_A(config-if-tunnel20)#mpls te signal-protocol staticMA5600_A(config-if-tunnel20)#mpls te commitMA5600_A(config-if-tunnel20)#quit

2. Congure MA5600_A as the ingress of the static LSP.MA5600_A(config)#static-lsp ingress tunnel-interface tunnel 200destination 3.3.3.3 nexthop 10.1.2.2 out-label 20

3. Congure Router A as the intermediate node of the static LSP. The conguration ofthe router is not described here.

4. Congure MA5600_B as the egress of the static LSP.MA5600_B(config)#static-lsp egress 200 incoming-interface vlanif 30in-label 8210

Step 3 Congure the revertive tunnel static LSP, with the ingress of MA5600_B, The intermediatenode of the LSP is Router B, and the egress of the CR-LSP is MA5600_A.1. On MA5600_B, use the static LSP to congure the MPLS TE tunnel that targets

MA5600_A.MA5600_B(config)#interface tunnel 10MA5600_B(config-if-tunnel10)#tunnel-protocol mpls teMA5600_B(config-if-tunnel10)#destination 1.1.1.1MA5600_B(config-if-tunnel10)#mpls te tunnel-id 100MA5600_B(config-if-tunnel10)#mpls te signal-protocol staticMA5600_B(config-if-tunnel10)#mpls te commitMA5600_B(config-if-tunnel10)#quit

2. Congure MA5600_B as the ingress of the static LSP.MA5600_B(config)#static-lsp ingress tunnel-interface tunnel 10destination 1.1.1.1 nexthop 10.1.4.1 out-label 40

3. Congure Router B as the intermediate node of the static LSP. The conguration ofthe router is not described here.

4. Congure MA5600_A as the egress of the static LSP.MA5600_A(config)#static-lsp egress 10 incoming-interface vlanif 10in-label 8230

Step 4 Congure the MPLS OAM function of the ingress of the LSP to be detected.MA5600_A(config)#mplsMA5600_A(config-mpls)#mpls oamMA5600_A(config-mpls)#quitMA5600_A(config)#mpls oam ingress tunnel 20 type ffd frequency 100backward-lsp lsr-id 3.3.3.3 tunnel-id 10MA5600_A(config)#mpls oam ingress enable all

Step 5 Congure the MPLS OAM function of the egress of the LSP to be detected.MA5600_B(config)#mplsMA5600_B(config-mpls)#mpls oamMA5600_B(config-mpls)#quitMA5600_B(config)#mpls oam egress lsp-name 20 type ffd frequency 100backward-lsp tunnel 10 privateMA5600_A(config)#mpls oam egress enable all


—-End



Conguration Guide

Result

After the conguration, run the shutdown command on Router A to disable the port connectedto MA5600_B to simulate the link fault. Run the display mpls oam egress all command onMA5600_B and you can nd that MA5600_B detects the fault.

33.3 Conguration Example of MPLS OAM ProtectionSwitchover

This example shows how to congure MPLS OAM protection switchover.

NetworkingFigure 33-3 shows a sample network of the MPLS OAM protection switchover.

Figure 33-3 Sample network of MPLS OAM protection switchover

Data PlanTable 33-2 shows the data plan for the MPLS OAM protection switchover.



Table 33-2 Data plan for the MPLS OAM protection switchover

Item Datalsr-id: 1.1.1.1/32Port: 0/7/2VLAN: 10IP address of the port connecting to Router A: 10.1.2.1/24Port: 0/7/3VLAN: 11IP address of the port connecting to Router B: 10.1.1.1/24

MA5600_A

The active tunnel passes Router A and targets MA5600_BThe standby tunnel passes Router B and targets MA5600_Blsr-id: 3.3.3.3/32Port: 0/7/2VLAN: 30IP address of the port connecting to Router A: 10.1.3.2/24Port: 0/7/3VLAN: 31IP address of the port connecting to Router B: 10.1.4.2/24

MA5600_B

The revertive tunnel passes Router B and targets MA5600_Alsr-id: 2.2.2.2/32IP address of the port connecting to MA5600_A: 10.1.2.2/24

Router A

IP address of the port connecting to MA5600_B: 10.1.3.1/24lsr-id: 4.4.4.4/32IP address of the port connecting to MA5600_A: 10.1.1.2/24

Router B

IP address of the port connecting to MA5600_B: 10.1.4.1/24

Prerequisiten The network device and the line are in the normal state.n Set the IP addresses and the masks of the ports based on the sample network. After

that, LSRs can ping the peer LSRs.n Congure the OSPF protocol on all MA5600 devices and routers, and the congured

routes are declared successfully. Otherwise, the static routes are congured.

Conguration FlowchartFigure 33-4 shows the owchart for conguring MPLS OAM protection switchover.



Conguration Guide

Figure 33-4 Flowchart for conguring MPLS OAM protection switchover

Procedure

Step 1 Enable the basic function of MPLS, and the functions of MPLS TE, RSVP-TE and CSPF.1. Enable the basic function of MPLS, and the function of MPLS TE globally.

MA5600_A(config)#mpls lsr-id 1.1.1.1MA5600_A(config)#mplsMA5600_A(config-mpls)#mpls teMA5600_A(config-mpls)#mpls rsvp-teMA5600_A(config-mpls)#mpls te cspfMA5600_A(config-mpls)#quit

2. Enable the basic function of MPLS and the function of MPLS TE of the interface.MA5600_A(config)#vlan 10 standardMA5600_A(config)#mpls vlan 10MA5600_A(config)#port vlan 10 0/7 0MA5600_A(config)#interface vlanif 10MA5600_A(config-if-vlanif10)#ip address 10.1.1.1 24MA5600_A(config-if-vlanif10)#mplsMA5600_A(config-if-vlanif10)#mpls teMA5600_A(config-if-vlanif10)#quit

MA5600_A(config)#vlan 11 standardMA5600_A(config)#mpls vlan 11MA5600_A(config)#port vlan 11 0/7 1



MA5600_A(config)#interface vlanif 11MA5600_A(config-if-vlanif11)#ip address 10.1.2.1 24MA5600_A(config-if-vlanif11)#mplsMA5600_A(config-if-vlanif11)#mpls teMA5600_A(config-if-vlanif11)#quitMA5600_A(config)#mplsMA5600_A(config-mpls)#mpls rsvp-teMA5600_A(config-mpls)#mpls te cspfMA5600_A(config-mpls)#quit

NOTE

The conguration of MA5600_A is the same as that of MA5600_B. This procedure usesMA5600_A as an example

Step 2 Enable OSPF TE.MA5600_A(config)#ospf 100MA5600_A(config-ospf-100)#opaque-capability enableMA5600_A(config-ospf-100)#area 0MA5600_A(config-ospf-100-area-0.0.0.0)#mpls-te enable standard-complyingMA5600_A(config-ospf-100-area-0.0.0.0)#quit

NOTE

The conguration of MA5600_A is the same as that of MA5600_B. This procedure uses MA5600_A asan example

Step 3 Congure the MPLS TE attributes of the link.MA5600_A(config)#interface vlanif 10MA5600_A(config-if-vlanif10)#mpls te max-link-bandwidth 2048MA5600_A(config-if-vlanif10)#mpls te max-reservable-bandwidth 1024MA5600_A(config-if-vlanif10)#quitMA5600_A(config)#interface vlanif 11MA5600_A(config-if-vlanif11)#mpls te max-link-bandwidth 2048MA5600_A(config-if-vlanif11)#mpls te max-reservable-bandwidth 1024MA5600_A(config-if-vlanif11)#quit

NOTE

The conguration of MA5600_A is the same as that of MA5600_B. This procedure uses MA5600_A asan example

Step 4 Congure the explicit path of MPLS TE.1. On MA5600_A, congure its explicit path to MA5600_B.

MA5600_A(config)#explicit-path 1a2 enableMA5600_A(config-explicit-path-1a2)#next hop 10.1.2.2 include strictMA5600_A(config-explicit-path-1a2)#next hop 10.1.3.2 include looseMA5600_A(config-explicit-path-1a2)#quit

MA5600_A(config)#explicit-path 1b2 enableMA5600_A(config-explicit-path-1b2)#next hop 10.1.1.2 include strictMA5600_A(config-explicit-path-1b2)#next hop 10.1.4.2 include looseMA5600_A(config-explicit-path-1b2)#quit

2. On MA5600_B, congure its explicit path to MA5600_A.MA5600_B(config)#explicit-path 1b2 enableMA5600_B(config-explicit-path-2b1)#next hop 10.1.4.1 include strictMA5600_B(config-explicit-path-2b1)#next hop 10.1.1.1 include looseMA5600_B(config-explicit-path-2b1)#quit

Step 5 Congure the MPLS TE tunnel.1. Congure the active tunnel from MA5600_A to MA5600_B. The intermediate node is

Router A.MA5600_A(config)#interface tunnel 20MA5600_A(config-if-tunnel20)#tunnel-protocol mpls teMA5600_A(config-if-tunnel20)#destination 3.3.3.3MA5600_A(config-if-tunnel20)#mpls te tunnel-id 20MA5600_A(config-if-tunnel2)#mpls te path explicit-path 1a2MA5600_A(config-if-tunnel20)#mpls te signal-protocol rsvp-teMA5600_A(config-if-tunnel20)#mpls te bandwidth bc0 1500MA5600_A(config-if-tunnel20)#mpls te commitMA5600_A(config-if-tunnel20)#quit



Conguration Guide

2. Congure the standby tunnel from MA5600_A to MA5600_B. The intermediate node isRouter B.MA5600_A(config)#interface tunnel 10MA5600_A(config-if-tunnel10)#tunnel-protocol mpls teMA5600_A(config-if-tunnel10)#destination 3.3.3.3MA5600_A(config-if-tunnel10)#mpls te tunnel-id 10MA5600_A(config-if-tunnel10)#mpls te path explicit-path 1b2MA5600_A(config-if-tunnel10)#mpls te signal-protocol rsvp-teMA5600_A(config-if-tunnel10)#mpls te bandwidth bc0 1500MA5600_A(config-if-tunnel10)#mpls te commitMA5600_A(config-if-tunnel10)#quit

3. Congure the revertive tunnel from MA5600_B to MA5600_A. The intermediate node isRouter B.MA5600_B(config)#interface tunnel 10MA5600_B(config-if-tunnel10)#tunnel-protocol mpls teMA5600_B(config-if-tunnel10)#destination 1.1.1.1MA5600_B(config-if-tunnel10)#mpls te tunnel-id 10MA5600_B(config-if-tunnel10)#mpls te path explicit-path 2b1MA5600_B(config-if-tunnel10)#mpls te signal-protocol rsvp-teMA5600_B(config-if-tunnel10)#mpls te bandwidth bc0 1500MA5600_B(config-if-tunnel10)#mpls te commitMA5600_B(config-if-tunnel10)#quit

Step 6 Congure the tunnel protection group.MA5600_A(config)#interface tunnel 20MA5600_A(config-if-tunnel20)#mpls te protection tunnel 10 moderevertive wtr 30MA5600_A(config-if-tunnel20)#mpls te commitMA5600_A(config-if-tunnel20)#quit

Step 7 Congure the MPLS OAM function.1. On MA5600_A, congure the MPLS OAM function of the ingress.

MA5600_A(config)#mplsMA5600_A(config-mpls)#mpls oamMA5600_A(config-mpls)#quitMA5600_A(config)#mpls oam ingress tunnel 20 type ffd frequency 100backward-lsp lsr-id 3.3.3.3 tunnel-id 10MA5600_A(config)#mpls oam ingress enable all

2. On MA5600_B, congure the MPLS OAM function of the egress.MA5600_B(config)#mplsMA5600_B(config-mpls)#mpls oamMA5600_B(config-mpls)#mpls oam egress lsr-id 1.1.1.1 tunnel-id 20 typeffd frequency 100 backward-lsp tunnel 10 privateMA5600_B(config-mpls)#mpls oam egress enable allMA5600_B(config-mpls)#quit


—-End

Result

After the conguration, run the shutdown command on Router A to disable the port connectedto MA5600_B to simulate the link fault. Run the display mpls oam egress all command onMA5600_B, and you can nd that MA5600_B detects the fault and implements protectionbased on the conguration.



33.4 Conguring the MPLS OAM Function of the IngressThis operation enables you to congure the MPLS OAM function of the ingress.

Background Informationn By default, the MPLS OAM function is disabled globally. Therefore, you need to enable

it before conguring the MPLS OAM function of the ingress.n After the MPLS OAM function is enabled globally, you can congure the MPLS OAM

instance.n For a same LSP, the parameters of the MPLS OAM of the egress must be the same as

those of the ingress.n After the MPLS OAM parameters are set, enable the OAM function of the ingress rst.

Otherwise, the egress generates alarms.

Procedure

Step 1 Run the mpls command to switch over to MPLS mode.

Step 2 In MPLS mode, run the mpls oam command to enable the MPLS OAM function globally.

Step 3 In global cong mode, run the mpls oam ingress command to set the MPLS OAM parametersof the ingress.

Step 4 In global cong mode, run the mpls oam ingress enable command to enable the MPLSOAM function of the ingress.

Step 5 In global cong mode, run the display mpls oam ingress command to query the instance ofthe source MPLS OAM of the LSP.

—-End

Example

To enable the MPLS OAM protection function for LSP tunnel 10, assume that the detectiontype is FFD, the detection frequency is 100 ms, the LSR ID of the reverse tunnel is 80.80.80.80,the ID of the reverse tunnel is 20, the sources of all MPLS OAM are enabled, do as follows:huawei(config)#mplshuawei(config-mpls)#mpls oamhuawei(config-mpls)#quithuawei(config-mpls)#mpls oam ingress tunnel 10 type ffd frequency 100backward-lsp lsr-id 80.80.80.80 tunnel-id 20huawei(config)#mpls oam ingress enable allhuawei(config)#display mpls oam ingress{ all<K>|Tunnel<K> }:all{ <cr>|verbose<K>|slot<K> }:

Command:display mpls oam ingress all

--------------------------------------------------------------------------------No. Tunnel-name Ttsi Type Frequency Status--------------------------------------------------------------------------------1 tunnel10 -- FFD 100 ms Non-defect2 tunnel20 -- FFD 10 ms Stop--------------------------------------------------------------------------------Total Oam Num: 1Total Start Oam Num: 0Total Defect Oam Num: 0

Related Operations

Table 33-3 lists the related operations for conguring the MPLS OAM function of the ingress.



Conguration Guide

Table 33-3 Related operations for conguring the MPLS OAM function of the ingress

To... Run the Command...Disable the MPLS OAM functionglobally

undo mpls oam

Set the parameters of the MPLS OAM ofthe ingress

mpls oam egress

33.5 Conguring the MPLS OAM Function of the EgressThis operation enables you to congure the MPLS OAM function of the egress.

Background Informationn By default, the MPLS OAM function is disabled globally. Therefore, you need to enable

it before conguring the MPLS OAM function of the egress.n After the MPLS OAM function is enabled globally, you can congure the MPLS OAM

instance.n For a same LSP, the parameters of the MPLS OAM of the egress must be the same as

those of the ingress.n After the MPLS OAM parameters are set, enable the OAM function of the ingress rst.

Otherwise, the egress generates alarms.

ProcedureStep 1 Run the mpls command to switch over to MPLS mode.

Step 2 In MPLS mode, run the mpls oam command to enable the MPLS OAM function globally.

Step 3 In global cong mode, run the mpls oam egress command to set the MPLS OAM parametersof the egress.

Step 4 In global cong mode, run the mpls oam egress enable command to enable the MPLS OAMfunction of the egress.

Step 5 In global cong mode, run the display mpls oam egress command to query the instance ofthe source MPLS OAM of the LSP.

—-End

ExampleTo enable the MPLS OAM protection function for LSP named tunnel 10, assume that thedetection type is FFD, the detection frequency is 100 ms, and the ID of the reverse tunnelis 20, do as follows:huawei(config)#mplshuawei(config-mpls)#mpls oamhuawei(config-mpls)#quithuawei(config-mpls)#mpls oam egress lsr-id 100.100.100.100 tunnel-id 10type ffd frequency 100 backward-lsp tunnel 20 privatehuawei(config)#mpls oam engress enable allhuawei(config)#display mpls oam egress{ all<K>|lsp-name<K>|lsr-id<K> }:all{ <cr>|verbose<K>|slot<K> }:

Command:display mpls oam egress all

Related OperationsTable 33-4 lists the related operations for conguring the MPLS OAM function of the egress.



Table 33-4 Related operations for conguring the MPLS OAM function of the egress

To... Run the Command...Disable the MPLS OAM functionglobally

undo mpls oam

Set the parameters of the MPLS OAMof the egress

mpls oam ingress

33.6 Conguring the Tunnel Protection GroupThis operation enables you to congure the tunnel protection group.

Background Informationn The following part lists the default settings of the parameters for conguring the tunnel

protection group.– Revertive: It is enabled.– Wait to Restore (WTR): It is 720s. The value ranges from 0 to 60, with the step of 30s.

n Before conguring the protection group, you must set the protocol for the tunnel interfaceas mpls te, and set the Tunnel-ID and peer address.

n After conguring or deleting the protection group, you must run the mpls te commitcommand to make it take effect.

NOTE

In protection group revertive mode, the trafc reverts from the standby tunnel to the active tunnel. Afterthe trafc reverts from the active tunnel to the standby tunnel, if the active tunnel restores to the normalstate, the trafc reverts to the active tunnel for transmission when the WTR times out.

Procedure

Step 1 Run the interface tunnel command to enter tunnel interface mode.

Step 2 Run the tunnel-protocol mpls te command to enable the encapsulation protocol of the tunnelinterface.

Step 3 Run the mpls te protection tunnel command to congure the tunnel protection group.

Step 4 Run the mpls te commit command to deliver the conguration of the tunnel interface.

Step 5 In global cong mode, run the display mpls protection tunnel command to query the state ofthe tunnel protection group.

—-End

Example

To congure a standby tunnel for tunnel 20, assume that tunnel ID is 10, revertive mode isenabled and WTR is 900s, do as follows:huawei(config)#interface tunnel 20huawei(config-if-tunnel20)#tunnel-protocol mpls tehuawei(config-if-tunnel20)#mpls te protection tunnel 10 mode revertive wtr 30huawei(config-if-tunnel20)#mpls te commithuawei(config-if-tunnel20)#quithuawei(config)#display mpls te protection tunnel 20

Related Operations

Table 33-5 lists the related operations for conguring the tunnel protection group.



Conguration Guide

Table 33-5 Related operations for conguring the tunnel protection group

To... Run the Command...Delete a tunnel protection group undo mpls te protection tunnelSwitch over the tunnel protection groupmanually

mpls te protect-switch

33.7 Switching Over Protection Group ManuallyThis operation enables you to switch over the protection group manually. In this case, thetrafc in the protection group can be switched over to the related channel.

Background InformationThe parameters for protection group switchover are clear, lock, force, manual work-lsp andmanual protect-lsp. Their switchover has priority restriction. The priorities in descendingorder are clear, lock, force, and manual. The manual work-lsp and manual protect-lsphave the same priority.

Procedure

Step 1 Run the interface tunnel command to enter tunnel interface mode.

Step 2 Run the tunnel-protocol mpls te command to enable the encapsulation protocol of the tunnelinterface.

Step 3 Run the mpls te protect-switch command to switch over the protection group manually.

Step 4 Run the mpls te commit command to deliver the conguration of the tunnel interface.

Step 5 In global cong mode, run the display mpls protection tunnel command to query the state ofthe tunnel protection group.

—-End

Example

To switch over the trafc from the standby channel to the active channel, do as follows:huawei(config)#interface tunnel 20huawei(config-if-tunnel20)#tunnel-protocol mpls tehuawei(config-if-tunnel20)#mpls te protect-switch manual work-lsphuawei(config-if-tunnel20)#mpls te commithuawei(config-if-tunnel20)#quithuawei(config)#display mpls te protection tunnel 20

Related Operation

Table 33-6 lists the related operation for switching over the protection group manually.

Table 33-6 Related operation for switching over the protection group manually

To... Run the Command...Congure the tunnel protection group mpls te protection tunnel



33.8 Enabling the Protection Group to Output theDebugging Information

This operation enables the protection group to output the debugging information.

Background InformationBefore enabling the protection group to output the debugging information, you must enable theterminal to send debugging information, log and alarm, and enable its debugging informationoutput.

Procedure

In privilege mode, run the debugging mpls te protect-switch command to enable theprotection group to output the debugging information.

—-End

Example

To enable the protection group to output the debugging information, do as follows:huawei(config)#debugging mpls te protect-switch{ all<K>|error<K>|process<K>|timer<K>|inter<K> }:all

Command:debugging mpls te protect-switch all

Related Operations

Table 33-7 lists the related operations for enabling the protection group to output the debugginginformation.

Table 33-7 Related operations for enabling the protection group to output the debugginginformation

To... Run the Command...Disable the protection group to outputthe debugging information

undo debugging mpls te protect-switch

Enable the terminal to send debugginginformation, log and alarm

terminal monitor

Enable the terminal to output thedebugging information

terminal debugging


SmartAX MA5600 Multi-service Access ModuleConguration Guide 34 Environment Monitoring Conguration

34 Environment Monitoring Conguration


34.1 OverviewThis chapter describes environment monitoring conguration on the MA5600.34.2 Conguration Example of an EMU34.3 Adding an EMUThis operation enables you to add an EMU.34.4 Conguring the H303ESC/H304ESC EMUThis operation enables you to congure the H303ESC/H304ESC EMU.34.5 Conguring an H561ESC EMUThis operation enables you to congure an H561ESC EMU.34.6 Conguring a POWER4845 EMUThis operation enables you to congure a POWER4845 EMU.34.7 Conguring the FAN Alarm ReportThis operation enables the report of the FAN running alarms to the EMU.34.8 Setting the FAN Speed Adjustment ModeThis operation enables you to set the fan speed adjustment mode.34.9 Conguring the FAN SpeedThis operation enables you to congure the FAN speed.


34 Environment Monitoring CongurationSmartAX MA5600 Multi-service Access Module

Conguration Guide

34.1 OverviewThis chapter describes environment monitoring conguration on the MA5600.

Service DescriptionThe MA5600 provides an environment monitor serial port to connect the serial port on amonitored device. By running master-slave node protocol or access network protocol betweenthe two serial ports, you can monitor the environment of the device from a remote end.

The environment parameters such as temperature, humidity, and power supply can bemonitored to guarantee that the MA5600 can work reliably in a suitable environment.

To perform environment monitoring on a device, the environment monitoring functionalmodules must be provided, such as H303ESC. Some devices to be monitored has a built-inmonitoring unit, such as POWER4845. These functional modules are referred to asenvironment monitor unit (EMU), no matter whether they are built in or not.

Service SpecicationsMonitoring the environment of a device involves two aspects:n Environment parameters: Environment parameters refer to factors that may cause failure

or even damage to the device. The parameters include: temperature, humidity, door-statusswitch, smoke, water, MDF, and door status sensor.

n Power supply status: Power supply status covers the status of the mains input, the DCdistribution, the rectier module, and the battery.

The environment monitor module of the MA5600 comprises multiple EMUs, such as:n AC power module EMU (POWER4845): It monitors the environmental parameters such

as temperature, humidity, voltage, and power.n Environment monitoring board (ESC, including H303ESC, H304ESC and H561ESC)n Fan EMU(FAN): It monitors the running of the fans, and adjusts the running speed of

the fans.

Hardware Connection Between the EMU and the ShelfNOTE

Before the delivery, the EMU has been connected with the shelf. Do not change the connection. To installthe EMU into other shelves or to connect EMU again, refer to the following description.

Connecting the EMU with the shelf:n The POWER4845, and ESC board are connected almost in the same way to the MA5600.

Connect the environment monitoring cable from the EMU to the environment monitoringport (MON) on the SCU board of the MA5600. EMUs report their states to the SCUboard through the MON port, and receive commands from the SCU board.

n The FAN EMU is connected to the backplane through the interface on the rear panel, andcommunicates with the MA5600 through the backplane.

EMUs communicate with the MA5600 in master/slave node mode. Ensure the sub nodenumbers of the EMUs are consistent with the settings of their DIP switches.n The slave node number of the H303ESC/H304ESC/H561ESC is always 30.n The slave node number of the FAN/POWER4845/DIS is 0 by default. You can set the

slave node as required. Ensure that the slave node number is consistent with the setting ofthe DIP switches.

Table 34-1 shows the correspondence between the POWER4845 DIP switch and the slavenode number. ON means 1 and OFF means 0.



Table 34-1 Correspondence between the POWER4845 DIP switch and the slave node number

DIP Switch Setting Meaning (Slavenode number)

S1-4 S1-3 S1-2 S1-1 -

OFF OFF OFF OFF 0OFF OFF OFF ON 1OFF OFF ON OFF 2…… …… …… …… ……

ON ON ON ON 15

Table 34-2 shows the correspondence between the H801ESC DIP switch and the slave nodenumber. ON means 0 and OFF means 1.

Table 34-2 Correspondence between the H801ESC DIP switch and the slave node number


S1-5 S1-4 S1-3 S1-2 S1-1 -

ON ON ON ON ON 0ON ON ON ON OFF 1ON ON ON OFF ON 2…… …… …… …… …… ……

OFF OFF OFF OFF OFF 31

Table 34-3 shows the correspondence between the FAN DIP switch and the slave node number.ON means 0 and OFF means 1.

Table 34-3 Correspondence between the FAN DIP switch and the slave node number


SW101-4 SW101-3 SW101-2 SW101-1 -

ON ON ON ON 0ON ON ON OFF 1ON ON OFF ON 2…… …… …… …… ……

OFF OFF OFF OFF 15

34.2 Conguration Example of an EMU34.2.1 Data Plan34.2.2 Conguration Flowchart34.2.3 Procedure for Conguring an H303ESC34.2.4 Verication for Conguring an H303ESC34.2.5 Procedure for Conguring POWER4845 EMU



Conguration Guide

34.2.1 Data PlanTable 34-4 shows the data plan for EMU conguration.

Table 34-4 Data plan for EMU conguration

Item Data RemarksSerial number: 0 -

Slave node: 30 -H303ESC

Name: mdesc -

Temperature threshold (upperlimit): 55°C

-Analogue parameter

Temperature threshold (lowerlimit): 5°C

For other analogueparameters, use the defaultsettings.

Digital parameter Level of the door state sensor: high For other digital parameters,use the default settings.

Fan speed adjustment mode:manual

-

Speed level: 4 The fan speed level can beset under the condition thatthe fan speed adjustmentmode is set as manual.

FAN

Fan blocking alarm: forbid For other alarms, use thedefault settings.

34.2.2 Conguration FlowchartFigure 34-1 shows the owchart for conguring an EMU.

Figure 34-1 Flowchart for conguring an EMU

Three procedures are used to congure the EMU for the MA5600:n With DC power supply, Start > H303ESC/H304ESC > DIS EMU > FAN EMU > End.n With DC power supply, Start > H561ESC > FAN EMU > End.n With AC power supply, Start > POWER4845 EMU > FAN EMU > End.



34.2.3 Procedure for Conguring an H303ESC

Procedure

Step 1 Add an H303ESC EMU.huawei(config)#emu add 0 H303ESC 0 30 fore mdesc

NOTE

The slave node number of H303ESC EMU is always 30.

Step 2 Set the upper and lower limits of temperature alarm.huawei(config)#interface emu 0huawei(config-if-h303esc-0)#esc analog 0 alarm-upper-limit 55 alarm-lower-limit 5

Step 3 Set the level of the door status sensor.huawei(config-if-h303esc-0)#esc digital 1 available-level high-level

Step 4 Add an EMU, with the type of FAN.huawei(config-if-h303esc-0)#quithuawei(config)#emu add 1 FAN 0 6 hwfan

Step 5 Set the FAN speed adjustment mode.huawei(config)#interface emu 1huawei(config-if-fan-1)#fan speed mode manual

Step 6 Set the speed level of the FAN.huawei(config-if-fan-1)#fan speed adjust 4

Step 7 Set the FAN alarm report.huawei(config-if-fan-1)#fan alarmset block forbid

Step 8 Save the data.huawei(config-if-fan-1)#quithuawei(config)#quithuawei#save

—-End

34.2.4 Verication for Conguring an H303ESC

Result

Run the display esc environment info command to query the environment information aboutthe H303ESC.huawei(config-if-h303esc-0)#display esc environment infoEMU ID: 0 H303ESC environment stateFan control mode :Auto Fan run state: Open------------------Analog Environment Info--------------------------ID Name State Value AlmUpper AlmLower Unit0 Temperature Normal 34.26 55 5 ℃

1 Humidity Normal 31.37 80 0 %R.H.2 - Normal -128.00 127 -128 -3 - Normal -128.00 127 -128 -4 - Normal -128.00 127 -128 -5 - Normal -128.00 127 -128 -6 - Normal -128.00 127 -128 -7 - Normal -128.00 127 -128 ----------------Digital Environment Info---------------------------ID Name State Value |ID Name State Value0 Wring Normal 1 |1 Door1 Normal 12 Door2 Normal 1 |3 Fire_Alarm Normal 14 Theft_Alarm Normal 1 |5 Fog Normal 16 Water_Alarm Normal 1 |7 Peculiar_Smell Normal 18 Window_Broken Normal 1 |9 - Normal 1



Conguration Guide

10 - Normal 1 |11 - Normal 112 - Normal 1 |13 - Normal 114 - Normal 1 |15 - Normal 116 - Normal 1 |17 - Normal 118 - Normal 1 |19 - Normal 120 - Normal 1 |21 - Normal 1

--------------------------------------------------------------------

Query the conguration of the FAN.huawei(config-if-fan-1)#display fan system parameter

EMU ID: 1FAN configration parameter:

--------------------------------------------------------------------FAN timing mode: Manual timingFAN speed level: 4

--------------------------------------------------------------------Alarm_name Permit/ForbidRead temperature fault PermitFan block ForbidTemperature high PermitPower fault Permit

--------------------------------------------------------------------

34.2.5 Procedure for Conguring POWER4845 EMU

Procedure

Step 1 Add a POWER4845 EMU.huawei(config)#emu add 0 POWER4845 0 10 fore

Step 2 Query the power running state.

In ESC mode, run the display power run info command to query the running state of thePOWER4845 module.

Step 3 Query the environment information.

In ESC mode, run the display power environment info command to query the environmentinformation about the POWER4845 module.

You can congure the environment parameters of the AC power module according to thedisplay.

NOTE

Procedures for conguring all these types of EMUs are similar. Refer to the above examples to congurethe EMUs. Note that the key words used in the commands are different.

—-End

34.3 Adding an EMUThis operation enables you to add an EMU.

Background Informationn There are several EMU types, including FAN, POWER4845, H303ESC, H304ESC and

H561ESC.n The slave nodes of the H303ESC, H304ESC and H561ESC are always 30.n By default, the slave nodes of the FAN, and POWER4845 are 0. You can set the slave

node. Make sure that the setting is consistent with that of the DIP switch. In this case, theEMU can communicate with the control board correctly.



n When the system monitors several EMUs at a time, make sure that their slave nodesare different.

n For the communication serial port, select back mode for FAN, select fore mode for thecontrol board. For other EMUs, select the mode according to the requirements.

Procedure

Step 1 Run the emu add command to add an EMU.

Step 2 Run the display emu command to query the EMU state.

—-End

Example

To add an H303ESC, do as follows:huawei(config)#emu add 0 H303ESC 0 30 fore mdpowerhuawei(config)#dispaly emu 0EMU ID: 0

--------------------------------------------------------------------EMU name : mdpowerEMU type : H303ESCUsed or not : UsedEMU state : NormalFrame ID : 0Subnode : 30COM Port : Fore

NOTE

If the EMU state is fault, follow the steps to check the conguration:n Make sure that the EMU is normal.n Make sure that the physical connection is correct.n Make sure that the EMU type, frame ID, slave node and the serial port are correct.

Related Operations

Table 34-5 lists the related operations for adding an EMU.

Table 34-5 Related operations for adding an EMU

To... Run the Command... RemarksDelete an EMU emu del n The EMU type cannot be changed

after you congure it. If you needto change the EMU type, rst deletethe EMU, and then add a new one.

n If an EMU in the shelf is replaced,delete the EMU, and then add a newEMU.

Query an EMU display emu -

34.4 Conguring the H303ESC/H304ESC EMUThis operation enables you to congure the H303ESC/H304ESC EMU.



Conguration Guide

Background Information

NOTE

Compared with the H303ESC, the H304ESC provides management function on batteries, but does notprovide the humidity monitor function.

Table 34-6 lists the commands for conguring the H303ESC/H304ESC EMU.

Table 34-6 Commands for conguring the H303ESC/H304ESC EMU.

To... Run the Command... RemarksSet the fan controlparameters

esc fan n The status of the fan tray can be opened,closed or auto.

n The default control status of the fan trayis auto. It means that you need to setthe temperatures at which the fans startand stop working.

n By default, the fans start to work at45°C, and stop working at 30°C.

Set the analogparameters

esc analog This command is used to set the upperand lower alarm thresholds of analogparameters, such as temperature andhumidity.

Set the digitalparameters

esc digital n This command is used to set the digitalparameters, such as MDF state and doorstatus sensor, and normal state of thedigital parameters.

n The state of a digital parameter can bein a high level or low level. If an alarmis reported but the system is normal,you can run the esc digital command tochange the level of the digital parameterin order to eliminate the alarm. Forexample, if the digital parameter isat a high level (1) when an alarm isreported, you can run the command toset the high level as normal state.

Set the extendedserial portparameters

esc com This command is used to set the serialport parameters, including the port ID,key word, baud rate, data bit, stop bit, andparity check methods.When you set the baud rate, make sure thesetting is consistent with the DIP switchsetting of S7-4 at the lower right side ofthe board. If S7-4=ON, the serial port rateis 19200 bit/s; if S7-4=OFF, the rate is9600 bit/s. The default DIP setting is ON.

Specify thepower modulemonitored by theH303ESC/304ESC

esc power This command is used to add a powermodule before setting the parameters.The power module supported at present ispower4810.

Set 4810 powerparameters

esc 810 This command is used to set power-offvoltages for transmission unit orsubscriber lines, as well as whether to limitthe current.



To... Run the Command... RemarksReset theH303/304ESCenvironmentmonitor board

reset -

Set batteryparameters(H304ESC only)

esc battery This command is used to set the batterycapacity, allowed power-off state,power-off voltage, and timed evencharging duration. The settings shall coverbattery groups 0 and 1.

Procedure

Run the esc analog command to congure the H303ESC/H304ESC EMU.

—-End

Example

To set the upper and lower limits of the temperature of the H303ESC EMU, do as follows:huawei(config-if-h303esc-0)#esc analog 0 alarm-upper-limit 60 alarm-lower-limit 5

Related Operations

Table 34-7 lists the related operations for conguring the H303ESC/H304ESC EMU.

Table 34-7 Related operations for conguring the H303ESC/H304ESC EMU

To... Run the Command... RemarksQuery the user deneddigital alarms

display outside-digitalprivate-alarm

-

Query the user denedanalogue alarms

display outside-analogprivate-alarm

-

Query the H303/304ESCsystem parameters

display esc systemparameter

-

Query the 4810 power display esc 4810 -

Query the environmentinformation

display esc environmentinfo

Environment informationcomprises the analog parametersand digital parameters.

n Analog parameters are obtainedthrough analog parametersensors such as the built-intemperature and humiditysensors on the H303/H304ESC.Analog quantities have a valuerange and can uctuate.

n Digital parameters are obtainedthrough digital parametersensors, such as door statussensor and re alarms.

Query the alarms display esc alarm -

Reset the environmentmonitor board

reset -



Conguration Guide

To... Run the Command... RemarksQuery the EMU versionnumber

display version -

Query the runninginformation and thestate of the ESC power

display esc power Connect the power supply modulewith H303ESC/H304ESC andset the power supply on theH303ESC/H304ESC before youcan query the power modules.

34.5 Conguring an H561ESC EMUThis operation enables you to congure an H561ESC EMU.

Background InformationTable 34-8 lists the commands for conguring an H561ESC EMU.

Table 34-8 Commands for conguring an H561ESC EMU

To... Run the Command... RemarksSet the analogueparameters

esc analog The analog parameters includealarm thresholds for temperature,humidity, voltage, and current, oruser dened alarms.

Set the digital parameters esc digital The digital parameters includethe MDF and cabinet door statussensor, or user dened alarms.

Reset the H561ESCenvironment monitorboard

reset-

Procedure

Run the esc digital command to congure an H561ESC EMU.

—-End

Example

To set the level of the MDF, do as follows:huawei(config-if-h561esc-0)#esc digital 1 available-level high-level

Related Operations

Table 34-9 lists the related operations for conguring an H561ESC EMU.

Table 34-9 Related operations for conguring an H561ESC EMU

To... Run the Command... RemarksQuery the H561ESC systemparameters

display esc system parameter -

Query the environmentinformation

display esc environment info -



To... Run the Command... RemarksQuery the alarms display esc alarm -

Query the user dened digitalalarms

display outside-digital private-alarm -

Query the user denedanalogue alarms

display outside-analog private-alarm -

Query the H561ESC versionnumber

display version -

34.6 Conguring a POWER4845 EMUThis operation enables you to congure a POWER4845 EMU.

Background InformationTable 34-10 lists the commands for conguring a POWER4845 EMU.

Table 34-10 Commands for conguring a POWER4845 EMU

To... Run the Command... RemarksSet the POWER4845battery parameters

power battery -

Set the POWER4845environment parameters

power environment -

Set the number of thePOWER4845 modules

power module-num -

Set the POWER4845module parameters

power module-parameter This command is used to set theswitch-on and switch-off controlof the POWER4845 module. Bydefault, the power modules areswitched on, which means themodules supply power for thesystem.

Set the POWER4845power-off parameters

power off Power off occurs in two cases:load power off and battery poweroff.

n When the mains input stopsworking, the batteries providepower for the system.

n When the output voltage fromthe batteries drops below theload power off voltage, thepower supply for service loadwill be disconnected.

n When the output voltage fromthe batteries drops below thebattery power off voltage, thebatteries will stop working.

Set the POWER4845supply parameters

power supply-parameter -



Conguration Guide

To... Run the Command... RemarksSet the backupparameters of thePOWER4845

power outside_digital -

Set the battery chargingparameters

power charge This command is used to setthe charging mode and chargingvoltage for batteries connectedwith POWER4845.

Set the power4845 testparameters

power battery-test -

Set the high temperaturepower-off parameter

power temperature-off -

Make sure that these conditions are met in the conguration:n DC overvoltage > battery even charging voltage > battery oat charging voltage > DC

undervoltage > loading power-off voltage > battery power-off voltage.n DC overvoltage > (oat charging voltage + 2).n Float charging voltage > (DC undervoltage + 2).

Procedure

Run the power battery command to congure a POWER4845 EMU.

—-End

Example

To set the POWER4845 battery parameters, do as follows:huawei(config-if-power4845-3)#power battery parameter 0.2 60 1 130

Related Operations

Table 34-11 lists the related operations for conguring a POWER4845 EMU.

Table 34-11 Related operations for conguring a POWER4845 EMU

To... Run the Command...Query the POWER4845 alarms display power alarmQuery the POWER4845 environmentinformation

display power environment info

Query the POWER4845 environmentconguration

display power environment parameter

Query the POWER4845 runninginformation

display power run info

Query the POWER4845 conguration display power system parameterQuery the POWER4845 battery testparameters

display power battery-test info

34.7 Conguring the FAN Alarm ReportThis operation enables the report of the FAN running alarms to the EMU.



Prerequisite

The FAN EMU has existed.

Procedure

Step 1 Run the interface emu command to enter the emu congure mode.

Step 2 Run the fan alarmset command to congure the FAN alarm report.

Step 3 Run the display fan system parameter command to query information about FAN alarm.

—-End

Example

To disable the report of FAN block alarm, do as follows:huawei(config)#interface emu 1huawei(config-if-fan-1)#fan alarmset block forbidhuawei(config-if-fan-1)#display fan system parameter


--------------------------------------------------------FAN timing mode: Manual timingFAN speed level: 4

--------------------------------------------------------Alarm_name Permit/ForbidRead temperature fault PermitFan block ForbidTemperature high PermitPower fault Permit

--------------------------------------------------------

Related Operations

Table 34-12 lists the related operations for conguring the FAN alarm report.

Table 34-12 Related operations for conguring the FAN alarm report

To... Run the Command... RemarksQuery the running informationabout the fans

display fan environmentinfo

FAN environment monitormode

Query the alarm informationabout the fans

display fan alarm FAN environment monitormode

34.8 Setting the FAN Speed Adjustment ModeThis operation enables you to set the fan speed adjustment mode.

Prerequisite


Background InformationThere are two fan speed adjustment modes:n Automaticn Manual



Conguration Guide

By default, the mode is manual with the fan speed level of 5. It is recommended that youchange the mode to automatic.

If the mode is not set to automatic, the air ow increases in case of low or normal temperature.

Procedure

Step 1 Run the interface emu command to enter emu cong mode.

Step 2 Run the fan speed command to set the fan speed adjustment mode.

Step 3 Run the display fan system parameter command to query the parameter setting.

—-End

Example

To set the fan speed adjustment mode as automatic, do as follows:huawei(config)#interface emu 0huawei(config-if-fan-0)#fan speed mode automatichuawei(config-if-fan-0)#display fan system parameter


--------------------------------------------------------FAN timing mode: Auto timingFAN speed level: 4


--------------------------------------------------------

Related Operations

Table 34-13 lists the related operations for setting the fan speed adjustment mode.

Table 34-13 Related operations for setting the fan speed adjustment mode

To... Run the command... RemarksSet the fan speed fan speed adjust Set the fan speed in manual

mode, use this command.Set the fan alarm report toEMU

fan alarmset -

Query the alarm informationabout fans

display fan alarm -

34.9 Conguring the FAN SpeedThis operation enables you to congure the FAN speed.

Prerequisite


Background InformationFAN speed level ranges from 0 to 5. Level 0 refers to the lowest and level 5 refers to thehighest fan speed level.



n The nominated fan speed is enough for heat dissipation when the system works in thepermitted highest temperature.

n Low-speed running of fans can prolong the lifetime of the fans.n When abnormality occurs or one of the fans fails, other fans can run at high speed to

compensate the air ow.n Low-speed running of fans can reduce dust concentration in the air lter.n Set the fan speed in manual mode.

Procedure

Step 1 Run the interface command to enter emu cong mode.

Step 2 Run the fan speed command to congure the FAN speed.

Step 3 Run the display fan system parameter command to query the setting of the FAN speed.

—-End

Example

To set the FAN speed as 3, do as follows:huawei(config-if-fan-0)#fan speed adjust 3

To query the settings of the parameters, do as follows:huawei(config-if-fan-0)#display fan system parameter


--------------------------------------------------------FAN timing mode: Manual timingFAN speed level: 3


-------------------------------------------------------

Related Operations

Table 34-14 lists the related operations for setting the FAN speed.

Table 34-14 Related operations for setting the FAN speed

To... Run the Command...Set the fan speed adjustment mode fan speed modeSet the fan alarm report to EMU fan alarmsetQuery the alarm information about fans display fan alarm


SmartAX MA5600 Multi-service Access ModuleConguration Guide 35 MSTP Networking Example

35 MSTP Networking Example


35.1 NetworkingThe section describes the typical networking in MSTP mode.35.2 Data PlanThis section describes the data plan for the sample MSTP network.35.3 Conguring MA5600-1The following shows how to congure MA5600-1.35.4 Conguring MA5600-2The following shows how to congure MA5600-2.35.5 Conguring MA5600-3The following shows how to congure MA5600-3.35.6 Conguring MA5600-4The following shows how to congure MA5600-4.35.7 Conguring MA5600-5The following shows how to congure MA5600-5.35.8 VericationAll services congured on all DSLAMs run in the normal state.


35 MSTP Networking ExampleSmartAX MA5600 Multi-service Access Module

Conguration Guide

35.1 NetworkingThe section describes the typical networking in MSTP mode.

Three MA5600s (MA5600-1,MA5600-2,MA5600-3) form an MSTP ring network.n The MA5600-1 is connected to the IP network.n The MA5600-3, through its GE port, is subtended with the MA5600-4.n The MA5600-1 works together with the MA5600-5 to provide QinQ service through IP

network.Figure 35-1 shows a sample MSTP network of the MA5600.

Figure 35-1 Sample MSTP network of the MA5600

35.2 Data PlanThis section describes the data plan for the sample MSTP network.

Table 35-1 lists the service and data plan for the sample network of MA5600 in the Figure 35-1.



Table 35-1 Data plan for the sample MSTP network

MA5600-1 MA5600-2 MA5600-3 MA5600-4 MA5600-5Service n ADSL2+

servicen SHDSLservice

n QinQleased lineservice (in-teroperatewith theleased lineservice ofMA5600-5)

n Multicastservice

n ADSL2+service

n SHDSLservice

n StackingWholesaleservice

n Triple Playservice

n ADSL2+service

n SHDSLservice

ADSL2+serviceSHDSLserviceMulticastservice

QinQ leasedline service(interoperatewith theleased lineservice ofMA5600-1)

InbandNMSaddress

10.8.176.2255.255.255.0Gateway:10.8.176.1/24

10.8.176.3255.255.255.0Gateway:10.8.176.1/24

10.8.176.4255.255.255.0Gateway:10.8.176.1/24

10.8.176.5255.255.255.0Gateway:10.8.176.1/24

10.8.176.6255.255.255.0Gateway:10.8.176.1/24

GE portof theSCUboard

Upstream:0/7/0RSTP:0/7/1-0/7/2

Upstream:0/7/0-0/7/1

Upstream:0/7/0-0/7/1RSTP: 0/7/2

Upstream:0/7/0

Upstream:0/7/0

VLAN NMS: 10QinQ: 50Multicast:100ADSL2+:1000-1063(adopt VLANauthentica-tion)SHDSL:1300-1331(adopt VLANauthentica-tion)

NMS: 10Stacking: 60-62(inner stacking:111-113)Triple Play:100-102ADSL2+: 1000(adopt PPPoEauthentication)SHDSL: 1300(adopt PPPoEauthentication)

NMS: 10ADSL2+:1000-1063(adoptVLAN au-thentication)SHDSL:1300-1330(adoptVLAN au-thentication)

NMS: 10Multicast:100ADSL2+:1000 (adoptPPPoE au-thentication)SHDSL:1300 (adoptPPPoE au-thentication)

NMS: 10QinQ: 50

Slot ADSL2+: 0/3SHDSL: 0/5QinQ: 0/5/31Multicast:0/2/2, 0/2/3

ADSL2+: 0/3SHDSL: 0/5Stacking:0/2/0-10 (mapVLAN 60, ISP1)0/2/11-20 (mapVLAN 61, ISP2)0/2/21-30 (mapVLAN 62, ISP3)Triple Play:0/2/31

ADSL2+:0/3SHDSL: 0/5

ADSL2+:0/3SHDSL: 0/5Multicast:0/2/2, 0/2/3

QinQ:0/5/31



Conguration Guide

MA5600-1 MA5600-2 MA5600-3 MA5600-4 MA5600-5UserPVC

PVCVPI/VCI ofall users: 0/35

VPI/VCI of tripleplay:

n Video service:0/35

n Internetservice: 0/36

n Voice service:0/37

PVCVPI/VCIof all users:0/35

PVCVPI/VCI ofall users:0/35

PVCVPI/VCIof all users:0/35

NMShost

195.71.131.38 and 195.71.131.39

Log host 217.188.56.40 and 217.188.57.40Timeserver

193.189.251.38 and 193.189.251.42

EMU AC PS4845 power monitoring, fan monitoringDHCPserver

DHCP server1: 10.1.1.2 (Active) 10.1.1.3 (Standby)Gateway: 10.1.1.1/24DHCP server2: 10.4.4.2 (Active) 10.4.4.3 (Standby)Gateway: 10.4.4.1/24

Upperlayerdevice

The upper layer device supports the DHCP option82 function.The BRAS supports the PITP, Stacking VLAN and QinQ VLAN function.The BRAS supports inner and outer VLAN Tags.The VLAN ID of the trafc ow sent from the IP network to the DSLAM is 100.The upper layer device classies the downstream trafc. Different service carriesdifferent 802.1p labels.The VLAN mapping to the DSLAN is congured in the upper layer IP network.The IP address of LAN switch at the MA5600 side is 10.10.10.1/24.

NOTE

n In this networking, the MA5600-1 can be replaced with a GE switch or a BRAS.n The upstream port of The MA5600 supports the port aggregation function. In the actual network

planning, you can aggregate multiple ports for use.

35.3 Conguring MA5600-1The following shows how to congure MA5600-1.

Procedure

Step 1 Conrm the board.huawei>enablehuawei#confighuawei(config)#board confirm 0

Step 2 Congure NMS.1. Congure the IP address of the inband NMS interface.

n Create the NMS VLAN.huawei(config)#vlan 10 standard

n Add the upstream port.huawei(config)#port vlan 10 0/7 0-2



n Enter NMS VLAN interface mode.huawei(config)#interface vlanif 10

n Congure the IP address of the NMS VLAN interface.huawei(config-if-vlanif10)#ip address 10.8.176.2 255.255.255.0

2. Add the route.n Congure the route destined to the NMS (Trap destination host).

huawei(config)#ip route-static 195.71.131.38 255.255.255.255 10.8.176.1preference 1

n Congure the route destined to the time server.huawei(config)#ip route-static 193.189.251.0 255.255.255.0 10.8.176.1preference 1

n Congure the route destined to the log host.huawei(config)#ip route-static 217.188.56.0 255.255.255.0 10.8.176.1preference 1huawei(config)#ip route-static 217.188.57.0 255.255.255.0 10.8.176.1preference 1

3. Add the ACL rule.huawei(config)#acl 3010huawei(config-acl-adv-3010)#rule permit ip source any destination anyhuawei(config-acl-adv-3010)#rule deny ip source any destination 10.8.176.20.0.0.0huawei(config-acl-adv-3010)#rule permit ip source 195.71.131.38 0.0.0.0destination 10.8.176.2 0.0.0.0huawei(config-acl-adv-3010)#rule permit ip source 195.71.131.39 0.0.0.0destination 10.8.176.2 0.0.0.0huawei(config-acl-adv-3010)#rule permit ip source 193.189.251.38 0.0.0.0destination 10.8.176.2 0.0.0.0huawei(config-acl-adv-3010)#rule permit ip source 193.189.251.42 0.0.0.0destination 10.8.176.2 0.0.0.0huawei(config-acl-adv-3010)#rule permit ip source 217.188.56.40 0.0.0.0destination 10.8.176.2 0.0.0.0huawei(config-acl-adv-3010)#rule permit ip source 217.188.57.40 0.0.0.0destination 10.8.176.2 0.0.0.0huawei(config-acl-adv-3010)#quithuawei(config)#packet-filter inbound ip-group 3010 port0/7/1huawei(config)#packet-filter inbound ip-group 3010 port 0/7/2

4. Congure the SNMP.n Congure the community name and access authority.


n Congure the contact information.huawei(config)#snmp-agent sys-info contact HW-075512345678

n Congure the device local information.huawei(config)#snmp-agent sys-info location Shenzhen China

n Congure the SNMP version.

Here, the SNMP version must be the same as that of NMS. In this example, the NMSversion is set as SNMP V2C.huawei(config)#snmp-agent sys-info version v2c

5. Enable trap sending.huawei(config)#snmp-agent trap enable standard

6. Set the trap destination address.huawei(config)#snmp-agent target-host trap address 195.71.131.38securityname publichuawei(config)#snmp-agent target-host trap address 195.71.131.39securityname public

7. Set the trap source address.huawei(config)#snmp-agent trap source vlanif 10

Step 3 Congure the time server.huawei(config)#ntp-service unicast-server 193.189.251.38source-interface vlanif 10



Conguration Guide

huawei(config)#ntp-service unicast-server 193.189.251.42 source-interface vlanif 10

Step 4 Congure the log host.huawei(config)#loghost add 217.188.56.40 syslog-1huawei(config)#loghost activate ip 217.188.56.40huawei(config)#loghost add 217.188.57.40 syslog-2huawei(config)#loghost activate ip 217.188.57.40

Step 5 Congure the EMU.This section takes the fan and PS4845 power supply as examples to show how to congure theenvironment monitoring unit (EMU).By default, both the primary and secondary node addresses of the fan EMU are 0. In thisexample, suppose they are 1. In this case, you need to set the DIP switch of the node addresson the fan monitoring unit as 1.huawei(config)#emu add 0 power 4845 0 0 forehuawei(config)#emu add 1 fan 0 1 backhuawei(config)#interface emu 0huawei(config-if-power4845-0)#power module-num 2 1 2huawei(config-if-power4845-0)#quit

Step 6 Congure SCU subtendingMA5600-1 is subtended with MA5600-2, MA5600-3 and MA5600-4. Therefore, subtendingshall be congured.huawei(config)#vlan 60 to 62 standardhuawei(config)#port vlan 60 to 62 0/7 0-2huawei(config)#vlan 101 to 102 standardhuawei(config)#port vlan 101 to 102 0/7 0-2

Step 7 Enable MSTP.1. Enable the MSTP function.

huawei(config)#stp enable

2. Set the MSTP region name.huawei(config)#stp region-configurationhuawei(stp-region-configuration)#region-name hwrg

3. Congure MSTP instance 1.huawei(stp-region-configuration)#instance 1 vlan 1 to 4094

4. Activate the conguration of the MSTP region.huawei(stp-region-configuration)#active region-configurationSTP actives region configuration, it may take several minutes,are you sure to

active region configuration? [Y/N][N]y

5. Set the priority of MA5600_1 in the instance.huawei(stp-region-configuration)#quithuawei(config)#stp instance 0 priority 0huawei(config)#stp instance 1 priority 0

Step 8 Congure ADSL2+ service.

The MA5600 supports the ADSL2+ service of multiple encapsulation modes, such as IPoA,PPPoA, IPoE, and PPPoE. This section takes the PPPoE mode as an example to describehow to congure the ADSL2+ service. For other encapsulation modes, see the chapter 19ADSL2+ Service Conguration.1. Congure the ADSL2+ line prole.

You can congure the ADSL2+ line prole based on your needs.huawei(config)#adsl line-profile add 10Start adding profilePress ’Q’ to quit the current configuration and new configuration will beneglected>Do you want to name the profile (y/n) [n]:n> Please choose default value type 0-adsl 1-adsl2+ (0~1) [0]:1> Will you set basic configuration for modem? (y/n)[n]:n> Please select channel mode 0-interleaved 1-fast (0~1) [0]:> Will you set interleaved delay? (y/n)[n]:n>Please select form of transmit rate adaptation in downstream:> 0-fixed 1-adaptAtStartup 2-adaptAtRuntime (0~2) [1]:> Will you set SNR margin for modem? (y/n)[n]:n



> Will you set parameters for rate? (y/n)[n]:y> Minimum transmit rate in downstream (32~32000 Kbps) [32]:> Maximum transmit rate in downstream (32~32000 Kbps) [24544]:8000> Minimum transmit rate in upstream (32~3000 Kbps) [32]:> Maximum transmit rate in upstream (32~3000 Kbps) [1024]:Add profile 10 successfully

2. Congure the ADSL2+ alarm prole.You can congure the ADSL2+ alarm prole based on your needs.huawei(config)#adsl alarm-profile add 10Start adding profilePress ’Q’ to quit the current configuration and new configuration will be

neglected

<ATU-C >> The number of Loss of Frame Seconds (0~900) [0]:> The number of Loss of Signal Seconds (0~900) [0]:> The number of Loss of Link Seconds (0~900) [0]:> The number of Loss of Power Seconds (0~900) [0]:> The number of Errored Seconds (0~900) [0]> Enable and disable the initial failure trap 0-disable 1-enable (0~1)[0]:1> The number of failed fast retrain seconds (0~900) [0]:> The number of severely errored seconds (0~900) [0]:> The number of unavailable seconds (0~900) [0]:> Threshold of positive difference between the current and the past transmitrate in fast mode (0~31968kbps) [0]:> Threshold of positive difference between the current and the past transmitrate in interleaved mode (0~31968kbps) [0]:> Threshold of negative difference between the current and the past transmitrate in fast mode (0~31968kbps) [0]:> Threshold of negative difference between the current and the past transmitrate in interleaved mode (0~31968kbps) [0]:

<ATU-R >> The number of Loss of Frame Seconds (0~900) [0]:> The number of Loss of Signal Seconds (0~900) [0]:> The number of Loss of Power Seconds (0~900) [0]:> The number of Errored Seconds (0~900) [0]:> The number of severely errored seconds (0~900) [0]:> The number of unavailable seconds (0~900) [0]:> Threshold of positive difference between the current and the past transmitrate in fast mode (0~2968kbps) [0]:> Threshold of positive difference between the current and the past transmitrate in interleaved mode (0~2968kbps) [0]:> Threshold of negative difference between the current and the past transmitrate in fast mode (0~2968kbps) [0]:> Threshold of negative difference between the current and the past transmitrate in interleaved mode (0~2968kbps) [0]:Add profile 10 successfully

3. Congure the ADSL2+ trafc prole.You can congure the ADSL2+ trafc prole by running the trafc table commandbased on your needs.In this example, the default prole (prole 6) is used.

4. Activate the ADSL2+ port.huawei(config)#interface adsl 0/3huawei(config-if-adsl-0/3)#deactivate allhuawei(config-if-adsl-0/3)#alarm-config all 10huawei(config-if-adsl-0/3)#activate all profile-index 10huawei(config-if-adsl-0/3)#quit

5. Congure the upstream port.n Congure the SCU board.

The conguration of the upstream port of the SCU board shall be the same as that ofthe peer end.

Run the auto-neg command to set the port to work in auto negotiation mode.

If the port works in non auto negotiation mode, change to the SCU cong modeand run the speed command to change the port rate, and run the duplex commandduplex to change the port duplex mode.

n Congure the VLAN.



Conguration Guide

The ADSL2+ users of MA5600-1 adopt the VLAN authentication. In this case, theMUX VLAN is used to identify the users.huawei(config)#vlan 1000 to 1063 muxhuawei(config)#port vlan 1000 to 1063 0/7 0-2

6. Add the service port.All ports of the 0/3 board provide ADSL2+ service. To add the service ports in batches,run the multi-service-port command.huawei(config)#multi-service-port from-vlan 1000 port 0/3 0-63vpi 0 vci 35 rx-cttr 6 tx-cttr 6

Step 9 Congure the SHDSL service.

The MA5600 supports the SHDSL service of multiple encapsulation modes, such as IPoA,PPPoA, IPoE, and PPPoE. This section takes the PPPoE mode as an example to describe howto congure the SHDSL service. For other encapsulation modes, see the chapter 20 SHDSLService Conguration.1. Congure the SHDSL line prole.

To congure the SHDSL line prole, run the shdsl line-prole add or shdsl line-prolequickadd command.huawei(config)#shdsl line-profile quickadd 10 line two-wire rate 2048 2048psd symmetric transmission Annex-A remote disable probe disable snr-marginds-curr 10 ds-worst 10 us-curr 10 us-worst 10 bitmap 0x03

2. Congure the SHDSL alarm prole.To congure the SHDSL alarm prole, run the shdsl alarm-prole add command.In this example, the default prole (prole 1) is used.

3. Activate the SHDSL port.huawei(config)#interface shdsl 0/5huawei(config-if-shdsl-0/5)#deactivate allhuawei(config-if-shdsl-0/5)#alarm-config all 1huawei(config-if-shdsl-0/5)#activate all profile-index 10huawei(config-if-shdsl-0/5)#quit

4. Congure the upstream port.The SHDSL users of MA5600-1 adopt the VLAN authentication. In this case, the MUXVLAN is used to identify the users.huawei(config)#vlan 1300 to 1331 muxhuawei(config)#port vlan 1300 to 1331 0/7 0-2

5. Add the service port.Ports 0-31 of the 0/5 board provide the SHDSL service. To activate the ports in batches,run the multi-service-port command.huawei(config)#multi-service-port from-vlan 1300 port 0/5 0-31vpi 0 vci 35 rx-cttr 6 tx-cttr 6

Step 10 Congure the QinQ leased line service.

MA5600-1 and MA5600-5 serve two branches of a company to provide the QinQ leasedline service.1. Create VLAN 50.

huawei(config)#vlan 50 mux

2. Set VLAN 50 as QinQ VLAN.huawei(config)#vlan attrib 50 q-in-q

3. Add the upstream port.huawei(config)#port vlan 50 0/7 0-2

4. Add the service port.To add the service port, run the service-port command. Note that the VPI and VCI valuesof the service port must be the same as those on the modem.The QinQ VLAN supports the PVC-priority scheduling policy only. In this case, selectthe prole that supports PVC-priority policy.huawei(config)#traffic table index 7 ip car off priority 0 priority-policy



pvc-Settinghuawei(config)#service-port vlan 50 shdsl 0/5/31 vpi 0 vci35 rx-cttr 7 tx-cttr 7

Step 11 Congure the multicast service.

After the conguration, the following results shall be achieved:n Users of port 0/2/2 must be authenticated, and have rights to watch two programs and

to preview one program.n Users of port 0/2/3 do not need authenticating.1. Congure the xDSL.

In this example, it is unnecessary to congure the xDSL. The default line prole (prole1002) is used.

2. Congure the VLAN.n Create a VLAN.


n Add the upstream port to the VLAN.huawei(config)#port vlan 100 0/7 0-2

n Congure the native VLAN.huawei(config)#interface scu 0/7huawei(config-if-giu-0/7)#native-vlan 0 vlan 100huawei(config-if-giu-0/7)#native-vlan 1 vlan 100huawei(config-if-giu-0/7)#native-vlan 2 vlan 100

n Create the trafc prole.huawei(config)#traffic table index 8 ip car off priority 5 priority-policypvc-Setting

n Add ADSL2+ port 0/0/2 and 0/0/3 to VLAN 100.huawei(config)#service-port vlan 100 adsl 0/2/2 vpi 0 vci 35 rx-cttr 8tx-cttr 8huawei(config)#service-port vlan 100 adsl 0/2/3 vpi 0 vci 35 rx-cttr 8tx-cttr 8

3. Congure the multicast service.n Enable the multicast proxy.


n Add the upstream port.huawei(config-btv)#igmp uplink-port 0/7/0 100

n Set the upstream port to work in program mode.huawei(config-btv)#igmp uplink-port-mode program

n Congure the program library.huawei(config-btv)#igmp program add name program1 ip 224.1.1.1 vlan 100bind 0/7/0huawei(config-btv)#igmp program add name program2 ip 224.1.1.2 vlan 100bind 0/7/0huawei(config-btv)#igmp program add name program3 ip 224.1.1.3 vlan 100bind 0/7/0

n Congure the authority prole.huawei(config-btv)#igmp profile profile-name profile0program-name program1 watchhuawei(config-btv)#igmp profile profile-name profile0 program-name program2watchhuawei(config-btv)#igmp profile profile-name profile0 program-name program3preview

n Congure the preview parameters.

In this example, set the preview duration for program 3 as 150s, the number ofpreview attempts as 6 each day and the preview interval as 60s.huawei(config-btv)#igmp preview program name program3 preview-duration 150huawei(config-btv)#igmp preview program name program3 preview-times 6huawei(config-btv)#igmp preview program name program3 preview-interval 60To set the time to clear the previous preview attempts, run the igmp previewauto-reset-time command. In this example, set the time to 00:00:00.



Conguration Guide

huawei(config-btv)#igmp preview auto-reset-time 00:00:00

n Congure the user data.huawei(config-btv)#igmp user add port 0/2/3 adsl 0 35 no-authhuawei(config-btv)#igmp user add port 0/2/2 adsl 0 35 authhuawei(config-btv)#igmp user bind-profile port 0/2/2 profile-name profile0

Step 12 Congure the subtending multicast service.

In the MSTP ring network, MA5600-1 is subtended with MA5600-3, and MA5600-3 issubtended with MA5600-4. According to the data plan, MA5600-4 provides the multicastservice. In this way, it is necessary to congure the multicast subtending on MA5600-1 rst.1. Add the upstream port.

The upstream port is already added in the step Conguring the Multicast Service. It isunnecessary to congure it again.

2. Congure the IGMP proxy.The IGMP proxy is already congured in the step Conguring the Multicast Service. It isunnecessary to congure it again.

3. Congure the program library.The program library is already congured in the step Conguring the Multicast Service.It is unnecessary to congure it again.

4. Congure the multicast for the subtending port.n Specify a subtending port.

huawei(config-btv)#igmp cascade-port 0/7/1huawei(config-btv)#igmp cascade-port 0/7/2

n Modify the subtending port.huawei(config-btv)#igmp cascade-port modify 0/7/1 static enablehuawei(config-btv)#igmp cascade-port modify 0/7/2 static enable

n Add programs for the static subtending port.huawei(config-btv)#igmp static-join cascade-port 0/7/1 ip 224.1.1.1huawei(config-btv)#igmp static-join cascade-port 0/7/1 ip 224.1.1.2huawei(config-btv)#igmp static-join cascade-port 0/7/1 ip 224.1.1.3huawei(config-btv)#igmp static-join cascade-port 0/7/2 ip 224.1.1.1huawei(config-btv)#igmp static-join cascade-port 0/7/2 ip 224.1.1.2huawei(config-btv)#igmp static-join cascade-port 0/7/2 ip 224.1.1.3


—-End


Procedure


Step 2 Congure the NMS.1. Congure the IP address of the inband NMS interface.











3. Add the ACL rule.huawei(config)#acl 3010huawei(config-acl-adv-3010)#rule permit ip source any destination anyhuawei(config-acl-adv-3010)#rule deny ip source any destination 10.8.176.20.0.0.0huawei(config-acl-adv-3010)#rule permit ip source 195.71.131.38 0.0.0.0destination 10.8.176.2 0.0.0.0huawei(config-acl-adv-3010)#rule permit ip source 195.71.131.39 0.0.0.0destination 10.8.176.2 0.0.0.0huawei(config-acl-adv-3010)#rule permit ip source 193.189.251.38 0.0.0.0destination 10.8.176.2 0.0.0.0huawei(config-acl-adv-3010)#rule permit ip source 193.189.251.42 0.0.0.0destination 10.8.176.2 0.0.0.0huawei(config-acl-adv-3010)#rule permit ip source 217.188.56.40 0.0.0.0destination 10.8.176.2 0.0.0.0huawei(config-acl-adv-3010)#rule permit ip source 217.188.57.40 0.0.0.0destination 10.8.176.2 0.0.0.0huawei(config-acl-adv-3010)#quithuawei(config)#packet-filter inbound ip-group 3010 port 0/7/0huawei(config)#packet-filter inbound ip-group 3010 port 0/7/1










Step 3 Congure the time server.huawei(config)#ntp-service unicast-server 193.189.251.38source-interface vlanif 10huawei(config)#ntp-service unicast-server 193.189.251.42source-interface vlanif 10

Step 4 Congure the log host.huawei(config)#loghost add 217.188.56.40 syslog-1



Conguration Guide

huawei(config)#loghost activate ip 217.188.56.40huawei(config)#loghost add 217.188.57.40 syslog-2huawei(config)#loghost activate ip 217.188.57.40

Step 5 Congure the EMU.This section takes the fan and PS4845 power supply as examples to show how to congurethe EMU.By default, both the primary and secondary node addresses of the fan EMU are 0. In thisexample, suppose they are 1. In this case, you need to set the DIP switch of the node addresson the fan monitoring unit as 1.huawei(config)#emu add 0 power4845 0 0 forehuawei(config)#emu add 1 fan 0 1 backhuawei(config)#interface emu 0huawei(config-if-power4845-0)#power module-num 2 1 2huawei(config-if-power4845-0)#quit

Step 6 Congure SCU subtendingMA5600-1 is subtended with MA5600-2, MA5600-3 and MA5600-4. Therefore, subtendingshall be congured.huawei(config)#vlan 1001 to 1063 standardhuawei(config)#port vlan 1001 to 1063 0/7 0-1huawei(config)#vlan 1301 to 1063 standardhuawei(config)#port vlan 1063 0/7 0-1



2. Set the MSTP region name.huawei(config)#stp region-configurationhuawei(stp-region-configuration)#region-name hwrg




Step 8 Enable PITP.huawei(config)#pitp enable pmode



You can congure the ADSL2+ line prole based on your needs.huawei(config)#adsl line-profile add 10Start adding profilePress ’Q’ to quit the current configuration and new configuration will beneglected>Do you want to name the profile (y/n) [n]:n> Please choose default value type 0-adsl 1-adsl2+ (0~1) [0]:1> Will you set basic configuration for modem? (y/n)[n]:n> Please select channel mode 0-interleaved 1-fast (0~1) [0]:> Will you set interleaved delay? (y/n)[n]:n>Please select form of transmit rate adaptation in downstream:> 0-fixed 1-adaptAtStartup 2-adaptAtRuntime (0~2) [1]:> Will you set SNR margin for modem? (y/n)[n]:n> Will you set parameters for rate? (y/n)[n]:y> Minimum transmit rate in downstream (32~32000 Kbps) [32]:> Maximum transmit rate in downstream (32~32000 Kbps) [24544]:8000> Minimum transmit rate in upstream (32~3000 Kbps) [32]:> Maximum transmit rate in upstream (32~3000 Kbps) [1024]:Add profile 10 successfully




neglected<ATU-C >> The number of Loss of Frame Seconds (0~900) [0]:> The number of Loss of Signal Seconds (0~900) [0]:> The number of Loss of Link Seconds (0~900) [0]:> The number of Loss of Power Seconds (0~900) [0]:> The number of Errored Seconds (0~900) [0]> Enable and disable the initial failure trap 0-disable 1-enable (0~1)[0]:1> The number of failed fast retrain seconds (0~900) [0]:> The number of severely errored seconds (0~900) [0]:> The number of unavailable seconds (0~900) [0]:> Threshold of positive difference between the current and the past transmitrate in fast mode (0~31968kbps) [0]:> Threshold of positive difference between the current and the past transmitrate in interleaved mode (0~31968kbps) [0]:> Threshold of negative difference between the current and the past transmitrate in fast mode (0~31968kbps) [0]:> Threshold of negative difference between the current and the past transmitrate in interleaved mode (0~31968kbps) [0]:








n Congure the VLAN.

The ADSL2+ users of MA5600-2 adopt the PPPoE authentication. In this case, thesmart VLAN is used to identify the users.huawei(config)#vlan 1000 smarthuawei(config)#port vlan 1000 0/7 0-1



Conguration Guide

6. Add the service port.All ports of ADSL2+ board 0/3 provides ADSL2+ service. To add the service port inbatches, run the multi-service-port command.huawei(config)#multi-service-port vlan 1000 adsl 0/3 0-63 vpi0 vci 35 rx-cttr 6 tx-cttr 6





3. Congure the SHDSL trafc prole.To congure the SHDSL trafc prole, run the trafc table command.In this example, the default prole (prole 1) is used.


5. Congure the upstream port.The SHDSL users of MA5600-2 adopt the PPPoE authentication. In this case, the smartVLAN is used to identify the users.huawei(config)#vlan 1300 smarthuawei(config)#port vlan 1300 0/7 0-1

6. Add the service port.n Ports 0-30 of SHDSL board 0/5 provide the SHDSL service.n To add the service ports in batches, run the multi-service-port command.huawei(config)#multi-service-port vlan 1300 shdsl 0/5 0-31 vpi0 vci 35 rx-cttr 6 tx-cttr 6

Step 11 Congure the stacking multi-ISPs wholesale service.

ISP1 provides users of ports 0/2/0 to 0/2/10 on board with the multi-ISP wholesale service.ISP2 provides users of ports 11-20 to with the multi-ISP wholesale service. ISP3 providesusers of port 21-30 with the multi-ISP wholesale service.1. Create a VLAN and set its attribute as stacking.

huawei(config)#vlan 60 to 62 smarthuawei(config)#vlan attrib 60 to 62 stacking

2. Add the upstream port.huawei(config)#port vlan 60 to 62 0/7 0-1

3. Add the service port.huawei(config)#multi-service-port vlan 60 adsl 0/2 0-10 vpi 0 vci 35 rx-cttr 6tx-cttr 6huawei(config)#multi-service-port vlan 61 adsl 0/2 11-20 vpi 0 vci 35 rx-cttr 6tx-cttr 6huawei(config)#multi-service-port vlan 62 adsl 0/2 21-30 vpi 0 vci 35 rx-cttr 6tx-cttr 6



4. Congure the inner label.huawei(config)#stacking label vlan 60 baselabel 111huawei(config)#stacking label vlan 61 baselabel 112huawei(config)#stacking label vlan 62 baselabel 113

Step 12 Congure the triple play service.

After the conguration, the following results shall be achieved: Users of ports 0/2/31 canwatch the programs stored on servers 224.1.1.1 and 224.1.1.2, and can preview the programsstored on server 224.1.1.3.1. Congure the upstream port and VLAN.

huawei(config)#vlan 100 smarthuawei(config)#port vlan 100 0/7 0-1huawei(config)#vlan 101 muxhuawei(config)#port vlan 101 0/7 0-1huawei(config)#vlan 102 smarthuawei(config)#port vlan 102 0/7 0-1

2. Congure the trafc table.The voice service has the highest priority, and the network access service has the lowestpriority.Presume that the network access service uses trafc table 6, with the priority of 0. Thefollowing shows how to create the new trafc tables for the voice service and videoservice respectively.huawei(config)#traffic table index 7 ip car 1024 priority 7 priority-policyPvc-Settinghuawei(config)#traffic table index 8 ip car off priority 5 priority-policyPvc-Setting

3. Congure the service port.huawei(config)#service-port vlan 100 adsl 0/2/31 vpi 0 vci 35 rx-cttr 8tx-cttr 8huawei(config)#service-port vlan 101 adsl 0/2/31 vpi 0 vci 36 rx-cttr 6tx-cttr 6huawei(config)#service-port vlan 102 adsl 0/2/31 vpi 0 vci 37 rx-cttr 7tx-cttr 7

4. Congure DHCP relay mode for video service.n Enable DHCP mode.

huawei(config)#dhcp mode layer-3 option-60

n Congure the DHCP server.huawei(config)#dhcp-server 1 ip 10.1.1.2 10.1.1.3huawei(config)#dhcp domain videohuawei(config-dhcp-domain-video)#dhcp-server 1

n Congure the gateway mapped to the DHCP domain.huawei(config)#interface vlanif 100huawei(config-if-vlanif100)#ip address 10.1.1.1 24huawei(config-if-vlanif100)#dhcp domain video gateway 10.1.1.1

n Enable the DHCP option82 function.huawei(config)#dhcp option82 enablehuawei(config)#raio-mode xdsl-port-rate

5. Congure DHCP relay mode for voice service.n Congure the DHCP server.

huawei(config)#dhcp-server 2 ip 10.4.4.2 10.4.4.3huawei(config)#dhcp domain voicehuawei(config-dhcp-domain-voice)#dhcp-server 2

n Congure the gateway mapped to the DHCP domain.huawei(config)#interface vlanif 102huawei(config-if-vlanif102)#ip address 10.4.4.1 24huawei(config-if-vlanif102)#dhcp domain voice gateway 10.4.4.1

6. Congure the video service.huawei(config)#interface scu 0/7huawei(config-if-scu-0/7)#native-vlan 0 vlan 1huawei(config-if-scu-0/7)#native-vlan 1 vlan 1huawei(config-if-scu-0/7)#quithuawei(config)#btv



Conguration Guide

huawei(config-btv)#igmp mode proxyhuawei(config-btv)#igmp uplink-port 0/7/0 100huawei(config-btv)#igmp uplink-port 0/7/1 100huawei(config-btv)#igmp uplink-port-mode mstp

huawei(config-btv)#igmp program add name program1 ip 224.1.1.1 vlan 100huawei(config-btv)#igmp program add name program2 ip 224.1.1.2 vlan 100huawei(config-btv)#igmp program add name program3 ip 224.1.1.3 vlan 100

huawei(config-btv)#igmp profile profile-name profile0 program-name program1watchhuawei(config-btv)#igmp profile profile-name profile0 program-name program2watchhuawei(config-btv)#igmp profile profile-name profile0 program-name program3preview

huawei(config-btv)#igmp user add port 0/2/31 adsl 0 35 authhuawei(config-btv)#igmp user bind-profile port 0/2/31 profile-name profile0

Step 13 Congure the subtending multicast service.

In the MSTP ring network, MA5600-1 is subtended with MA5600-3, and MA5600-3 issubtended with MA5600-4. According to the data plan, MA5600-4 provides the multicastservice. In this way, it is necessary to congure the multicast subtending on MA5600-2 rst.1. Set the upstream port.

The upstream port is already added in Conguring the Multicast Service. It is unnecessaryto congure it again.

2. Congure the IGMP proxy.The IGMP proxy is already congured in Conguring the Multicast Service. It isunnecessary to congure it again.

3. Congure the program library.The program library is already congured in Conguring the Multicast Service. It isunnecessary to congure it again.


huawei(config-btv)#igmp cascade-port 0/7/0huawei(config-btv)#igmp cascade-port 0/7/1

n Modify a subtending port.huawei(config-btv)#igmp cascade-port modify 0/7/0 static enablehuawei(config-btv)#igmp cascade-port modify 0/7/1 static enable

n Add programs for the static subtending port.huawei(config-btv)#igmp static-join cascade-port 0/7/0 ip 224.1.1.1huawei(config-btv)#igmp static-join cascade-port 0/7/0 ip 224.1.1.2huawei(config-btv)#igmp static-join cascade-port 0/7/0 ip 224.1.1.3huawei(config-btv)#igmp static-join cascade-port 0/7/1 ip 224.1.1.1huawei(config-btv)#igmp static-join cascade-port 0/7/1 ip 224.1.1.2huawei(config-btv)#igmp static-join cascade-port 0/7/1 ip 224.1.1.3


—-End


Procedure
























Conguration Guide


Step 3 Congure the time server.huawei(config)#ntp-service unicast-server 193.189.251.38 source-interfacevlanif 10huawei(config)#ntp-service unicast-server 193.189.251.42 source-interfacevlanif 10


Step 5 Congure the EMU.This section takes the fan and PS4845 power supply as examples to show how to congure theenvironment monitoring unit (EMU).By default, both the primary and secondary node addresses of the fan EMU are 0. In thisexample, suppose they are 1. In this case, you need to set the DIP switch of the node addresson the fan monitoring unit as 1.huawei(config)#emu add 0 power4845 0 0 forehuawei(config)#emu add 1 fan 0 1 backhuawei(config)#interface emu 0huawei(config-if-power4845-0)#power module-num 2 1 2huawei(config-if-power4845-0)#quit

Step 6 Congure SCU subtendingMA5600-1 is subtended with MA5600-2, MA5600-3 and MA5600-4. Therefore, subtendingshall be congured.huawei(config)#vlan 60 to 62 standardhuawei(config)#port vlan 60 to 62 0/7 0-1huawei(config)#vlan 101 to 102 standardhuawei(config)#port vlan 101 to 102 0/7 0-1huawei(config)#vlan 100 standardhuawei(config)#port vlan 100 0/7 0-2



2. set the MSTP region name.huawei(config)#stp region-configurationhuawei(stp-region-configuration)#region-name hwrg






You can congure the ADSL2+ line prole based on your needs.huawei(config)#adsl line-profile add 10Start adding profilePress ’Q’ to quit the current configuration and new configuration will beneglected>Do you want to name the profile (y/n) [n]:n> Please choose default value type 0-adsl 1-adsl2+ (0~1) [0]:1> Will you set basic configuration for modem? (y/n)[n]:n> Please select channel mode 0-interleaved 1-fast (0~1) [0]:



> Will you set interleaved delay? (y/n)[n]:n>Please select form of transmit rate adaptation in downstream:> 0-fixed 1-adaptAtStartup 2-adaptAtRuntime (0~2) [1]:> Will you set SNR margin for modem? (y/n)[n]:n> Will you set parameters for rate? (y/n)[n]:y> Minimum transmit rate in downstream (32~32000 Kbps) [32]:> Maximum transmit rate in downstream (32~32000 Kbps) [24544]:8000> Minimum transmit rate in upstream (32~3000 Kbps) [32]:> Maximum transmit rate in upstream (32~3000 Kbps) [1024]:Add profile 10 successfully


neglected










Conguration Guide


n Congure the VLAN.

The ADSL2+ users of MA5600-3 adopt the VLAN authentication. In this case, theMUX VLAN is used to identify the users.huawei(config)#vlan 1000 to 1063 muxhuawei(config)#port vlan 1000 to 1063 0/7 0-1

6. Add the service port.All ports of ADSL2+ board 0/3 provides ADSL2+ service. To add the service port inbatches, run the multi-service-port command.huawei(config)#multi-service-port from-vlan 1000 port 0/3 0-63vpi 0 vci 35 rx-cttr 6 tx-cttr 6







5. Congure the upstream port.The SHDSL users of MA5600-3 adopt the VLAN authentication. In this case, the MUXVLAN is used to identify the users.huawei(config)#vlan 1300 to 1331 muxhuawei(config)#port vlan 1300 to 1331 0/7 0-1

6. Add the service port.Ports 0-310/5 board provide the SHDSL service. To add the service ports in batches, runthe multi-service-port command.huawei(config)#multi-service-port from-vlan 1300 port 0/5 0-31vpi 0 vci 35 rx-cttr 6 tx-cttr 6

Step 10 Congure the subtending multicast service.1. Congure the upstream port.

n Congure the upstream port.huawei(config-btv)#igmp uplink-port 0/7/0 100huawei(config-btv)#igmp uplink-port 0/7/1 100

n Congure the native VLAN.huawei(config)#interface scu 0/7huawei(config-if-scu-0/7)#native-vlan 0 vlan 100huawei(config-if-scu-0/7)#native-vlan 1 vlan 100



2. Congure the multicast service.n Enable the multicast proxy.


n Congure the upstream port to work in the program mode.huawei(config-btv)#igmp uplink-port-mode mstp

n Congure the program library.huawei(config-btv)#igmp program add name program1 ip 224.1.1.1 vlan 100huawei(config-btv)#igmp program add name program2 ip 224.1.1.2 vlan 100huawei(config-btv)#igmp program add name program3 ip 224.1.1.3 vlan 100


huawei(config-btv)#igmp cascade-port 0/7/0huawei(config-btv)#igmp cascade-port 0/7/1huawei(config-btv)#igmp cascade-port 0/7/2

n Modify a subtending port.huawei(config-btv)#igmp cascade-port modify 0/7/0 static enablehuawei(config-btv)#igmp cascade-port modify 0/7/1 static enablehuawei(config-btv)#igmp cascade-port modify 0/7/2 static enable

n Add programs for the static subtending port.huawei(config-btv)#igmp static-join cascade-port 0/7/0 ip 224.1.1.1huawei(config-btv)#igmp static-join cascade-port 0/7/0 ip 224.1.1.2huawei(config-btv)#igmp static-join cascade-port 0/7/0 ip 224.1.1.3huawei(config-btv)#igmp static-join cascade-port 0/7/1 ip 224.1.1.1huawei(config-btv)#igmp static-join cascade-port 0/7/1 ip 224.1.1.2huawei(config-btv)#igmp static-join cascade-port 0/7/1 ip 224.1.1.3huawei(config-btv)#igmp static-join cascade-port 0/7/2 ip 224.1.1.1huawei(config-btv)#igmp static-join cascade-port 0/7/2 ip 224.1.1.2huawei(config-btv)#igmp static-join cascade-port 0/7/2 ip 224.1.1.3


—-End


Procedure




n Add the upstream port.huawei(config)#port vlan 10 0/7 0





n Congure the route destined to the time server.



Conguration Guide















Step 5 Congure the EMU.This section takes the fan and PS4845 power supply as examples to show how to congure theenvironment monitoring unit (EMU).



By default, both the primary and secondary node addresses of the fan EMU are 0. In thisexample, suppose they are 1. In this case, you need to set the DIP switch of the node addresson the fan monitoring unit as 1.huawei(config)#emu add 0 power4845 0 0 forehuawei(config)#emu add 1 fan 0 1 backhuawei(config)#interface emu 0huawei(config-if-power4845-0)#power module-num 2 1 2huawei(config-if-power4845-0)#quit

Step 6 Enable PITP.huawei(config)#pitp enable pmode



You can congure the ADSL2+ line prole based on your needs.huawei(config)#adsl line-profile add 10Start adding profilePress ’Q’ to quit the current configuration and new configuration will beneglected>Do you want to name the profile (y/n) [n]:n> Please choose default value type 0-adsl 1-adsl2+ (0~1) [0]:1> Will you set basic configuration for modem? (y/n)[n]:n> Please select channel mode 0-interleaved 1-fast (0~1) [0]:> Will you set interleaved delay? (y/n)[n]:n>Please select form of transmit rate adaptation in downstream:> 0-fixed 1-adaptAtStartup 2-adaptAtRuntime (0~2) [1]:> Will you set SNR margin for modem? (y/n)[n]:n> Will you set parameters for rate? (y/n)[n]:y> Minimum transmit rate in downstream (32~32000 Kbps) [32]:> Maximum transmit rate in downstream (32~32000 Kbps) [24544]:8000> Minimum transmit rate in upstream (32~3000 Kbps) [32]:> Maximum transmit rate in upstream (32~3000 Kbps) [1024]:Add profile 10 successfully


neglected


<ATU-R >> The number of Loss of Frame Seconds (0~900) [0]:> The number of Loss of Signal Seconds (0~900) [0]:> The number of Loss of Power Seconds (0~900) [0]:> The number of Errored Seconds (0~900) [0]:> The number of severely errored seconds (0~900) [0]:> The number of unavailable seconds (0~900) [0]:> Threshold of positive difference between the current and the past transmitrate in fast mode (0~2968kbps) [0]:



Conguration Guide

> Threshold of positive difference between the current and the past transmitrate in interleaved mode (0~2968kbps) [0]:> Threshold of negative difference between the current and the past transmitrate in fast mode (0~2968kbps) [0]:> Threshold of negative difference between the current and the past transmitrate in interleaved mode (0~2968kbps) [0]:Add profile 10 successfully







n Congure the VLAN.

The ADSL2+ users of MA5600-4 adopt the PPPoE authentication. In this case, thesmart VLAN is used to identify the users.huawei(config)#vlan 1000 smarthuawei(config)#port vlan 1000 0/7 0

6. Add the service port.All ports of ADSL2+ board 0/3 provides ADSL2+ service. To add the service port inbatches, run the multi-service-port command.huawei(config)#multi-service-port vlan 1000 adsl 0/3 0-63 vpi0 vci 35 rx-cttr 6 tx-cttr 6






4. Activate the SHDSL port.huawei(config)#interface shdsl 0/5



huawei(config-if-shdsl-0/5)#deactivate allhuawei(config-if-shdsl-0/5)#alarm-config all 1huawei(config-if-shdsl-0/5)#activate all profile-index 10huawei(config-if-shdsl-0/5)#quit

5. Congure the upstream port.The SHDSL users of MA5600-4 adopt the PPPoE authentication. In this case, the smartVLAN is used to identify the users.huawei(config)#vlan 1300 smarthuawei(config)#port vlan 1300 0/7 0

6. Add the service port.Ports 0-30 of SHDSL board 0/5 provides the SHDSL service. To add the service ports inbatches, run the multi-service-port command.huawei(config)#multi-service-port vlan 1300 shdsl 0/5 0-31 vpi0 vci 35 rx-cttr 6 tx-cttr 6


After the conguration, the following results shall be achieved:n Users of port 0/2/2 must be authenticated, and have rights to watch two programs and

to preview one program.n Users of port 0/2/3 do not need authenticating.1. Congure the xDSL.


2. Congure the VLAN.n Create a smart VLAN.


n Set the VLAN upstream port.huawei(config)#port vlan 100 0/7 0

n Congure the native VLAN.huawei(config)#interface scu 0/7huawei(config-if-scu-0/7)#native-vlan 0 vlan 1

n Create a trafc prole.huawei(config)#traffic table index 8 ip car off priority 5 priority-policyPvc-Setting

n Add ADSL2+ ports 0/0/2 and 0/0/3 to VLAN 100.huawei(config)#service-port vlan 100 adsl 0/2/2 vpi 0 vci 35 rx-cttr 8tx-cttr 8huawei(config)#service-port vlan 100 adsl 0/2/3 vpi 0 vci 35 rx-cttr 8tx-cttr 8

3. Congure the multicast service.n Enable the multicast proxy function.


n Set the upstream port.huawei(config-btv)#igmp uplink-port 0/7/0 100



n Congure the authority prole.huawei(config-btv)#igmp profile profile-name profile0program-name program1watchhuawei(config-btv)#igmp profile profile-name profile0 program-name program2watch



Conguration Guide

huawei(config-btv)#igmp profile profile-name profile0 program-name program3preview


In this example, set the preview duration for program 3 as 150s, the number ofpreview attempts as 6 each day and the preview interval as 60s.huawei(config-btv)#igmp preview program name program3 preview-duration 150huawei(config-btv)#igmp preview program name program3 preview-times 6huawei(config-btv)#igmp preview program name program3 preview-interval 60To set the time to clear the previous preview attempts, run the igmp previewauto-reset-time command. In this example, set the time to 00:00:00.huawei(config-btv)#igmp preview auto-reset-time 00:00:00

n Congure the user data.huawei(config-btv)#igmp user add port 0/2/3 adsl 0 35 no-authhuawei(config-btv)#igmp user add port 0/2/2 adsl 0 35 authhuawei(config-btv)#igmp user bind-profile port 0/2/2 profile-name profile0


—-End


Procedure











3. Add the ACL rule.huawei(config)#acl 3010huawei(config-acl-adv-3010)#rule permit ip source any destination anyhuawei(config-acl-adv-3010)#rule deny ip source any destination 10.8.176.20.0.0.0huawei(config-acl-adv-3010)#rule permit ip source 195.71.131.38 0.0.0.0



destination 10.8.176.2 0.0.0.0huawei(config-acl-adv-3010)#rule permit ip source 195.71.131.39 0.0.0.0destination 10.8.176.2 0.0.0.0huawei(config-acl-adv-3010)#rule permit ip source 193.189.251.38 0.0.0.0destination 10.8.176.2 0.0.0.0huawei(config-acl-adv-3010)#rule permit ip source 193.189.251.42 0.0.0.0destination 10.8.176.2 0.0.0.0huawei(config-acl-adv-3010)#rule permit ip source 217.188.56.40 0.0.0.0destination 10.8.176.2 0.0.0.0huawei(config-acl-adv-3010)#rule permit ip source 217.188.57.40 0.0.0.0destination 10.8.176.2 0.0.0.0huawei(config-acl-adv-3010)#quithuawei(config)#packet-filter inbound ip-group 3010 port 0/7/0huawei(config)#packet-filter inbound ip-group 3010 port 0/7/1












Step 5 Congure the EMU.This section takes the fan and PS4845 power supply as examples to show how to congurethe EMU.By default, both the primary and secondary node addresses of the fan EMU are 0. In thisexample, suppose they are 1. In this case, you need to set the DIP switch of the node addresson the fan monitoring unit as 1.huawei(config)#emu add 0 power4845 0 0 forehuawei(config)#emu add 1 fan 0 1 backhuawei(config)#interface emu 0huawei(config-if-powe4845r-0)#power module-num 2 1 2huawei(config-if-power4845-0)#quit


MA5600-1 and MA5600-5 serve two branches of a company to provide the QinQ leasedline service.



Conguration Guide

1. Create VLAN 50.huawei(config)#vlan 50 mux

2. Set VLAN50 as QinQ VLAN.huawei(config)#vlan attrib 50 q-in-q

3. Add the upstream port.huawei(config)#port vlan 50 0/7 0

4. Add the service port.To add the service port, run the service-port command. Note that the VPI and VCI valuesof the service port must be the same as those on the modem.The QinQ VLAN supports the PVC-priority scheduling policy only. In this case, selectthe prole that supports PVC-priority policy.huawei(config)#traffic table index 7 ip car off priority 0priority-policy pvc-Settinghuawei(config)#service-port vlan 50 shdsl 0/5/31 vpi 0 vci35 rx-cttr 7 tx-cttr 7


—-End

35.8 VericationAll services congured on all DSLAMs run in the normal state.


SmartAX MA5600 Multi-service Access ModuleConguration Guide 36 Subtending Networking Example

36 Subtending Networking Example


36.1 NetworkingThe section describes a sample subtended network.36.2 Data PlanThe section describes the data plan for the sample subtended network.36.3 Conguring MA5600-1The section describes how to congure the MA5600-1.36.4 Conguring MA5600-2The section describes how to congure the MA5600-2.36.5 Conguring MA5600-3The section describes how to congure the MA5600-3.36.6 Conguring MA5600-4The section describes how to congure the MA5600-4.36.7 VericationAll services congured on all DSLAMs run in the normal state.


36 Subtending Networking ExampleSmartAX MA5600 Multi-service Access Module

Conguration Guide

36.1 NetworkingThe section describes a sample subtended network.

As shown in Figure 36-1:n The MA5600-1 is subtended with MA5600-2 through the GE port on the SCU board.n The MA5600-2 is subtended with MA5600-3 through the GE port on the SCU board.Figure 36-1 shows a sample subtended network of the MA5600.

Figure 36-1 Sample subtended network of the MA5600



36.2 Data PlanThe section describes the data plan for the sample subtended network.

Table 36-1 lists the service and data plan of MA5600 for the sample subtended network inFigure 36-1.

Table 36-1 Data plan for the sample subtended network

MA5600-1 MA5600-2 MA5600-3 MA5600-4 ATM-DSLAM

Service n ADSL2+service

n SHDSLservice

n VDSLservice

n QinQleased lineservice (forleased lineintercon-nectionbetweenMA5600andMA5600-4)

n Multicastservice

n ADSL2+service

n SHDSLservice

n Stackingwholesaleservice

n Triple Playservice

n ADSL2+service

n SHDSLservice

n Multicastservice

QinQ leasedline service(for leased lineinterconnec-tion betweenMA5600-4andMA5600-1)

ADSL

InbandNMSaddress

10.8.176.2255.255.255.0Gateway:10.8.176.1/24

10.8.176.3255.255.255.0Gateway:10.8.176.1/24

10.8.176.4255.255.255.0Gateway:10.8.176.1/24

10.8.176.5255.255.255.0Gateway:10.8.176.1/24

10.8.176.6255.255.255.0Gateway:10.8.176.1/24

GE portof theSCUboard

Upstream:0/7/0Subtending:0/7/1

Upstream:0/7/0Subtending:0/7/1

Upstream:0/7/0

Upstream:0/7/0

-

VLAN NMS: 10QinQ: 50Multicast:100ADSL2+:1000-1063(adopt VLANauthentica-tion)SHDSL:1300-1330(adopt VLANauthentica-tion)

NMS: 10Stacking:60-62 (innerlabel: 111-113)Triple Play:100-102ADSL2+:1000 (adoptPPPoE au-thentication)SHDSL: 1300(adopt PPPoEauthentica-tion)

NMS: 10Multicast:100ADSL2+:1000 (adoptPPPoE au-thentication)SHDSL: 1300(adopt PPPoEauthentica-tion)

NMS: 10QinQ: 50

-



Conguration Guide

MA5600-1 MA5600-2 MA5600-3 MA5600-4 ATM-DSLAM

Slot andport

ADSL2+: 0/3SHDSL: 0/5QinQ: 0/5/31Multicast:0/2/2, 0/2/3

ADSL2+: 0/3SHDSL: 0/5Stacking:0/2/0-10 (mapVLAN 60,ISP1)0/2/11-20(map VLAN61, ISP2)0/2/21-30(map VLAN62, ISP3)Triple Play:0/2/31

ADSL2+: 0/3SHDSL: 0/5

QinQ: 0/5/31 ADSL: 0/14

NMShost

195.71.131.38 and 195.71.131.39

Loghost

217.188.56.40 and 217.188.57.40

Timeserver

193.189.251.38 and 193.189.251.42

EMU DC DIS monitoring, fan monitoringDHCPserver

DHCP server1: 10.1.1.2 (active), 10.1.1.3 (standby)Gateway: 10.1.1.1/24DHCP server2: 10.4.4.2 (active), 10.4.4.3 (standby)Gateway: 10.4.4.1/24

Upperlayerdevice

The upper layer device supports the DHCP Option82 function.The BRAS supports the PITP, Stacking, and QinQ function.The BRAS supports inner and outer VLAN tags.The VLAN ID of the trafc ow sent from the IP network to the DSLAM is 100.The upper layer device classies the downstream trafc. Different services carrydifferent 802.1p labels.The VLAN mapping to the DSLAM is congured at the upper layer device.The IP address of the LAN switch at the MA5600 side is 10.10.10.1/24.

NOTE

n In this networking, MA5600-1 can be replaced with a GE switch or a BRAS.n The upstream port of theThe MA5600 supports the port aggregation function. In the actual network

planning, you can aggregate multiple upstream ports for use.

36.3 Conguring MA5600-1The section describes how to congure the MA5600-1.

Procedure

Step 1 Conrm the board.huawei>enablehuawei#config



huawei(config)#board confirm 0





n Congure the IP address of the NMS interface.huawei(config-if-vlanif10)#ip address 10.8.176.2 255.255.255.0

2. Add the route.n Congure the route destined to the NMS (Trap destination address).

huawei(config)#ip route-static 195.71.131.38 255.255.255.255 10.8.176.1preference 1huawei(config)#ip route-static 195.71.131.39 255.255.255.255 10.8.176.1preference 1

n Congure the route destined to the time server.huawei(config)#ip route-static 193.189.251.38 255.255.255.255 10.8.176.1preference 1huawei(config)#ip route-static 193.189.251.42 255.255.255.255 10.8.176.1preference 1



4. Congure the SNMP.n Set the community name and access authority.


n Set the SysContact.huawei(config)#snmp-agent sys-info contact HW-075512345678

n Set the SysLocation.huawei(config)#snmp-agent sys-info location Shenzhen China

n Set the SNMP version.

Here, the SNMP version must be the same as that of the NMS. In this example,the SNMP version is set as SNMP V2C.huawei(config)#snmp-agent sys-info version v2c

5. Enable trap sending.



Conguration Guide

huawei(config)#snmp-agent trap enable standard

6. Set trap destination address.huawei(config)#snmp-agent target-host trap address 195.71.131.38securityname publichuawei(config)#snmp-agent target-host trap address 195.71.131.39securityname public

7. Set trap source address.huawei(config)#snmp-agent trap source vlanif 10

Step 3 Congure the time server.huawei(config)#ntp-service unicast-server 193.189.251.38source-interface vlanif 10huawei(config)#ntp-service unicast-server 193.189.251.42 source-interface vlanif 10


Step 5 Congure EMU.This section uses the fan and DC DIS monitoring as an example to show how to congurethe EMU.By default, both the primary and secondary node addresses of the fan EMU are 0. In thisexample, suppose they are 1. In this case, you need to set the DIP switch of the node addresson the fan monitoring unit as 1.huawei(config)#emu add 0 dis 0 0 forehuawei(config)#emu add 1 fan 0 1 backhuawei(config)#interface emu 0huawei(config-if-dis-0)#distribution humidity 95 10huawei(config-if-dis-0)#distribution temperature 50 0huawei(config-if-dis-0)#quit

Step 6 Congure SCU subtending.MA5600-1 is subtended with MA5600-2 andMA5600-3. Therefore subtending shall becongured.huawei(config)#vlan 60 to 62 standardhuawei(config)#port vlan 60 to 62 0/7 0-1huawei(config)#vlan 101 to 102 standardhuawei(config)#port vlan 101 to 102 0/7 0-1

Step 7 Congure the ADSL2+ service.


You can congure it based on your actual needs.huawei(config)#adsl line-profile add 10Start adding profilePress ’Q’ to quit the current configuration and new configuration will beneglected>Do you want to name the profile (y/n) [n]:n> Please choose default value type 0-adsl 1-adsl2+ (0~1) [0]:1> Will you set basic configuration for modem? (y/n)[n]:n> Please select channel mode 0-interleaved 1-fast (0~1) [0]:> Will you set interleaved delay? (y/n)[n]:n>Please select form of transmit rate adaptation in downstream:> 0-fixed 1-adaptAtStartup 2-adaptAtRuntime (0~2) [1]:> Will you set SNR margin for modem? (y/n)[n]:n> Will you set parameters for rate? (y/n)[n]:y> Minimum transmit rate in downstream (32~32000 Kbps) [32]:> Maximum transmit rate in downstream (32~32000 Kbps) [24544]:8000> Minimum transmit rate in upstream (32~3000 Kbps) [32]:



> Maximum transmit rate in upstream (32~3000 Kbps) [1024]:Add profile 10 successfully

2. Congure the ADSL2+ alarm prole.You can congure it based on your actual needs.huawei(config)#adsl alarm-profile add 10Start adding profilePress ’Q’ to quit the current configuration and new configuration will be

neglected<ATU-C >> The number of Loss of Frame Seconds (0~900) [0]:> The number of Loss of Signal Seconds (0~900) [0]:> The number of Loss of Link Seconds (0~900) [0]:> The number of Loss of Power Seconds (0~900) [0]:> The number of Errored Seconds (0~900) [0]> Enable and disable the initial failure trap 0-disable 1-enable (0~1)[0]:1> The number of failed fast retrain seconds (0~900) [0]:> The number of severely errored seconds (0~900) [0]:> The number of unavailable seconds (0~900) [0]:> Threshold of positive difference between the current and the past transmitrate in fast mode (0~31968kbps) [0]:> Threshold of positive difference between the current and the past transmitrate in interleaved mode (0~31968kbps) [0]:> Threshold of negative difference between the current and the past transmitrate in fast mode (0~31968kbps) [0]:> Threshold of negative difference between the current and the past transmitrate in interleaved mode (0~31968kbps) [0]:


3. Congure the ADSL2+ trafc prole.To congure the ADSL2+ trafc prole, run the trafc table command.In this example, the default prole (prole 6) is used.



By default, the GE optical port of the GIU board works in full duplex mode withthe rate of 1000 Mbit/s.

To change the port working mode and the port rate, run the speed and duplexcommand in SCU board cong mode.

The settings must be the same as those of the peer end.n Congure the VLAN.

The ADSL2+ users of MA5600-1 adopt the VLAN authentication. In this case, theMUX VLAN is used to identify the users.huawei(config)#vlan 1000 to 1063 muxhuawei(config)#port vlan 1000 0/7 0-1huawei(config)#port vlan 1001 to 1063 0/7 0



Conguration Guide

6. Add the service port.All ports of ADSL2+ board 0/3 provide the ADSL2+ service. To add the virtual ports inbatches, run the multi-service-port command.huawei(config)#multi-service-port from-vlan 1000 port 0/3 0-63vpi 0 vci 35 rx-cttr 6 tx-cttr 6







5. Congure the upstream port.The SHDSL users of MA5600-1 adopt the VLAN authentication. In this case, the MUXVLAN is used to identify the users.huawei(config)#vlan 1300 to 1330 muxhuawei(config)#port vlan 1300 0/7 0-1huawei(config)#port vlan 1301 to 1330 0/7 0

6. Add the service port.n Ports 0-31 of SHDSL board 0/5 provide the SHDSL service.n To add the service ports in batches, run the multi-service-port command.huawei(config)#multi-service-port from-vlan 1300 port 0/5 0-31vpi 0 vci 35 rx-cttr 6 tx-cttr 6

Step 9 Conguring the QinQ leased line service.




3. Add the upstream port.huawei(config)#port vlan 50 0/7 0

4. Add the service port.To add the virtual port, run the service-port command. Note that the VPI and VCI valuesof the virtual port must be the same as those on the modem.



The QinQ VLAN supports the PVC-priority scheduling policy only. In this case, selectthe prole that supports PVC-priority policy.huawei(config)#traffic table index 7 ip car off priority 0priority-policy pvc-Settinghuawei(config)#service-port vlan 50 shdsl 0/5/31 vpi 0 vci 35 rx-cttr 7tx-cttr 7


After the conguration, the following results shall be achieved:n Users of port 0/2/2 need to be authenticated, and have rights to watch two programs and

to preview one program.n Users of port 0/2/3 do not need to be authenticated.1. Congure the xDSL.


2. Congure the VLAN.n Create a VLAN.


n Congure the VLAN upstream port.huawei(config)#port vlan 100 0/7 0-1

n Congure the native VLAN.huawei(config)#interface scu 0/7huawei(config-if-giu-0/7)#native-vlan 0 vlan 100huawei(config-if-giu-0/7)#native-vlan 1 vlan 100

n Create the trafc prole.huawei(config)#traffic table index 8 ip car off priority 5priority-policy Pvc-Setting

n Add ADSL2+ ports 0/0/2 and 0/0/3 to VLAN 100.huawei(config)#service-port vlan 100 adsl 0/2/2 vpi 0vci 35 rx-cttr 8 tx-cttr 8huawei(config)#service-port vlan 100 adsl 0/2/3 vpi 0vci 35 rx-cttr 8 tx-cttr 8

3. Congure the multicast service.n Enable the multicast proxy function.


n Set the upstream port.huawei(config-btv)#igmp uplink-port 0/7/0 100


n Congure the program library.huawei(config-btv)#igmp program add name program1 ip224.1.1.1 vlan 100 bind 0/7/0huawei(config-btv)#igmp program add name program2 ip 224.1.1.2 vlan 100 bind 0/7/0huawei(config-btv)#igmp program add name program3 ip224.1.1.3 vlan 100 bind 0/7/0

n Congure the authority prole.huawei(config-btv)#igmp profile profile-name profile0program-name program1 watchhuawei(config-btv)#igmp profile profile-name profile0 program-name program2 watchhuawei(config-btv)#igmp profile profile-name profile0program-name program3 preview

n Set the preview parameters.

In this example, set the preview duration for program 3 as 150s, the number ofpreview attempts as 6 each day, and the preview interval as 60s.huawei(config-btv)#igmp preview program name program3 preview-duration 150huawei(config-btv)#igmp preview program name program3 preview-times 6huawei(config-btv)#igmp preview program name program3 preview-interval 60To set the time to clear the previous preview attempts, run the igmp previewauto-reset-time command. In this example, set the time to 00:00:00.



Conguration Guide

huawei(config-btv)#igmp preview auto-reset-time 00:00:00

n Congure the user data.huawei(config-btv)#igmp user add port 0/2/3 no-authhuawei(config-btv)#igmp user add port 0/2/2 authhuawei(config-btv)#igmp user bind-profile port 0/2/2 profile-name profile0

Step 11 Congure the subtending multicast service.1. Set the upstream port.

The upstream port is already congured in Congure the multicast service.2. Congure the IGMP proxy.

The IGMP proxy is already congured in Congure the multicast service.3. Congure the program library.

The program library is already congured in Congure the multicast service.4. Congure the multicast for the subtending port.

n Specify a subtending port.huawei(config-btv)#igmp cascade-port 0/7/1

n Modify a subtending port.huawei(config-btv)#igmp cascade-port modify 0/7/1 static enable

n Add programs for the static subtending port.huawei(config-btv)#igmp static-join cascade-port 0/7/1 ip 224.1.1.1huawei(config-btv)#igmp static-join cascade-port 0/7/1 ip 224.1.1.2huawei(config-btv)#igmp static-join cascade-port 0/7/1 ip 224.1.1.3


—-End


Procedure









n Congure the route destined to the time server.huawei(config)#ip route-static 193.189.251.38 255.255.255.255 10.8.176.1



preference 1huawei(config)#ip route-static 193.189.251.42 255.255.255.255 10.8.176.1preference 1














Step 5 Congure EMU.



Conguration Guide

This section uses the fan and DC DIS monitoring as an example to show how to congurethe EMU.By default, both the primary and secondary node addresses of the fan EMU are 0. In thisexample, suppose they are 1. In this case, you need to set the DIP switch of the node addresson the fan monitoring unit as 1.huawei(config)#emu add 0 dis 0 0 forehuawei(config)#emu add 1 fan 0 1 backhuawei(config)#interface emu 0huawei(config-if-dis-0)#distribution humidity 95 10huawei(config-if-dis-0)#distribution temperature 50 0huawei(config-if-dis-0)#quit

Step 6 Congure SCU subtendingMA5600-2 is subtended with MA5600-3. Therefore subtending shall be conguredtransparently transmit the VLAN data of MA5600-3. There are four VLANs congured onMA5600-3, with the VLAN ID of 10, 100, 1000 and 1300.These VLAN are already congured with subtending, and it is unnecessary to congure themagain.



You can congure it based on your actual needs.huawei(config)#adsl line-profile add 10Start adding profilePress ’Q’ to quit the current configuration and new configuration will beneglected>Do you want to name the profile (y/n) [n]:n> Please choose default value type 0-adsl 1-adsl2+ (0~1) [0]:1> Will you set basic configuration for modem? (y/n)[n]:n> Please select channel mode 0-interleaved 1-fast (0~1) [0]:> Will you set interleaved delay? (y/n)[n]:n>Please select form of transmit rate adaptation in downstream:> 0-fixed 1-adaptAtStartup 2-adaptAtRuntime (0~2) [1]:> Will you set SNR margin for modem? (y/n)[n]:n> Will you set parameters for rate? (y/n)[n]:y> Minimum transmit rate in downstream (32~32000 Kbps) [32]:> Maximum transmit rate in downstream (32~32000 Kbps) [24544]:8000> Minimum transmit rate in upstream (32~3000 Kbps) [32]:> Maximum transmit rate in upstream (32~3000 Kbps) [1024]:Add profile 10 successfully

2. Congure the ADSL2+ alarm prole.You can congure it based on your actual needs.huawei(config)#adsl alarm-profile add 10Start adding profilePress ’Q’ to quit the current configuration and new configuration will be

neglected





3. Congure the ADSL2+ trafc prole.To congure the ADSL2+ trafc prole, run the trafc table command.In this example, the default prole (prole 6) is used.






The ADSL2+ users of MA5600-1 adopt the VLAN authentication. In this case, theMUX VLAN is used to identify the users.huawei(config)#vlan 1000 smarthuawei(config)#port vlan 1000 0/7 0-1

6. Add the service port.All ports of ADSL2+ board 0/3 provide the ADSL2+ service. To add the virtual ports inbatches, run the multi-service-port command.huawei(config)#multi-service-port vlan 1000 adsl 0/3 0-63 vpi0 vci 35 rx-cttr 6 tx-cttr 6







Conguration Guide


4. Activate the SHDSL port.huawei(config)#interface shdsl 0/5huawei(config-if-shdsl-0/5)#deactivate allhuawei(config-if-shdsl-0/5)#alarm-config all 1huawei(config-if-shdsl-0/5)#activate all 10huawei(config-if-shdsl-0/5)#quit



Step 9 Congure the stacking multi-ISP wholesale service.n ISP1 provides users of ports 0/0/0 to 0/1/10 with the multi-ISP wholesale service.n ISP2 provides users of ports 0/0/11 to 0/1/20 with the multi-ISP wholesale service.n ISP3 provides users of ports 0/0/21 to 0/1/30 with the multi-ISP wholesale service.1. Create a stacking VLAN.

huawei(config)#vlan 60 to 62 smarthuawei(config)#vlan attrib 60 to 62 stackinghuawei(config)#stacking outer-ethertype 0x8000

2. Add the upstream port.huawei(config)#port vlan 60 to 62 0/7 0

3. Add the service port.huawei(config)#multi-service-port vlan 60 adsl 0/2 0-10 vpi 0 vci 35rx-cttr 6 tx-cttr 6huawei(config)#multi-service-port vlan 61 adsl 0/2 11-20 vpi 0 vci 35rx-cttr 6 tx-cttr 6huawei(config)#multi-service-port vlan 62 adsl 0/2 21-30 vpi 0 vci 35rx-cttr 6 tx-cttr 6

4. Congure the inner label.huawei(config)#stacking label vlan 60 baselabel 111huawei(config)#stacking label vlan 61 baselabel 112huawei(config)#stacking label vlan 62 baselabel 113

Step 10 Congure the triple play service.

After the conguration, the following results shall be achieved: Uses of port 0/2/31 can watchthe programs stored on servers 224.1.1.1 and 224.1.1.2, and can preview the programs storedon server 224.1.1.3.1. Congure the upstream port and the VLAN.

huawei(config)#vlan 100 smarthuawei(config)#port vlan 100 0/7 0-1huawei(config)#vlan 101 muxhuawei(config)#port vlan 101 0/7 0huawei(config)#vlan 102 smarthuawei(config)#port vlan 102 0/7 0

2. Congure the trafc table.The voice service has the highest priority, and the network access service has the lowestpriority.



Presume that the network access service uses trafc table 6, with the priority of 0. Thefollowing shows how to create the new trafc tables for the voice service and videoservice respectively.huawei(config)#traffic table index 7 ip car 1024 priority 7 priority-policyPvc-Settinghuawei(config)#traffic table index 8 ip car off priority 5 priority-policyPvc-Setting

3. Congure the service port.huawei(config)#service-port vlan 100 adsl 0/2/31 vpi 0 vci 35 rx-cttr 8tx-cttr 8huawei(config)#service-port vlan 101 adsl 0/2/31 vpi 0 vci 36 rx-cttr 6tx-cttr 6huawei(config)#service-port vlan 102 adsl 0/2/31 vpi 0 vci 37 rx-cttr 7tx-cttr 7

4. Congure DHCP relay mode for video service.n Enable DHCP mode.

huawei(config)#dhcp mode layer-3 option-60

n Congure the DHCP server.huawei(config)#dhcp-server 1 ip 10.1.1.2 10.1.1.3huawei(config)#dhcp domain videohuawei(config-dhcp-domain-video)#dhcp-server 1

n Congure the gateway mapped to the DHCP domain.huawei(config)#interface vlanif 100huawei(config-if-vlanif100)#ip address 10.1.1.1 24huawei(config-if-vlanif100)#dhcp domain video gateway 10.1.1.1

n Enable DHCP Option82.huawei(config)#dhcp option82 enable

5. Congure DHCP relay mode for voice service.n Congure the DHCP server.

huawei(config)#dhcp-server 2 ip 10.4.4.2 10.4.4.3huawei(config)#dhcp domain voicehuawei(config-dhcp-domain-voice)#dhcp-server 2

n Congure the gateway mapped to the DHCP domain.huawei(config)#interface vlanif 102huawei(config-if-vlanif102)#ip address 10.4.4.1 24huawei(config-if-vlanif102)#dhcp domain voice gateway 10.4.4.1

n Enable the DHCP option82.huawei(config)#dhcp option82 enable

6. Congure the video service.huawei(config)#interface scu 0/7huawei(config-if-scu-0/7)#native-vlan 0 vlan 1huawei(config-if-scu-0/7)#quithuawei(config)#btvhuawei(config-btv)#igmp mode proxyhuawei(config-btv)#igmp uplink-port 0/7/0 100huawei(config-btv)#igmp uplink-port-mode program

huawei(config-btv)#igmp program add name program1 ip 224.1.1.1 vlan 100 bind 0/7/0huawei(config-btv)#igmp program add name program2 ip 224.1.1.2 vlan 100 bind 0/7/0huawei(config-btv)#igmp program add name program3 ip 224.1.1.3 vlan 100 bind 0/7/0

huawei(config-btv)#igmp profile profile-name profile0 program-name program1 watchhuawei(config-btv)#igmp profile profile-name profile0 program-name program2 watchhuawei(config-btv)#igmp profile profile-name profile0 program-name program3 preview

huawei(config-btv)#igmp user add port 0/2/31 authhuawei(config-btv)#igmp user bind-profile port 0/2/31 profile-name profile0

Step 11 Congure the subtending multicast service.1. Congure the upstream port.

The upstream port is already congured in Congure the multicast service.2. Congure the IGMP proxy.



Conguration Guide

The IGMP proxy is already congured in Congure the multicast service.3. Congure the program library.

The program library is already congured in Congure the multicast service4. Congure the multicast for the subtending port.

n Specify a subtending port.huawei(config-btv)#igmp cascade-port 0/7/1

n Modify a subtending port.huawei(config-btv)#igmp cascade-port modify 0/7/1 static enable

n Add programs for the static subtending port.huawei(config-btv)#igmp static-join cascade-port 0/7/1 ip 224.1.1.1huawei(config-btv)#igmp static-join cascade-port 0/7/1 ip 224.1.1.2huawei(config-btv)#igmp static-join cascade-port 0/7/1 ip 224.1.1.3


—-End


Procedure























Step 3 Congure the time server.huawei(config)#ntp-service unicast-server 193.189.251.38source-interface vlanif 10huawei(config)#ntp-service unicast-server 193.189.251.42 source-interface vlanif 10


Step 5 Congure EMU.This section uses the fan and DC DIS monitoring as an example to show how to congurethe EMU.By default, both the primary and secondary node addresses of the fan EMU are 0. In thisexample, suppose they are 1. In this case, you need to set the DIP switch of the node addresson the fan monitoring unit as 1.huawei(config)#emu add 0 dis 0 0 forehuawei(config)#emu add 1 fan 0 1 backhuawei(config)#interface emu 0huawei(config-if-dis-0)#distribution humidity 95 10



Conguration Guide

huawei(config-if-dis-0)#distribution temperature 50 0huawei(config-if-dis-0)#quit



You can congure it based on your actual needs.huawei(config)#adsl line-profile add 10Start adding profilePress ’Q’ to quit the current configuration and new configuration will beneglected>Do you want to name the profile (y/n) [n]:n> Please choose default value type 0-adsl 1-adsl2+ (0~1) [0]:1> Will you set basic configuration for modem? (y/n)[n]:n> Please select channel mode 0-interleaved 1-fast (0~1) [0]:> Will you set interleaved delay? (y/n)[n]:n>Please select form of transmit rate adaptation in downstream:> 0-fixed 1-adaptAtStartup 2-adaptAtRuntime (0~2) [1]:> Will you set SNR margin for modem? (y/n)[n]:n> Will you set parameters for rate? (y/n)[n]:y> Minimum transmit rate in downstream (32~32000 Kbps) [32]:> Maximum transmit rate in downstream (32~32000 Kbps) [24544]:8000> Minimum transmit rate in upstream (32~3000 Kbps) [32]:> Maximum transmit rate in upstream (32~3000 Kbps) [1024]:Add profile 10 successfully

2. Conguring the ADSL2+ alarm prole.You can congure it based on your actual needs.huawei(config)#adsl alarm-profile add 10Start adding profilePress ’Q’ to quit the current configuration and new configuration will be

neglected



3. Congure the ADSL2+ trafc prole.To congure the ADSL2+ trafc prole, run the trafc table command.



In this example, the default prole (prole 6) is used.4. Activate the ADSL2+ port.

huawei(config)#interface adsl 0/3huawei(config-if-adsl-0/3)#deactivate allhuawei(config-if-adsl-0/3)#alarm-config all 10huawei(config-if-adsl-0/3)#activate all profile-index 10huawei(config-if-adsl-0/3)#quit





The ADSL2+ users of MA5600-1 adopt the VLAN authentication. In this case, theMUX VLAN is used to identify the users.huawei(config)#vlan 1000 smarthuawei(config)#port vlan 1000 0/7 0

6. Add the service port.All ports of ADSL2+ board 0/3 provides the ADSL2+ service. To add the virtual ports inbatches, run the multi-service-port command.huawei(config)#multi-service-port vlan 1000 adsl 0/3 0-63 vpi0 vci 35 rx-cttr 6 tx-cttr 6






4. Activate the SHDSL port.huawei(config)#interface shdsl 0/5huawei(config-if-shdsl-0/5)#deactivate allhuawei(config-if-shdsl-0/5)#alarm-config all 1huawei(config-if-shdsl-0/5)#activate all 10huawei(config-if-shdsl-0/5)#quit




Conguration Guide



After the conguration, the following results shall be achieved:n Users of port 0/2/2 need to be authenticated, and have rights to watch two programs and

to preview one program.n Users of port 0/2 do not need to be authenticated.1. Congure the xDSL.


2. Congure the VLAN.n Create a smart VLAN.


n Set the VLAN upstream port.huawei(config)#port vlan 100 0/7 0

n Congure the native VLAN.huawei(config)#interface scu 0/7huawei(config-if-scu-0/7)#native-vlan 0 vlan 100

n Create the trafc prole.huawei(config)#traffic table index 8 ip car off priority 5priority-policy pvc-Setting

n Add ADSL2+ port 2 and 3 to VLAN 100.huawei(config)#service-port vlan 100 adsl 0/2/2 vpi 0vci 35 rx-cttr 8 tx-cttr 8huawei(config)#service-port vlan 100 adsl 0/2/3 vpi 0vci 35 rx-cttr 8 tx-cttr 8

3. Congure the multicast servicen Enable the multicast proxy function.


n Congure the upstream port.huawei(config-btv)#igmp uplink-port 0/7/0 100

n Congure the upstream port to work in program mode.huawei(config-btv)#igmp uplink-port-mode program


n Congure the authority prole.huawei(config-btv)#igmp profile profile-name profile0program-name program1watchhuawei(config-btv)#igmp profile profile-name profile0 program-name program2watchhuawei(config-btv)#igmp profile profile-name profile0 program-name program3preview


In this example, set the preview duration for program 3 as 150s, the number ofpreview attempts as 6 each day, and the preview interval as 60s.huawei(config-btv)#igmp preview program name program3 preview-duration 150huawei(config-btv)#igmp preview program name program3 preview-times 6huawei(config-btv)#igmp preview program name program3 preview-interval 60



To set the time to clear the previous preview attempts, run the igmp previewauto-reset-time command. In this example, set the time to 00:00:00.huawei(config-btv)#igmp preview auto-reset-time 00:00:00

n Congure the user data.huawei(config-btv)#igmp user add port 0/2/3 no-authhuawei(config-btv)#igmp user add port 0/2/2 authhuawei(config-btv)#igmp user bind-profile port 0/2/2 profile-name profile0


—-End


ProcedureStep 1 Conrm the board.

huawei>enablehuawei#confighuawei(config)#board confirm 0










3. Add the ACL rule.huawei(config)#acl 3010huawei(config-acl-adv-3010)#rule permit ip source any destination anyhuawei(config-acl-adv-3010)#rule deny ip source any destination 10.8.176.20.0.0.0huawei(config-acl-adv-3010)#rule permit ip source 195.71.131.38 0.0.0.0destination 10.8.176.2 0.0.0.0huawei(config-acl-adv-3010)#rule permit ip source 195.71.131.39 0.0.0.0destination 10.8.176.2 0.0.0.0huawei(config-acl-adv-3010)#rule permit ip source 193.189.251.38 0.0.0.0destination 10.8.176.2 0.0.0.0huawei(config-acl-adv-3010)#rule permit ip source 193.189.251.42 0.0.0.0destination 10.8.176.2 0.0.0.0huawei(config-acl-adv-3010)#rule permit ip source 217.188.56.40 0.0.0.0



Conguration Guide

destination 10.8.176.2 0.0.0.0huawei(config-acl-adv-3010)#rule permit ip source 217.188.57.40 0.0.0.0destination 10.8.176.2 0.0.0.0huawei(config-acl-adv-3010)#quithuawei(config)#packet-filter inbound ip-group 3010 port 0/7/0huawei(config)#packet-filter inbound ip-group 3010 port 0/7/1












Step 5 Congure EMU.This section uses the fan and DC DIS monitoring as an example to show how to congurethe EMU.By default, both the primary and secondary node addresses of the fan EMU are 0. In thisexample, suppose they are 1. In this case, you need to set the DIP switch of the node addresson the fan monitoring unit as 1.huawei(config)#emu add 0 dis 0 0 forehuawei(config)#emu add 1 fan 0 1 backhuawei(config)#interface emu 0huawei(config-if-dis-0)#distribution humidity 95 10huawei(config-if-dis-0)#distribution temperature 50 0huawei(config-if-dis-0)#quit





3. Add the upstream port.



huawei(config)#port vlan 50 0/7 0

4. Add the service port.To add the virtual port, run the service-port command. Note that the VPI and VCI valuesof the virtual port must be the same as those on the modem.The QinQ VLAN supports the PVC-priority scheduling policy only. In this case, selectthe prole that supports PVC-priority policy.huawei(config)#traffic table index 7 ip car off priority 0priority-policy pvc-Settinghuawei(config)#service-port vlan 50 shdsl 0/5/31 vpi 0 vci35 rx-cttr 7 tx-cttr 7


—-End

36.7 VericationAll services congured on all DSLAMs run in the normal state.


SmartAX MA5600 Multi-service Access ModuleConguration Guide A Acronyms and Abbreviations

A Acronyms and Abbreviations

AAAA Authentication, Authorization and AccountingABR Area Border RouterACL Access Control ListADSL Asymmetrical Digital Subscriber LineADSL2+ Asymmetrical Digital Subscriber Line 2 plusARP Address Resolution ProtocolAS Autonomous SystemASBR Autonomous System Border RouterATM Asynchronous Transfer ModeATU-C ADSL Transceiver Unit - Central Ofce endATU-R ADSL Transceiver Unit - Remote endBBDR Backup Designated RouterBMS HUAWEI iManager N2000 broadband integrated

network management systemBPDU Bridge Protocol Data UnitBRAS Broadband Remote Access ServerBTV Broadcast TVCCAR Committed Access RateCC Connection ConrmCCM Continuity Check MessageCFM Connectivity Fault ManagementCIDR Classless Inter-Domain RoutingCLI Command Line InterfaceCoS Class of ServiceCRC Cyclic Redundancy CodeCR-LSP Constrained Route-Label Switched PathDDHCP Dynamic Host Conguration Protocol

Issue 02 (2007-01-10) Huawei Technologies Proprietary A-1

A Acronyms and AbbreviationsSmartAX MA5600 Multi-service Access Module

Conguration Guide

DHCP option82 DHCP relay agent option 82DoD Downstream on DemandDoS Denial of ServiceDR Designated RouterDSLAM Digital Subscriber Line Access MultiplexerDU Downstream UnsolicitedEEMU Environment Monitoring UnitFFE Fast EthernetFEC Forward Error CorrectionFTP File Transfer ProtocolFIFO First In First OutGGE Gigabit EthernetI

ICMP Internet Control Message ProtocolLabel Distribu-tion Protocol

IGMP Internet Group Management ProtocolIGP Interior Gateway ProtocolIMA Inverse Multiplexing for ATMIP Internet ProtocolIPoA Internet Protocol Over ATMIPoE IP over EthernetISP Internet Service ProviderLLAN Local Area NetworkLDP Label Distribution ProtocolLSA Link State AdvertisementLSDB Link State DataBaseLSP Label Switched PathLSR Label Switched RouterLTM Linktrace MessageMMA Maintenance AssociationMAC Medium Access ControlMBS Maximum Burst SizeMD Maintenance DomainMEP Maintenance association End PointMIB Management Information Base

A-2 Huawei Technologies Proprietary Issue 02 (2007-01-10)

SmartAX MA5600 Multi-service Access ModuleConguration Guide A Acronyms and Abbreviations

MIP Maintenance association Interspace PointMSTP Multiple Spanning Tree ProtocolMTU Maximum Transmission UnitNNBMA Non Broadcast MultiAccessNHLFE Next Hop Label Forwarding EntryNIC Network Information CenterNMS Network Management SystemOOAM Operation And MaintenanceOSPF Open Shortest Path FirstPPITP Policy Information Transfer ProtocolPPPoA Point-to-Point Protocol Over ATMPPPoE Point-to-Point Protocol Over EthernetPQ Priority QueuingPPP Peer-Peer ProtocolPSN Packet Switched NetworkQQoS Quality of ServiceRRADIUS Remote Authentication Dial in User ServiceRARP Reverse Address Resolution ProtocolRFC Remote Feature ControlRIP Routing Information ProtocolRMEP Remote MEPRMON Remote Network MonitoringRSVP Resource Reservation ProtocolSSNMP Simple Network Management ProtocolSSH Secure ShellSTB Set Top BoxSTP Spanning Tree ProtocolTTCP/IP Transmission Control Protocol/Internet ProtocolTE Trafc EngineeringTFTP Trivial File Transfer ProtocolTOS Type of ServiceTTL Time To LiveU

Issue 02 (2007-01-10) Huawei Technologies Proprietary A-3

A Acronyms and AbbreviationsSmartAX MA5600 Multi-service Access Module

Conguration Guide

UDP User Datagram ProtocolVVLAN Virtual LANVOD Video On DemandVT Virtual TerminalVTP VLAN Trunk ProtocolVTY Virtual Type TerminalWWRR Weighted Round RobinXxDSL x Digital Subscriber Line

A-4 Huawei Technologies Proprietary Issue 02 (2007-01-10)

SmartAX MA5600 Multi-service Access ModuleConguration Guide Index

Index

AAAA, 7-2

advantage, 7-2conguring authentication scheme, 7-6creating domain, 7-7

AAA,conguring, 7-6accessible address segment, conguring, 18-12ACL, 16-3

activating, 16-18advanced ACL, 16-6basic ACL, 16-5categories, 16-3conguring time range, 16-12creating, 16-11customized ACL, 16-9layer 2 ACL, 16-8

ACL ruleadvanced ACL rule, 16-14basic ACL rule, 16-13customized ACL rule, 16-16layer 2 ACL rule, 16-15setting step, 16-13

adding user, 5-2address prex list,conguring, 11-53ADSL2+

activating ADSL2+ port, 19-24adding alarm prole, 19-21adding extended line prole, 19-19adding line prole, 19-14ADSL2+ port rate threshold, conguring, 19-27conguring IPoA/IPoE conversion, 19-27conguring port rate measurement threshold,19-27enabling IPoA conversion, 19-28querying port information, 19-34

ADSL2+ alarm prole,adding, 19-21ADSL2+ line prole, adding, 19-14ADSL2+ port, activating, 19-24ADSL2+ service

IPoA, 19-3PPPoA, 19-7PPPoE/IPoE, 19-10

ADSL2+, denition, 19-3advanced ACL

conguring, 16-6advanced ACL rule, creating, 16-14advanced RSVP-TE feature, conguring, 26-14agent

conguration, 3-7denition, 3-2

anti DoS attack, enabling, 18-3anti ICMP attack, enabling, 18-6anti IP attack, enabling, 18-5anti IP spoong,enabling, 18-5anti MAC spoong,enabling, 18-4apply cause of route policy, dening, 11-56ARP, 10-2ARP proxy

conguring, 10-2enabling, 10-5

ARP, static ARP entry, 10-4ATM-DSLAM, conguring, 24-2authentication scheme

conguring, 7-6specifying, 7-8

authority mode, setting, 29-43authority of program, granting, 29-50authority prole

binding with a user, 29-49modifying, 29-44renaming, 29-45unbinding from a user, 29-50

authority prole congurationmodifying authority prole, 29-44renaming authority prole, 29-45setting authority mode, 29-43

Bbackup root bridge, specifying, 12-12bandwidth management

disabling, 29-42enabling, 29-40enabling bandwidth management, 29-40setting program bandwidth, 29-43setting upstream port bandwidth, 29-42setting user bandwidth, 29-42

basic ACLconguring, 16-5

Issue 02 (2007-01-10) Huawei Technologies Proprietary i-1

IndexSmartAX MA5600 Multi-service Access Module

Conguration Guide

basic ACL rule, creating, 16-13basic MPLS TE capability, conguring, 26-5black list, conguring, 18-9board status, 6-2BTV user

adding, 29-46binding with authority prole, 29-49blocking, 29-48deleting, 29-47disabling the monitoring function, 29-51granting with program authority, 29-50modifying, 29-47monitoring, 29-50unblocking, 29-49

built-in ISUbusiness user, 31-2common user, 31-2ISUA and ISUE, 31-2

CCFM

enabling, 32-10enabling alarm, 32-10

CLI characteristic, 2-2display characteristic, 2-7edit characteristic, 2-5error prompt, 2-8intelligent matching, 2-4interaction characteristic, 2-6parameter prompt, 2-6saving history command, 2-7

CLI display characteristic, 2-7CLI error prompt, 2-8CLI operation

clearing terminal screen, 2-16enabling interactive command execution, 2-11enabling trap reporting, 2-12locking terminal, 2-15obtaining online help information, 2-10setting system name, 2-14setting system time, 2-13setting terminal type, 2-14setting timeout exit time, 2-15showing CPU usage, 2-17showing memory usage, 2-18showing version, 2-16switching terminal language, 2-13testing network state, 2-18

CLI trap reporting, enabling, 2-12command line interface (CLI), 1-2community name, setting, 3-9conguration example

remote user authentication, 7-4conguring terminal

through inband management channel, 1-14through local serial port, 1-3through outband management channel, 1-10through remote serial port, 1-6through SSH, 1-17

Connectivity Fault Management (CFM), 32-3contact information of system, setting, 3-12control board, resetting, 6-5CPU usage, showing, 2-17CR-LSP establishment, tuning, 26-23customized ACL

conguring, 16-9customized ACL rule, creating, 16-16

Ddefault logging interval (2 hours), 29-56default matching sequence, 16-4default route

setting cost, 11-18default routing metric,specifying, 11-20default setting

handshake interval, 3-17read-only community name, 3-9

designated bridgesetting parameter, 12-17

designated portsetting parameter, 12-22

device protection, conguring, 12-28device subtending, conguring, 23-2DHCP, 9-2

setting working mode, 9-12DHCP conguration

MAC address segment mode, 9-7option60 mode, 9-5standard mode, 9-2

DHCP MAC address segmentcreating, 9-15gateway, 9-18range, 9-16

DHCP MAC address segment mode,conguring, 9-7DHCP option60 domain

creating, 9-13gateway, 9-15

DHCP option60 mode, conguring, 9-5DHCP relay, 9-2DHCP see also DHCP relay, 9-2DHCP server

setting working mode, 9-11DHCP server group

binding MAC address segment, 9-17binding VLAN interface, 9-12binding with option60 domain, 9-14creating, 9-10

DHCP standard mode, conguring, 9-2DR priority, conguring, 11-34dynamic MAC address

aging time, 14-4

Eedit characteristic, 2-5egress

conguring MPLS OAM, 33-12EMU, conguring, 34-3

i-2 Huawei Technologies Proprietary Issue 02 (2007-01-10)


enabling MPLS, 25-10engine ID

conguring for local SNMP entity, 3-15related operations, 3-16

Ethernet OAM, conguring, 32-3Ethernet port

conguring physical attribute, 23-6enabling aggregation, 23-11enabling ow control, 23-9setting native VLAN, 23-14

Ethernet port aggregation, enabling, 23-11Ethernet port, mirroring, 23-12extended ADSL2+ line prole, adding, 19-19

Fnwait timer, 15-2

conguring, 15-3rewall, conguring, 18-10format of user name

setting, 7-17

Ggeneral query

interval, setting, 29-26maximum response time to, 29-26restoring to default interval (125s), 29-26

Hhandshake function, enabling, 3-16handshake interval

default setting, 3-17long handshake interval, 3-17related operation, 3-18setting, 3-17short handshake interval, 3-17

Hello packet poll interval,setting, 11-45history command

saving, 2-7Huawei Group Management Protocol see alsoPITP, 17-2

Iif-match clause of route policy, dening, 11-55IGMP global parameters

general query interval, 29-26maximum response time to general query, 29-26maximum response time to specic query, 29-29number of specic queries, 29-28preview recognition time, 29-32proxy authorization, 29-24robustness variable, 29-25specic query interval, 29-29TTL for V1 router, 29-31unsolicited report interval, 29-30user action report function, 29-33

IGMP snooping parameters, 29-34, 29-35IGMP user

adding, 29-46binding with authority prole, 29-49blocking, 29-48disabling the monitoring function, 29-51granting with program authority, 29-50modifying, 29-47monitoring, 29-50

inaccessible address segment, conguring, 18-13inband NMS

routes, 1-16ingress

conguring MPLS OAM, 33-11intelligent matching, 2-4interaction characteristic, 2-6interactive command execution

enabling, 2-11interface

enabling packet transmit/receive, 11-28interval for

general queryrestoring to default value (125s), 29-26setting, 29-26

logging, 29-56specic query

restoring to default value (1s), 29-29setting, 29-29

unsolicited reportrestoring to default value (10s), 29-31setting, 29-30

interval for sending Hello packet,setting, 11-43IP address

inband NMS interface, 3-20outband NMS interface, 3-18

IP address of peer router, conguring, 11-26IP address, binding, 17-6IP connection

enabling IP packet debugging, 15-4IP packet debugging,enabling, 15-4ISU conguration

dual ISU, 31-4single ISU, 31-2

Llayer 2 ACL

conguring, 16-8layer 2 ACL rule, creating, 16-15leased line access, 28-2leased line access, conguring, 28-2leave proxy switch see proxy of IGMP leavepacket, 29-35linktrace function, conguring, 32-17local RSA key pair, conguring, 7-18local serial port terminal

dene type, 1-4network topology, 1-3setting parameter, 1-4starting HyperTerminal, 1-4

local SNMP engine ID, conguring, 3-15location of system, setting, 3-12



Conguration Guide

logquerying, 4-5

log hostconguring, 4-3deactivating, 4-4deleting, 4-4

loggingcollecting statistics, 29-57disabling, 29-56enabling, 29-55reporting, 29-57restoring default logging interval, 29-57setting interval, 29-56stopping reporting, 29-57

logging congurationcollecting log statistics, 29-57conguring log reporting, 29-57enabling logging, 29-55setting logging interval, 29-56

loop detection function, conguring, 32-16LSA retransmit interval

between adjacent router, 11-47LSA transmit delay, setting, 11-46LSP type, 25-11LTM

conguring, 32-17

MMA

interval for transmitting CC, 32-14MA, conguring, 32-7MAC address

maximum count, 14-3MAC address ltering,conguring, 14-5, 18-7MAC address pool, conguring, 14-6MAC address, binding, 14-4, 17-7manager, denition, 3-2maximum hop of MST region, setting, 12-14maximum OSPF route count, conguring, 11-39maximum response time to general query


maximum response time to specic queryrestoring to default value (0.8s), 29-30setting, 29-29

MD, creating, 32-6memory usage

showing, 2-18MEP

creating, 32-8enabling, 32-11enabling CC transmission, 32-12

modem parameter settingcalled modem, 1-7calling modem, 1-8

MPLSbasic conguration, 25-9conguring LDP, 25-13conguring PW, 25-25

conguring static LSP, 25-11denition, 25-2enabling, 25-10

MPLS OAM, 33-2detection of static LSP connectivity, 33-2protection switchover, 33-6

MPLS OAM of egress, conguring, 33-12MPLS OAM of ingress, conguring, 33-11MPLS TE, 26-2MPLS TE tunnel conguration

using dynamic signaling, 26-8MPLS TE tunnel establishment, tuning, 26-28MSTP, 12-2

activating MSTR, 12-11clearing statistic, 12-31conguring device protection, 12-28MSTR parameter, setting, 12-5setting MSTR parameter, 12-5setting network diameter, 12-15setting parameter of designated bridge, 12-17setting parameter of designated port, 12-22setting priority, 12-13setting working mode, 12-3

MSTP,enabling, 12-2MSTR, 12-14MSTR, activating, 12-11multicast bandwidth management

enabling bandwidth management, 29-40setting program bandwidth, 29-43setting upstream port bandwidth, 29-42setting user bandwidth, 29-42

multicast base address, conguring, 32-15multicast preview

clearing logout time records, 29-54disabling, 29-52enabling, 29-51restoring default auto-reset time, 29-54setting auto-reset time, 29-53setting parameters, 29-52

multicast useradding, 29-46binding with authority prole, 29-49blocking, 29-48deleting, 29-47disabling the monitoring function, 29-51granting with program authority, 29-50IGMP user

deleting, 29-47unblocking, 29-49

modifying, 29-47monitoring, 29-50unblocking, 29-49

MUX VLAN, conguring, 8-6

NNBMA adjacent router,conguring, 11-37network diameter, setting, 12-15network management station see manager, 3-2network state



testing, 2-18Network Time Protocol (NTP), 13-2NMS route,conguring, 3-19NTP

broadcast mode, 13-2, 13-15client, 13-17server, 13-15

conguring access authority, 13-21conguring master clock, 13-14conguring NTP ID authentication, 13-12multicast mode, 13-4peer mode, 13-10server/client mode, 13-7

NTP broadcast mode, conguring, 13-2, 13-15NTP ID authentication, conguring, 13-12NTP master clock, conguring, 13-14NTP mode, 13-2NTP multicast mode, conguring, 13-4NTP peer mode, conguring, 13-10NTP server/client mode, conguring, 13-7number of specic queries

restoring to default value (2), 29-28setting, 29-28

Oonline help information, obtaining, 2-10OSPF

cost, 11-41disabling packet transmission, 11-38enabling logging, 11-40enabling process, 11-33entering OSPF area cong mode, 11-35maximum route count, 11-39NBMA adjacent router, 11-37router ID, 11-34setting preference, 11-38showing and debugging, 11-52SPF calculation interval, 11-47stub area, 11-36

OSPF area cong mode, entering, 11-35OSPF cost, conguring, 11-41OSPF logging, enabling, 11-40OSPF packet authentication, conguring, 11-42, 11-45OSPF packet transmission, disabling, 11-38OSPF preference, setting, 11-38OSPF process, enabling, 11-33OSPF route

MTU eld, 11-42packet authentication, 11-42, 11-45

OSPF route importfrom other protocol, 11-50setting default parameter, 11-50

OSPF router ID, setting, 11-34OSPF routes

network type, 11-40OSPF stub area, conguring, 11-36OSPF timer

dead time between adjacent router, 11-44Hello packet poll interval, 11-45

interval for sending Hello packet, 11-43LSA retransmit interval, 11-47LSA transmit delay, 11-46subnet for area, 11-36

OSPF, conguring, 11-7outband NMS

routes, 1-13

Pparameter prompt, 2-6path cost

setting calculation standard, 12-16permitted reenter number, modifying, 5-6poison reverse,enabling, 11-29Policy Information Transfer Protocol (PITP), 17-2present timeout, see TTL, 29-31preview

clearing logout time records, 29-54disabling, 29-52enabling, 29-51restoring default auto-reset time, 29-54setting auto-reset time, 29-53setting parameters, 29-52

preview congurationclearing logout time records, 29-54enabling preview, 29-51setting preview auto-reset time, 29-53setting preview parameters, 29-52

preview recognition timerestoring to default value (30s), 29-33setting, 29-32

priority for transmitting CCM/LTM, conguring, 32-14priority tag

adding, 16-22program authority, granting, 29-50program bandwidth, setting, 29-43protection group

conguring tunnel protection group, 33-13debugging information output, 33-15manual switchover, 33-14

proxy authorization (IGMP), enabling, 29-24proxy of IGMP leave packet, 29-35

disabling, 29-36enabling, 29-35

proxy of IGMP report packet, 29-34disabling, 29-35enabling, 29-34

PVC and PW template, binding, 25-26

QQoS, 16-3

priority tag, 16-22queue scheduling, 16-26rate limitation, 16-25trafc entry, 16-18trafc limit, 16-21trafc mirroring, 16-23trafc redirection, 16-24



Conguration Guide

trafc statistic, 16-25queue scheduling

conguring, 16-26

RRADIUS

ANS port, 7-16introduction, 7-3maximum retransmit count of RADIUSrequest, 7-15RADIUS request

maximum retransmit count, 7-15specifying server template, 7-11

RADIUS serverIP address & port number, 7-12response timeout interval, 7-14setting, 7-14shared key, 7-13type, 7-16user name format, 7-17

RADIUS server templatespecifying, 7-9

RADIUS,conguring, 7-10rate limitation

enabling, 16-25read/write authorities, setting, 3-9receiving host route, disabling, 11-21recognition time of preview


remote serial port, 1-9remote serial port terminal, 1-6

network topology, 1-7setting parameter, 1-7

remote user authenticationconguring, 7-1

report proxy switch see proxy of IGMP reportpacket, 29-34response time to general query


response time to specic queryrestoring to default value (0.8s), 29-30setting, 29-29

RIPclearing process statistic, 11-25conguring additional metric, 11-30conguring preference, 11-22conguring RIP-2 authentication mode, 11-30conguring timer, 11-31conguring zero eld check, 11-17disabling receiving host route, 11-21disabling RIP packet transmission, 11-25enabling packet receive/transmit, 11-28enabling poison reverse, 11-29enabling process, 11-15enabling split horizon, 11-28importing route of other protocol, 11-20resetting, 11-24

route ltering policy, 11-51setting version, 11-16summary route IP address, 11-27

RIP packet transmission, disabling, 11-25RIP preference, conguring, 11-22RIP process statistic, clearing, 11-25RIP process, enabling, 11-15RIP timer, conguring, 11-31RIP version, setting, 11-16RIP, conguring, 11-5RIP-2 authentication mode, conguring, 11-30RMEP

creating, 32-9enabling detection, 32-13

robustness variablerestoring to default value, 29-25setting, 29-25

root bridge, specifying, 12-12route additional metric, conguring, 11-30route ltering policy, conguring, 11-23, 11-51route of other protocol, importing, 11-20route policy

dening, 11-54dening apply clause, 11-56dening if-match clause, 11-55

route policy, conguring, 11-11route summarization

between areas, 11-48routes imported by OSPF, 11-49

Sservice board

adding ofine, 6-3conrming, 6-4deleting, 6-5prohibiting, 6-6resetting, 6-3

service portadding to VLAN, 8-15adding to VLAN in batches, 8-17setting description, 8-18

shared key of RADIUS serversetting, 7-13

SHDSLactivating SHDSL port, 20-22adding alarm prole, 20-19adding line prole, 20-16binding alarm prole, 20-22conguring clock mode, 20-24denition, 20-2IPoA, 20-2IPoE/PPPoE, 20-12PPPoA, 20-7querying port information, 20-23

SHDSL alarm prole, adding, 20-19SHDSL alarm prole, binding, 20-22SHDSL line prole, adding, 20-16SHDSL port, activating, 20-22shelf description, setting, 6-2



smart VALN, conguring, 8-4SNMP

conguring MIB view, 3-15conguring V3 group, 3-14conguring V3 user, 3-13denition, 3-2setting version, 3-8

SNMP agent see agent, 3-7SNMP MIB view, conguring, 3-15SNMP V3 group, conguring, 3-14SNMP V3 user, conguring, 3-13SNMP version, setting, 3-8socket buffer, conguring, 15-3source interface for sending traps, 3-11source route ltering, enabling, 18-7specic query

interval, setting, 29-29maximum response time to, 29-29times, setting, 29-28

SPF calculation interval, setting, 11-47split horizon, enabling, 11-28SSH

advantage, 7-3conguring local RSA key pair, 7-18conguring public key, 7-20conguring user, 7-21denition, 7-3LAN

inband, 1-19outband, 1-17

version, 7-3WAN

inband, 1-20outband, 1-18

SSH,conguring, 7-18standard VLAN, conguring, 8-4static ARP entry, adding, 10-4static MAC address, adding, 14-2static route

adding, 11-13static route, conguring, 11-2step of ACL rule, setting, 16-13subboard, managing, 6-7summary route IP address, conguring, 11-27super VALN, conguring, 8-8synwait timer, 15-2

conguring, 15-2system

setting contact information, 3-12setting location information, 3-12setting name, 2-14setting time, 2-13showing version, 2-16

TTCP connection

conguring socket buffer, 15-3enabling TCP debugging, 15-4

TCP debugging, enabling, 15-4

telnetinband NMS, 1-14LAN, 1-10logging in, 1-14outband NMS, 1-10running, 1-13WAN, 1-11

template of RADIUS serverspecifying, 7-9

template of RADIUS server, specifying, 7-11terminal

clearing screen, 2-16locking, 2-15setting type, 2-14switching language, 2-13

time rangeconguring, 16-12

timeout exit time, setting, 2-15trafc

enabling limit, 16-21enabling mirroring, 16-23enabling redirection, 16-24enabling statistic, 16-25

trafc entryconguring, 16-18

trafc suppression mode, 23-10trafc suppression, enabling, 23-10transparent transmission of RIP packet, enabling, 11-32trap

denition, 3-2sending, 3-10source interface, setting, 3-11

triple play service, 30-2conguring (802.1p-based), 30-11conguring (multi-PVC), 30-2conguring (single PVC), 30-7

TTL (time to live), 29-31TTL for V1 router


type of RADIUS serversetting, 7-16

Uunsolicited report interval


upstream link protection, conguring, 22-2upstream port

adding to VLAN, 8-14upstream port bandwidth, setting, 29-42user

adding, 5-2deleting, 5-8disconnecting online user, 5-8

user action reportdisabling, 29-34enabling, 29-33

user attribute, 5-4



Conguration Guide

modifying append information, 5-7modifying level, 5-4modifying permitted reenter number, 5-6

user authority, 5-2user bandwidth, setting, 29-42user level, modifying, 5-4user management

adding a BTV user, 29-46binding authority prole, 29-49blocking a BTV user, 29-48granting with program authority, 29-50modifying a BTV user, 29-47monitoring BTV user, 29-50

user password, changing, 5-5

VVDSL

adding line prole, 21-20IPoA, 21-2

VDSL2activating port, 21-39adding alarm template, 21-37adding channel alarm prole, 21-35adding channel prole, 21-27adding line alarm prole, 21-32adding line template, 21-30denition, 21-2PPPoA, 21-8PPPoE/IPoE, 21-14querying port information, 21-41

VDSL2 alarm template, adding, 21-37VDSL2 channel alarm prole, adding, 21-35VDSL2 channel prole, adding, 21-27VDSL2 line alarm prole,adding, 21-32VDSL2 line prole

adding, 21-20VDSL2 line template,adding, 21-30VDSL2 port activating, 21-39VDSL2 port information, querying, 21-41VLAN, 8-3

adding service port, 8-15adding service port in batches, 8-17adding upstream port, 8-14attribute, 8-3conguring attribute, 8-13creating, 8-11type, 8-3

VLAN and PW template, binding, 25-27VLAN attribute,conguring, 8-13

Wwholesale access, conguring, 27-2working mode of DHCP server, setting, 9-11working mode of DHCP,setting, 9-12working mode of MSTP, setting, 12-3

31500234 smartax ma5600 configuration guide (v300r003-64)

Technology

huawei trademarks

copyright huawei technologies

huawei industrial base

cli characteristics

local serial port

interaction characteristics

outband management channel

inband management channel