manualshive.com logo in svg

Dasan V5824G, User Manual, Page: 76 / 629

Share
Download
Dasan V5824G User Manual Download Page 76

UMN:CLI 

User Manual

 

V5824G 

76 

 

4.5.1.8 

Number of Requests to RADIUS Server 

After  802.1x  authentication  configured  as  explained  above  and  the  user  tries  to  connect 
with  the  port,  the  process  of  authentication  is  progressed  among  user’s  PC  and  the 
equipment  as  authenticator  and  RADIUS  server.  It  is  possible  to  configure  how  many 
times the device which will be authenticator requests for authentication to RADIUS server. 

To configure times of authentication request in the V5824G, use the following command. 

Command 

Mode 

Description 

dot1x  radius-server  retries

  <1-

10> 

Global 

Configure  times  of  authentication  request  to  RADIUS 

server. 

1-10: retry number (default: 3) 

 

4.5.1.9 

Interval of Request to RADIUS Server 

For the  V5824G, it is possible to set the time for the retransmission of packets to check 
RADIUS server. If there is a response from other packets, the switch waits for a response 
from RADIUS server during the configured time before resending the request. 

Command 

Mode 

Description 

dot1x  radius-server  timeout

  <1-

120> 

Global 

Configures the interval of request to RADIUS server. 

1-120: interval (default: 1) 

 

You should consider the distance from the server for configuring the interval of requesting 
the  authentication  to  RADIUS  server.  If  you  configure  the  interval  too  short,  the 
authentication  could  not  be  realized.  If  it  happens,  you  had  better  to  reconfigure  the 
interval longer. 

 

4.5.2 

802.1x Re-Authentication 

In  the  V5824G,  it  is  possible  to update  the  authentication  status  on  the  port  periodically. 
To enable re-authentication on the port, you should perform the below procedure: 

 

Step 1

 

Enable 802.1x re-authentication. 

 

Step 2

 

Configure the interval of re-authentication. 

 

Step 3

 

Configure the interval of requesting re-authentication in case of re-authentication fails. 

 

Step 4

 

Execute 802.1x re-authenticating regardless of the interval. 

 

4.5.2.1 

Enabling 802.1x Re-Authentication 

To enable 802.1x re-authentication using the following command. 

Command 

Mode 

Description 

dot1x reauth-enable

 

PORTS

 

Global 

Enables 802.1x re-authentication. 

no dot1x reauth-enable

 

PORTS

 

Disables 802.1x re-authentication. 

 

Summary of Contents for V5824G

Page 1: ...V5824G GPON OLT system User Manual...

Page 2: ...2014 DASAN Networks Inc Issued by Technical Documentation Team Korea Technical modifications possible Technical specifications and features are binding only insofar as they are specifically and expre...

Page 3: ...ual UMN CLI V5824G 3 Summary of Changes Initial Issue Contents of update Chapter Section Contents All Initial release Issue History Issue Number Date Update 01 March 2014 Initial release NOS version 1...

Page 4: ...e 40 3 1 10 RMON Configuration Mode 40 3 1 11 Router Configuration Mode 41 3 1 12 Route Map Configuration Mode 41 3 1 13 GPON Configuration Mode 42 3 1 13 1 GPON OLT Configuration Mode 42 3 1 13 2 ONU...

Page 5: ...ion 64 4 3 Configuring Interface 65 4 3 1 Enabling Interface 65 4 3 2 Assigning IP Address to Network Interface 66 4 3 3 Static Route and Default Gateway 66 4 3 4 Interface Description 67 4 3 5 Displa...

Page 6: ...ion 81 5 2 3 Transmit Rate 81 5 2 4 Duplex Mode 82 5 2 5 Flow Control 82 5 2 6 Port Description 82 5 2 7 L2 Port Bridge 83 5 2 8 Traffic Statistics 83 5 2 8 1 Packet Statistics 83 5 2 8 2 CPU Statisti...

Page 7: ...g System Software 113 6 3 12 Displaying Installed OS 113 6 3 13 Default OS 114 6 3 14 Switch Status 114 6 3 15 Forwarding Information Base FIB Table 114 6 3 16 Tech Support Information 115 6 3 17 Syst...

Page 8: ...of RMON History 136 7 3 1 7 Displaying RMON History 136 7 3 2 RMON Alarm 136 7 3 2 1 Subject of RMON Alarm 137 7 3 2 2 Object of Sample Inquiry 137 7 3 2 3 Absolute and Delta Comparison 137 7 3 2 4 Up...

Page 9: ...on 167 7 5 6 2 Configuring Admin Flow 168 7 5 6 3 Applying and modifying Admin Flow 169 7 5 6 4 Class Creation 169 7 5 7 Admin Rule Action 170 7 5 7 1 Admin Policy Creation 170 7 5 7 2 Admin Policy Pr...

Page 10: ...val for Transmit ICMP Message 197 7 14 3 ICMP Destination Unreachable Message 199 7 14 4 ICMP Redirect Message 199 7 15 TCP Flag Control 200 7 15 1 RST Configuration 200 7 15 2 SYN Configuration 200 7...

Page 11: ...LAG 230 8 2 1 Port Trunk 230 8 2 1 1 Configuring Port Trunk 231 8 2 1 2 Disabling Port Trunk 231 8 2 1 3 Displaying Port Trunk 232 8 2 2 Link Aggregation Control Protocol LACP 232 8 2 2 1 Configuring...

Page 12: ...3 8 3 12 Loop Back Detection 263 8 3 13 BPDU Configuration 264 8 3 13 1 Hello Time 265 8 3 13 2 Forward Delay Time 265 8 3 13 3 Max Age 266 8 3 13 4 BPDU Hop Count 266 8 3 13 5 BPDU Filtering 266 8 3...

Page 13: ...ent DHCP option Code Configurations 291 8 5 6 DHCP Option 82 292 8 5 6 1 Enabling DHCP Option 82 293 8 5 6 2 Option 82 Sub Option 293 8 5 6 3 Option 82 Reforwarding Policy 294 8 5 6 4 Option 82 Trust...

Page 14: ...Debug 317 8 7 Rate Limit 318 8 8 Flood Guard 319 8 8 1 MAC Flood Guard 319 8 8 2 CPU Flood Guard 320 8 8 3 System Flood Guard 321 8 8 4 Attack Guard 322 8 8 5 Error Guard 323 8 9 PPS Control 324 8 10...

Page 15: ...5 Displaying MVR Configuration 357 9 2 7 IGMP Filtering and Throttling 358 9 2 7 1 IGMP Filtering 358 9 2 7 2 IGMP Throttling 360 9 2 7 3 Displaying IGMP Filtering and Throttling 360 9 2 8 IGMP Proxy...

Page 16: ...392 10 1 1 3 Router ID 393 10 1 1 4 Registering BGP Neighbor 393 10 1 1 5 Maximum Path 393 10 1 1 6 BGP Aggregation 393 10 1 1 7 BGP Path Selection 394 10 1 2 Advanced Configuration 394 10 1 2 1 Summ...

Page 17: ...uthentication Key 423 10 2 4 3 Interface Cost 424 10 2 4 4 Blocking Transmission of Route Information Database 424 10 2 4 5 Routing Protocol Interval 425 10 2 4 6 OSPF Resynchronization Timeout 426 10...

Page 18: ...List 458 10 3 9 2 Disabling the transmission to Interface 459 10 3 9 3 Offset List 459 10 3 10 Maximum Number of RIP Routes 459 10 3 11 RIP Network Timer 459 10 3 12 Split Horizon 460 10 3 13 Authenti...

Page 19: ...NI 492 11 2 4 Forward Error Correction FEC Mode 492 11 2 5 Loopback 493 11 2 6 ONU Laser Down 493 11 2 7 Source MAC address Monitoring 494 11 2 8 ONU MAC address Filtering 495 11 2 9 POTS Interface Co...

Page 20: ...Saving Profile 532 11 3 5 Applying ONU Profile 533 11 3 6 Checking ONU Profile Configuration 533 11 3 7 Displaying ONU profile 534 11 4 Traffic Profile 534 11 4 1 Creating Traffic Profile 535 11 4 2...

Page 21: ...ving DBA Profile 563 11 5 4 Displaying DBA Profile 563 11 6 Extended VLAN Tagging Operation Profile 564 11 6 1 Received Frame VLAN Tagging Operation Table Configuration 564 11 6 1 1 Configuration for...

Page 22: ...2 Jitter Buffer Maximum Depth 593 11 9 3 Jitter Buffer Desired Depth 594 11 9 4 Fill Policy 594 11 9 5 Alarm related Policy 594 11 9 6 L bit R bit Receive Transmit Policy 595 11 9 7 SES Threshold 596...

Page 23: ...rofile 609 11 12 4 Applying Rate limit Profile 609 11 12 5 Displaying Rate limit Profile 610 11 13ONU Service Profile 611 11 14GPON Debug 612 11 15Sample Configuration 612 12 System Software Upgrade 6...

Page 24: ...based VLAN 215 Fig 8 3 Example of QinQ Configuration 218 Fig 8 4 QinQ Frame 218 Fig 8 5 Outgoing Packets under Layer 2 Shared VLAN Environment 226 Fig 8 6 Incoming Packets under Layer 2 Shared VLAN En...

Page 25: ...nooping 327 Fig 9 2 The V5824G with PIM SM 328 Fig 9 3 The Switch with IGMP Snooping and PIM SM 328 Fig 9 4 IGMP Snooping 342 Fig 9 5 Multicast Equal Cost Multipath ECMP 368 Fig 9 6 Rendezvous Point T...

Page 26: ...ode 40 Tab 3 10 Main Command of RMON Configuration Mode 41 Tab 3 11 Main Command of Router Configuration Mode 41 Tab 3 12 Main Command of Route map Configuration Mode 42 Tab 3 13 Main Command of GPON...

Page 27: ...e system 3 Command Line Interface CLI Describes how to use the Command Line Interface CLI 4 System Connection and IP Address Describes how to manage the system account and IP address 5 Port Configurat...

Page 28: ...lved with electrical circuitry and be familiar with standard practices for preventing accidents by making quick guide based on this guide 1 4 Document Notation The following table shows commands used...

Page 29: ...LGPL This Open Source Software was written by third parties and enjoys copyright protection You are entitled to use this Open Source Software under the conditions set out in the GPL and LGPL licenses...

Page 30: ...e by you in any part of the software or its configuration In addition you have no warranty claims against Dasan Networks when the Open Source Software infringes the intellectual property rights of a t...

Page 31: ...interface is located on the most left of the front panel with embedded LED for LNK ACT and TX RX indication respectively They are for use of equipment management via remote access or CLI For GPON the...

Page 32: ...ess shaping rate limiting and different scheduling type such as Strict Priority SP Weighted Round Robin WRR and Deficit Round Robin DRR IP Multicast Because broadcasting in a LAN is restricted if poss...

Page 33: ...enlarged bandwidth System Management based on CLI It is easy for users who administer system by using telnet or console port to configure the functions for system operating through CLI CLI is easy to...

Page 34: ...r are required to access So security of system and network management is strengthened Secure Shell SSH Network security is getting more important because the access network has been generalized among...

Page 35: ...outband interface The V5824G also provides the RS232 console interface to simply access the system with a provided RJ45 to DB9 cable This chapter describes a basic instruction for using the command l...

Page 36: ...mode with the enable command then the system prompt will changes from SWITCH to SWITCH Command Mode Description enable View Opens Privileged EXEC Enable mode You can set a password to Privileged EXEC...

Page 37: ...out timer help Shows a description of the interactive help system hostname Sets a host name of the system interface Opens Interface Configuration mode to configure a specified interface mvr Configure...

Page 38: ...nfiguration mode to configure DHCP To open DHCP Pool Configuration mode use the service dhcp command in the Global Configuration mode first Tab 3 5 shows main commands of DHCP Pool Configuration mode...

Page 39: ...n 82 Configuration mode to configure DHCP option 82 To open DHCP Option 82 Configuration mode use the service dhcp command in the Global Configuration mode first Tab 3 7 is the main commands of DHCP O...

Page 40: ...and SWITCH config policy NAME Command Mode Description flow NAME create Global Opens Flow Configuration mode policer NAME create Opens Policer Configuration mode policy NAME create Opens Policy Config...

Page 41: ...gures distance value to find better route neighbor Configures neighbor router network Configures network to operate each routing protocol redistribute Registers transmitted routing information to anot...

Page 42: ...stration etc To open GPON OLT Configuration mode enter the gpon olt command then the system prompt will be changed from SWITCH gpon to SWITCH config gpon olt N Command Mode Description gpon olt OLT ID...

Page 43: ...enable configure terminal bridge interface INTERFACE INTERFACE interface name ip dhcp pool POOL POOL pool name rmon alarm 1 65535 rmon event 1 65535 rmon history 1 65535 exit Back to previous mode Rou...

Page 44: ...y from one file to another debug Debugging functions default os Select default OS disconnect Disconnect user connection enable Turn on privileged mode command erase Erase saved configuration exit End...

Page 45: ...ft in clear ip bgp vpnv4 unicast soft out clear ip bgp 1 65535 clear ip bgp 1 65535 in clear ip bgp 1 65535 in prefix filter clear ip bgp 1 65535 unicast multicast in more Press the ENTER key to skip...

Page 46: ...t 2 Partial help is provided when an abbreviated argument is entered and you want to know what arguments match the input e g show ve SWITCH 3 3 2 Calling Command History In case of installed command s...

Page 47: ...move history user NAME Global Deletes the command history of the specified user NAME user name To display the command history use the following command Command Mode Description show history Enable Sho...

Page 48: ...the previous command mode end Exits to Privileged EXEC Enable mode If you use the exit command in Privileged EXEC Enable mode or Privileged EXEC View mode you will be logged out 3 3 6 The Command Exe...

Page 49: ...ystem Login After installing the V5824G finally make sure that each port is correctly connected to PC for network and management Then turn on the power and boot the system as follows Step 1 When you t...

Page 50: ...ore the encrypted string When you use the password enable command with 8 and the string you will make into Privileged EXEC Enable mode with the encrypted string Therefore to log in the system you shou...

Page 51: ...w password junior95 Password changed SWITCH config The password you are entering will not be shown in the screen so please be careful not to make a mistake 4 1 4 Management for System Account 4 1 4 1...

Page 52: ...ivileged EXEC View mode in the level privilege enable level 0 15 COMMAND all Uses the specific command of Privileged EXEC Enable mode in the level privilege configure level 0 15 COMMAND all Uses the s...

Page 53: ...atistics vlan VLAN_NAME clear ip bgp clear ip bgp in clear ip bgp in prefix filter clear ip bgp unicast multicast in clear ip bgp unicast multicast in prefix filter clear ip bgp unicast multicast out...

Page 54: ...level show privilege now Shows a security level of current mode The following is an example of creating the system account test0 having a security level 10 and test1 having a security level 1 with no...

Page 55: ...nly show command in Privileged EXEC Enable mode however as level 1 it is possible to use not only the commands in level 1 but also time configuration commands in Privileged EXEC Enable mode and access...

Page 56: ...ion show exec timeout Enable Global Bridge Shows a configuration of auto logout function 4 1 7 Telnet Access To connect to a remote host via telnet use the following command Command Mode Description t...

Page 57: ...s 34 88 seconds admin at ttyp1 from 147 54 140 133 49538 for 6 minutes 44 12 seconds SWITCH 4 1 8 System Rebooting 4 1 8 1 Manual System Rebooting When installing or maintaining the system some tasks...

Page 58: ...uled use the following command Command Mode Description no reload all Global Deletes the whole system rebooting schedule settings no reload at HH MM DAY MONTH YEAR Cancels the specified reload time da...

Page 59: ...he V5824G provides auto system rebooting function using memory low configuration Memory low indicates the low threshold value of system memory in use To enable auto reset function of memory low settin...

Page 60: ...dius RADIUS authentication tacacs TACACS authentication host nominal system authentication default all all types of the authentication no login local remote radius tacacs host all Deletes a configured...

Page 61: ...ver for System Authentication To add delete a RADIUS server for system authentication use the following command Command Mode Description login radius server A B C D KEY auth_port PORT acct_port PORT G...

Page 62: ...ription login radius retransmit 1 10 Global Sets the frequency of retransmit 1 10 frequency count default 3 no login radius retransmit Deletes a specified frequency count 4 2 5 TACACS Server 4 2 5 1 T...

Page 63: ...for the authentication 1 65535 TCP port no login tacacs socket port Deletes a specified TCP port for the authentication Authentication Type To select the authentication type for TACACS use the followi...

Page 64: ...a user has sent and received To set an accounting mode use the following command Command Mode Description login accounting mode none start stop both Global Sets an accounting mode start measures star...

Page 65: ...1 Enabling Interface To assign an IP address to an interface you need to enable the interface first If the interface is not enabled you cannot access it from a remote place even though an IP address h...

Page 66: ...use the following command Command Mode Description show ip Interface Shows an IP address assigned to an interface 4 3 3 Static Route and Default Gateway The static route is a predefined route to a sp...

Page 67: ...tion To specify a description on an interface use the following command Command Mode Description description DESCRIPTION Interface Specifies a description on an interface no description Deletes a spec...

Page 68: ...NTERFACE interface name The following is the sample output of the show ip interface brief command SWITCH config show ip interface brief Interface IP Address Status Protocol lo unassigned up up mgmt 10...

Page 69: ...ine SSH Client Disconnecting SSH Client Assigning Specific Authentication Key Displaying Connection History of SSH Client 4 4 1 1 Enabling SSH Server To enable disable SSH server use the following com...

Page 70: ...SSH server to login 4 4 1 5 Displaying Connection History of SSH Client To display the connection history of SSH client use the following command Command Mode Description show ssh history Enable Glob...

Page 71: ...ion ssh keygen rsa1 rsa dsa Global Configures an authentication key rsa1 SSH ver 1 authentication rsa SSH ver 2 authentication dsa SSH ver 2 authentication FILENAME key file name copy scp sftp key upl...

Page 72: ...TTLS Tunneled TLS and the V5824G supports EAP MD5 and EAP TLS Accessing with user s ID and password EAP MD5 is 1 way Authentication based on the password EAP TLS accesses through the mutual authentica...

Page 73: ...d RADIUS server need extra data authenticating each other be sides they register each other s IP address The data is key and should be the same value for each other For the key value every kinds of ch...

Page 74: ...tion information between the authenticator and RADIUS server The authenticator and RADIUS server must have a same key value and you can use alphabetic characters and numbers for the key value The spac...

Page 75: ...dot1x port control PORTS Deletes a configured authentication port state 4 5 1 6 Interval for Retransmitting Request Identity Packet In the V5824G it is possible to specify how long the device waits f...

Page 76: ...he request Command Mode Description dot1x radius server timeout 1 120 Global Configures the interval of request to RADIUS server 1 120 interval default 1 You should consider the distance from the serv...

Page 77: ...eceived from the suppliant for the number of seconds the authenticator retransmits the request to the suppliant In the V5824G you can set the number of seconds that the authenticator should wait for a...

Page 78: ...bal Bridge Shows 802 1x configuration on the system show dot1x PORTS Shows 802 1x configuration on the port 4 5 6 802 1x User Authentication Statistics It is possible for user to make reset state by s...

Page 79: ...rtAuthed u MacEnable MacAuthed p port based m mac based a authenticated u unauthenticated SWITCH config The following is the example of setting the interval of requesting reauthentication to 1000 sec...

Page 80: ...ts either 1000Base X optical interfaces or 10 100 1000Base T electrical interfaces you should select port type RJ45 and SFP To select port type use the following command Command Mode Description port...

Page 81: ...this allows simple automatic connection of devices that support a variety of modes from a variety of manufacturers To enable disable the auto negotiation on an Ethernet port use the following command...

Page 82: ...ng device normally sends a PAUSE frame to the sending device when its buffer is full The sending device then stops sending data for a while This is particularly important where the sending device is c...

Page 83: ...TS Enable Global Bridge Shows the L2 port bridge operation status 5 2 8 Traffic Statistics 5 2 8 1 Packet Statistics To display the traffic statistics of an Ethernet port use the following command Com...

Page 84: ...to generate a syslog message when the number of the packets handled by CPU exceeds a specified value This function allows system administrators to monitor the switch and network status more effectivel...

Page 85: ...stem to collect the statistics of the protocols use the following command Command Mode Description protocol statistics enable disable arp icmp ip tcp udp Global Bridge Enables disables the system to c...

Page 86: ...number show port status PORTS show port description PORTS Shows a specified port description enter a port number show port module info PORTS Shows the information of SFP module including threshold co...

Page 87: ...at the watch program is installed to the port configured as Monitor port Fig 5 1 Port Mirroring To configure port mirroring designate mirrored ports and monitor port Then enable port mirroring functio...

Page 88: ...de Description show mirror Enable Global Bridge Shows a configured port mirroring To delete and modify the configuration use the following command Command Mode Description mirror disable Bridge Deacti...

Page 89: ...User Manual UMN CLI V5824G 89 Mirrored Ports 1 123456789012345678 Ingress Mirrored Ports oo Egress Mirrored Ports oo Mirrored VLANs NO VID SWITCH bridge...

Page 90: ...evice connected to network To set a new host name use the following command Command Mode Description hostname NAME Global Creates a host name of the switch enter the name no hostname NAME Deletes a co...

Page 91: ...minutes default Mar 10 2 00 Nov 10 2 00 offset 60 minites no clock summer time Deletes the configured daylight saving time To display the configured daylight saving time use the following command Com...

Page 92: ...GMT 9 Seoul Tokyo GMT 8 LA Seattle GMT 1 Berlin Rome GMT 10 Sydney GMT 7 Denver GMT 2 Cairo Athens GMT 11 Okhotsk GMT 6 Chicago Dallas GMT 3 Moscow GMT 12 Wellington GMT 5 New York Miami GMT 4 Tehera...

Page 93: ...The NTP algorithm is much more complicated than the SNTP algorithm NTP normally uses multiple time servers to verify the time and then controls the rate of adjustment or slew rate of the PC which pro...

Page 94: ...e terminal length command The maximum line displaying is 512 lines To set the number of the lines displaying on terminal screen use the following command Command Mode Description terminal length 0 512...

Page 95: ...er no dns server A B C D Removes a DNS server To display a configured DNS server use the following command Command Mode Description show dns Enable Global Bridge Shows a configured DNS server If a spe...

Page 96: ...ion 6 1 10 Enabling FTP TFTP Connection The V5824G provides the FTP server feature which is enabled by default For security reason however the FTP server may need to be disabled to block an illegal ac...

Page 97: ...6 0 0 0 0 0 0 SN Feb23 0 00 jffs2_gcd_mtd0 admin 81 0 0 2 0 10524 5492 S Feb23 0 53 usr sbin swchd admin 83 0 0 1 5 6756 3756 S Feb23 0 53 usr sbin nsm Omitted SWITCH 6 1 12 FTP Bind Address When used...

Page 98: ...old of CPU load use the following command Command Mode Description show cpuload Enable Global Bridge Shows the configured threshold and average of CPU load show cpu trueload Shows the CPU load during...

Page 99: ...Sets the threshold of fan operation in the unit of Celsius C START TEMP starts fan operation default 30 STOP TEMP stops fan operation default 0 no threshold fan Deletes a configured threshold of fan...

Page 100: ...obal Sets the Diagnostics threshold of SFP module by RX TX power and monitors the module The range of RX TX power 40 to 8 1647 dBm threshold module temper alarm warning PORTS START VALUE STOP VALUE op...

Page 101: ...ormation from SFP mouldes use the following command Command Mode Description module dmi enable disable Global Specifies whether to collect DMI information from SFP modules This module DMI command is e...

Page 102: ...dmin policy arp bridge dns flow full hostname interface INTERFACE login policer policy qos rmon alarm rmon event rmon history router bgp rip ospf vrrp snmp syslog time out time zone Shows a configurat...

Page 103: ...ystem failure To allow the system to save the system configuration automatically use the following command Command Mode Description write interval 10 1440 Global Enables auto saving with a given inter...

Page 104: ...ckup file you should know FTP user ID and the password To back up the configuration or use the file through FTP you can recognize the file transmission because hash function is automatically turned on...

Page 105: ...n such as the values of processor registers The V5824G can be configured to generate core dumps and save them in ramdisk for useful debugging aids in several situations such as accesses to non existen...

Page 106: ...CMP ICMP is an internet protocol that notifies fault situation and provides information on the location where IP packet is received When the ICMP echo message is received at the location its replying...

Page 107: ...address and network status In this case use the same process as ping test and then input the followings after extended commands It is possible to verify the connection between specific IP address and...

Page 108: ...tl 255 time 30 1 ms 10 55 193 110 ping statistics 5 packets transmitted 5 received 0 packet loss time 8050ms rtt min avg max mdev 11 972 21 301 30 411 8 200 ms SWITCH 6 3 2 IP ICMP Source Routing If y...

Page 109: ...ce route Disable IP source routing function Step 2 Perform the ping test from PC as the designate route with the ping command 6 3 3 Tracing Packet Route You can discover the routes that packets will a...

Page 110: ...utes The default is 33434 Tab 6 3 Options for Tracing Packet Route The following is an example of tracing packet route sent to 10 55 193 104 SWITCH traceroute 10 55 193 104 traceroute to 10 55 193 104...

Page 111: ...0 42 101 7 00 00 66 02 01 02 OK dynamic 19 39 101 8 00 00 65 01 02 01 OK dynamic 115 65 SWITCH config 6 3 6 System Running Time To display the system running time use the following command Command Mod...

Page 112: ...use the following command Command Mode Description cpu packet limit 500 20000 Global Limits the number of RX packets of CPU 500 20000 packets per second default 1500 cpu packet limit 0 7 500 20000 Li...

Page 113: ...min 17 0 0 0 0 0 0 SWN 20 12 0 00 jffs2_gcd_mtd3 admin 149 0 0 0 3 1784 776 S Jan01 0 00 sbin syslogd m admin 151 0 0 0 2 1428 544 S Jan01 0 00 sbin klogd c 1 admin 103 2 6 2 0 20552 5100 S 20 12 0 53...

Page 114: ...t contains a mirror image of the forwarding information in the IP routing table When routing or topology changes occur in the network the route processor updates the IP routing table and the informati...

Page 115: ...rash info remote A B C D ftp tftp Generates the tech support information in the remote place via FTP or TFTP The name of the generated information file is a info This is not changeable In case of gene...

Page 116: ...no debug nsm all Enable Disables NSM debugging no debug nsm events kernel no debug nsm packet send recv detail no debug nsm packet detail To display the debugging information use the following comman...

Page 117: ...ables to reply to requests from SNMP administrator In addition SNMP administrator can obtain data from the agent and save data in the agent The SNMP agent gets data from MIB which saves information on...

Page 118: ...mmand Mode Description show snmp community Enable Global Bridge Shows created SNMP community The following is an example of creating 2 SNMP communities SWITCH config snmp community ro public SWITCH co...

Page 119: ...NMP agent 7 1 4 Assigning IP Address of SNMP Agent If SNMP agent has several IP addresses SNMP carries the information through the best suited path IP address when SNMP administrator requests for info...

Page 120: ...specified security name enter the security name SECURITY security name show snmp com2sec Enable Global Bridge Shows a specified security name The following is an example of configuring SNMP com2sec SW...

Page 121: ...w Enable Global Bridge Shows a created SNMP view record The following is an example of creating an SNMP view record SWITCH config snmp view TEST included 410 SWITCH config show snmp view View List Vie...

Page 122: ...EY Global Creates an SNMP version 3 user no snmp user USER Deletes a registered SNMP version 3 user To display a current SNMP version 3 user use the following command Command Mode Description show snm...

Page 123: ...ap but it may inefficiently work if all these trap messages are sent very frequently Therefore you can select each SNMP trap sent to an SNMP trap host admin access login is shown to inform the login l...

Page 124: ...k down PORTS Configures the system to send SNMP trap when a port is disconnected from network snmp trap mem threshold Configures the system to send SNMP trap when memory usage exceeds or falls below t...

Page 125: ...example of configuring SNMP trap hosts SWITCH config snmp trap host 10 1 1 1 SWITCH config snmp trap2 host 20 1 1 1 SWITCH config snmp inform trap host 30 1 1 1 SWITCH config show snmp trap snmp trap...

Page 126: ...ALUE threshold default 90 no snmp trap log non volatile Disables saving the SNMP trap message logs to non volatile memory no snmp trap log threshold Deletes the configured threshold of SNMP trap messa...

Page 127: ...notify activity use the following command Command Mode Description snmp notify activity enable disable Global Enables disables the alarm notify activity default disable 7 1 11 2 Alarm Severity Criteri...

Page 128: ...p alarm severity mfgd block critical major minor warning intermediate Sets severity of an alarm for MAC flood guard block snmp alarm severity port link down critical major minor warning intermediate S...

Page 129: ...he system use the following command Command Mode Description snmp clear alarm history Global Deletes a collected alarm history in the system snmp clear alarm report Deletes a collected alarm report in...

Page 130: ...s line number to be displayed show snmp log non volatile tail 1 2000 Shows currently recorded SNMP message logs in the non volatile memory 7 1 13 Displaying SNMP Configuration To display all configura...

Page 131: ...ar switches processes LLDP frame and saves the information of the other switches The information received from other switches is aged 7 2 2 Enabling LLDP To enable disable LLDP use the following comma...

Page 132: ...d Mode Description lldp locationID ELIN Bridge Specifies TLV location ID ELIN TLV location ID no lldp locationID Deletes the specified TLV location ID 7 2 5 LLDP Message For the V5824G it is possible...

Page 133: ...splay LLDP configuration use the following command Command Mode Description show lldp config PORTS Enable Global Bridge Shows LLDP configuration show lldp remote PORTS Show statistics for remote entri...

Page 134: ...cal sample inquiry of statistical data about each traffic occurred in Ethernet port Statistical data of all ports are pre configured to be monitored at 30 minute interval and 50 statistical data store...

Page 135: ...onfigure the number of sample data of RMON history use the following command Command Mode Description requested buckets 1 65535 RMON Defines a bucket count for the interval enter the number of buckets...

Page 136: ...ied number enter the value for deleting 7 3 1 7 Displaying RMON History To display an RMON history use the following command Command Mode Description show running config rmon history All Shows a confi...

Page 137: ...more than the threshold or less than it alarm is occurred Delta Comparison Comparing difference between current data and the latest data with the threshold if the data is more than the threshold or le...

Page 138: ...e following command Command Mode Description falling event 1 65535 RMON Configures to generate RMON alarm when object is less than configured threshold 7 3 2 6 Standard of the First Alarm It is possib...

Page 139: ...unit second 7 3 2 8 Activating RMON Alarm After finishing all configurations you need to activate RMON alarm To activate RMON alarm use the following command Command Mode Description active RMON Activ...

Page 140: ...SCRIPTION RMON Specifies the description of the current RMON event 7 3 3 3 Subject of RMON Event You need to configure event and identify subject using various data from event To identify subject of R...

Page 141: ...g command Command Mode Description active RMON Activates RMON event 7 3 3 6 Deleting Configuration of RMON Event Before changing the configuration of RMON event you should delete RMON event of the num...

Page 142: ...ning notice info debug console Global Generates a syslog message of selected level or higher and forwards it to the console syslog output emerg alert crit err warning notice info debug local volatile...

Page 143: ...syslog message syslog output priority auth authpriv kern local0 local1 local2 local3 local4 local5 local6 local7 syslog user emerg alert crit err warning notice info remote A B C D Generates a user d...

Page 144: ...1 local1 info console SWITCH config 7 4 2 Facility Code You can set a facility code of the generated syslog message to send them remote syslog server This code make a syslog message distinguished from...

Page 145: ...es the terminal monitor function This function is not operational in the local console 7 4 5 Disabling Syslog To disable the syslog use the following command Command Mode Description no syslog Global...

Page 146: ...g command Command Mode Description show syslog Enable Global Bridge Shows the configuration of the syslog show syslog volatile non volatile information Shows the usage of the area where the received s...

Page 147: ...an apply processing order to traffic by reorganizing priorities according to its importance By favor of QoS you can predict network performance in advance and manage bandwidth more efficiently The QoS...

Page 148: ...ed to each flow Class Includes more than 2 flows for the efficient traffic management in the application of rule to this set of flows Additionally a unique name needs to be assigned to each class Poli...

Page 149: ...in with changed values Weight can be used to additionally adjust the scheduling mode per queue in DWRR mode Weight controls the scheduling precedence of the internal packet queues Fig 7 2 shows the re...

Page 150: ...ME flow name After opening Flow Configuration mode the prompt changes from SWITCH config to SWITCH config flow NAME To delete the configured Flow or all Flows use the following command Command Mode De...

Page 151: ...n IP address 0 255 IGMP message type number ip A B C D A B C D M any A B C D A B C D M any igmp 0 255 any ip A B C D A B C D M any A B C D A B C D M any tcp udp sctp Classifies an IP protocol TCP UDP...

Page 152: ...ore length 21 65535 any Classifies a packet length This can be used only in the extension mode 21 65535 IP packet length any any IP packet length ignore ethtype TYPE NUM arp any Classifies the Etherne...

Page 153: ...ifying pattern for each option no dscp no tos no length no ip precedence no ethtype no mac no ip no ip header length 7 5 2 3 Applying and modifying Flow After configuring a flow using the above comman...

Page 154: ...g traffic classification criteria in Flow Configuration mode then configure how to process the packets The classified traffic from flow or class is being treated according to the policer configuration...

Page 155: ...all policers 7 5 3 2 Packet Counter The packet counter function provides information on the total number of packets that the rule received and analyzed This feature allows you to know the type of pack...

Page 156: ...icer Configuration mode will be lost To save and apply a policer use the following command Command Mode Description apply Policer Applies a policer to the system To modify a policer use the following...

Page 157: ...ss and policer to specify the rule action for the packets matching configured classifying patterns on flow or class and policer To include specific flow or class and policer in policy use the followin...

Page 158: ...ng which if the flow state is transferred from the old switch to the new switch then it is effective in estimating the rate at the new switch as if though no transfer of flow has happened The V5824G p...

Page 159: ...red in bytes Both token buckets share the common rate CIR At least one of them CBS and EBS must be configured and it is recommended that the value is larger than or equal to the size of the largest po...

Page 160: ...IR If both buckets are empty a packet is marked red Fig 7 6 Bahavior of srTCM 3 Two Rate Three Color Marker trTCM The trTCM meters an IP packet stream and marks its packet the one among green yellow a...

Page 161: ...bucket C are smaller than the size of that packet those are decremented by the size of that packet with the yellow color marking Else if the tokens in the bucket C are larger than the size of that pa...

Page 162: ...of the packet Fig 7 8 Behavior of trTCM 2 Empty Packet Empty PBS CBS Bucket P Bucket C Red Color Marking Tokens are regenerated based on PIR faster than CIR Tokens are regenerated based on CIR If the...

Page 163: ...reen yellow red Policer Sets DSCP values for each colored packets In the color blind mode you can configure all red colored or yellow colored packets to discard To configure the meter to discard all r...

Page 164: ...redirect PORT Redirects the classified packets to specified port PORT port number action match mirror Sends a copy of classified packets to mirror monitoring port action match vlan VLANS Specifies a V...

Page 165: ...To delete the CoS or ToS matching condition use the following command Command Mode Description no action match cos overwrite Policy Deletes the CoS or ToS matching condition no action match cos same...

Page 166: ...fied configurations from Policy Configuration mode will be lost To save and apply a policy use the following command Command Mode Description apply policy Applies a policy to the system To set the sta...

Page 167: ...flow admin NAME create Global Creates an admin flow and opens Admin Flow Configuration mode NAME admin flow name After opening Admin Flow Configuration mode the prompt changes from SWITCH config to SW...

Page 168: ...stination IP address 0 255 IGMP message type number ip A B C D A B C D M any A B C D A B C D M any igmp 0 255 any ip A B C D A B C D M any A B C D A B C D M any tcp udp sctp Classifies an IP protocol...

Page 169: ...ME modify Global Modifies a flow enter an admin flow name You should save and apply the admin flow to system using apply command whenever you modify any configuration of the admin flow 7 5 6 4 Class C...

Page 170: ...min policy The admin policy name must be unique Its size is limited to 32 significant characters The admin policy name cannot start with the alphabet a or A The order in which the following configurat...

Page 171: ...ion action match for the packets matching configured classifying patterns use the following command Command Mode Description action match deny Admin Policy Denies a packet action match permit Permits...

Page 172: ...E modify Global Modifies an admin policy NAME admin policy name 7 5 8 Displaying Admin Rule To show an admin rule profile configured by user use the follwing command Command Mode Description show flow...

Page 173: ...trong point of providing the distinguished service with a simple way However if the packets having higher priority enter the packets having lower priority are not processed 3 7 6 7 7 4 1 The processin...

Page 174: ...s strict priority queuing However it passes to next stage after processing as configured weight so that it is possible to configure for packet process to the packets having higher priority However the...

Page 175: ...uantum To set a weight for WRR scheduling mode use the following command Command Mode Description qos weight PORTS 0 7 1 255 unlimited Global Sets a weight for each port and queue PORTS port numbers 0...

Page 176: ...limited bandwidth A maximum minimum bandwidth can be set only in DRR scheduling mode 7 5 9 4 Limiting traffic and buffer To specify the discard segment limit value on IBP buffer of the port use the fo...

Page 177: ...To display the 802 1p priority the flow control information use the following command Command Mode Description show port trust dscp PORTS Enable Global Bridge Shows the 802 1p priority information 7 5...

Page 178: ...the LAN environ men the V5824G provides NetBIOS filtering function Without NetBIOS filtering customer s data may be opened to each other even though the data should be kept To keep customer s informat...

Page 179: ...er prevent this kind of packet outgoing from your network This function is named as Martian filter To enable disable a Martian filtering use the following command Command Mode Description ip martian f...

Page 180: ...ystem VALUE The number of MAC addresses that can be learned on the system for a second VALUE maximum MAC number 1 2147483646 To delete configured max new hosts use the following command Command Mode D...

Page 181: ...1 16384 Bridge Sets the maximum number of secure MAC addresses for the port default 1 Step 3 Set the violation mode and the action to be taken Command Mode Description port security PORTS violation s...

Page 182: ...e existing secure MAC addresses while still limiting the number of secure addresses on a port Command Mode Description port security PORTS aging static Bridge Enables aging for configured secure addre...

Page 183: ...g enable disable Interface Configures the system not to forward packets via subscriber interface This function operates only for the MGMT interface which is activated with the no shutdown command 7 11...

Page 184: ...the bridge name no mac NAME PORT Deletes static MAC addresses NAME bridge name no mac NAME PORT MACADDR Deletes a specified static MAC address PORT port number MACADDR MAC address To display the MAC t...

Page 185: ...system is configured to permit all packets in each port Sample Configuration This is an example of blocking all packets in port 6 to 7 and port 8 SWTICH bridge mac filter default policy deny 6 8 SWTIC...

Page 186: ...ime it is hard to input command one by one In this case it is more convenient to save MAC filtering policies at etc mfdb conf and display the list of MAC filtering policy To view the list of MAC filte...

Page 187: ...cally maps the IP address to the MAC address of a switch In addition to address information the table shows the age of the entry in the table the encapsulation method and the switch interface VLAN ID...

Page 188: ...WITCH 7 13 2 ARP Alias Although clients are joined in the same client switch it may be impossible to communicate between them for security reasons When you need to make them communicate each other the...

Page 189: ...Host B can use Host C s MAC address as the destination MAC address for traffic intended for Host A and Host B ARP Inspection is a security feature that validates ARP packets in a network It discards A...

Page 190: ...DDR sender MAC address deny ip host A B C D mac any host MACADDR Discards ARP packets from a specific host MACADDR MAC address deny ip range A B C D A B C D mac any Discards ARP packets of a given ran...

Page 191: ...on no permit ip any mac any host MACADDR ARP ACL Deletes a configured range of IP address to permit ARP packets any ignores sender MAC address host sender host MACADDR sender MAC address A B C D start...

Page 192: ...LAN using the ip arp inspection filter command 7 13 3 3 ARP Address Validation The V5824G also provides the ARP validation feature Regardless of a static ARP table the ARP validation will discard ARP...

Page 193: ...Inspection Log buffer Log buffer function shows the list of subscribers who have been used invalid fixed IP addresses This function saves the information of users who are discarded by ARP inspection a...

Page 194: ...e list use the following command Command Mode Description clear ip arp inspection log Enable Global Bridge Clears all of collected entires in the log buffer list 7 13 3 6 Displaying ARP Inspection To...

Page 195: ...isables a gratuitous ARP 7 13 5 Proxy ARP The V5824G supports the proxy ARP Proxy ARP is the technique in which one host usually a router answers ARP requests intended for another machine By faking it...

Page 196: ...of the V5824G for all the hosts on the subnet B Hence all packets destined to the subnet B are sent to the router The V5824G forwards those packets to the hosts in the subnet B To configure the inter...

Page 197: ...ed echo reply message use the following command Command Mode Description no ip icmp ignore echo all Global Releases blocked echo reply message to all partners who are taking ping test to device no ip...

Page 198: ...it is STATUS ON Therefore the message that corresponds to 3 4 11 and 12 is chosen as the message limiting the transmission rate Tab 7 3 shows the result of mask calculation of default value Type Statu...

Page 199: ...nreachables Interface Enables sending ICMP unreachable messages on the interface default no ip unreachables Disables sending ICMP unreachable messages on the interface 7 14 4 ICMP Redirect Message ICM...

Page 200: ...Configuration SYN sets up TCP connection The V5824G transmits cookies with SYN to a person who tries to make TCP connection Only when transmitted cookies are returned it is possible to permit TCP con...

Page 201: ...uting protocols BGP OSPF RIP and PIM If you want to debug about them refer to the each configuration chapter 7 17 1 Packet Dump by Protocol You can see packets about BOOTPS DHCP ARP and ICMP using the...

Page 202: ...ve packets as many as the number F FILE Receive file as filter expression All additional expressions on command line are ignored i INTERFACE Designate the interface where the intended packets are tran...

Page 203: ...Global Shows dump file according to a condition COUNT packet counting VALUE CPU threshold 1 10 file number no debug packet log Deletes the information of packet dump log You can save a current config...

Page 204: ...ip igmp access group or ip pim rp address However ARP has an exception ARP has an access list itself and you cannot define an access list in the Global Configuration mode Processing ACLs An ACL entry...

Page 205: ...should be processed 7 18 1 Standard Access List To create a standard IP address based access list entry use the following command Command Mode Description access list 1 99 1300 1999 deny permit A B C...

Page 206: ...command Command Mode Description access list 100 199 2000 2699 deny permit ip A B C D WILDCARD BITS A B C D WILDCARD BITS Global Specifies a deny or permit statement of the extended ACL with source de...

Page 207: ...ldcard masking access list 100 199 2000 2699 deny permit ip any any Specifies a deny or permit statement of the extended ACL with any source host and other variables any any source host any any destin...

Page 208: ...7 18 3 Named Access List It defines an IP access list by name and any numeric characters that have not been defined from both standard ACL and extended ACL To create a named IP access list entry use...

Page 209: ...D deny permit A B C D A B C D Global Applies the user defined access list range and specifies those packets to reject forward 1 1024 IP standard access list range WORD IP access list range name deny d...

Page 210: ...ess list 1300 1999 IP standard access list extended range 100 199 IP extended access list 2000 2699 IP extended access list extended range WORD access list name show ip access list range 1 99 100 199...

Page 211: ...fic loading because of broadcast you can get cost effective network composition since switch is not needed Enhanced Security When using a shared bandwidth LAN there is no inherent protection provided...

Page 212: ...at higher layers of the architec ture for example by using a Network layer router with connections to two or more VLANs Multicast traffic or traffic destined for an unknown unicast address arriving o...

Page 213: ...e Assigns a port to VLAN VLANS VLAN ID 1 4094 vlan del VLANS PORTS Deletes associated ports from specified VLAN VLANS VLAN ID 1 4094 When you assign several ports to VLAN you have to enter each port s...

Page 214: ...t of protocol specific applications To configure a protocol based VLAN follow these steps 1 Configure VLAN groups for the protocols you want to use 2 Create a protocol group for each of the protocols...

Page 215: ...ANS VLAN ID 1 4094 no vlan macbase MAC ADDR Removes a specified MAC address from a specified MAC address 8 1 4 Subnet based VLAN An IP address contains two parts a subnet identifier and a station iden...

Page 216: ...tags are always applied by a VLAN aware device VLAN tagging provides a number of benefits but also carries some disadvantages Advantages Disadvantages VLAN association rules only need to be applied o...

Page 217: ...fied VLAN description 8 1 7 VLAN Precedence To make precedence between MAC address and Subnet based VLAN you can choose one of both with below command Command Mode Description vlan precedence mac subn...

Page 218: ...onical 12 bit identifier VLAN Ethernet Frame Preamble Destination Source 802 1Q VLAN Tag Type Length LLC Data FCS VLAN Tag TPID 8100 9100 Priority Canonical 12 bit identifier TPID 8100 Priority Canoni...

Page 219: ...kind of Tag protocol and it indicates the currently used tag information User can change the TPID By default the port which is configured as 802 1q 0x8100 cannot work as VLAN member To set TPID on a Q...

Page 220: ...S s vid 1 4094 trans s vid 1 4094 Configures 1 1 VLAN mapping for NNI port and translates multiple S VLAN tags of incoming Single Inner Tagged SIT packets to S VLAN tag To delete the configured one to...

Page 221: ...gured 1 2 VLAN mapping and translation no vlan dot1q tunnel egress mapping PORTS s vid 1 4094 trans s vid trans c vid no vlan dot1q tunnel ingress range mapping PORTS s vid 1 4094 trans s vid trans c...

Page 222: ...s vlan dot1q tunnel egress mapping PORTS external s vid 1 4094 c vid 1 4094 internal s vid 1 4094 c vid 1 4094 Configures 2 2 VLAN mapping for NNI port and translates external S VLAN and C VLAN tags o...

Page 223: ...q port Command Mode Description vlan pvid PORTS 1 4094 Bridge Configure a pvid PORTS qinq port to be enabled 1 4094 PVID To disable double tagging use the following command Command Mode Description vl...

Page 224: ...the following command Command Mode Description show vlan dot1q tunnel ingress egress mapping PORTS Enable Global Bridge Shows the configured VLAN mapping show vlan dot1q tunnel Shows the status of UN...

Page 225: ...switch refer to Port Isolation configuration 8 1 10 1 Port Isolation The Port Isolation feature is a method that restricts L2 switching between isolated ports in a VLAN However flows between isolated...

Page 226: ...comes to uplink ports from outer network the system does not know which PVID it has and where should it forward default br2 br3 br4 br5 Outer Network Uplink Port Untagged packets comes from the uplink...

Page 227: ...ning br50 br3 and br4 to port 2 port 3 and port 4 SWITCH bridge vlan create br50 SWITCH bridge vlan create br51 SWITCH bridge vlan create br200 SWITCH bridge vlan create br250 SWITCH bridge vlan creat...

Page 228: ...o communicate without changing VLAN configuration of SWITCH 1 and SWITCH 2 which communicate with PVID 10 configure it as follows You should configure the ports connected to network communicating with...

Page 229: ...TCH bridge vlan add br2 3 4 untagged SWITCH bridge vlan add br3 5 6 untagged SWITCH bridge vlan add br4 7 8 untagged SWITCH bridge vlan add br2 24 untagged SWITCH bridge vlan add br3 24 untagged SWITC...

Page 230: ...nking it is quite troublesome to set the configuration manually and the rate to adjust to the network environment changes when connecting to the switch using logical port On the other hand in case of...

Page 231: ...oute the packets could be gathered on particular member port so that it is not possible to use logical port effectively Therefore the V5824G is configured to decide the way of packet route in order to...

Page 232: ...ginally belongs to it should be moved to VLAN where the existing member port belongs to However the integrated port configured by LACP is automatically added to appropriate VLAN LACP can generate up t...

Page 233: ...to use logical port effectively Therefore the V5824G is configured to decide the way of packet route in order to distribute or forward packets to the member port effectively when packets enter It is d...

Page 234: ...the operation mode of the member port use the following command Command Mode Description lacp port activity PORTS active passive Bridge Configures the operation mode of the member port default active...

Page 235: ...onfigured property of a specified member port for LACP 8 2 2 6 BPDU Transmission Rate Member port transmits BPDU with its information For the V5824G it is possible to configure the BPDU transmission r...

Page 236: ...acp port priority PORTS Bridge Deletes the configured port priority of a selected member port select the member port number 8 2 2 9 Displaying LACP Configuration To display a configured LACP use the f...

Page 237: ...endless packet floating on the LAN like loop topology That superfluous traffic eventually can result in network fault It causes superfluous data transmission and network fault Fig 8 9 Example of Loop...

Page 238: ...as BPDU Bridge Protocol Data Unit Switches decide port state based on the exchanged BPDU and automatically decide an optimized path to communicate with the root switch 8 3 1 1 Root Switch The most imp...

Page 239: ...ost of SWITCH A to C path cost of SWITCH C to D Therefore the PATH 1 with lower path cost is chosen In this case the port connected to the Root switch is named the Root port In the above figure the po...

Page 240: ...y performed by BPDU which is the bridge information exchange between switches to activate or disable a specific port It is also possible to configure BPDU to modify the root switch or the path manuall...

Page 241: ...is comparing its own information path cost Bridge Identifier Port Identifier with the information received from other candidates and deciding which is best suited for inclusion in the spanning tree Le...

Page 242: ...d into alternate port and backup port An alternate port means a port blocking BPDUs of priority of high numerical value from other switches and a backup port means a port blocking BPDUs of priority of...

Page 243: ...6 Example of Receiving Low BPDU 8 3 2 3 Rapid Network Convergence In the figure below a new link is connected between SWITCH A and the root Root and SWITCH A are not directly connected but indirectly...

Page 244: ...nd the root Fig 8 18 Network Convergence of 802 1w 1 SWITCH A negotiates with the root through BPDU To make link between SWITCH A and the root the state of non edge designated port of SWITCH C is chan...

Page 245: ...of SWITCH A However since SWITCH C has a port connected to SWITCH D the port should be in the blocking state Fig 8 20 Network Convergece of 802 1w 3 It is same with 802 1d to block the connection of S...

Page 246: ...converts the port receiving BPDU into RSTP of 802 1d because it can read the BPDU of SWITCH C Then SWITCH C can read BPDU of SWITCH A and accepts SWITCH A as the designated switch Fig 8 22 Compatibili...

Page 247: ...reduce the number of STP compared with PVSTP There s no limitation for the region in a network environment however it is possible to generate Instances up to 64 1 to 64 Spanning tree operating in each...

Page 248: ...oot Fig 8 24 CST and IST of MSTP 2 In the above situation if B operates with MSTP B will send its BPDU to CST root and IST root in order to request itself to be CST root However if any BPDU with highe...

Page 249: ...rotocol rapid pvst Per vlan Rapid STP To delete the configured spanning tree mode use the following command Command Mode Description no spanning tree mode Bridge Deleted a configured spanning tree mod...

Page 250: ...802 1D 1998 To delete a configured method for caculating the path cost and return the configuration to the default use the following command Command Mode Description no spanning tree pathcost method...

Page 251: ...pecified port as edge port PORTS port number spanning tree port PORTS edgeport disable Disables edge port for specified port PORTS port number no spanning tree port PORTS edgeport 8 3 5 3 BPDU Transmi...

Page 252: ...point to point link type while a half duplex is considered as a shared port To configure the link type of port use the following command Command Mode Description spanning tree port PORTS link type po...

Page 253: ...e bridge address detail forward time hello time id max age protocol priority system id Shows information of the bridge status and configuration show spanning tree root address cost detail forward time...

Page 254: ...V5824G decide a MSTP region the switch is going to belong to by configuring the MST configuration ID Configuration ID contains a region name revision and a VLAN map To set the configuration ID use th...

Page 255: ...m After deleting the configured configuration ID apply it to the system using the above command To display the current and edited configuration on MSTP Configuration mode use the following command Com...

Page 256: ...cost After deciding a root swich you need to decide to which route you will forward the packet To do this the standard is a path cost By the path cost of root port you can configure a route manually T...

Page 257: ...state 1 64 MSTP instance ID number show spanning tree mst 1 64 bridge address detail forward time hello time id max age protocol priority priority system id Shows information of the bridge status and...

Page 258: ...forwarding some VLANs on one trunk and other VLANs PVRSTP provides the same functionality as PVSTP with enhancement Fig 8 25 Example of PVSTP To configure PVSTP use the following steps Step 1 Enable S...

Page 259: ...e lowest priority becomes the root switch for that VLAN To configure the switch priority for a VLAN use the following command Command Mode Description spanning tree vlan VLANS priority 0 61440 Bridge...

Page 260: ...active edgeport inconsistency rootcost state priority Shows information of vlan id for specified port VLANS VLAN ID 1 4094 show spanning tree vlan VLANS active detail Bridge Shows information of a sp...

Page 261: ...ot switches If the priority of bridge B is zero or any value lower than that of the root bridge device B will be elected as a root bridge for this VLAN As a result network topology could be changed Th...

Page 262: ...The port moves to the STP forwarding state and creates a loop To enable disable the loop guard on the specified port use the following command Command Mode Description spanning tree port PORTS guard...

Page 263: ...ORTS port number 8 3 12 Loop Back Detection The problem occurs because the keepalive packet is looped back to the port that sent the keepalive Keepalives are sent on the switches in order to prevent l...

Page 264: ...in order to configure and maintain the configuration for STP RSTP MSTP Switches that STP is configured exchange their information BPDU to find the best path MSTP BPDU is a general STP BPDU having add...

Page 265: ...and MSTP no spanning tree vlan VLANS hello time Returns to the default hello time value of PVSTP 8 3 13 2 Forward Delay Time It is possible to configure forward delay which means time to take port st...

Page 266: ...ommand Command Mode Description no spanning tree mst max age Bridge Returns to the default maximum aging time value of MSTP no spanning tree vlan VLANS max age Returns to the default maximum aging tim...

Page 267: ...g function on the edge port use the following command Command Mode Description spanning tree edgeport bpdufilter default Bridge Enables a BPDU filtering function by default on all edge ports no spanni...

Page 268: ...rd can be corrupted by unexpected cause In this case the edge port is blocked immediately and remains at this state until user recovers it To prevent this problem the V5824G provides error disable rec...

Page 269: ...he black arrows describe the routine path to the Aggregation Switch And the dot lines are in blocking state But if there is a broken between Switch A and Switch B the data from PC A should find anothe...

Page 270: ...SWITCH bridge spanning tree SWITCH bridge spanning tree mode mst SWITCH bridge spanning tree mst configuration SWITCH config mst instance 2 vlan 1 50 SWITCH config mst name test SWITCH config mst revi...

Page 271: ...he commands concerning the loop detection will show an error message To enable disable the loop detection on a specified port use the following command Command Mode Description loop detect PORTS Bridg...

Page 272: ...e of the loop detecting packet use the following command Command Mode Description loop detect srcmac laa Bridge Uses LAA as the source MAC address of the loop detecting packet loop detect srcmac syste...

Page 273: ...to a different subnet the IP address must be changed DHCP allows you to dynamically assign an IP address to a client from a DHCP server IP address database on the local network The DHCP provides the...

Page 274: ...ation DHCP Subnet Range of IP Address Default Gateway IP Lease Time DNS Server Manual Binding Domain Name DHCP Server Option Static Mapping Recognition of DHCP Client IP Address Validation Authorized...

Page 275: ...ig ip dhcp pool sample SWITCH config dhcp sample 8 5 1 2 DHCP Subnet To specify a subnet of the DHCP pool use the following command Command Mode Description network A B C D M DHCP Pool Specifies a sub...

Page 276: ...P pool A B C D default gateway IP address no default router A B C D1 A B C D2 A B C D8 Deletes a specified default gateway no default router all Deletes all the specified default gateways The followin...

Page 277: ...eletes all the specified DNS servers The following is an example of specifying a DNS server SWITCH config service dhcp SWITCH config ip dhcp pool sample SWITCH config dhcp sample network 100 1 1 0 24...

Page 278: ...option that is configured in the DHCP pool mode Then DHCP server finds the DHCP default option If it exists DHCP server sends DHCP clients a DHCP reply packet Offer ACK with the default option informa...

Page 279: ...a requested ping or ARP the DHCP server will realize that the IP address is not used then will assign the IP address to the DHCP client To select an IP address validation method use the following com...

Page 280: ...n verify the valid and invalid list for the authorized ARP The valid list includes the IP addresses currently in lease while the invalid list includes the IP addresses that send ARP requests but not i...

Page 281: ...hcp bootp ignore Global Ignores BOOTP request packets no ip dhcp bootp ignore Permits BOOTP request packets 8 5 1 16 DHCP Packet Statistics To display DHCP packet statistics of the DHCP server use the...

Page 282: ...00 of total Bound 0 0 00 of total Offered 0 0 00 of total Fixed 0 0 00 of total sample Total 0 0 00 of the pool 0 00 of total Available 0 0 00 of the pool 0 00 of total Abandon 0 0 00 of the pool 0 0...

Page 283: ...tion for IP assignment use the following command Command Mode Description relay information remote id ip A B C D circuit id hex HEXSTRING index 0 65535 text STRING DHCP Class Specifies option 82 infor...

Page 284: ...y a range of IP addresses for a DHCP class use the following command Command Mode Description address range A B C D A B C D DHCP Pool Class Specifies a range of IP addresses A B C D start end IP addre...

Page 285: ...ase agent 8 5 3 2 Displaying DHCP Lease Status To display current DHCP lease status use the following command Command Mode Description show ip dhcp lease all bound abandon offer fixed free POOL Enable...

Page 286: ...rds it to the DHCP server The reply from the server is forwarded back to the client after removing the DHCP option 82 information Fig 8 30 Example of DHCP Relay Agent To activate deactivate the DHCP f...

Page 287: ...R message to a specific DHCP server according to a specified OUI To specify a DHCP helper address with an OUI use the following command Command Mode Description ip dhcp oui XX XX XX helper address A B...

Page 288: ...P_REQUEST message to only one DHCP server with the unicast form under the multiple server environment To enable disable a DHCP relay agent to recognize the DHCP server ID option in the forwarded DHCP_...

Page 289: ...pecific A length can be variable according to value or can be fixed A value contains actual information such an IP address string or index which is inserted into the DHCP packet Administrators can con...

Page 290: ...for a DHCP option attr 1 32 length 1 64 value hex index ip string VALUE attr 1 32 length hidden variable value hex index ip string VALUE Sets the value of an attribute for a DHCP option attr 1 32 leng...

Page 291: ...ntify a TFTP server when the sname field in the DHCP header has been used for DHCP options The following is an example of configuring IP address or domain name for TFTP server using DHCP option 66 SWI...

Page 292: ...P address hardware address and remote ID The DHCP server should implement policies that restrict the number of IP addresses to be assigned to a single remote ID Static Assignment A DHCP server may use...

Page 293: ...riginated DHCP packets to a DHCP server The DHCP server can use this information to implement security and IP address assignment policies There are 2 sub options for the DHCP option 82 information as...

Page 294: ...mmand Mode Description no system remote id Option 82 Deletes a specified remote and circuit ID no system remote id option format no system circuit id PORTS option format no system circuit id port type...

Page 295: ...scription trust remote id hex HEXSTRING Option 82 Specifies a trusted remote ID trust remote id ip A B C D trust remote id text STRING To delete a specified trusted remote ID use the following command...

Page 296: ...DHCP server message such as a DHCP_OFFER or DHCP_ACK which is received from untrusted interfaces 8 5 7 1 Enabling DHCP Snooping To enable the DHCP snooping globally use the following command Command M...

Page 297: ...hcp snooping limit rate PORTS Deletes a rate limit for DHCP packets Normally the DHCP rate limit is specified to untrusted interfaces and 15 pps is recommended for a proper value If however you want t...

Page 298: ...port 1 2147483637 the number of entry registrations no ip dhcp snooping limit lease PORTS Deletes a DHCP lease limit You can limit the number of entry registrations only for untrusted interfaces becau...

Page 299: ...nding all all DHCP snooping bindings 8 5 7 8 DHCP Snooping Database Agent When the DHCP snooping is enabled the system uses the DHCP snooping binding database to store information about untrusted inte...

Page 300: ...if they are not identified in the table However the V5824G may be rebooted with any reason then DHCP snooping binding table entries which are dynamically learned from DHCP packets back and forth the...

Page 301: ...option can be applied on a port basis or on entire ports Before using this function a global DHCP option format should be created For details of setting the DHCP option format refer to the 8 5 5 DHCP...

Page 302: ...ds a DHCP message to DHCP server without any modification replace deletes the DHCP message s option and adds the snooping default option if both of them are same However if they are different each oth...

Page 303: ...abled without any IP source binding on the port a default policy that denies all IP traffic is applied to the port Similarly when the IP filter is disabled any IP source filter policy will be removed...

Page 304: ...ommands together 8 5 8 2 Static IP Source Binding The IP source binding table has bindings that are learned by DHCP snooping or manually specified with the ip dhcp verify source binding command The sw...

Page 305: ...an interface no ip address dhcp Disables a DHCP client 8 5 9 2 DHCP Client ID To specify a client ID use the following command Command Mode Description ip dhcp client client id hex HEXSTRING Interface...

Page 306: ...an option use the following command Command Mode Description no ip dhcp client request domain name dns Interface Configures a DHCP client not to request a specified option 8 5 9 7 Forcing Release or R...

Page 307: ...HCP server assign IP address to DHCP clients automatically and manage the IP address Most ISP operators provide the service as such a way At this time if a DHCP client connects with the equipment that...

Page 308: ...use the following command Command Mode Description show dhcp server filter Enable Global Bridge Show a status of the DHCP server packet filtering 8 5 11 Debugging DHCP To enable disable a DHCP debuggi...

Page 309: ...n VRRP with unified Group Id and assign unified Associated IP to them After that decide Master Virtual Router and Backup Virtual Router A router that has the highest priority is supposed to be Master...

Page 310: ...mmand Command Mode Description associate A B C D VRRP Assigns an associated IP address to a virtual router A B C D virtual router IP address no associate A B C D all Deletes an assigned associated IP...

Page 311: ...ty of Virtual Router Priority of Virtual Backup Router can be configured from 1 to 254 To set VRRP advertisement timers or delete the configuration use the following command Command Mode Description v...

Page 312: ...ority 102 SWITCH2 config router exit SWITCH2 config show vrrp default virtual router 1 state master virtual mac address 00 00 5E 00 01 01 advertisement interval 1 sec preemption enabled priority 102 m...

Page 313: ...00 00 5E 00 01 01 advertisement interval 1 sec preemption enabled priority 100 master down interval 3 620 sec 1 associate address 10 0 0 5 8 6 1 4 VRRP Track Function When the link connected to Maste...

Page 314: ...tion track interface INTERFACE priority 1 254 VRRP Enables the interface tracking and decreases the VRRP priority as the track results To release VRRP Track configuration use the following command Com...

Page 315: ...network and showing it SWITCH config vrrp authentication clear_text network SWITCH config vrrp show running config Building configuration Omitted vrrp default 1 authentication clear_text network assoc...

Page 316: ...rp Enable Global VRRP Shows current configuration of VRRP VRID VRRP virtual server id 1 255 show vrrp vrid VRID all show vrrp interface INTERFACE all Shows current configuration of specified interface...

Page 317: ...ets send outgoing packets recv incoming packets detail detail information debug vrrp sm events status timers Enables VRRP state machine debugging sm state machine events SM events status SM status tim...

Page 318: ...limit for ports use the following command Command Mode Description rate limit port PORTS rate RATE egress ingress dot3x Bridge Sets a rate limit for ports If you input egress or ingress you can confi...

Page 319: ...ard MAC flood guard controls the number of incoming packets per second which have the same MAC address Using this function you can protect malicious attacks such as Denial of Service DoS from unauthor...

Page 320: ...ckets toward CPU per second PORTS port number 1 6000 the number of packets per second no cpu flood guard PORTS Deletes a specified number of packets You can also enable the blocking option When the bl...

Page 321: ...ng packets to a port per second according to the packets type Discards the packets which exceeds given threshold PORTS port number 1 2147483647 the number of packets per 1 second no system flood guard...

Page 322: ...ond exceed a given threshold the system disables a specified port or generates trap messages for warning when attack guard function enables on this port When the traffic comes down to a given low thre...

Page 323: ...les a specified port or generates trap messages for warning when error guard function is enabled on this port To enable disable the error guard function use the following command Command Mode Descript...

Page 324: ...l is running if the number of incoming packets exceeds a configured threshold the traffic is discarded during specified time To enable the blocking option use the following command Command Mode Descri...

Page 325: ...ode Description show storm control Bridge Displays a configuration of the storm control 8 11 Jumbo Frame Capacity The packet range that can be capable to accept is from 64 bytes to 1518 bytes Therefor...

Page 326: ...nd Mode Description mtu 68 1500 Interface Sets a MTU size no mtu Returns to the default MTU size 8 14 Blocking Packet Forwarding RFC 2644 recommends that system blocks broadcast packet of same network...

Page 327: ...ilization of the network infrastructure The point of implementing multicast is how to deliver source traffic to specific destinations without any burden on the sources or receivers using the minimized...

Page 328: ...example of the V5824G with PIM SM L3 multicast routing protocol in the Layer 3 network Fig 9 2 The V5824G with PIM SM If more than one port are on the same Layer 2 interface and the V5824G is a borde...

Page 329: ...1 overlap of IP addresses to MAC addresses 32 IP multicast addresses are mapped to the same MAC multicast address As an example below lists all the IP multicast addresses that are mapped to the same...

Page 330: ...ffic corresponding to the report to the hosts A multicast router called as a querier is responsible for keeping track of the membership state of the multicast groups by sending periodic general query...

Page 331: ...e increased When receiving the query message that contains a certain QRV value from a querier a host returns the report message as many as the specified QRV value To configure the QRV value on an inte...

Page 332: ...ow debugging igmp Enable Shows the debugging information of IGMP 9 1 2 IGMP Version 2 In IGMP version 2 the new extensions such as the leave process election of an IGMP querier and membership report s...

Page 333: ...ports from the hosts other than the first one are suppressed to avoid increasing the unnecessary traffic For an IGMP querier it is sufficient to know that there is at least one interested member for a...

Page 334: ...P static join A B C D multicast group address ip igmp static group range A B C D A B C D Configures the IGMP static join for a range of multicast group addresses A B C D begin end multicast group addr...

Page 335: ...ese group members You can restrict hosts on a network to join multicast groups on the specified access list To control an access to multicast groups on an interface use the following command Command M...

Page 336: ...segment To specify a maximum query response time advertised in membership query messages use the following command Command Mode Description ip igmp query max response time 1 240 Interface Specifies a...

Page 337: ...ery interval 1000 25500 last member query interval default 1000 milliseconds no ip igmp last member query interval Deletes a specified last member query interval IGMP Unsolicited Report Interval When...

Page 338: ...ip reports contain two types of the record current state and state change Each record specifies the information of the filter mode and source list The report can contain multiple group records allowin...

Page 339: ...with state change records are used to allow or block multicast sources and those with current state records are used to respond to membership queries Membership report suppression feature has been rem...

Page 340: ...traffic in the McFDB If the McFDB has the information for the traffic the switch forwards it to the proper ports If the McFDB does not have the information for the traffic the switch learns the infor...

Page 341: ...00 no ip mcfdb aging limit Deletes the specified maximum number of forwarding entries 9 2 1 3 Displaying McFDB Information To display McFDB information use the following command Command Mode Descripti...

Page 342: ...MP snooping is to constrain the flooding of multicast traffic at Layer 2 IGMP snooping as implied by the name allows a switch to snoop the IGMP transaction between hosts and routers and maintains the...

Page 343: ...in interface the reports are always sent out only with the specified version If you do not statically specify the version and a version 1 query is received on the interface the interface dynamically s...

Page 344: ...e Description no ip igmp snooping robustness variable Global Deletes a specified robustness variable no ip igmp snooping vlan VLANS robustness variable 9 2 3 IGMPv2 Snooping 9 2 3 1 IGMP Snooping Quer...

Page 345: ...ssages use the following command Command Mode Description ip igmp snooping querier query interval 1 1800 Global Specifies an IGMP snooping query interval in the unit of second 1 1800 query interval de...

Page 346: ...d Mode Description show ip igmp snooping vlan VLANS querier detail Enable Global Bridge Shows IGMP querier information and configured parameters 9 2 3 2 IGMP Snooping Last Member Query Interval Upon r...

Page 347: ...ip igmp snooping immediate leave Global Enables the IGMP snooping immediate leave globally ip igmp snooping port PORTS immediate leave Enables the IGMP snooping immediate leave on a port PORTS port n...

Page 348: ...he IGMP snooping report suppression on a VLAN VLANS VLAN ID 1 4094 To disable the IGMP snooping report suppression use the following command Command Mode Description no ip igmp snooping report suppres...

Page 349: ...the following command Command Mode Description ip igmp snooping explicit tracking Global Enables explicit host tracking globally ip igmp snooping vlan VLANS explicit tracking Enables explicit host tra...

Page 350: ...summary vlan VLANS port PORTS Shows the summary of IGMP snooping explicit tracking information show ip igmp snooping explicit tracking vlan VLANS Shows the explicit host tracking information per VLAN...

Page 351: ...ter ports are added to the forwarding table for every Layer 2 multicast entry The switch dynamically learns those ports through snooping on PIM hello packets To enable the switch to learn multicast ro...

Page 352: ...S VLAN ID 1 4094 9 2 3 8 TCN Multicast Flooding When a network topology change occurs the protocols for a link layer topology such as spanning tree protocol STP etc notify switches in the topology usi...

Page 353: ...erval to stop multicast flooding use the following command Command Mode Description ip igmp snooping tcn flood query interval 1 1800 Global Specifies a query interval to stop multicast flooding in the...

Page 354: ...d from a host that is no longer interested in receiving multicast traffic from a certain source the switch compares the source list for the host in the explicit tracking database with the source list...

Page 355: ...ow ip igmp snooping groups A B C D mac based Enable Global Bridge Shows the IGMP snooping table globally mac based lists groups on a MAC address basis show ip igmp snooping groups port PORTS cpu mac b...

Page 356: ...u must keep in mind those before configuring MVR All receiver ports must belong to the both subscriber and multicast VLANs as un tagged IGMP snooping must be enabled before enabling MVR A single group...

Page 357: ...a different network from an MVR group s a multicast router sends the multicast traffic to each MVR group using Layer 3 multicast routing In such an environment when an IGMP packet from a subscriber is...

Page 358: ...ofile for IGMP filtering in IGMP Profile Configuration mode The system prompt will be changed from SWITCH config to SWITCH config igmp profile N To create modify an IGMP profile use the following comm...

Page 359: ...he IGMP packets by referring to its DHCP snooping binding table This reference enables the system to permit IGMP messages only when the source IP address and MAC address of host have identified from t...

Page 360: ...ups To specify the maximum number of IGMP groups for the system use the following command Command Mode Description ip igmp max groups system count 1 2147483647 Global Specifies the maximum number of I...

Page 361: ...e that interface should not be designated upstream and downstream interface of IGMP proxy switch At the same time if a certain interface is configured as upstream or downstream interface IGMPv3 settin...

Page 362: ...interface has larger credit higher priority and lower vid than other ones To specify the priority on an upstream interface use the following command Command Mode Description ip igmp proxy service pri...

Page 363: ...e decreased IGMP IF credit is not re covered If the credit unit becomes 0 because of the continuous flapping of IGMP IF the credit is not recovered until clear ip igmp if flap discredit command is con...

Page 364: ...ication If the source IP address is not within the incoming network segment the packets are discarded default 9 2 8 6 Specifying IGMP Report Leave s Source IP Address In IGMP proxy operation the switc...

Page 365: ...NAME interface name show ip igmp proxy groups A B C D detail show ip igmp proxy groups NAME detail show ip igmp proxy groups NAME summary 9 2 9 IGMP State Limit You can use IGMP State Limit feature t...

Page 366: ...which is registered in the multicast forwarding table Only multicast source trust ports can be received the multicast traffic However the reserved multicast packets should be sent to CPU even if these...

Page 367: ...lidate whether the interface on which the packets are received is directly toward the source of those packets by referring to the existing unicast routing table This procedure is called the reverse pa...

Page 368: ...l Global Blocks IGMP packets with an IP TTL field value that is not equal to 1 no ip igmp verify ttl Permits IGMP packets with an IP TTL field value that is not equal to 1 default 9 3 1 3 ECMP Load Sp...

Page 369: ...the limit of the maximum number of multicast routing entries LIMIT number of routing entries 1 214783647 THRESHOLD warning threshold 1 214783647 no ip multicast route limit Deletes a specified limit T...

Page 370: ...Deletes a specified MFC and TIB entry in the PIM SM protocol A B C D group source address When clearing the MRIB entries you must specify the group address prior to the source address 9 3 1 6 Display...

Page 371: ...routing protocol You can verify the forwarding entries in the MFIB with the show ip mfib command To display the multicast forwarding entries in the MFIB use the following command Command Mode Descrip...

Page 372: ...age formats The V5824G currently support PIM SM only PIM Messages The followings are simple descriptions of PIM control messages Hello PIM routers periodically send hello messages on all interfaces to...

Page 373: ...to act as the DR To elect the DR each PIM router examines PIM hello messages received from other neighbor PIM routers and compares its DR priority in those from neighbors The router with the highest p...

Page 374: ...access lists When you enable this feature a specifid PIM group of PIM join prune messages from the trusted neighbor are denied by a specified range of access lists To enable PIM group filtering use t...

Page 375: ...ill be pruned from the group To specify an interval to send PIM join prune messages use the following command Command Mode Description ip pim message interval 1 65535 Global Specifies an interval to s...

Page 376: ...igure this rate as 0 the VIF credit is not regenerated To set the current credit as the default 100 use the following command Command Mode Description clear ip pim vif flap discredit vif 0 127 Enable...

Page 377: ...All they need to know is the address of the RP because the RP surely knows the information of the sources for all multicast groups Thus receivers who are interested in a certain multicast group only...

Page 378: ...ard the RP to prune the existing shared tree to receive the traffic SPT is established based on the existing unicast routing table by performing the RPF check It has a different distribution tree for...

Page 379: ...join message with S G state toward the source to establish the SPT When receiving the multicast traffic via the established SPT the RP forwards the traffic toward those receivers Multicast traffic ma...

Page 380: ...multicast routing entry with S G state is expired and the source registration process will restart To specify the keep alive time for S G states at the RP use the following command Command Mode Descri...

Page 381: ...RP choice no ip pim ignore rp set priority Disables ignoring the PR priority for the RP choice Displaying RP Information To display the RP information use the following command Command Mode Descripti...

Page 382: ...et Displaying BSR Configuration To display the BSR information use the following command Command Mode Description show ip pim bsr router Enable Global Bridge Shows the BSR information 9 3 3 3 Source R...

Page 383: ...at does not contain the encapsulated multicast traffic to the RP and the RP returns the register stop message If there is no response to the null register message during a given period the multicast r...

Page 384: ...nse By default the source address of register messages is the IP address of the interface toward the RP This address must be able to be learned by unicast routing protocols on the DR To specify the so...

Page 385: ...lates the multicast traffic from the source in the PIM register message and unicasts it to the RP The standard PIM protocol specifies that the checksum field in the register message contains the check...

Page 386: ...tibility Excluding GenID Option PIM hello messages may contain the generation ID GenID in the option fields which is a random value for the interface on which the hello message is sent The GenID is re...

Page 387: ...pim timer Enable Global Enables PIM SM timer debugging debug pim timer assert at Enables PIM SM assert timer debugging debug pim timer bsr bst crp Enables PIM SM BSR timer debugging bst bootstrap debu...

Page 388: ...t is much simpler than PIM SM because it only considers one to many multicast service model PIM SSM only use a shortest path tree SPT to deliver multicast traffic so the PIM SM s complex mechanisms su...

Page 389: ...SM mapping for groups To configure the switch to statically map groups that match specified ACL to source address use the following command Command Mode Description ip igmp ssm map static 1 99 1300 19...

Page 390: ...l software supports BGP version 4 This version of BGP adds support for classless interdomain routing CIDR which eliminates the concept of network classes Instead of assuming which bits of an address r...

Page 391: ...butes ZebOS type is the default for the V5824G To select configuration type of the BGP router use the following command Command Mode Description bgp config type standard zebos Global Sets the BGP conf...

Page 392: ...subnet mask backdoor specifies a BGP backdoor route network A B C D mask NETMASK backdoor The backdoor parameter applies to IPv4 unicast address family only Step 1 To delete a specified network to ope...

Page 393: ...f BGP neighbors A B C D neighbor IPv4 address WORD peer group name or neighbor tag 1 65535 remote AS Number no neighbor A B C D WORD remote as 1 65535 Deletes the configured BGP neighbor within specif...

Page 394: ...0 0 24 and 172 16 1 0 24 the as set parameter creates an aggregate entry advertising the path for a single route of 172 16 0 0 23 consisting of all elements contained in all paths being summarized Use...

Page 395: ...work summarization of a route no auto summary Disables automatic network summarization of a route Please note that use this feature when you use the basic classes in network 10 1 2 3 BGP Next Hop Addr...

Page 396: ...in autonomous system In addition MED is used when comparing of routes from the neighboring routers placed within different AS To find the best route by comparing MED values use the following command C...

Page 397: ...the best route using the bgp bestpath as path ignore command before implementing the following command To consider AS path length of Confederation during the best path selection process use the follow...

Page 398: ...as zero without MED value it will be chosen the best path But the path would be the worst one if it has no MED value after missing as worst is set After missing as worst parameter is configured in th...

Page 399: ...1 3600 Sets the stalepath time of Graceful Restart configuration in the unit of second 1 3600 stalepath time default 30 If you don t use Graceful Restart feature or want to return the default value f...

Page 400: ...s Use the following command in order to enable address family routing process which open you in Address Family Configuration mode Command Mode Description address family ipv4 multicast unicast Router...

Page 401: ...ing of multiple neighbors per group Supporting fewer BGP groups generally scales better than supporting a large number of BGP groups This becomes more evident in the case of dozens of BGP neighboring...

Page 402: ...ter or peer group To disable the exchange information with a specified router or peer group use the following command Command Mode Description neighbor NEIGHBOR IP WORD shutdown Router Shutdowns any a...

Page 403: ...ter Specifies a description on a neighbor A B C D BGP neighbor IP address WORD neighbor tag LINE 80 character text that describes the neighbor no neighbor A B C D WORD description LINE Deletes a speci...

Page 404: ...fied format and not with regular expressions The expanded community list defines the community attributes with regular expressions Use the ip community list standard command to add a standard communit...

Page 405: ...ntry information of the community list use the following command Command Mode Description show ip community list Enable Global Bridge Shows an entry of the community list show ip community list 1 99 1...

Page 406: ...list show ip extcommunity list 1 99 100 199 WORD Route tagging with communities is always done with a route map You can attach up to 32 communities to a single route with one route map set statement A...

Page 407: ...of second 0 65535 keepalive timer value default 60 seconds 0 65535 holdtime value default 180 seconds To reset the values use the following command Command Mode Description no timers bgp Router Resets...

Page 408: ...ning Router Enables the route flap dampening To configure BGP dampening parameters use the following command Command Mode Description bgp dampening 1 45 Router Configures BGP dampening parameters 1 45...

Page 409: ...BGP routes use the following command Command Mode Description clear ip bgp unicast multicast dampening Enable Global Bridge Resets all dampened BGP routes clear ip bgp unicast multicast dampening A B...

Page 410: ...on of specific group under condition in clears incoming advertised routes prefix filter pushes out prefix list ORF and does inbound soft reconfiguration the conditional option peer group name or AS nu...

Page 411: ...route either incoming or outgoing routes 1 65535 AS number clear ip bgp 1 65535 unicast multicast soft in out 10 1 10 3 Session Reset of Specific Route To reset the sessions of BGP neighboring router...

Page 412: ...connected to external AS in clears incoming advertised routes prefix filter pushes out prefix list ORF and does inbound soft reconfiguration external clears all external peers clear ip bgp external un...

Page 413: ...peer group Apply the route either incoming or outgoing routes GROUP peer group name clear ip bgp peer group GROUP unicast multicast soft in out 10 1 11 BGP AS path Access List Autonomous System AS is...

Page 414: ...er should configure prefix list User can assign a sequence number to each policy registered in prefix list Traffic filtering operation through prefix lists Filtering through prefix list processes rout...

Page 415: ...tomatically generated in increments of 5 To delete the entries in the prefix list use the following command Command Mode Description no ip prefix list WORD Global Deletes the entries of the prefix lis...

Page 416: ...refix list use the following command Command Mode Description no ip prefix list WORD seq 1 4294967295 deny permit A B C D M any Global Deletes the entry in an IPv4 prefix list and removes a sequence n...

Page 417: ...prefix list detail summary WORD Shows a table showing the entries in a prefix list identified by name To clear the existing prefix list entries use the following command Command Mode Description clear...

Page 418: ...cted show ip bgp unicast multicast neighbors NEIGHBOR IP received routes The received routes option displays all received routes both accepted and rejected from the specified neighbor To implement thi...

Page 419: ...mation while BGP is running 10 1 14 BGP Debug To enable BGP debugging use the following command Command Mode Description debug bgp Enable Enables BGP debugging debug bgp all dampening events filters f...

Page 420: ...router configuration for user environment each router configuration must be accorded by verification This section provides configurations for OSPF routing protocol Lists are as follows Enabling OSPF...

Page 421: ...he first In this case the V5824G can change only router ID without changing related configurations Command Mode Description ospf router id A B C D Router Changes only a router ID without changing rela...

Page 422: ...ing task to support many different features within the OSPF protocol Use the following command to configure compatibility with RFC 1583 Command Mode Description compatible rfc1583 Router Supports comp...

Page 423: ...nsistent across all routers in an attached network To configure an authentication key which is based on text encoding use the following command Command Mode Description ip ospf authentication key KEY...

Page 424: ...ng command Command Mode Description ip ospf cost 1 65535 Interface Configures an interface cost for OSPF ip ospf A B C D cost 1 65535 To delete a configured interface cost for OSPF use the following c...

Page 425: ...uter trans mits LSA again Retransmit interval is configuration of the time interval between transmission and retransmission Dead Interval If there is no hello packet for the configured time The router...

Page 426: ...al to the default value no ip ospf A B C D dead interval To configure a transmit delay use the following command Command Mode Description ip ospf transmit delay 1 65535 Interface Configures a transmit...

Page 427: ...e the switch to skip the MTU verification in DD process use the following command Command Mode Description ip ospf mtu ignore Interface Configures the switch to skip the MTU verification in DD process...

Page 428: ...multipoint type uses virtual circuit on part of network to save the management expenses It does not to need to configure Neighbor router to connect routers which are not directly connected It also sav...

Page 429: ...pe use the following command Command Mode Description no neighbor A B C D Router Deletes a configured neighbor router of NBMA type no neighbor A B C D cost 1 65535 no neighbor A B C D priority 0 255 n...

Page 430: ...ion 10 2 6 2 Default Cost of Area The default cost of Area is configured only in ABR ABR function is for delivering the summary default route to stub area or NSSA in that cases the default cost of are...

Page 431: ...ransmit the routing information to Area by ASBR On the other hand Stub Area cannot transmit the routing information to area To configure NSSA use the following command Command Mode Description area 0...

Page 432: ...an option translator role must choose one of candidate never always as an options The following is explaining options of command default information originate or default information originate metric...

Page 433: ...on area 0 4294967295 nssa translator role candidate never always default information originate metric type 1 2 no redistribution To delete configured NSSA use the following command Command Mode Descri...

Page 434: ...no area 0 4294967295 A B C D nssa no summary translator role default information originate no redistribution no area 0 4294967295 A B C D nssa no summary translator role no redistribution no area 0 42...

Page 435: ...for efficient traffic in every ABR type see Section 10 2 2 To configure the shortcut option use the following command Command Mode Description area 0 4294967295 A B C D shortcut default disable enabl...

Page 436: ...regards virtual link routers as Point to point router Therefore the Hello interval Retransmit interval Transmit delay must be consistent across all routers in an attached network User can configure A...

Page 437: ...retransmit interval 1 65535 dead interval 1 65535 transmit delay 1 65535 To configure a virtual link with one option use the following command Command Mode Description area 0 4294967295 A B C D virtua...

Page 438: ...bandwidth For example default metric of T1 link is 64 but default metric of 64K line is 1562 If there are plural lines in the bandwidth you can view costs to use line by assigning metric to each line...

Page 439: ...ch is up grading software and max grace period works when grace period from other routers has less value than it Configuration for Helper can be selected more than 2 options without order To configure...

Page 440: ...800 10 2 9 Opaque LSA Support Opaque LSA is LSA Type 9 Type 10 Type 11 The V5824G enables Opaque LSA as a default but it can be released by user To release the enabled Opaque LSA management use the fo...

Page 441: ...st with external path cost as a cost metric type 2 always uses external cost value only always Transmits the default route to outside no summary Restricts to exchange routing information between OSPF...

Page 442: ...ased on the source IP address SIP or both source and destination IP address SIP DIP ECMP routes allow the switch to choose between several next hops toward a given destination When a dynamic route is...

Page 443: ...of the default route metric type is for type of finding the path metric type 1 uses internal path cost with external path cost as a cost metric type 2 always uses external cost value route map is tran...

Page 444: ...g information source such as an individual router or a group of routers Numerically an administrative distance is an integer between 0 and 255 In general the higher the value is the lower the trust ra...

Page 445: ...1 4294967295 Router Configures the routing information to each host host A B C D area A B C D 1 4294967295 cost 0 65535 To delete the routing information of specific host use the following command Com...

Page 446: ...0 16 to transmit to OSPF network This summary reduces the number of routing information and it improves a stability of OSPF protocol And you can use no advertise option command to block the transmiss...

Page 447: ...nd Mode Description show ip ospf 0 65535 border routers Enable Global Bridge Shows OSPF routing table to ABR and ASBR To display the OSPF database use the following command Command Mode Description sh...

Page 448: ...Mode Description show ip ospf 0 65535 neighbor Enable Global Bridge Shows the information of neighbor router show ip ospf 0 65535 neighbor A B C D detail show ip ospf 0 65535 neighbor interface A B C...

Page 449: ...e to process in OSPF For example if a router connected with many of routers it carries overload to process the database Therefore Limiting the Number of Database reduces the overload on system To conf...

Page 450: ...20 OSPF Debug To enable OSPF debugging use the following command Command Mode Description debug ospf all Enable Global Enables OSPF debugging debug ospf events abr asbr lsa nssa os router vlink Enable...

Page 451: ...s status timers no debug ospf lsa flooding generate install maxage refresh no debug ospf nfsm events status timers no debug ospf nsm interface redistribute no debug ospf packet hello dd ls ack ls requ...

Page 452: ...nds the router removes all routing table entries for the non updating router The metric that RIP uses to rate the value of different routes is hop count The hop count is the number of routers that sho...

Page 453: ...rmation is transmitted to port specified with the network command After RIP is enabled you can configure RIP with the following items RIP Neighbor Router RIP Version Creating available Static Route on...

Page 454: ...e Command Mode Description ip rip send version 1 Interface Sends RIP v1 type packet only to this interface ip rip send version 2 Sends RIP v2 type packet only to this interface ip rip send version 1 2...

Page 455: ...etes the configuration of RIP v2 type packet for helping them to be received from interface no ip rip receive version 1 2 Deletes the configuration of both RIP v1 and RIP v2 type packets for helping t...

Page 456: ...table use the following command Command Mode Description no redistribute kernel connected static ospf bgp Router Removes the configuration of transmitted routing information in another router s RIP ta...

Page 457: ...stance value Remember that administrative distance has only local significance and is not advertised in routing updates Most routing protocols have metric structures and algorithms that are not compat...

Page 458: ...cess list to routes received from or forwarded to a neighbor User should configure the route information for a set of deny conditions based on matching each access list or prefix list In addition this...

Page 459: ...command Command Mode Description offset list ACCESS LIST in out 0 16 INTERFACE Router Add an offset to incoming or outgoing metrics to routes learned via RIP ACCESS LIST access list name 0 16 type num...

Page 460: ...12 Split Horizon Normally routers that are connected to broadcast type IP networks and that use distance vector routing protocols employ the split horizon mechanism to reduce the possibility of routin...

Page 461: ...Command Mode Description ip rip authentication key chain NAME Interface Enables authentication for RIP v2 packets and to specify the set of keys that can be used on an interface NAME name of key chai...

Page 462: ...recv buffer size 8196 2147483647 Router Sets the UDP Buffer size value for using RIP 8196 2147483647 UDP buffer size value no recv buffer size 8196 2147483647 Restore the default value of UDP buffer s...

Page 463: ...RIP information debug rip nsm Enables RIP nsm debugging debug rip packet recv send Shows more detailed information about RIP packet The information includes address of packet transmission and port nu...

Page 464: ...ath access list name match community 1 99 100 199 WORD exact match Specifies the BGP community list to be matched 1 99 standard community list number 100 199 expanded community list number WORD commun...

Page 465: ...ip next hop WORD no match metric tag 0 4294967295 no match origin egp igp incomplete no match route type external type 1 type 2 Step 3 Use the set command that specifies the set redistribution action...

Page 466: ...ence value set metric 0 4294967295 metric Sets the metric value set metric type type 1 type 2 Sets the metric type set origin egp igp incomplete Sets the BGP origin code set originator id A B C D Sets...

Page 467: ...set metric 0 4294967295 metric no set metric type type 1 type 2 no set origin egp igp incomplete no set originator id A B C D no set tag 0 4294967295 no set vpnv4 next hop A B C D no set weight 0 4294...

Page 468: ...into bursts Each ONU ONT transmits its data in a strict accordance with the Bandwidth Map generated by OLT for the synchronization Using DBA mechanism OLT can rearrange upstream bandwidth h to provid...

Page 469: ...ig 11 2 shows the CLI structure of GPON Configuration mode Privilege EXEC View Mode Privilege EXEC Enable Mode Global Configuration Mode GPON Configuration Mode configure terminal gpon GPON OLT gpon o...

Page 470: ...ile pm profile Configure GPON Performance Monitor Profile pw maintenance profile Configure GPON PW Maintenance Private Profile remove Remove file show Show running system information tdm pw profile Co...

Page 471: ...ze encryption and decryption keys between OLT and ONU ONT you have to activate the key exchange process For security reasons GPON standard requires periodic key exchange for all active ONUs ONTs that...

Page 472: ...s the total amount of bandwidth in use for upstream traffic 1031616 1244160 total upstream bandwidth default 1120000kbps no olt total upstream bw Deleted the configured total amount of bandwidth in us...

Page 473: ...ific error signal is followed by the fault Thus the V5824G validates whether an ONU ONT fault occurs by detecting the specific error signal The auto ONU fault detecting mechanism is as follows When de...

Page 474: ...ription olt max distance default GPON OLT Determine maximal distance between OLT and ONU default 0 20km 20 60 maximal distance km olt max distance 20 60 11 1 7 Forward Error Correction FEC Mode Forwar...

Page 475: ...ble down enable GPON Enables GPON link down detection olt cable down disable Disables GPON link down detection To set a number of ONUs that are deregistered without dying gasp alarm message for detect...

Page 476: ...NUs on the same GPON the system regards the latest ONU s as the fault operation and make the ONU s block the inflow of sub level MAC by MAC filtering Through this anti spoofing the V5824G can prevent...

Page 477: ...ON GPON OLT Shows the configuration of ONU rx power update 11 1 13 Configurations for RF Return Packet Forwarding In case the ONUs are connected with the set top boxes supporting Ethernet return path...

Page 478: ...th the incoming traffic from ONU and transmits the downstream traffic to GEM port with the MAC table information However V5824G can control this downstream traffic with MAC address and VLAN ID by user...

Page 479: ...queue and CoS value To configure the downstream traffic control by QoS mapping use the following command Command Mode Description olt ds qos mapping mode mac vid GPON OLT Configures the downstream Qo...

Page 480: ...OLT Shows the queue count and CoS Queue mapping table status show olt ds qos mapping mode Shows the downstream QoS mapping mode To configure the traffic control by selecting the method of upstream fl...

Page 481: ...ping table use the following command Command Mode Description olt interwork igmp snooping enable disable GPON Enables disables the interworking with IGMP snooping table To add a static MAC address int...

Page 482: ...ED_VALUE dynamic DYNAMIC_VALUE no olt threshold tcont dynamic fixed Deletes the configured threshold of T CONT count To display the configuration of GEM port T CONT threshold use the following command...

Page 483: ...is off and the current percent changes to 100 after a period 10 86400 deactive ONU monitoring period default 10 seconds no olt deactive monitor alarm raise Deletes the configured value of deactive ONU...

Page 484: ...0 olt ber ds interval 1000 10000 olt ber sd threshold 4 9 olt ber sf threshold 3 8 olt ber sd threshold 4 9 olt ber ds interval 1000 10000 olt ber us interval 1000 10000 olt ber sf threshold 3 8 Sets...

Page 485: ...show olt status 2 OLT_ID Status Protect Distance FEC mode DS US 2 Active 20 Km enable disable SWITCH gpon The Received Signal Strength Indication RSSI is a measurement of the power present in a receiv...

Page 486: ...eam Upstream Pon counter Pon valid eth packets 1829234499 N A Pon CPU packets 136329 N A Pon ploams 108609 19201764 Pon invalid packets N A 2 perfomance monitoring counter Rx valid packets 1830563926...

Page 487: ...EM PORT GEM port ID To display a MAC address of the ONUs ONTs connected to a current OLT use the following command Command Mode Description show olt mac ONU ID GPON OLT Shows the MAC addresses current...

Page 488: ...with MAC address or se rial number 11 2 1 1 Activating deactivating ONU To activate deactivate the ONU ONT use the following command Command Mode Description onu activate ONU ID GPON OLT Activates the...

Page 489: ...l number show discover serial number interval Shows the configured interval for requesting ONU s serial number To remove the serial number of ONU use the following command Command Mode Description onu...

Page 490: ...e in the manual mode Upon registering an ONU automatically the registration mode of the ONU will be changed to the manual mode Note that when you use this command the registration mode of the ONUs tha...

Page 491: ...mmand Mode Description show onu description ONU ID GPON OLT Shows the ONU s description 11 2 1 7 ONU Connectivity via Ping Test To verify the network connectivity with the ONU use the following comman...

Page 492: ...I PORTs enable disable GPON OLT Enables disables the administration of UNI port on the specified ONU ONU ID ONU ID 1 to 128 or ONU serial number eth pots ces virtual eth Video Ethernet POTS CES virtua...

Page 493: ...3 loopback of both PON side and CES UNI side To see the status of the ONU ONT UNI use show onu uni status command See 11 2 20 Displaying ONU Information 11 2 6 ONU Laser Down If a certain ONU s laser...

Page 494: ...g feature auto onu block When an ONU fault occurs the system will disable the ONU s laser permanently 60 65535 expire time second olt srcmac monitor disable Disables the source MAC address monitoring...

Page 495: ...ort number forward forwards a specific MAC address of UNI side port filter blocks a specific MAC address of UNI side port MACADDR MAC address no onu mac filter ONU ID uni eth ip host ces virtual eth P...

Page 496: ...ch To configure the authentication user name and password for VoIP user to have access to softswitch use the following command Command Mode Description onu voip sip ONU ID auth pots POTS NUM NAME PASS...

Page 497: ...see 11 4 6 VoIP Service Configuration POTS UNI 11 2 10 2 ONT Termination ID Configuration The attribute specifies the base string for the MGC H 248 physical termination ID s for the ONT This string i...

Page 498: ...ID eth UNI PORT Deletes the description of the specified ONU UNI Ethernet port To display the status of ONU UNI Ethernet port use the following command Command Mode Description show onu uni status eth...

Page 499: ...ult The ONU periodically sends the loop detecting packet to all the ports with a certain interval and then if the loop detecting packet is received the switch performs a pre defined behavior such as b...

Page 500: ...how long the ONU has been inactive status displayed in the Inactive Time field using show onu detail info command If the ONU s activation status is active the inactive time value remains unchanged at...

Page 501: ...above command ONU ONT should support DDMI feature and provide diagnostic information about the module s present operating conditions to OLT 11 2 17 ONU System Account To add system account information...

Page 502: ...ion using ONU model name firmware version and serial number Sends RADIUS message If the RADIUS authentication is required when the OLT and ONU are connected each other the OLT sends Access Request mes...

Page 503: ...on i Dasan Gpon Onu Uni Eth Port Medium j Dasan Gpon Onu Uni Eth Auto Detect k Dasan Gpon Onu Mac Filter CoA Request server OLT a User Name b User Password c Dasan Gpon Olt Id d Dasan Gpon Onu Id e Da...

Page 504: ...etes the configured RADIUS server address To display the information of RADIUS server for ONU authentication use the following command Command Mode Description show onu auth radius server GPON Shows t...

Page 505: ...p onu download Enable Downloads ONU firmware via FTP or TFTP The following is an example of downloading ONU ONT firmware in the system SWITCH copy ftp onu download To exit press Ctrl D IP address or n...

Page 506: ...T ID GPON port number ONU ID ONU ID 1 128 or ONU serial number show onu firmware version ONU IDs GPON OLT Shows the status of ONU firmware ONU ID ONU ID 1 128 or ONU serial number SWITCH config gpon o...

Page 507: ...iption onu firmware active change ONU ID GPON OLT Changes the active OS of ONU with ONU reboot ONU ID ONU ID 1 to 128 or ONU serial number 11 2 19 2 Manual Upgrade 2 1 Downloading Firmware to OLT To d...

Page 508: ...you execute the onu upgrade command the firmware stored in OLT is downloaded to the standby not running OS of the specified ONU ONT and the standby OS is specified as default one For example if OS1 i...

Page 509: ...3 Auto Upgrade For efficient system maintenance the V5824G provides the auto upgrade functionality for ONU firmware in the operational environment You can simply upgrade the ONU firmware without an e...

Page 510: ...ONU firmware name A B C D FTP TFTP server IP address USER FTP server user name PASSWD FTP server password no onu auto upgrade firmware NAME Deletes the auto upgrade configured for the specified ONU NA...

Page 511: ...rade is performed only when the ONU s existing firmware version is same as the specified target version To display the target version configuration for ONU auto upgrade use the following command Comma...

Page 512: ...immediately GPON Specifies the time that the upgrade completed ONU restarts NAME ONU model name 0 23 restart time unit o clock onu auto upgrade reboot time NAME disable Deletes the specified time 5 En...

Page 513: ...n Match Invalid Version Match 3 enable Upgrade ONU Progress enable enable SWITCH config gpon olt 3 show onu auto upgrade model list OLT ONU Model Upgrade Status Fail CNT Active 3 1 H645 0 22 0 8 26 SW...

Page 514: ...wing command Command Mode Description show onu info OLT IDs Enable Global GPON Shows the information of ONU ONT per OLT ID OLT IDs GPON port number show onu detail info OLT ID GPON Shows the ONU ONT i...

Page 515: ...NU ID ONU ID 1 to 128 or ONU serial number show onu block status ONU ID GPON OLT To display a reason of ONU deactivation use the following command Command Mode Description show onu deactive reason GPO...

Page 516: ...ows the configured description on ONU UNI port To display the configured IP host service ID on ONU use the following command Command Mode Description show onu ip host ONU ID GPON OLT Shows the configu...

Page 517: ...e version 2 D Default OS R Running OS OLT ONU Upgrade Status OS1 OS2 2 2 Commit Complete D NewVersion R OldVersion OLT config gpon olt 2 2 onu reset 2 Download ONT OS file to OLT Upgrade ONT with the...

Page 518: ...snooping enable dba profile BE create mode sr sla fixed 128 sla maximum 1031616 apply dba profile VOIP create mode sr sla fixed 128 sla maximum 4096 apply multicast profile V501 create igmp tag contr...

Page 519: ...iles BE for Internet service VOIP for VoIP service And then configure the corresponding settings Create a multicast profile V501 And then configure the corresponding settings Create extended VLAN tagg...

Page 520: ...extended vlan tagging operation V501 uni eth 3 multicast profile V501 extended vlan tagging operation V501 uni eth 4 multicast profile V501 extended vlan tagging operation V501 bridge 3 ani mapper 3 l...

Page 521: ...eated extended VLAN tagging operation profile extended vlan tagging operation V903 to this configuration ip host config 1 Configure ip host config 2 The ip host config 2 is a host only for non omci co...

Page 522: ...n ip host config of traffic profile first The ip host 1 is a host only for VoIP and the ip host 2 is a host only for non omci configured interfaces If you want to have the VoIP host assigned the same...

Page 523: ...ne initial Used Codec Auto select Session Type Idle 1st Protocol Period Dest Addr 20 0 0 0 0 2nd Protocol Period Dest Addr 20 0 0 0 0 Check whether IP host configuration is applied normally Host 1 for...

Page 524: ...cation of a profile the modified configurations will be automatically applied to ONUs which are managed by the profile This will prevent unnecessary resources to configure every single ONU ONT allowin...

Page 525: ...or it is below the threshold VALUE 127 to 0 dBm no rx power threshold low high Deletes the configured RX optical power threshold 11 3 2 2 Rogue ONU The first method is that after detecting the existen...

Page 526: ...OLT s response 100 50000 waiting time unit millisecond rogue onu waiting time disable Deletes the specified waiting time for OLT s response 11 3 2 3 Card Type Configuration You need to select a card t...

Page 527: ...t 600 unlimited do not change the state no loop detect block Disables the blocking option To set the interval of sending the loop detecting packet use the following command Command Mode Description lo...

Page 528: ...nt To configure the TR 069 management use the following command Command Mode Description tr 069 management uri URI ONU Profile Configures TR 069 management URI address URI URI address tr 069 managemen...

Page 529: ...Us The ONUs monitors the change of values and sends TX power high low alarm to OLT when the TX power exceeds the threshold or it is below the threshold VALUE TX power threshold value 127 to 0 dBm ani...

Page 530: ...e 11 4 Traffic Profile To add delete the user defined PM profile to a specified ONU profile use the following command Command Mode Description pm profile NAME ONU Profile Adds the existing PM profile...

Page 531: ...agged frame from OLT to UNI remove removes a tag from the incoming tagged packet and forwards it to UNI no uni eth UNI PORT vlan operation us oper Deletes the configured policy of VLAN tagging operati...

Page 532: ...UNI port on the specified ONU To see the admin status of the ONU ONT UNI use show onu uni status command See 11 2 20 Displaying ONU Information 11 3 3 6 Mapping between T CONT ID and DBA profile To sp...

Page 533: ...s Releases an ONU profile from connected ONUs ONU ID ONU ID 1 to 128 or ONU serial number 11 3 6 Checking ONU Profile Configuration To display the status of ONU profile configuration use the following...

Page 534: ...me To display the information of current profile use the following command Command Mode Description show current profile Current Profile Shows the information currently configured for the profile 11 4...

Page 535: ...le NAME traffic profile name After opening Traffic Profile Configuration mode the prompt changes from SWITCH gpon to SWITCH config traffic pf NAME To delete a created traffic profile use the following...

Page 536: ...rame forwarding cos mapping cos RANGE gemport GEM PORT VALUE Specifies the range of CoS values for mapping with GEM port RANGE CoS range GEM PORT VALUE corresponds to the gemport count If a mapper is...

Page 537: ...fic management The system creates both ANI side and UNI side MAC bridge port config data ME To create a bridge ID and open a MAC Bridge Service Profile Configuration mode use the following command Com...

Page 538: ...mac bridge enable Traffic Bridge Connects the multicast GEM port network CTP ME to a MAC bridge service profile ME default multicast link mac bridge disable Disables the connections between the multic...

Page 539: ...filtering On a circuit pack in which all groups of addresses are pre assigned and stored locally the ONU creates or deletes an instance of this managed entity automatically upon creation or deletion...

Page 540: ...NI port of ONT from the MAC bridge service profile VLAN Tagging Filtering To enable disable VLAN tagging filtering function on the UNI side port use the following command Command Mode Description vlan...

Page 541: ...stream traffic bandwidth for UNI port SIR_BANDWIDTH 0 to 2147483584 in steps of 64Kbps PIR_BANDWIDTH 0 to 2147483584 no rate limit upstream downstream Deletes the configured rate limit To apply the co...

Page 542: ...n UNI port Mapping between Multicast Profile and UNI port To apply the configured multicast profile to a specified UNI side port use the following command Command Mode Description multicast profile PR...

Page 543: ...st ip6 mcast ip4 bcast rarp ipx net beui apple talk bridge managed arp pppoe Traffic Bridge UNI Enables the MAC filtering function according to the protocol type for UNI side bridge port no mac filter...

Page 544: ...command Command Mode Description link tdm service SERVICE_ID Traffic Bridge Links a TDM service to MAC bridge service profile SERVICE_ID TDM service ID no link tdm service SERVICE_ID Disconnects the l...

Page 545: ...EM frames are transmitted between the OLT and the ONUs ONTs A GEM frame is identified by a GEM port ID In the upstream direction the T CONTs carry the data stream The Traffic profile is a collection o...

Page 546: ...PORTS Deletes the configured mapping between T CONT and the list of GEM ports 11 4 4 2 Configuration of Weight on WRR Scheduling To specify the weight value to queue number on WRR scheduling mode use...

Page 547: ...r the configuration mode for the host use the following command Command Mode Description ip host config SERVICE ID Traffic Profile Creates the IP host service ID and enters the configuration mode for...

Page 548: ...he incoming tagged frame from OLT to UNI remove removes a tag from the incoming tagged packet and forwards it to UNI no vlan operation Deletes the configured policy for VLAN tagging operation 11 4 5 4...

Page 549: ...Service Link To link the VoIP service to the host use the following command Command Mode Description link voip service SERVICE_ID Traffic IP host Links the VoIP service to the host SERVICE_ID VoIP se...

Page 550: ...CH config traffic pf NAME to SWITCH config traffic pf NAME voip ID 11 4 6 1 VoIP Service Management Mode The V5824G provides VoIP management function for the subtended ONUs There are two VoIP manageme...

Page 551: ...of how to create and configure the VoIP profile see 11 7 VoIP Profile 11 4 6 3 IP path Managed VoIP If you configure the VoIP service management mode as IP path managed by using voip profile ip path...

Page 552: ...future release POTS_NUMBER POTS port number no uni pots isdn POTS_NUMBER Deletes the configuration of UNI If you specify UNI as the POTS by using uni pots command you need to perform the configuration...

Page 553: ...35 Traffic VoIP UNI Determines the time during which POTS loop voltage is held up when the ONT is not ranged on the PON After the specified time elapses the ONT drops loop voltage and may thereby caus...

Page 554: ...ecify the expected circuit pack type use the following command Command Mode Description expected type auto ds1 e1 c ds1 e1 VALUE Traffic CES Specifies the expected circuit pack type auto Autosense ds1...

Page 555: ...e length of coaxial cable from a DS3 physical UNI to the DSX 3 cross connect point ds3 power DS3 power feed 225 450 line length unit ft 225 0 to 225 450 226 to 450 no line length Deletes the configure...

Page 556: ...vc ID pw ip In this mode you can perform the following configuration Applying TDM Pseudowire Profile In order to configure the TDM service you need to connect TDM pseudowire profile To connect TDM pse...

Page 557: ...udowire profile name To display the list information of source MAC addresses for TDM pseudowire of ONU use the following command Command Mode Description show onu tdm pw source mac ONU ID GPON OLT Sho...

Page 558: ...Path Service Configuration mode the prompt changes from SWITCH config traffic pf NAME to SWITCH config traffic pf NAME vrp ID To configure the video return path service related parameters use the foll...

Page 559: ...PORT_ID Traffic Profile Creates a GEM port network CTP profile associated with GEM port ID GEM_PORT_ID 1 to 32 GEM port number no gemport nctp GEM_PORT_ID Removes the created GEM port Network CTP from...

Page 560: ...NAME ONU Profile Adds the configured traffic profile to ONU profile NAME traffic profile name no traffic profile Removes the traffic profile from ONU profile You should modify a traffic profile you s...

Page 561: ...ith the specified Traffic profile NAME Traffic profile name To display the VLAN filter configured on the specific Traffic profile use the following command Command Mode Description show traffic profil...

Page 562: ...SR DBA which is based on OLT monitoring per T CONT utilization To set the bandwidth allocation and ONU status reporting mode of DBA profile use the following command Command Mode Description mode fixe...

Page 563: ...cription apply DBA Profile Saves a DBA profile configuration Whenever you modify a DBA profile you should apply the changes again using the apply command If you do not it will not be saved with new ch...

Page 564: ...ly to their respective incoming frame types In other words a single tag rule should not apply to a double tagged frame even though the single tag rule might match the outer tag of the double tagged fr...

Page 565: ...ceived Frame Layout 11 6 1 1 Configuration for Single tagged Frame Treatment To create the mapping table to configure the single tagged frame treatment use the following command Command Mode Descripti...

Page 566: ...he treatment of filtered single tagged frames use the following command Command Mode Description treat remove single double discard frame Single Tagged Frame Configures the treatment of filtered singl...

Page 567: ...ollowing command Command Mode Description filter inner vid any 0 4094 cos any 0 7 tpid any 0x8100 input dei 0 1 Double Tagged Frame Configures the received double tagged frames to be filtered by the p...

Page 568: ...ter vid 0 4094 copy inner copy outer cos 0 7 copy inner copy outer dscp to pbit tpid output dei 0 1 copy inner copy outer copy inner copy outer 0x8100 Configures the outer tag treatment for filtered d...

Page 569: ...CoS mapping table as specifying the queue assuming that the untagged frames can use the DSCP to CoS mapping table Unless you configure the table to be used the untagged frames use default queue inform...

Page 570: ...ields in the ANI side tags then the inverse is defined to set the corresponding fields on the ANI side with their lowest value To enable disable the extended VLAN tagging operation for the downstream...

Page 571: ...an ONU profile should be included by the configured VoIP profile You can easily manage the VoIP network parameters of ONUs using the VoIP profile The ONT must be applied by VoIP profile defined in V5...

Page 572: ...ut of band DTMF carriage use the following command Command Mode Description oob dtmf enable disable VoIP Profile Specifies out of band DTMF carriage When enabled DTMF signals are carried out of band v...

Page 573: ...pstn protocol variant E164_COUNTRY_CODE VoIP Profile Controls which variant of POTS signalling is used on the associated UNIs Its value is equal to the E 164 country code E164_COUNTRY_CODE 0 65535 no...

Page 574: ...e disable VoIP Profile Enables disables handling of DTMF via RTP DTMF events per IETF RFC4733 and IETF RFC 4734 default disable This configuration is ignored unless out of band DTMF in the VoIP media...

Page 575: ...n 11 7 1 7 Hook Flash Time Configuration To configure hook flash time use the following command Command Mode Description hook flash time max min VALUE VoIP Profile Defines the maximum or minimum durat...

Page 576: ...se the following command Command Mode Description show onu voip voip ext oper ONU ID GPON OLT Shows the VoIP extended operation parameters ONU ID 1 128 or ONU serial number 11 7 2 OMCI based SIP Confi...

Page 577: ...register server ADDRESS VoIP SIP Specifies the register server IP address or resolved name ADDRESS register server address no register server Deletes the configured address of register server To ident...

Page 578: ...Sets no transmit control value To configure the URI format in outgoing SIP messages use the following command Command Mode Description sip uri format tel uri sip uri VoIP SIP Specifies the format of t...

Page 579: ...in time period To specify a session timeout to maintain the connection of SIP session use the following command Command Mode Description session timer timeout 1 65535 VoIP SIP Defines the time for wai...

Page 580: ...re the call waiting features use the following command Command Mode Description call waiting call wait cid announce VoIP SIP Enables each feature for call waiting default disabled call wait call waiti...

Page 581: ...ed direct connect delay option Enables the dial tone feature delay option direct connect disable Disables the direct connect feature To specify a direct connect target use the following command Comman...

Page 582: ...etes the specified access code for each feature no feature call hold no feature call park no feature caller id act no feature caller id deact no feature do not disturb act no feature do not disturb de...

Page 583: ...e the following command Command Mode Description dial plan crit timeout TIMEOUT VoIP SIP Defines the critical dial timeout for digit map processing TIMEOUT critical dial timeout unit ms default 4000 T...

Page 584: ...erate with the public switched telephone network PSTN If the ONUs are fully provisioned and managed from the V5824G using OMCI you can configure the MGC related settings of these ONUs The MGC entity d...

Page 585: ...y attempts 0 65534 VoIP MGC Configures the maximum number of times that a message is retransmitted to the MGC 0 65534 maximum number of times no mgc max retry attempts Deletes the configured maximum n...

Page 586: ...de Description show voip profile NAME Global GPON GPON OLT VoIP profile Shows the information of VoIP profiles NAME VoIP profile name To display VoIP service and VoIP line status information use the f...

Page 587: ...pseudowire related configuration you should create enter the TDM pseudowire profile For the creation and configuration of the profile see the following sections 11 8 1 Creating TDM Pseudowire Profile...

Page 588: ...ng To configure the signalling use the following command Command Mode Description signalling no signalling cas carry packet cas carry channel TDM PW Profile Specifies the signalling attribute no signa...

Page 589: ...2 2 ms that corresponds to 16 frames with E1 CAS 1 1 ms that corresponds to 8 frames no signalling N 4 no payload encapsulation delay Deletes the configured payload encapsulation delay time 11 8 6 Ti...

Page 590: ...l Timestamps are based on the ONT s reference clock which is understood to be stratum traceable along with the reference clock at the far end 11 8 7 3 RTP Payload Type To configure the RTP payload typ...

Page 591: ...on source in the PSN to TDM direction 11 8 8 Pseudowire Maintenance Configuration If you need the configuration for pseudowire service exception handling you should connect a pseudowire maintenance pr...

Page 592: ...pw profile NAME Global GPON GPON OLT TDM PW Profile Shows the information of TDM pseudowire profiles NAME TDM pseudowire profile name To display the list information of source MAC addresses for TDM p...

Page 593: ...SWITCH config pw maintenance profile NAME To delete an existing pseudowire maintenance profile use the following command Command Mode Description no pw maintenance profile NAME all GPON Deletes the p...

Page 594: ...le to play out vendor specific ONT default vendor specific recommended AIS for unstructured service all 1s for structured service play out ais Play out AIS according to the service definition for exam...

Page 595: ...underrun declaration policy PW Maintenance Profile Deletes the configured anomaly rate that causes the corresponding alarm to be declared or cleared no loss packet declaration policy no malformed pack...

Page 596: ...d channel idle signalling and idle channel payload to all DS0s comprising the service 11 9 7 SES Threshold To configure the SES threshold use the following command Command Mode Description ses thresho...

Page 597: ...de Description show pw maintenance profile NAME Global GPON GPON OLT PW Maintenance Profile Shows the information of pseudowire maintenance profiles NAME pseudowire maintenance profile name To display...

Page 598: ...and archiving of past intervals is performed by the OLT 11 10 1 Creating PM Profile To create a PM profile use the following command Command Mode Description pm profile NAME create GPON Creates a PM...

Page 599: ...port as Ethernet type 3 use the following command Command Mode Description pm uni eth3 PM Profile Enables the PM function to collect the counters of the configured UNI port as Ethernet type 3 no pm u...

Page 600: ...ription show current profile Current Profile Shows the information currently configured for the profile 11 10 5 Displaying ONU Traffic Statistics To display the traffic statistics of an ONU applied by...

Page 601: ...on previous 15min hour day total us ds upstream downstream PORT port number NUMBER pseudowire number To clear the collected traffic statistics use the following command Command Mode Description clear...

Page 602: ...ulticast connection in ONTs 11 11 1 Creating Multicast Profile To create a multicast profile use the following command Command Mode Description multicast profile NAME create GPON Creates a multicast p...

Page 603: ...lt 2 igmp access list vid untagged VLAN dst ip start A B C D end A B C D bw VALUE src ip A B C D gem PORT cos 0 7 Configures the dynamic static access control list table It discards the IGMP join mess...

Page 604: ...ving Multicast Profile After configuring a multicast profile you need to save the profile with the following command Command Mode Description apply Multicast Profile Saves a multicast profile configur...

Page 605: ...NU ONT to handle the multicast traffic using the dynamic static IGMP access list commands For each dedicated multicast access list it can permit discard the IGMP message and multicast traffic of the s...

Page 606: ...VALUE src ip A B C D gem PORT cos 0 7 Multicast ACL Configures the dynamic static access control list table It discards the IGMP join message from ONTs based on the access list VLAN 1 to 4095 VLAN ID...

Page 607: ...sed on the access list ONU_ID ONU ID or ONU serial number NAME multicast access list name multicast profile applies the multicast ACL to the specified ONUs on the Multicast profile NAME multicast prof...

Page 608: ...NAME To delete the created Rate limit profile use the following command Command Mode Description no rate limit profile NAME all GPON Deletes the created Rate limit profile NAME Rate limit profile name...

Page 609: ...mit profile NAME Traffic Mapper Applies the configured Rate limit profile to specified GEM port NAME Rate limit profile name no gemport RANGE rate limit profile Removes the Rate limit profile from the...

Page 610: ...limit Profile To display the information of Rate limit profile use the following command Command Mode Description show rate limit profile NAME Global GPON GPON OLT Rate limit profile Shows the informa...

Page 611: ...o apply an ONU profile to specified ONUs ONTs with a given model name use the following command Command Mode Description olt service profile model name NAME PROFILE GPON Applies an ONU profile to spec...

Page 612: ...ON debugging To enable debugging of OMCI message between OLT and ONT use the following command Command Mode Description debug gpon omci console syslog GPON Enables GPON OMCI debugging console log outp...

Page 613: ...e pm_ces exit SWITCH gpon dba profile sr_100m create SWITCH config dba profile sr_100m mode sr SWITCH config dba profile sr_100m sla fixed 128 SWITCH config dba profile sr_100m sla maximum 102400 SWIT...

Page 614: ...g 60a bridge 1 uni eth 4 SWITCH config traffic pf g 60a bridge 1 uni eth 4 exit SWITCH config traffic pf g 60a bridge 1 exit SWITCH config traffic pf g 60a bridge 2 SWITCH config traffic pf g 60a brid...

Page 615: ...ip exit SWITCH config traffic pf g 60a ces 1 exit SWITCH config traffic pf g 60a apply SWITCH config traffic pf g 60a exit SWITCH gpon onu profile g 60a create SWITCH config onu profile g 60a traffic...

Page 616: ...0 ANI port PM counter 15Min Prev 15Min Total Discarded Frames 0 0 0 SWITCH config gpon olt 2 show onu statistics current 1 OLT 2 ONU 1 Enabled PM gemport aniport Elapsed time after clear 0d 1h 33m 4s...

Page 617: ...Command Mode Description copy ftp tftp os download os1 os2 Enable Upgrades the system software of the switch via FTP or TFTP os1 os2 the area where the system software is stored To upgrade the system...

Page 618: ...pgrade please keep in mind the following restrictions A terminal must be connected to the system via the console interface To open the boot mode you should press S key when the boot logo is shown up T...

Page 619: ...t Configures a default gateway gateway Shows a currently configured default gateway To display a configured IP address subnet mask and gateway use the following command Command Mode Description show B...

Page 620: ...are in the boot mode TFTP server must be set up first Using the load command the system will download the new system software from the server The following is an example of upgrading the system softwa...

Page 621: ...perform the following step by step instruction Step 1 Connect to the V5824G with your FTP client software To login the system you can use the system user ID and password Note that you must use the com...

Page 622: ...on 5 1 2600 C Copyright 1985 2001 Microsoft Corp C ftp 10 27 41 91 Connected to 10 27 41 91 220 FTP Server 1 2 4 FTPD User 10 27 41 91 none admin 331 Password required for admin Password 230 User root...

Page 623: ...above command You can recognize ONU firmware by the show onu firmware list command Step 2 Verify the downloaded ONU firmware in the system using the following command Command Mode Description show on...

Page 624: ...are NAME FW_NAME ftp tftp A B C D USER PASSWD Enable Downloads ONU ONT firmware via FTP or TFTP NAME ONU model name FW_NAME firmware name A B C D FTP TFTP server IP address USER FTP TFTP server user n...

Page 625: ...p 5 Reflect the upgraded ONU firmware by restarting ONUs using the following command Command Mode Description onu auto upgrade reboot time 0 23 disable GPON Specifies deletes the time that upgrade com...

Page 626: ...ice CSNP Complete Sequence Number PDU DA Destination Address DBA Dynamic Bandwidth Allocation DHCP Dynamic Host Configuration Protocol DIS Designated IS DR Designated Router DSCP Differentiated Servic...

Page 627: ...nt Protocol Version 3 IGP Interior Gateway Protocol IP Internet Protocol ISP Internet Service Provider ITU International Telecommunication Union ITU T International Telecommunication Union Telecommuni...

Page 628: ...ocol Independent Multicast Sparse Mode PIM SSM Protocol Independent Multicast Source Specific Multicast PON Passive Optical Network PSNP Partial Sequence Number PDU PVID Port VLAN ID QoS Quality of Se...

Page 629: ...ree Protocol SW Software TCN Topology Change Notification TCP Transmission Control Protocol TIB Tree Information Base TFTP Trivial FTP ToS Type of Service TTL Time To Live UDP User Datagram Protocol U...

Reviews:

No comments