Huawei Quidway S9300 Configuration Manual - Network Management Download Page 60 | Manualshive

Page: 60 / 630

Huawei Quidway S9300 Configuration Manual - Network Management Download Page 60

1.11 Configuring User-based Access Control in SNMPv3

After user-based access control in SNMPv3 is configured, when the NM Station accesses the
device through SNMPv3, only the specified NM Station users can access the device.

1.11.1 Establishing the Configuration Task

Before configuring user-based access control in SNMPv3, familiarize yourself with the
applicable environment, complete the pre-configuration tasks, and obtain the required data. This
can help you complete the configuration task quickly and accurately.

1.11.2 Configuring the SNMP Version

After the SNMP version is disabled on the device, to enable the NMS to access the device through
SNMPv3, you need to configure SNMPv3 on the device.

1.11.3 Configuring an SNMP User Group

This part describes how to create an SNMP access user group.

1.11.4 Configuring User Information

This part describes how to create SNMP access users (access NMSs) and add these users to the
user group.

1.11.5 Configuring a Basic ACL

This part describes how to configure ACLs to enable a specific NMS to access the device.

1.11.6 Applying the ACL

This part describes how to use ACLs to filter the source address of the NM Station user.

1.11.7 Checking the Configuration

After user-based access control in SNMPv3 is configured, you can view configurations of SNMP
and ACLs.

1.11.1 Establishing the Configuration Task

Before configuring user-based access control in SNMPv3, familiarize yourself with the
applicable environment, complete the pre-configuration tasks, and obtain the required data. This
can help you complete the configuration task quickly and accurately.

Applicable Environment

To configure the specified user in the group to manage the switch (SNMP agent), configure
access control lists on the switch.

Pre-configuration Tasks

Before configuring user-based access control, complete the following tasks:

l

Assigning an IP address to the switch

l

Configuring the routing protocol to make the switch and the NM Station accessible

Data Preparation

To configure user-based access control, you need the following data.

1 SNMP Configuration

Quidway S9300 Terabit Routing Switch

Configuration Guide - Network Management

1-32

Huawei Proprietary and Confidential

Copyright © Huawei Technologies Co., Ltd.

Issue 03 (2010-09-20)

«
...
58
59
60
61
62
...
»

Summary of Contents for Quidway S9300

Page 1: ...Quidway S9300 Terabit Routing Switch V100R003C00 Configuration Guide Network Management Issue 03 Date 2010 09 20 HUAWEI TECHNOLOGIES CO LTD ...

Page 2: ......

Page 3: ...be within the purchase scope or the usage scope Unless otherwise specified in the contract all statements information and recommendations in this document are provided AS IS without warranties guarantees or representations of any kind either express or implied The information in this document is subject to change without notice Every effort has been made in the preparation of this document to ensu...

Page 4: ......

Page 5: ...DANGER Indicates a hazard with a high level of risk which if not avoided will result in death or serious injury WARNING Indicates a hazard with a medium or low level of risk which if not avoided could result in minor or moderate injury CAUTION Indicates a potentially hazardous situation which if not avoided could result in equipment damage data loss performance degradation or unexpected results TI...

Page 6: ...History Updates between document issues are cumulative Therefore the latest document issue contains all updates made in previous issues Changes in Issue 03 2010 09 20 Based on issue 02 2010 07 15 the document is updated as follows The following information is modified l 1 23 7 Example for Configuring Alarm Messages to Be Sent to the Huawei NMS l 4 3 2 Optional Enabling the LLDP Trap Function l 4 5...

Page 7: ...TLV in the LLDPUD l 4 4 2 Monitoring the Operating Status of LLDP l 8 5 9 Example for Configuring the Configuration Synchronization Function for an HGMP Cluster Changes in Issue 01 2010 04 30 Initial commercial release Quidway S9300 Terabit Routing Switch Configuration Guide Network Management About This Document Issue 03 2010 09 20 Huawei Proprietary and Confidential Copyright Huawei Technologies...

Page 8: ......

Page 9: ...rol in SNMPv1 1 11 1 5 1 Establishing the Configuration Task 1 11 1 5 2 Configuring the SNMP Version 1 12 1 5 3 Configuring a Basic ACL 1 12 1 5 4 Applying the ACL 1 13 1 5 5 Checking the Configuration 1 13 1 6 Configuring Community Name based Access Control in SNMPv2c 1 14 1 6 1 Establishing the Configuration Task 1 15 1 6 2 Configuring the SNMP Version 1 15 1 6 3 Configuring a Basic ACL 1 16 1 6...

Page 10: ...based Access Control in SNMPv3 1 32 1 11 1 Establishing the Configuration Task 1 32 1 11 2 Configuring the SNMP Version 1 33 1 11 3 Configuring an SNMP User Group 1 33 1 11 4 Configuring User Information 1 34 1 11 5 Configuring a Basic ACL 1 34 1 11 6 Applying the ACL 1 34 1 11 7 Checking the Configuration 1 35 1 12 Configuring Authentication and Encryption Functions in SNMPv3 1 36 1 12 1 Establis...

Page 11: ... 16 9 Specifying the Upload Mode of the Statistics File 1 54 1 16 10 Enabling the Statistics File 1 55 1 16 11 Checking the Configuration 1 55 1 17 Configuring the Trap Function 1 56 1 17 1 Establishing the Configuration Task 1 56 1 17 2 Optional Enabling the switch to Send Specified Alarms to the NM Station 1 57 1 17 3 Optional Enabling the switch to Send an Alarm Message of a Specified Feature t...

Page 12: ...onfiguring Different NMSs to Access the Switch 1 78 1 23 4 Example for Configuring Different NMSs to Access the Switch Inform Mode 1 82 1 23 5 Example for Configuring Batch Statistics Collection 1 86 1 23 6 Example for Enabling the Extended Error Code Function on the SNMP Agent 1 88 1 23 7 Example for Configuring Alarm Messages to Be Sent to the Huawei NMS 1 89 2 RMON and RMON2 Configuration 2 1 2...

Page 13: ... 3 18 3 4 6 Configuring NTP Authentication in Broadcast Mode 3 19 3 4 7 Configuring NTP Authentication in Multicast Mode 3 19 3 4 8 Checking the Configuration 3 20 3 5 Maintaining NTP 3 20 3 6 Configuration Examples 3 21 3 6 1 Example for Configuring NTP Authentication in Unicast Client Server Mode 3 21 3 6 2 Example for Configuring the Common NTP Peer Mode 3 26 3 6 3 Example for Configuring NTP A...

Page 14: ...ugh the Tracert Operation 5 5 5 4 Debugging Ping and Tracert 5 6 5 5 Configuration Examples 5 6 5 5 1 Example for Performing Ping and Tracert Operations 5 6 6 NQA Configuration 6 1 6 1 Introduction to NQA 6 5 6 2 Comparisons Between NQA and Ping 6 5 6 3 NQA Server and NQA Clients 6 6 6 4 NQA Supported by the S9300 6 6 6 5 Configuring the ICMP Test 6 8 6 5 1 Establishing the Configuration Task 6 8 ...

Page 15: ...14 Configuring the Jitter Test 6 37 6 14 1 Establishing the Configuration Task 6 38 6 14 2 Configuring the Jitter Server 6 39 6 14 3 Configuring the Jitter Client 6 39 6 14 4 Checking the Configuration 6 41 6 15 Configuring the MAC Ping Test 6 42 6 15 1 Establishing the Configuration Task 6 42 6 15 2 Setting Parameters for the MAC Ping Test 6 43 6 15 3 Checking the Configuration 6 44 6 16 Configur...

Page 16: ...race Test 6 74 6 21 5 Starting the NQA MTrace Test 6 75 6 21 6 Checking the Configuration 6 76 6 22 Configuring the NQA MTrace Test to Check the Multicast Path from the Multicast Source to the Querier 6 76 6 22 1 Establishing the Configuration Task 6 77 6 22 2 Creating an NQA MTrace Test 6 78 6 22 3 Configuring the NQA MTrace Test 6 78 6 22 4 Optional Adjusting the Performance of the NQA MTrace Te...

Page 17: ...05 6 28 2 Configuring Parameters for the PWE3 Trace Test on a Multi Hop PW 6 106 6 28 3 Checking the Configuration 6 107 6 29 Configuring an NQA Test Group 6 109 6 29 1 Establishing the Configuration Task 6 109 6 29 2 Configuring an NQA Test Group 6 110 6 29 3 Checking the Configuration 6 111 6 30 Configuring Universal NQA Test Parameters 6 112 6 30 1 Establishing the Configuration Task 6 112 6 30...

Page 18: ...tics 6 138 6 36 3 Debugging NQA 6 139 6 37 Configuration Examples 6 139 6 37 1 Example for Configuring the ICMP Test 6 141 6 37 2 Example for Configuring the FTP Download Test 6 143 6 37 3 Example for Configuring the FTP Upload Test 6 145 6 37 4 Example for Configuring the HTTP Test 6 147 6 37 5 Example for Configuring the DNS Test 6 149 6 37 6 Example for Configuring the Traceroute Test 6 151 6 3...

Page 19: ...m Function on an Interface 7 6 7 3 3 Optional Configuring the Version of Exported Packets 7 6 7 3 4 Setting the Destination Address of Statistics 7 7 7 3 5 Optional Aging the TCP Traffic According to Its FIN Flag 7 7 7 3 6 Optional Configuring the Inactive Aging Time of the Original Traffic 7 8 7 3 7 Checking the Configuration 7 8 7 4 Collecting IPv6 Traffic Statistics 7 8 7 4 1 Establishing the C...

Page 20: ... 8 4 8 2 Configuring Basic HGMP Functions 8 8 8 2 1 Establishing the Configuration Task 8 8 8 2 2 Configuring NDP 8 9 8 2 3 Configuring NTDP 8 10 8 2 4 Creating a Cluster 8 12 8 2 5 Adding a Member Switch 8 14 8 2 6 Optional Deleting or Quitting a Cluster 8 15 8 2 7 Optional Deleting a Member Switch 8 17 8 2 8 Checking the Configuration 8 17 8 3 Configuring Advanced HGMP Functions 8 19 8 3 1 Estab...

Page 21: ...atch Distribution Function for an HGMP Cluster 8 84 8 5 7 Example for Configuring the Batch Restart Function for an HGMP Cluster 8 95 8 5 8 Example for Configuring the Incremental Configuration Function for an HGMP Cluster 8 104 8 5 9 Example for Configuring the Configuration Synchronization Function for an HGMP Cluster 8 114 8 5 10 Example for Configuring Security Features for an HGMP Cluster 8 1...

Page 22: ......

Page 23: ... the NTP multicast mode 3 34 Figure 4 1 Networking diagram for configuring LLDP 4 5 Figure 4 2 Networking diagram for configuring LLDP 4 17 Figure 4 3 Networking diagram for configuring LLDP when an Eth Trunk is used on the network 4 22 Figure 4 4 Networking diagram for configuring LLDP when an interface has multiple neighbors 4 28 Figure 5 1 Principle of the ping operation 5 2 Figure 5 2 Format o...

Page 24: ...Figure 6 29 Network diagram for configuring the NQA threshold 6 229 Figure 6 30 Networking diagram of sending test results to the FTP server 6 233 Figure 6 31 Networking diagram of configuring a threshold for the NQA alarm 6 236 Figure 6 32 Networking diagram of configuring the NQA alarm threshold and test instance linkage 6 238 Figure 7 1 Diagram of NetStream data collection and analysis 7 3 Figu...

Page 25: ...figuring the configuration synchronization function for an HGMP cluster 8 115 Figure 8 12 Networking diagram of configuring security features for an HGMP cluster 8 125 Quidway S9300 Terabit Routing Switch Configuration Guide Network Management Figures Issue 03 2010 09 20 Huawei Proprietary and Confidential Copyright Huawei Technologies Co Ltd xxiii ...

Page 26: ......

Page 27: ...span of each table 2 4 Table 3 1 Description of the NTP access authorities 3 17 Quidway S9300 Terabit Routing Switch Configuration Guide Network Management Tables Issue 03 2010 09 20 Huawei Proprietary and Confidential Copyright Huawei Technologies Co Ltd xxv ...

Page 28: ......

Page 29: ... configure ACLs to implement the security feature of SNMPv2c 1 7 Configuring MIB View based Access Control in SNMPv1 In SNMPv1 you can implement the security feature by the MIB view 1 8 Configuring MIB View based Access Control in SNMPv2c In SNMPv2c you can control the NM Station to access the specified device by the MIB view 1 9 Configuring Basic Functions of SNMPv3 This section describes how the...

Page 30: ...n be recorded When the communications between the NM Station and the switch fails the switch can record the alarm log After the fault is rectified the NM Station synchronizes the alarm with the alarm log on the switch to avoid loss of the failure information 1 19 Enabling the Extended Error Code Function on the SNMP Agent This section describes how to enable the extended SNMP error code function A...

Page 31: ... functions l Receiving and analyzing request packets from the NM Station l Performing the Read or Write operation on management variables according to the type of packet and generating a Response packet to respond to the NM Station l Sending a Trap message to the NM Station to report the events such as entering or quitting the system view or restarting the device once the triggering conditions con...

Page 32: ...command set It makes use of the basic operations to deduce all other operations You can adopt the standard MIB or standard mode to define your individual MIB This reduces the cost of the entire network management by reducing the cost of most of the agent components in the network management system Table 1 1 lists the basic SNMP operations Table 1 1 Basic SNMP operations Action Function GetRequest ...

Page 33: ... of SNMPv1 This part describes how the NM Station accesses and manages the device through SNMPv1 1 3 1 Establishing the Configuration Task Before configuring SNMPv1 familiarize yourself with the applicable environment complete the pre configuration tasks and obtain the required data This can help you complete the configuration task quickly and accurately 1 3 2 Enabling Basic SNMP Functions By defa...

Page 34: ...e following tasks l Assigning an IP address to the switch l Configuring the routing protocol to make the switch and the NM Station accessible Data Preparation To configure SNMPv1 you need the following data No Data 1 SNMP version 2 SNMP community name 1 3 2 Enabling Basic SNMP Functions By default SNMP is disabled Context Do as follows on the switch enabled with the SNMP agent Procedure Step 1 Run...

Page 35: ...art describes how to implement access right control by setting the SNMP community name Context Do as follows on the switch enabled with the SNMP agent Procedure Step 1 Run system view The system view is displayed Step 2 Run snmp agent community read write community name The community name of the agent is configured End 1 3 5 Checking the Configuration After SNMPv1 is configured you can check SNMP ...

Page 36: ...applicable environment complete the pre configuration tasks and obtain the required data This can help you complete the configuration task quickly and accurately 1 4 2 Enabling Basic SNMP Functions By default SNMP is disabled 1 4 3 Configuring the SNMP Version By default the NM Station accesses the device through SNMPv3 To enable the NM Station to access the device through SNMPv2c you need to conf...

Page 37: ...ns By default SNMP is disabled Context Do as follows on the switch enabled with the SNMP agent Procedure Step 1 Run system view The system view is displayed Step 2 Run snmp agent The SNMP agent function is enabled End 1 4 3 Configuring the SNMP Version By default the NM Station accesses the device through SNMPv3 To enable the NM Station to access the device through SNMPv2c you need to configure SN...

Page 38: ...mmunity name The community name of the agent is configured End 1 4 5 Checking the Configuration After SNMPv2c is configured you can check the SNMP configurations including the community name and version information Prerequisite The configurations of the Basic Functions of SNMPv2c are complete Procedure l Run the display snmp agent community command to view the community name of the agent l Run the...

Page 39: ...figuring the SNMP Version By default the NM Station accesses the device through SNMPv3 To enable the NM Station to access the device through SNMPv1 you need to configure SNMPv1 on the device 1 5 3 Configuring a Basic ACL This part describes how to configure the ACL to specify the IP address of the NMS allowed to access the device 1 5 4 Applying the ACL This part describes how to configure ACLs to ...

Page 40: ...he device through SNMPv1 you need to configure SNMPv1 on the device Context Do as follows on the switch enabled with the SNMP agent Procedure Step 1 Run system view The system view is displayed Step 2 Run snmp agent sys info version v1 The SNMP version is configured By default SNMPv3 is configured End 1 5 3 Configuring a Basic ACL This part describes how to configure the ACL to specify the IP addr...

Page 41: ... snmp agent community read write community name acl acl number The ACL is applied End 1 5 5 Checking the Configuration After community name based access control in SNMPv1 is configured you can view configurations of SNMP and ACLs Prerequisite The configurations of the Community Name based Access Control in SNMPv1 are complete Procedure l Run the display acl acl number command to view the rules of ...

Page 42: ...section describes how to configure ACLs to implement the security feature of SNMPv2c 1 6 1 Establishing the Configuration Task Before configuring community name based access control in SNMPv2c familiarize yourself with the applicable environment complete the pre configuration tasks and obtain the required data This can help you complete the configuration task quickly and accurately 1 6 2 Configuri...

Page 43: ...l to make the switch and the NM Station accessible Data Preparation To configure community name based access control you need the following data No Data 1 ACL number 2 SNMP community name 1 6 2 Configuring the SNMP Version By default the NM Station accesses the device through SNMPv3 To enable the NM Station to access the device through SNMPv2c you need to configure SNMPv2c on the device Context Do...

Page 44: ...a specific NM Station to access the device Context Do as follows on the switch enabled with the SNMP agent Procedure Step 1 Run system view The system view is displayed Step 2 Run snmp agent community read write community name acl acl number The ACL is applied End 1 6 5 Checking the Configuration After community name based access control in SNMPv2c is configured you can view configurations of SNMP...

Page 45: ... info version SNMP version running in the system SNMPv2c SNMPv3 1 7 Configuring MIB View based Access Control in SNMPv1 In SNMPv1 you can implement the security feature by the MIB view 1 7 1 Establishing the Configuration Task Before configuring MIB view based access control in SNMPv1 familiarize yourself with the applicable environment complete the pre configuration tasks and obtain the required ...

Page 46: ...signing an IP address to the switch l Configuring the routing protocol to make the switch and the NM Station accessible Data Preparation To configure MIB view based access control you need the following data No Data 1 SNMP community name 2 Information about MIB objects 1 7 2 Configuring the SNMP Version By default the NM Station accesses the device through SNMPv3 To enable the NM Station to access...

Page 47: ...t describes how the NM Station manages the specified feature of the switch in the MIB view Context Do as follows on the switch enabled with the SNMP agent Procedure Step 1 Run system view The system view is displayed Step 2 Run snmp agent community read write community name1 cipher community name2 mib view view name acl acl number MIB view based access control is configured End 1 7 5 Checking the ...

Page 48: ...tatus active View name ViewDefault MIB Subtree snmpVacmMIB Subtree mask Storage type nonVolatile View Type excluded View status active View name ViewDefault MIB Subtree snmpModules 18 Subtree mask Storage type nonVolatile View Type excluded View status active Run the display snmp agent community command If information on the community name is displayed it means that the configuration succeeds Quid...

Page 49: ...ature of the device in the MIB view 1 8 5 Checking the Configuration After MIB view based access control in SNMPv2c is configured you can view configurations of SNMP 1 8 1 Establishing the Configuration Task Before configuring MIB view based access control in SNMPv2c familiarize yourself with the applicable environment complete the pre configuration tasks and obtain the required data This can help...

Page 50: ...ault SNMPv3 is configured End 1 8 3 Creating a MIB View This part describes how to create a MIB view and add the MIB of the specified feature into the MIB view or remove the MIB of the specified feature from the MIB view Context Do as follows on the switch enabled with the SNMP agent Procedure Step 1 Run system view The system view is displayed Step 2 Run snmp agent mib view excluded included view...

Page 51: ...c are complete Procedure l Run the display snmp agent mib view command to view the MIB view l Run the display snmp agent community command to view the community name of the agent l Run the display snmp agent sys info version command to view the SNMP version information End Example After the configurations run the display snmp agent mib view command If information about the MIB view is displayed it...

Page 52: ...escribes how the NM Station accesses the device through SNMPv3 1 9 1 Establishing the Configuration Task Before configuring SNMPv3 familiarize yourself with the applicable environment complete the pre configuration tasks and obtain the required data This can help you complete the configuration task quickly and accurately 1 9 2 Configuring Basic SNMP Functions By default SNMP is disabled You can do...

Page 53: ...otocol to make the switch and the NM Station accessible Data Preparation To configure SNMPv3 you need the following data No Data 1 SNMP group name 2 SNMP user name 1 9 2 Configuring Basic SNMP Functions By default SNMP is disabled You can do as follows to enable SNMPv3 Context Do as follows on the switch enabled with the SNMP agent Procedure Step 1 Run system view The system view is displayed Step...

Page 54: ... 1 Run system view The system view is displayed Step 2 Run snmp agent group v3 group name An SNMP user group is configured End 1 9 5 Configuring User Information After user information about the NM Station is configured you can configure NM Station users in a specific group to access the device Context Do as follows on the switch enabled with the SNMP agent Procedure Step 1 Run system view 1 SNMP ...

Page 55: ... group Group name a Security model v3 noAuthnoPriv Readview ViewDefault Writeview no specified Notifyview no specified Storage type nonvolatile Run the display snmp agent usm user command If information on the SNMP user is displayed it means that the configuration succeeds Quidway display snmp agent usm user User name b Engine ID 000007DB7F00000100000772 active Run the display snmp agent sys info ...

Page 56: ...address of the NM Station user group 1 10 7 Checking the Configuration After group based access control in SNMPv3 is configured you can view configurations of SNMP and ACLs 1 10 1 Establishing the Configuration Task Before configuring group based access control in SNMPv3 familiarize yourself with the applicable environment complete the pre configuration tasks and obtain the required data This can ...

Page 57: ... and the device must be identical Otherwise the NMS cannot access the device Context Do as follows on the switch enabled with the SNMP agent Procedure Step 1 Run system view The system view is displayed Step 2 Run snmp agent group v3 group name An SNMP user group is configured End 1 10 4 Configuring User Information NMS user information configured on the NMS and the device must be identical Otherw...

Page 58: ...2 Run acl acl number A basic ACL is created Step 3 Run rule rule id deny permit fragment source source address source wildcard any time range time name ACL rules are defined End 1 10 6 Applying the ACL This part describes how to use ACLs to filter the source address of the NM Station user group Context Do as follows on the switch enabled with the SNMP agent Procedure Step 1 Run system view The sys...

Page 59: ...v Readview ViewDefault Writeview no specified Notifyview no specified Storage type nonvolatile Acl 2000 Run the display snmp agent usm user command If information on the SNMP user is displayed it means that the configuration succeeds Quidway display snmp agent usm user User name b Engine ID 000007DB7F00000100000772 active Run the display acl command If information on the rules of the configured AC...

Page 60: ...specific NMS to access the device 1 11 6 Applying the ACL This part describes how to use ACLs to filter the source address of the NM Station user 1 11 7 Checking the Configuration After user based access control in SNMPv3 is configured you can view configurations of SNMP and ACLs 1 11 1 Establishing the Configuration Task Before configuring user based access control in SNMPv3 familiarize yourself ...

Page 61: ...un snmp agent sys info version v3 The SNMP version is configured By default SNMPv3 is configured End 1 11 3 Configuring an SNMP User Group This part describes how to create an SNMP access user group Context Do as follows on the SNMP agent Procedure Step 1 Run system view The system view is displayed Step 2 Run snmp agent group v3 group name An SNMP user group is configured End Quidway S9300 Terabi...

Page 62: ...a specific NMS to access the device Context Do as follows on the switch enabled with the SNMP agent Procedure Step 1 Run system view The system view is displayed Step 2 Run acl acl number A basic ACL is created Step 3 Run rule rule id deny permit fragment source source address source wildcard any time range time name ACL rules are defined End 1 11 6 Applying the ACL This part describes how to use ...

Page 63: ...he SNMP version information End Example Run the display snmp agent group command If information on the user group is displayed it means that the configuration succeeds Quidway display snmp agent group Group name a Security model v3 noAuthnoPriv Readview ViewDefault Writeview no specified Notifyview no specified Storage type nonvolatile Run the display snmp agent usm user command If information on ...

Page 64: ...MS user information configured on the NMS and the switch must be identical Otherwise the NMS cannot access the device 1 12 5 Configuring the Authentication Function for the SNMP User Group After authentication is configured only NM Station users in the group that passes the authentication can access the device 1 12 6 Configuring the Encryption Function for the SNMP User Group Encryption keys confi...

Page 65: ...o Data 1 SNMP group name 2 SNMP user name 1 12 2 Configuring the SNMP Version After the SNMP version is disabled on the device to enable the NM Station to access the device through SNMPv3 you need to configure SNMPv3 on the device Context Do as follows on the switch enabled with the SNMP agent Procedure Step 1 Run system view The system view is displayed Step 2 Run snmp agent sys info version v3 T...

Page 66: ...tem view The system view is displayed Step 2 Run snmp agent usm user v3 user name group name Users are added into the SNMPv3 user group End 1 12 5 Configuring the Authentication Function for the SNMP User Group After authentication is configured only NM Station users in the group that passes the authentication can access the device Context Do as follows on the switch enabled with the SNMP agent Pr...

Page 67: ...ivacy The SNMPv3 encryption function is configured End 1 12 7 Configuring Authentication and Encryption Functions for the SNMP User Group NM Station users in a group can be configured with different authentication codes and encryption keys for accessing the device Context Do as follows on the switch enabled with the SNMP agent Procedure Step 1 Run system view The system view is displayed Step 2 Ru...

Page 68: ... snmp agent group Group name a Security model v3 AuthnoPriv Readview ViewDefault Writeview no specified Notifyview no specified Storage type nonVolatile Run the display snmp agent usm user command If information on the SNMP user is displayed it means that the configuration succeeds Quidway display snmp agent usm user User name b Engine ID 000007DB7F00000100000772 active Run the display snmp agent ...

Page 69: ...can view configurations of the MIB and users 1 13 1 Establishing the Configuration Task Before configuring MIB view based access control in SNMPv3 familiarize yourself with the applicable environment complete the pre configuration tasks and obtain the required data This can help you complete the configuration task quickly and accurately Applicable Environment When the user has a higher requirement...

Page 70: ...B View By configuring different MIB views you can configure different access authorities for NM Stations Context Do as follows on the switch enabled with the SNMP agent Procedure Step 1 Run system view The system view is displayed Step 2 Run snmp agent mib view excluded included view name oid tree A MIB view is created End 1 13 4 Configuring Authorities for the SNMP User Group Context Do as follow...

Page 71: ...me Users are added into the SNMPv3 user group End 1 13 6 Checking the Configuration After MIB view based access control in SNMPv3 is configured you can view configurations of the MIB and users Prerequisite The configurations of the MIB View based Access Control in SNMPv3 are complete Procedure l Run the display snmp agent group group name command to view information about the SNMP group l Run the ...

Page 72: ...iguration succeeds Quidway display snmp agent sys info SNMP version running in the system SNMPv3 1 14 Configuring SNMP Maintenance Information This section describes how to maintain the device through SNMP maintenance information 1 14 1 Establishing the Configuration Task Before configuring SNMP maintenance information familiarize yourself with the applicable environment complete the pre configura...

Page 73: ...maintenance information you need the following data No Data 1 Identity and contact method of the administrator 2 Location of the switch 1 14 2 Configuring Contact Methods of the Administrator This part describes how to configure the administrator information In the case of device failure you can contact the administrator for help Procedure Step 1 Run system view The system view is displayed Step 2...

Page 74: ...anaged node R D Beijing Huawei Technologies co Ltd Run the display snmp agent sys info location location command to view the location of the switch Quidway display snmp agent sys info location The physical location of this node Beijing China 1 15 Configuring the Maximum Size of the SNMP Packet This section describes how to increase the maximum size of an SNMP packet for the NM Station to obtain th...

Page 75: ... size of the SNMP packet complete the following tasks l Assigning an IP address to the switch l Configuring the routing protocol to make the switch and the NM Station accessible Data Preparation To configure the maximize size of the SNMP packet you need the following data No Data 1 the maximum SNMP packets that the SNMP agent forwards 1 15 2 Configuring the Maximum Size of the SNMP Packet The maxi...

Page 76: ...iguring the performance batch collection function familiarize yourself with the applicable environment complete the pre configuration tasks and obtain the required data This can help you complete the configuration task quickly and accurately 1 16 2 Enabling Batch Statistics Collection To create a statistics file you must enable the performance batch collection function 1 16 3 Creating a Statistics...

Page 77: ...atistics file to collect the data needed by the NM Station 1 16 11 Checking the Configuration After the performance batch collection function is configured you can view corresponding parameters 1 16 1 Establishing the Configuration Task Before configuring the performance batch collection function familiarize yourself with the applicable environment complete the pre configuration tasks and obtain t...

Page 78: ... performance batch collection function Context Do as follows on the switch Procedure Step 1 Run system view The system view is displayed Step 2 Run bulk stat enable The batch statistics collection function is enabled End 1 16 3 Creating a Statistics File Data collected by the performance batch collection function are saved in the statistics file Context Do as follows on the switch Procedure Step 1...

Page 79: ... deleted no matter whether the statistics file is in the Stop Ready or Running state l Configurations about statistics objects take effect after the next statistics collection begins Do as follows on the switch Procedure Step 1 Run system view The system view is displayed Step 2 Run bulk file file name The bulk file view is displayed Step 3 Run object oid class single column start index start inde...

Page 80: ...onal Configuring the Interval of Uploading the Statistic File This part describes how to set the interval for uploading the statistics file When the upload interval expires the system uploads the statistics file to the NM Station Context The system uploads the statistics file to the NM Station when the interval of uploading the statistic file expires Do as follows on the switch Procedure Step 1 Ru...

Page 81: ... is displayed Step 3 Run transfer remain time remain time The period for reserving the statistics file is set By default the period for reserving the statistics after the statistics are uploaded is set to five minutes End 1 16 8 Optional Configuring the Maximum Times to Re upload the Statistics File This part describes how to configure the maximum retransmission times before performing the collect...

Page 82: ...ls the secondary URL is used If the secondary URL also fails the switch waits for the next reupload interval to reupload the statistics file Context Do as follows on the switch Procedure Step 1 Run system view The system view is displayed Step 2 Run bulk file file name The bulk file view is displayed Step 3 Run transfer primary secondary url url The upload mode of the statistics file is set The S9...

Page 83: ...h Procedure Step 1 Run system view The system view is displayed Step 2 Run bulk file file name The bulk file view is displayed Step 3 Run collect enable The statistic file is enabled End 1 16 11 Checking the Configuration After the performance batch collection function is configured you can view corresponding parameters Prerequisite The configurations of the Batch Statistics Collection are complet...

Page 84: ...g the Source Interface of Trap Messages To ensure the security of the device you are required to configure the local loopback address as the source address of the trap messages 1 17 6 Optional Setting the Queue Length of Trap Messages To ensure that trap messages can be sent to the NM Station you are required to adjust the length of the trap queue according to the number of trap messages 1 17 7 Op...

Page 85: ...nabled with the SNMP agent Procedure Step 1 Run system view The system view is displayed Step 2 Run snmp agent trap enable The switch is enabled to send alarms NOTE When all trap functions are enabled through the snmp agent trap enable command or at least three trap functions are enabled through the snmp agent trap enable feature name command l you can run the snmp agent trap disable command to di...

Page 86: ... address of the NM Station for trap messages Context Do as follows on the switch enabled with the SNMP agent Procedure Step 1 Run system view The system view is displayed Step 2 Run snmp agent target host trap address udp domain ip address udp port port number public net vpn instance vpn instance name params securityname security string v1 v2c v3 authentication privacy private netmanager The desti...

Page 87: ...ased NM station does not support this function 1 17 6 Optional Setting the Queue Length of Trap Messages To ensure that trap messages can be sent to the NM Station you are required to adjust the length of the trap queue according to the number of trap messages Context TIP Increase the queue length with the preceding command when the switch frequently sends Trap messages Do as follows on the switch...

Page 88: ...uration Prerequisite The configurations of the Trap Functions are complete Procedure Step 1 Run the display current configuration include trap command to view the configuration information of Trap messages End Example Run the display current configuration include trap command to view the configuration information of Trap messages Quidway display current configuration configuration include trap snm...

Page 89: ...e link recovers the switch updates trap logs recorded during the link failure to the host destination 1 18 8 Checking the Configuration After sending traps in Inform mode is enabled you can view corresponding parameters 1 18 1 Establishing the Configuration Task Before sending traps in Inform mode familiarize yourself with the applicable environment complete the pre configuration tasks and obtain ...

Page 90: ...nd security level 2 l Optional Timeout period for waiting for the Informing ACK messages l Optional Number of times to re propagate alarms l Optional Number of pending alarms alarms waiting for being acknowledged 3 l Optional Aging time of alarm logs l Optional Limit pieces of alarm logs 1 18 2 Optional Enabling the switch to Send Specified Alarms to the NM Station Context Do as follows on the swi...

Page 91: ...ely Procedure Step 1 Run system view The system view is displayed Step 2 Run snmp agent trap enable feature name feature name trap name trap name The switch is enabled to send an alarm message of a specified feature to the NM station To disable a specified trap function you can run the undo snmp agent trap enable feature name command End 1 18 4 Configuring the Destination Host of Informing Message...

Page 92: ...Procedure Step 1 Run system view The system view is displayed Step 2 Run snmp agent inform timeout seconds resend times times pending number The timeout period for waiting for Informing ACK messages the times to re send Informing messages and the maximum pieces of pending alarms alarms waiting for being acknowledged are set By default the timeout period for waiting for Informing ACK messages is 15...

Page 93: ...ion for the Informing Mode If the switch and the destination host cannot communicate because of a link failure the switch no longer sends Inform messages to send traps but keeps generating trap logs When the link recovers the switch updates trap logs recorded during the link failure to the host destination Context Do as follows on the switch enabled with the SNMP agent Procedure Step 1 Run system ...

Page 94: ... address udp domain ip address vpn instance vpn instance name params securityname security string command to view the parameters about the Informing mode configured globally or on specified destination host and statistics about the host l Run the display snmp agent notification log info command to view the information about alarm logs in the alarm buffer End Example Run the display snmp agent targ...

Page 95: ...lishing the Configuration Task Before enabling the extended SNMP error code function familiarize yourself with the applicable environment complete the pre configuration tasks and obtain the required data This can help you complete the configuration task quickly and accurately 1 19 2 Enabling the Extended Error Code Function on the SNMP Agent By default packets sent from the device to the NMS carry...

Page 96: ...code enable The extended error code function on the SNMP agent is enabled End 1 19 3 Checking the Configuration After the extended SNMP error code function is enabled you can view the status of extended SNMP error codes Prerequisite The configurations of the extended error code function are complete Procedure Step 1 Run the display snmp agent extend error code status command to check whether the e...

Page 97: ...ured the device directly returns the last SET response message to the NMS if it receives a repeated SET packet but does not sends the packet to the service module Pre configuration Tasks Before configuring the SET response message caching function complete the following tasks l Configuring the IP address of the S9300 l Configuring a routing protocol to ensure that the S9300 and the NMS can communi...

Page 98: ... be classified into loose mode and compact mode Loose mode is used when the sub interface numbering is discontinuous Compact mode is used when the sub interface numbering is continuous 1 21 5 Checking the Configuration After the constant interface index feature is configured you can view the configuration 1 21 1 Establishing the Configuration Task Before configuring the constant interface index fe...

Page 99: ... view is displayed Step 2 Run ifindex constant Constant interface index feature is enabled Before swapping the interface board or restarting the system use the save command to save the configuration file of the current interface index Otherwise the interface index may change after the system restarted End 1 21 3 Setting the Maximum Number of Interfaces with Constant Indexes As the system runs inte...

Page 100: ...nterface numbering is continuous Context Do as follows on the switch enabled with the SNMP agent Procedure Step 1 Run system view The system view is displayed Step 2 Run set constant ifindex subinterface dense mode sparse mode The memory distribution mode of the sub interface index is configured When a sub interface is created the system generates an index image file for the sub interface in the m...

Page 101: ...ode sparse mode current ifindex allocation no multi chassis 1 22 Maintaining SNMP When an SNMP operation fault occurs you can run the debugging command in the user view to locate the fault and analyze its cause Context CAUTION Debugging affects the performance of the system So after debugging run the undo debugging all command to disable it immediately When an SNMP fault occurs run the following d...

Page 102: ... Configuring Alarm Messages to Be Sent to the Huawei NMS 1 23 1 Example for Configuring Basic SNMPv1 Functions Networking Requirements As shown in Figure 1 3 the NMS accesses the Switch through SNMP and manages the Switch Figure 1 3 Networking diagram for configuring basic SNMP functions Switch NM Station 1 1 1 1 24 GE1 0 0 VLANIF100 1 1 1 2 24 Configuration Roadmap The configuration roadmap is as...

Page 103: ... agent community write private Step 5 Verify the configuration Display the configured community names Switch display snmp agent community Community name public Group name public Storage type nonVolatile Community name private Group name private Storage type nonVolatile End Configuration Files The configuration file on the Switch is as follows sysname Switch vlan batch 100 interface Vlanif100 ip ad...

Page 104: ...uld send a trap message to the NMS Figure 1 4 Networking diagram for specifying an NMS to manage the Switch IP Network Switch NM Station 1 1 1 1 24 GE1 0 0 VLANIF100 2 2 2 2 24 Configuration Roadmap The configuration roadmap is as follows 1 Start the SNMP agent on the Switch 2 Set the SNMP version 3 Set the SNMP community name and access authority 4 Set the contact information about the administra...

Page 105: ...agent trap enable Switch snmp agent target host trap address udp domain 1 1 1 1 params securityname public v2c Step 6 Configure the NMS Install the iManager U2000 Unified Network Management System on the NMS configure the SNMP function of the iManager U2000 Unified Network Management System and then you can manage the Switch For the configuration and usage of the iManager U2000 Unified Network Man...

Page 106: ... snmp agent local engineid 000007DB7F000001000031E7 snmp agent community read public acl 2000 snmp agent community write private acl 2000 snmp agent sys info contact Mr Wang Tel 21657 snmp agent sys info location telephone closet 2rd floor snmp agent sys info version v2c snmp agent target host Trap address udp domain 1 1 1 1 params securityname public v2c return 1 23 3 Example for Configuring Diff...

Page 107: ... rights 3 Configure the trap function 4 Configure the NMS Data Preparation To complete the configuration you need the following data l SNMP version l User group name and user name l Information about the MIB objects l Passwords for authentication and encryption Procedure Step 1 Configure reachable routes between the Switch and the NMSs The configuration procedure is not mentioned Step 2 Enable SNM...

Page 108: ... excluding snmpUsmMIB snmpVacmMIB and snmpModules 18 Modifying the attributes of snmpUsmMIB snmpVacmMIB or snmpModules 18 will lead to security problem Step 4 Configure the trap function Switch snmp agent trap enable Switch snmp agent target host trap address udp domain 1 1 1 1 params securityname NMS1 v3 Switch snmp agent target host trap address udp domain 1 1 1 2 params securityname NMS2 v3 Ste...

Page 109: ...et Subtree mask Storage type nonVolatile View Type included View status active View name ViewDefault MIB Subtree snmpUsmMIB Subtree mask Storage type nonVolatile View Type excluded View status active View name ViewDefault MIB Subtree snmpVacmMIB Subtree mask Storage type nonVolatile View Type excluded View status active View name ViewDefault MIB Subtree snmpModules 18 Subtree mask Storage type non...

Page 110: ...s snmp agent mib view included c iso snmp agent usm user v3 NMS1 test1 authentication mode md5 TV 8 O_6I PN R _ IA privacy mode des56 a 2Y MQRZS EPZ X acl 2000 snmp agent usm user v3 NMS2 test2 authentication mode md5 TV 8 O_6I PN R _ IA privacy mode des56 a 2Y MQRZS EPZ X acl 2000 return 1 23 4 Example for Configuring Different NMSs to Access the Switch Inform Mode Networking Requirements As show...

Page 111: ...NMP version l Information about the user group and users l Information about the MIB objects l Passwords for authentication and encryption Procedure Step 1 Configure reachable routes between the Switch and the NMSs The configuration procedure is not mentioned Step 2 Configuring basic SNMP functions Enter the system view start the SNMP agent and set the SNMP version to SNMPv3 Quidway system view Qu...

Page 112: ... trap function Switch snmp agent trap enable Configure the Switch to send trap messages to the NMSs in inform mode Switch snmp agent target host inform address udp domain 1 1 1 1 params securityname NMS1 v3 Switch snmp agent target host inform address udp domain 1 1 1 2 params securityname NMS2 v3 Step 5 Configure the NMS Install the iManager U2000 Unified Network Management System on the NMS conf...

Page 113: ...es 3 timeout 15s Status retries 0 pending 0 sent 0 dropped 0 failed 0 confirmed 0 End Configuration Files The configuration file on the Switch is as follows sysname Switch vlan batch 100 interface Vlanif100 ip address 1 1 2 1 255 255 255 0 interface GigabitEthernet1 0 0 port hybrid pvid vlan 100 port hybrid untagged vlan 100 ospf 1 area 0 0 0 0 network 1 1 2 0 0 0 0 255 snmp agent snmp agent local...

Page 114: ...is as follows 1 Enable the function of batch statistics collection on the Switch 2 Configure a statistics file including statistics collection interval statistics uploading interval period for reserving the statistics file and the primary URL to which the statistics file is uploaded 3 Configure the statistics objects 4 Enable the statistics file Data Preparation To complete the configuration you n...

Page 115: ...ss column Step 4 Enable the statistics file Switch bulk file file1 collect enable Step 5 Verify the configuration Run the display bulk stat command to view information about the module enabled with the batch statistics collection function and the display bulk stat filename command to view details about the statistics file View details about the file named file1 Switch display bulk stat file1 bulk ...

Page 116: ... 6 Example for Enabling the Extended Error Code Function on the SNMP Agent After configuring the SNMP error code function the NMS can receive more detailed information about the router Networking Requirements As shown in Figure 1 8 a reachable switch exists between the NM station and the switch The NM station manages the switch through the SNMP agent Figure 1 8 Networking diagram of enabling the e...

Page 117: ...ck the configuration Check whether the extended error code function is enabled on the SNMP agent Quidway display snmp agent extend error code status Extend error code status enabled End Configuration Files Configuration file of the Switch sysname Switch vlan batch 10 interface Vlanif10 ip address 10 1 1 1 255 255 255 0 interface GigabitEthernet1 0 0 port hybrid pvid vlan 10 port hybrid untagged vl...

Page 118: ...ces 2 Configure the SNMP version 3 Configure alarm messages to be sent to the Huawei NMS Data Preparation To complete the configuration you need the following data l IP address of Interface l SNMP version l Source interface for sending alarm messages l IP address of the NMS Procedure Step 1 Assign an IP addresses to the interfaces The configuration details are not mentioned here Step 2 Configure t...

Page 119: ...NMS type HW NMS End Configuration File Configuration file of the switch sysname Quidway vlan batch 10 interface LoopBack0 ip address 1 1 1 1 255 255 255 255 interface Vlanif10 ip address 11 1 1 2 255 255 255 0 interface GigabitEthernet1 0 0 port hybrid pvid vlan 10 port hybrid untagged vlan 10 ip route static 11 1 1 1 255 255 255 255 11 1 1 2 snmp agent snmp agent local engineid 800007DB0300188281...

Page 120: ......

Page 121: ...iguring RMON2 This section describes how to configure RMON2 to monitor the traffic of a certain interface analyze the source and destination of data transmitted through the interface and collect the statistics on the data of each host that passes through the interface 2 5 Maintaining RMON and RMON2 When an RMON operation fault occurs you can run the debuggingcommand in the user view to locate the ...

Page 122: ...basic SNMP commands for exchanging data with the RMON agent and collecting the network management information This process is restricted by device resources and hence the NM Station collects only information on four groups alarm event history and statistics and not the complete information on the RMON MIB Currently the S9300 implements the monitoring and statistics collection function only on the ...

Page 123: ...e reference The history group has the following tables historyControlTable is used to set the control information such as sampling intervals etherHistoryTable provides network administrators with other history statistics such as the traffic on a network segment error packets broadcast packets utilization and collisions Each entry in the historyControlTable corresponds to a maximum of 10 pieces of ...

Page 124: ...ime span of each table Table 2 1 Time span of each table Table Entry Capacity Byte Maximum Time Span s ethernetStatsTable 100 600 historyControlTable 100 600 alarmTable 60 6000 eventTable 60 600 logTable 600 prialarmTable 50 6000 NOTE logTable does not have a time span Each log entry can have a maximum of 10 pieces of logs The excessive logs supersede the older ones in a circular manner When an in...

Page 125: ...e After EventTable is configured when the number of events exceeds the alarm threshold the switch generates logs sends traps or generates logs and sends traps 2 3 6 Configuring the AlarmTable The RMON alarm management function monitors a specified trap variable identified by its OID at a specified sampling interval When the monitored variable exceeds the defined threshold an alarm is generated 2 3...

Page 126: ...istics function is enabled 2 Statistics table to be used and related parameters 2 3 2 Enabling the RMON Statistics Function on the Interface You need to enable traffic statistics function on the interface where traffic statistics are collected If the traffic statistics function is not enabled on the interface statistics values of in both ethernetStatsTable and HistoryControlTable are 0 Context Do ...

Page 127: ...this function you can sample traffic of a certain interface set the maximum number of items to be saved and the sampling interval collect traffic statistics on the specific interface periodically and save the statistics to etherHistoryTable for future use Context The history data management supports the setting of sampling sampling interval and saving quantity for the traffic passing through a spe...

Page 128: ...er of events exceeds the alarm threshold the switch generates logs sends traps or generates logs and sends traps Context Do as follows on the switch that is monitored The RMON event management module is responsible for adding events to the corresponding rows in the eventTable and defining the methods of processing events l log sending only logs l log trap sending both logs and trap messages to the...

Page 129: ...m lower limit is configured an alarm is triggered once the alarm condition is satisfied At this time the status of alarm recording is VALID If an incorrect alarm variable is configured for example an inexistent OID is specified the status of alarm recording is undercreation and no alarm is generated Do as follows on the switch that is monitored Procedure Step 1 Run system view The system view is d...

Page 130: ...alarm conditions are satisfied The alarm record is in the undercreation state rather than in the VALID state If either the alarm upper limit event or the alarm lower limit event is configured the alarm is triggered once the conditions for an alarm are satisfied The alarm record is in the VALID state End 2 3 8 Checking the Configuration After configuring RMON you can view the traffic statistics col...

Page 131: ...splay the RMON history Quidway display rmon history History control entry 1 owned by Creator is VALID Samples interface GigabitEthernet3 0 0 ifEntry 402653698 Sampling interval 30 sec with 10 buckets max Last Sampling time 0days 00h 09m 43s Latest sampled values octets 645 packets 7 broadcast packets 7 multicast packets 0 undersize packets 6 oversize packets 0 fragments packets 0 jabbers packets 0...

Page 132: ... Checking the Configuration After configuring RMON2 you can view the traffic statistics collected by RMON2 2 4 1 Establishing the Configuration Task Before configuring RMON2 familiarize yourself with the applicable environment complete the pre configuration tasks and obtain the required data This can help you complete the configuration task quickly and accurately Applicable Environment By configur...

Page 133: ...ted automatically When the hlHostControlStatus value is set to active you cannot change the hlHostControlDataSource and hlHostControlNlMaxDesiredEntries values When the physical status of the interface that corresponds to the hlHostControlDataSource is Down and the hlHostControlStatus value is active the state is switched to notinservice automatically The status displayed in the command output is ...

Page 134: ...don and supportedoff When the protocolDirHostConfig value changes from supportedon to supportedoff the corresponding entry in the hlHostControlTable is deleted l When the protocolDirStatus is set to inactive the corresponding entry in the hlHostTable is deleted End 2 4 4 Checking the Configuration After configuring RMON2 you can view the traffic statistics collected by RMON2 Prerequisite The confi...

Page 135: ...rce droppedfrm inserts Deletes maxentries owner status 123 GigabitEthernet2 2 0 0 19 0 100 China active Run the display rmon2 nlhosttable command If information about the host table is displayed it means that the configuration succeeds Quidway display rmon2 nlhosttable hostcontrolindex 123 timemark 1000 hostaddress 10 110 99 2 Abbreviation HIdx hlHostControlIndex PIdx ProtocolDirLocalIndex Addr nl...

Page 136: ... 0 including l Collecting real time statistics and history statistics about traffic and various packets l Monitoring traffic in bytes passing through the interface and records logs when the traffic sent in one minute exceeds the set value l Monitoring the broadcast and multicast packets on the subnet and generates traps for these packets The Switch then automatically reports the traps to the NMS w...

Page 137: ...uidway system view Quidway sysname Switch Switch snmp agent trap enable Configure the function of sending trap messages to the specified NMS Switch snmp agent target host trap address udp domain 1 1 1 1 params securityname public Step 4 Enable the statistics function Enable the RMON statistics function on the interface Switch interface gigabitethernet 3 0 0 Switch GigabitEthernet3 0 0 rmon statist...

Page 138: ...15224 packets 1749151 broadcast packets 11603 multicast packets 756252 undersized packets 0 oversized packets 0 fragments packets 0 jabbers packets 0 CRC alignment errors 0 collisions 0 Dropped packet insufficient resources 1795 Packets received according to length octets 64 150183 65 127 150183 128 255 1383 256 511 3698 512 1023 0 1024 1518 0 Check the effect of configurations Only the last sampl...

Page 139: ...ives trap messages when the set prialarm variable exceeds the preset threshold End Configuration Files sysname Switch vlan batch 100 110 interface Vlanif100 ip address 2 2 2 1 255 255 255 0 interface Vlanif110 ip address 3 3 3 1 255 255 255 0 interface GigabitEthernet1 0 0 port hybrid pvid vlan 100 port hybrid untagged vlan 100 interface GigabitEthernet3 0 0 port hybrid pvid vlan 110 port hybrid u...

Page 140: ...agram for configuring RMON2 NM Station IP Network COM Console GE2 0 0 VLANIF10 10 1 1 1 24 Lan Switch Configuration Roadmap The configuration roadmap is as follows 1 Assign IP addresses to interfaces of the Switch 2 Configure the hlHostControlTable 3 Configure the protocolDirTable Data Preparation To complete the configuration you need the following data l Index of the hlHostControlTable and the m...

Page 141: ...3 Abbreviation HIdx hlHostControlIndex PIdx ProtocolDirLocalIndex Addr nlHostAddress InPkts nlHostInPkts OutPkts nlHostOutPkts InOctes nlHostInOctets OutOctes nlHostOutOctets OutMac nlHostOutMacNonUnicastPkts ChgTm nlHostTimeMark CrtTm nlHostCreateTime HIdx PIdx Addr InPkts OutPkts InOctes OutOctes OutMac ChgTm CrtTm 123 1 10 1 1 3 0 78 0 10046 78 81489 40859 123 1 10 1 1 4 78 0 10046 0 0 81489 40...

Page 142: ...ntrolnlinserts Deletes hlHostControlNlDeletes maxentries hlhostcontrolnlmaxdesiredentries owner hlhostcontrolowner status hlhostcontrolstatus index datasource droppedfrm inserts eletes maxentries owner status 123 Vlanif10 0 19 0 100 China active End Configuration Files sysname Quidway vlan batch 10 interface Vlanif10 ip address 10 1 1 1 255 255 255 0 interface GigabitEthernet2 0 0 port hybrid pvid...

Page 143: ...functions including the NTP operating modes 3 4 Configuring NTP Security Mechanisms This section describes how to configure NTP security mechanisms to guarantee reliable clock synchronization on networks demanding high security 3 5 Maintaining NTP This section describes how to debug NTP through the debugging command in case of an NTP operation fault 3 6 Configuration Examples This section provides...

Page 144: ...ent Systems have to take the same clock for reference to ensure a proper sequence of implementation l Incremental backup between the backup server and clients Clocks on the backup server and clients should be synchronized When all the devices on a network need to be synchronized it is almost impossible for an administrator to manually change the system clock by executing command lines This is beca...

Page 145: ...ed at 10 00 03 The process of synchronizing system clocks is as follows 1 Switch A sends an NTP packet to Switch B The packet carries the originating timestamp when it leaves Switch A which is 10 00 00 am T1 2 When the NTP packet reaches Switch B Switch B adds its receiving timestamp to the NTP packet which is 11 00 01 am T2 3 When the NTP packet leaves Switch B Switch B adds its transmitting time...

Page 146: ...configure only the client The server needs to be configured with only one NTP primary clock Note that the client can be synchronized to the server but the server cannot be synchronized to the client After the configuration 1 The client sends a synchronization request packet to the server with the mode field being set to 3 The value 3 indicates the client mode 2 Upon receiving the request packet th...

Page 147: ...4 0 1 1 l The client senses multicast packets from the server l After receiving the first multicast packet to estimate the network delay the client enables a temporary server client model for exchanging messages with the remote server l The client works in multicast client mode and continues to sense the incoming multicast packets to synchronize the local clock 3 3 Configuring Basic NTP Functions ...

Page 148: ...c NTP functions familiarize yourself with the applicable environment complete the pre configuration tasks and obtain the required data This can help you complete the configuration task quickly and accurately Applicable Environment NTP has the following operation modes l Server client mode l Peer mode l Broadcast mode l Multicast mode In actual applications a proper operation mode needs to be selec...

Page 149: ...ck on the server must be fewer than that for the clock on the client Otherwise the clock on the client cannot synchronize with the master clock on the server Context If you want to configure a switch to provide a primary NTP clock do as follows on the switch functioning as the NTP server Procedure Step 1 Run system view The system view is displayed Step 2 Run ntp service refclock master ip address...

Page 150: ...s or the IP address of the reference clock NOTE When the unicast NTP server is specified the local switch functions as the client automatically The server needs to be configured with only a primary clock l Optional Configuring the Source Interface for the NTP Server to Send NTP Packets Do as follows on the switch working as a client 1 Run system view The system view is displayed 2 Run ntp service ...

Page 151: ...er It can be the IP address of a host address rather than a broadcast address a multicast address or the IP address of the reference clock NOTE After the NTP peer is specified the local switch runs in symmetric active mode The symmetric passive end need not be configured l Optional Configuring the Source Interface of the NTP Symmetric Passive End 1 Run system view The system view is displayed 2 Ru...

Page 152: ...itch periodically sends the clock synchronization packets to the broadcast address 255 255 255 255 NOTE Broadcast mode can be used only in the same LAN l Configuring an NTP Broadcast Client Do as follows on the switch functioning as an NTP broadcast client 1 Run system view The system view is displayed 2 Optional Run ntp service max dynamic sessions number The number of local sessions allowed to b...

Page 153: ...m view The system view is displayed 2 Run vlan vlan id A VLAN is created and the VLAN view is displayed 3 Run interface vlanif vlan id The interface that sends NTP multicast packets is specified 4 Run ntp service multicast server ip address authentication keyid key id ttl ttl number version number The local switch is set to be an NTP multicast server After the configurations the local switch perio...

Page 154: ... set up further End 3 3 7 Disabling the Interface From Receiving NTP Packets To prevent a host on the LAN from synchronizing the clock on the specified server you can disable the specified interface on the host from receiving NTP packets Context Do as follows on the switch that needs to be disabled from receiving NTP packets Procedure Step 1 Run system view The system view is displayed Step 2 Run ...

Page 155: ...display ntp service trace command to view the summary information on each passing NTP server when tracing from the local device to the reference clock source End Example Run the display ntp service status command to view the status of the NTP service Quidway display ntp service status clock status synchronized clock stratum 2 reference clock ID LOCAL 0 nominal frequency 60 0002 Hz actual frequency...

Page 156: ...ith the access authority in descending order from peer server synchronization to query The first matched authority takes effect 3 4 3 Enabling NTP Authentication You must configure the same authentication key on the NTP server and NTP client and declare that the key is reliable Otherwise NTP authentication fails 3 4 4 Configuring NTP Authentication in Unicast Server Client Mode By configuring the ...

Page 157: ...at the remote end can perform only the time request to the local end query indicates the maximum access authority The remote end can perform only the control query to the local end l NTP authentication NTP authentication is required in some networks with high security demands The configuration of NTP authentication involves configuring NTP authentication on both the client and the server During th...

Page 158: ...multicast group and the TTL values of the multicast packets 3 4 2 Setting NTP Access Authorities When receiving an access request packet the NTP server matches the request packet with the access authority in descending order from peer server synchronization to query The first matched authority takes effect Context Do as follows on the switch Procedure Step 1 Run system view The system view is disp...

Page 159: ...he NTP server and NTP client and declare that the key is reliable Otherwise NTP authentication fails Context NOTE l Configure both the NTP server and the NTP client following the preceding steps l Configure the same authentication key on the server and client and affirm that the key is reliable otherwise NTP authentication fails l Enable NTP authentication before performing actual authentication D...

Page 160: ...ance name preference The ID of the authentication key used for the synchronization of the server and client clocks is configured End 3 4 5 Configuring NTP Authentication in Peer Mode By configuring the authentication key ID used in the synchronization with the peer on the local end you can apply NTP authentication in peer mode Context Do as follows on the switch that functions as the symmetric act...

Page 161: ...id version number The ID of the authentication key used by the NTP broadcast server is configured For configuring the broadcast client see Configuring the Broadcast Mode End 3 4 7 Configuring NTP Authentication in Multicast Mode By configuring the authentication key ID used in the synchronization with the NTP multicast server on the local switch you can apply NTP authentication in multicast mode C...

Page 162: ...ock status synchronized clock stratum 2 reference clock ID LOCAL 0 nominal frequency 60 0002 Hz actual frequency 60 0002 Hz clock precision 2 18 clock offset 0 0000 ms root delay 0 00 ms root dispersion 0 00 ms peer dispersion 10 00 ms reference time 15 51 36 259 UTC Apr 25 2010 C6179088 426490A3 Run the display ntp service sessions verbose command to view the status of NTP sessions Quidway displa...

Page 163: ...tion in Unicast Client Server Mode 3 6 2 Example for Configuring the Common NTP Peer Mode 3 6 3 Example for Configuring NTP Authentication in Broadcast Mode 3 6 4 Example for Configuring the Common NTP Multicast Mode 3 6 1 Example for Configuring NTP Authentication in Unicast Client Server Mode Networking Requirements Figure 3 2 shows the diagram of NTP l Switch A functions as a unicast NTP server...

Page 164: ...client before specifying the IP address of the NTP server and authentication key to be sent to the server otherwise NTP authentication is not performed before clock synchronization l To implement authentication successfully configure both the server and the client Data Preparation To complete the configuration you need the following data l IP address of the reference clock l Stratum count of the N...

Page 165: ... keyid 42 authentication mode md5 Hello SwitchC ntp service reliable authentication keyid 42 SwitchC ntp service unicast server 10 0 0 1 authentication keyid 42 Step 5 Specify the NTP server for Switch D Configure Switch B as the NTP server of Switch D SwitchD system view SwitchD ntp service authentication enable SwitchD ntp service authentication keyid 42 authentication mode md5 Hello SwitchD ntp...

Page 166: ...ay ntp service status clock status synchronized clock stratum 4 reference clock ID 10 0 0 1 nominal frequency 60 0002 Hz actual frequency 60 0002 Hz clock precision 2 18 clock offset 3 8128 ms root delay 31 26 ms root dispersion 74 20 ms peer dispersion 34 30 ms reference time 11 55 56 833 UTC Mar 2 2006 C7B15BCC D5604189 Check the NTP status of Switch A SwitchA display ntp service status clock st...

Page 167: ...hentication enable ntp service authentication keyid 42 authentication mode md5 ENC 8HX Q Q MAF4 1 ntp service reliable authentication keyid 42 ntp service unicast server 2 2 2 2 authentication keyid 42 return l Configuration file of Switch C sysname SwitchC vlan batch 111 interface Vlanif111 ip address 10 0 0 2 255 255 255 0 interface GigabitEthernet1 0 0 port hybrid pvid vlan 111 port hybrid unta...

Page 168: ...D That is Switch D is the client l Switch D is the passive peer of Switch E That is Switch E is the active end Figure 3 3 Networking diagram for configuring the NTP peer mode SwitchC SwitchE SwitchD GE1 0 0 3 0 1 33 24 GE1 0 0 3 0 1 31 24 GE1 0 0 3 0 1 32 24 Configuration Roadmap The configuration roadmap is as follows 1 Configure the clock on Switch C as the master clock The clock on Switch D sho...

Page 169: ... of the clock is synchronized This means that the synchronization is complete The stratum of the clock of Switch D is 3 one stratum lower than the clock stratum of Switch C SwitchD display ntp service status clock status synchronized clock stratum 3 reference clock ID 3 0 1 31 nominal frequency 64 0029 Hz actual frequency 64 0029 Hz clock precision 2 7 clock offset 0 0000 ms root delay 62 50 ms ro...

Page 170: ... C sysname SwitchC vlan batch 100 interface Vlanif100 ip address 3 0 1 31 255 255 255 0 interface GigabitEthernet1 0 0 port hybrid pvid vlan 100 port hybrid untagged vlan 100 ntp service refclock master 2 return l Configuration file of Switch D sysname SwitchD vlan batch 100 interface Vlanif100 ip address 3 0 1 32 255 255 255 0 interface GigabitEthernet1 0 0 port hybrid pvid vlan 100 port hybrid u...

Page 171: ...ten to the broadcast packets l NTP authentication needs to be enabled Figure 3 4 Networking diagram for configuring the NTP broadcast mode GE1 0 0 VLANIF20 1 0 1 11 24 SwitchA SwitchF SwitchC SwitchD 1 0 1 2 24 GE2 0 0 VLANIF10 3 0 1 2 24 GE1 0 0 VLANIF10 3 0 1 31 24 GE1 0 0 VLANIF10 3 0 1 32 24 GE1 0 0 VLANIF20 Configuration Roadmap The configuration roadmap is as follows 1 Configure Switch C as ...

Page 172: ... 0 port hybrid pvid vlan 10 SwitchD GigabitEthernet1 0 0 port hybrid untagged vlan 10 SwitchD GigabitEthernet1 0 0 quit SwitchD interface vlanif 10 SwitchD Vlanif10 ip address 3 0 1 32 24 SwitchD Vlanif10 quit Configure the IP address of the VLANIF interface on Switch F SwitchF system view SwitchF vlan 10 SwitchF Vlan10 quit SwitchF interface gigabitethernet 2 0 0 SwitchF GigabitEthernet2 0 0 port...

Page 173: ...authentication enable SwitchD ntp service authentication keyid 16 authentication mode md5 Hello SwitchD ntp service reliable authentication keyid 16 Configure Switch D as the NTP broadcast client and configure Switch D to listen to NTP broadcast packets through VLANIF10 SwitchD interface vlanif 10 SwitchD vlanif10 ntp service broadcast client SwitchD vlanif10 quit After the configurations the cloc...

Page 174: ...ch 20 interface Vlanif20 ip address 1 0 1 11 255 255 255 0 ntp service broadcast client interface GigabitEthernet1 0 0 port hybrid pvid vlan 20 port hybrid untagged vlan 20 ospf 1 area 0 0 0 0 network 1 0 1 0 0 0 0 255 ntp service authentication enable ntp service authentication keyid 16 authentication mode md5 ENC 8HX Q Q MAF4 1 ntp service reliable authentication keyid 16 return Configuration fi...

Page 175: ...untagged vlan 20 interface GigabitEthernet2 0 0 port hybrid pvid vlan 10 port hybrid untagged vlan 10 ospf 1 area 0 0 0 0 network 1 0 1 0 0 0 0 255 network 3 0 1 0 0 0 0 255 return 3 6 4 Example for Configuring the Common NTP Multicast Mode Networking Requirements As shown in Figure 3 5 l Switch C and Switch D are on the same network segment Switch A is on another network segment Switch F connects...

Page 176: ...es of the Switches and ensure that the routes between them are reachable The configuration procedure is not mentioned Step 2 Configure the IP addresses of the Switches Configure the IP address of each interface according to Figure 3 5 Configure the IP address of the VLANIF interface on Switch C SwitchC system view SwitchC vlan 10 SwitchC Vlan10 quit SwitchC interface gigabitethernet 1 0 0 SwitchC ...

Page 177: ... VLANIF interface on Switch A SwitchA system view SwitchA vlan 20 SwitchA Vlan20 quit SwitchA interface gigabitethernet 1 0 0 SwitchA GigabitEthernet1 0 0 port hybrid pvid vlan 20 SwitchA GigabitEthernet1 0 0 port hybrid untagged vlan 20 SwitchA GigabitEthernet1 0 0 quit SwitchA interface vlanif 20 SwitchA vlanif20 ip address 1 0 1 11 24 SwitchA vlanif20 quit Step 3 Configure the NTP multicast ser...

Page 178: ...Switch D is 3 one stratum lower than the clock stratum of Switch C SwitchD display ntp service status clock status synchronized clock stratum 3 reference clock ID 3 0 1 31 nominal frequency 60 0002 Hz actual frequency 60 0002 Hz clock precision 2 18 clock offset 0 66 ms root delay 24 47 ms root dispersion 208 39 ms peer dispersion 9 63 ms reference time 17 03 32 022 UTC Apr 25 2005 C61734FD 800303...

Page 179: ... Configuration file of Switch F sysname SwitchF vlan batch 10 20 interface Vlanif10 ip address 3 0 1 2 255 255 255 0 interface Vlanif20 ip address 1 0 1 2 255 255 255 0 interface GigabitEthernet1 0 0 port hybrid pvid vlan 20 port hybrid untagged vlan 20 interface GigabitEthernet2 0 0 port hybrid pvid vlan 10 port hybrid untagged vlan 10 ospf 1 area 0 0 0 0 network 1 0 1 0 0 0 0 255 network 3 0 1 0...

Page 180: ......

Page 181: ...bes the LLDP features supported by the S9300 4 3 Configuring LLDP This section describes how to configure LLDP 4 4 Maintaining LLDP This section describes how to debug and monitor the LLDP function and how to clear the statistics of LLDP 4 5 Configuration Examples This section provides several configuration examples of LLDP Quidway S9300 Terabit Routing Switch Configuration Guide Network Managemen...

Page 182: ... IEEE 802 1ab The LLDP protocol specifies that the status information is stored on all the interfaces and the device can send its status to the neighbor stations The interfaces can also send information about changes in the status to the neighbor stations as required The neighbor stations then store the received information in the standard MIB of SNMP The NMS can search for the Layer 2 information...

Page 183: ... device This facilitates layout of the network topology and network management with a clear view of the topology status The management address is contained in the management address Type Length Value TLV field in an LLDP packet to be transmitted to neighbor stations LLDP Traps When the LLDP local system MIB or the LLDP remote system MIB changes the S9300 sends trap messages to the NMS for updating...

Page 184: ...al Setting the Time Multiplier of Device Information Held in Neighbor Stations By using this function you can set the validity period of device information stored on the neighbor stations The neighbor stations update the aging time of the device information from the sender according to the specified validity period after receiving the packet Do as follows on Switch A and Switch B 4 3 9 Optional Se...

Page 185: ...LLDP SwitchA NMS SNMP LLDP interface SNMP LLD PD U L L D P D U LLDPDU NMS Network Management System PBB TE Tunnel or MPLS LSP SwitchB Non LLDP interface Pre configuration Tasks Before configuring LLDP complete the following task l Configuring the LLDP management addresses NOTE The management address of LLDP contained in an LLDP packet is used to identify a device You need to select an IP address t...

Page 186: ...LDP is disabled globally l The LLDP management address is changed l The information about neighbor stations changes If the management address of a neighbor station is changed no trap message is sent Procedure Step 1 Run system view The system view is displayed Step 2 Run snmp agent trap enable feature name lldptrap The LLDP trap function is enabled End 4 3 3 Enabling LLDP Globally When the switche...

Page 187: ...te LLDP has been enabled globally Procedure Step 1 Run system view The system view is displayed Step 2 Run interface interface type interface number The interface view is displayed Step 3 Run undo lldp enable LLDP is disabled on the interface End 4 3 5 optional Configuring an LLDP Management Address The LLDP management address is used by the NMS to identify devices and manage the network Do as fol...

Page 188: ...sult the NMS cannot discover changes in the network topology timely l The smaller the value is the more frequently the local status information is sent to the neighbors This helps the NMS to discover changes in the network topology timely If the value is too small however LLDP packets are exchanged frequently This increases the load on the system and wastes resources Adjust the value of interval b...

Page 189: ...ore frequently the local status information is sent to the neighbors This helps the NMS to discover changes in the network topology in time If the value is too small however LLDP packets are exchanged too frequently This increases the load on the system and wastes resources Adjust the value of interval based on the following rules because the values of interval and delay affect each other l If the...

Page 190: ...default value is 4 End Example NOTE l A great value indicates that the device information is stored in the neighbor stations for a long time l The value of hold is not limited however when the value of hold x interval is greater than 65535 the hold value is invalid 4 3 9 Optional Setting the Delay for Re enabling LLDP on an Interface By using this function you can suppress the topology flapping of...

Page 191: ...traps of changes in neighbor information to the NMS is set The default delay is 5 seconds End 4 3 11 Optional Configuring the TLV in the LLDPUD The TLVs that can be encapsulated by LLDP include basic TLVs organizational specific TLVs and Media Endpoint Discovery MED TLVs Basic TLVs are essential for managing network devices The organizational specific TLVs and LLDP MED TLVs are defined by standard...

Page 192: ...ng the LLDP MED Capabilities TLV To disable the LLDP MED Capabilities TLV you must disable the other types of LLDP MED TLVs first To disable the MAC PHY Configuration Status TLVs you must disable the LLDP MED Capabilities TLV first l The 802 3 MAC PHY Configuration Status TLVs are advertised automatically only after the LLDP MED Capabilities TLV is advertised l If you disable the LLDP MED TLVs and...

Page 193: ...an interface and delay for sending traps of neighbor changes are set correctly Quidway display lldp local System information Chassis type macAddress Chassis ID 00e0 11fc 1710 System name Quidway System description Quidway S9300 Huawei Versatile Routing Platform Software VRP R Software Version 5 70 S9300 V100R003C00B042 Copyright c 2003 2010 Huawei Technologies Co Ltd System capabilities supported ...

Page 194: ...enabled No PSE pairs control ability No Power pairs Unknown Port power classification Unknown Link aggregation supported Yes Link aggregation enabled No Aggregation port ID 0 Maximum frame Size 9216 MED port information Media policy type Unknown Unknown Policy Yes VLAN tagged No Media policy VlanID 0 Media policy L2 priority 0 Media policy Dscp 0 Power Type Unknown PoE PSE power source Unknown Por...

Page 195: ...led No PSE pairs control ability No Power pairs Unknown Port power classification Unknown Link aggregation supported Yes Link aggregation enabled No Aggregation port ID 0 Maximum frame Size 1536 MED Device information Device class Network Connectivity HardwareRev LE01MCUA VER A FirmwareRev NC SoftwareRev Version 5 70 V100R003C00B042 SerialNum NA Manufacturer name NA Model name NA Asset tracking id...

Page 196: ...display the statistics of LLDP packets on an interface l Run the display lldp neighbor interface interface type interface number command to display neighbor information about an interface l Run the debugging lldp all interface interface type interface number event packet command in the user view to enbale the debugging of the LLDP End 4 5 Configuration Examples This section provides several config...

Page 197: ...on Switch A and Switch B 3 Configure the management addresses of Switch A and Switch B 4 Configure the LLDP attributes of Switch A and Switch B Data Preparation To complete the configuration you need the following data l The management address of Switch A is 10 10 10 1 and the management address ofSwitch B is 10 10 10 2 l The interval for sending LLDP packets is 60 seconds The delay for sending LL...

Page 198: ... the configuration of Switch A Step 5 Verify the configuration Check whether LLDP is enabled whether the management addresses are configured whether the LLDP trap function is enabled and whether the LLDP attributes are properly set l Check the configuration of Switch A SwitchA display lldp local System information Chassis type macAddress Chassis ID 00e0 fc33 0011 System name S9303 119 System descr...

Page 199: ...te Neighbors Aged 0 Total Neighbors 1 Port information Interface GigabitEthernet1 0 1 LLDP Enable Status enabled default is disabled Total Neighbors 1 Port ID subtype interfaceName Port ID GigabitEthernet1 0 1 Port description HUAWEI Quidway Series GigabitEthernet1 0 1 Interface Port And Protocol vlan ID PPVID don t supported Port VLAN ID PVID 0 VLAN name of VLAN 1 vlan1 Protocol identity STP RSTP...

Page 200: ...bilities enabled bridge Management address type ipV4 Management address 10 10 10 2 Expired time 118s Port VLAN ID PVID 1 VLAN name of VLAN 1 vlan1 Protocol identity STP RSTP MSTP LACP EthOAM CFM Auto negotiation supported Yes Auto negotiation enabled Yes OperMau speed 1000 duplex Full Power port class PD PSE power supported No PSE power enabled No PSE pairs control ability No Power pairs Unknown P...

Page 201: ... feature name lldptrap lldp message transmission interval 60 lldp message transmission delay 9 lldp trap interval 10 lldp management address 10 10 10 1 return l Configuration file of Switch B sysname SwitchB interface Ethernet0 0 0 ip address 10 10 10 2 255 255 255 0 lldp enable snmp agent trap enable feature name lldptrap lldp message transmission interval 60 lldp message transmission delay 9 lld...

Page 202: ...ws 1 Enable LLDP globally on Switch A and Switch B 2 Configure the management addresses of Switch A and Switch B so that the NMS can identify the switchs 3 Add the Ethernet interfaces of Switch A and Switch B to the Eth Trunk 4 Disable LLDP on the Eth Trunk member interfaces of Switch A and Switch B Data Preparation To complete the configuration you need the following data l Management address of ...

Page 203: ...SwitchB GigabitEthernet2 0 1 quit SwitchB interface gigabitethernet 2 0 2 SwitchB GigabitEthernet2 0 2 eth trunk 1 SwitchB GigabitEthernet2 0 2 quit SwitchB interface gigabitethernet 2 0 3 SwitchB GigabitEthernet2 0 3 eth trunk 1 Step 4 Disable LLDP on an Eth Trunk interface on each of Switch A and Switch B Configure Switch A SwitchA GigabitEthernet1 0 3 undo lldp enable SwitchA GigabitEthernet1 0...

Page 204: ... LLDP Notification Enable enabled default is disabled Management Address IP 10 10 10 1 Remote Table Statistics Remote Table Last Change Time 0 days 15 hours 1 minutes 21 seconds Remote Neighbors Added 1 Remote Neighbors Deleted 0 Remote Neighbors Dropped 0 Remote Neighbors Aged 0 Total Neighbors 2 Port information Interface GigabitEthernet1 0 1 LLDP Enable Status enabled default is disabled Total ...

Page 205: ...on t supported Port VLAN ID PVID 1 VLAN Name of VLAN 1 vlan1 Protocol identity STP RSTP MSTP LACP EthOAM CFM Auto negotiation supported Yes Auto negotiation enabled Yes OperMau speed 1000 duplex Full Power port class PD PSE power supported No PSE power enabled No PSE pairs control ability No Power pairs Unknown Port power classification Unknown Link aggregation supported Yes Link aggregation enabl...

Page 206: ...n Policy Yes VLAN tagged No Media policy VlanID 0 Media policy L2 priority 0 Media policy Dscp 0 Power Type Unknown PoE PSE power source Unknown Port PSE Priority Unknown Port Available power value 0 l Check the configuration of Switch B See the procedure for checking the configuration of Switch A Check whether the member interfaces are added to Eth Trunk 1 l Check the configuration of Switch A Sw...

Page 207: ...face GigabitEthernet2 0 3 eth trunk 1 undo lldp enable lldp management address 10 10 10 2 return 4 5 3 Example for Configuring LLDP When an Interface Has Multiple Neighbors Networking Requirements As shown in Figure 4 4 links exist among Switch A Switch B and Switch C The reachable routes exist between Switch A and the NMS and between Switch C and the NMS Switch A Switch B and Switch C need to exc...

Page 208: ...ch C 2 Configure the management addresses of Switch A Switch B and Switch C so that the NMS can identify the devices Data Preparation To complete the configuration you need the following data l Management addresses of Switch A Switch B and Switch C Procedure Step 1 Enable LLDP globally on Switch A Switch B and Switch C Configure Switch A Quidway system view Quidway sysname SwitchA SwitchA lldp ena...

Page 209: ... Software Version 5 70 S9300 V100R003C00B042 Copyright c 2003 2010 Huawei Technologies Co Ltd System capabilities supported bridge System capabilities enabled bridge LLDP Up time 2009 2 13 18 31 37 MED system information Device class Network Connectivity MED inventory information of master board HardwareRev LE02SRUA VER A FirmwareRev NC SoftwareRev Version 5 70 V100R003C00B042 SerialNum NA Manufac...

Page 210: ...on enabled Yes OperMau speed 1000 duplex Full Power port class PD PSE power supported No PSE power enabled No PSE pairs control ability No Power pairs Unknown Port power classification Unknown Link aggregation supported No Link aggregation enabled No Aggregation port ID 0 Maximum frame Size 1526 MED port information Media policy type Unknown Unknown Policy Yes VLAN tagged No Media policy VlanID 0 ...

Page 211: ...rt power classification Unknown Link aggregation supported Yes Link aggregation enabled No Aggregation port ID 0 Maximum frame Size 9216 MED Device information Device class Network Connectivity HardwareRev LE01MCUA VER A FirmwareRev NC SoftwareRev Version 5 50 V100R003C00B042 SerialNum NA Manufacturer name HUAWEI TECH CO LTD Model name NA Asset tracking identifier NA Media policy type Unknown Unkn...

Page 212: ... 0 0 ip address 10 10 10 2 255 255 255 0 lldp enable lldp management address 10 10 10 2 return l Configuration file of Switch C sysname SwitchC interface Ethernet0 0 0 ip address 10 10 10 3 255 255 255 0 lldp enable lldp management address 10 10 10 3 return 4 LLDP Configuration Quidway S9300 Terabit Routing Switch Configuration Guide Network Management 4 32 Huawei Proprietary and Confidential Copy...

Page 213: ...and the destination Tracert is helpful in testing network reachability and locating the fault on the network 5 3 Performing Ping and Tracert Operations This section describes the execution of the ping and tracert commands 5 4 Debugging Ping and Tracert This section describes how to locate faults through ICMP messages 5 5 Configuration Examples This section provides a configuration example of ping ...

Page 214: ...ack an ICMP Echo Reply message and measuring the interval between sending the ICMP Echo Request message and receiving the ICMP Echo Reply message Figure 5 2 Format of ICMP Echo Request and Echo Reply messages Data Checksum Code Type Identifier Sequence number 15 7 23 31 0 Figure 5 2 shows the format of ICMP Echo Request and Echo Reply messages The length of the Data field is a variable You can spe...

Page 215: ...P port number in the UDP datagram by 1 respectively and then sends out the UDP datagram again 4 Perform Step 2 and Step 3 the log host receives the UDP datagram from the S9300 5 After receiving the UDP datagram from the S9300 the log host finds that the destination is itself It begins to process the datagram The log host tries to find the upper layer protocol corresponding to the destination UDP p...

Page 216: ...device 2 IP address of the gateway 5 3 2 Checking Network Connectivity Through the Ping Operation Context Do as follows on the S9300 Procedure Step 1 Run ping ip a source ip address c count d f h ttl value i interface type interface number m time n p pattern q r s packetsize t timeout tos tos value v host Network connectivity is tested Only some of the parameters are specified in the preceding pin...

Page 217: ... the fault on the network Only some of the parameters are specified in the preceding tracert command For details on more parameters refer to the Quidway S9300 Terabit Routing Switch Command Reference The output of the tracert command displays a list of gateways traversed between the source and the destination hosts Quidway tracert 18 26 0 115 traceroute to 18 26 0 115 18 26 0 115 max hops 30 packe...

Page 218: ...5 Configuration Examples This section provides a configuration example of ping and tracert operations 5 5 1 Example for Performing Ping and Tracert Operations 5 5 1 Example for Performing Ping and Tracert Operations Networking Requirements As shown in Figure 5 4 after configuring Switch A you check the link between Switch A and the log host If Switch A and the log host are disconnected you cannot ...

Page 219: ... ping 3 1 1 2 PING 3 1 1 2 56 data bytes press CTRL_C to break Request time out Request time out Request time out Request time out Request time out 3 1 1 2 ping statistics 5 packet s transmitted 0 packet s received 100 00 packet loss The display on Switch A shows that the log host is unreachable which indicates that a fault occurs on some link segment between Switch A and the log host Step 2 Run t...

Page 220: ...sure that Switch A and the log host can communicate properly End Configuration Files None 5 Ping and Tracert Quidway S9300 Terabit Routing Switch Configuration Guide Network Management 5 8 Huawei Proprietary and Confidential Copyright Huawei Technologies Co Ltd Issue 03 2010 09 20 ...

Page 221: ...er and NQA test instance 6 4 NQA Supported by the S9300 This part describes NQA test types and scheduling modes supported by the S9300 6 5 Configuring the ICMP Test This section describes how to configure an Internet Control Message Protocol ICMP test to check the IP network connectivity 6 6 Configuring the FTP Download Test This section describes how to configure a File Transfer Protocol FTP down...

Page 222: ...6 17 Configuring the LSP Jitter Test This section describes how to configure an LSP jitter test to measure jitter in the LSP during the packet transmission 6 18 Configuring the LSP Traceroute Test This section describes how to configure an LSP traceroute test to check the connectivity between Label Switching Routers LSRs along the LSP 6 19 Configuring an ICMP Jitter Test This section describes how...

Page 223: ...ay Thresholds This section describes how to set a round trip delay transmission threshold in an NQA test instance 6 32 Configuring Uni directional Transmission Delay Thresholds This section describes how to set a one way transmission delay threshold in an NQA test instance After a one way transmission delay threshold is set in an NQA test instance the test result will contain the statistics on the...

Page 224: ...n provides several configuration examples of NQA 6 NQA Configuration Quidway S9300 Terabit Routing Switch Configuration Guide Network Management 6 4 Huawei Proprietary and Confidential Copyright Huawei Technologies Co Ltd Issue 03 2010 09 20 ...

Page 225: ...ctive tool to diagnose and locate faults in a network 6 2 Comparisons Between NQA and Ping This part describes the differences between NQA and Ping tests NQA is the extension and enhancement of Ping By sending an Internet Control Message Protocol ICMP Echo Request packet from the local and expecting an ICMP Echo Reply packet from the specified destination the Ping program can test the round trip t...

Page 226: ...through the monitoring function Figure 6 2 Relationship between the NQA client and the NQA server NQA Client NQA Server IP MPLS Network You can create multiple TCP or UDP monitoring services on an NQA server Each monitoring service corresponds to a specific destination address and a port number The destination address and port number can be repeatedly specified Performing NQA Tests After being con...

Page 227: ...e continuous sending of 3000 packets and support voice traffic simulation l Supports 2000 tests l Supports statistics collection at the millisecond level l Supports hot backup This function implements the synchronization of the configurations of NQA tests between the master control board and the slave board Therefore after the master slave switchover NQA tests can be performed normally l Supports ...

Page 228: ...rding to their OIDs When the test result exceeds the threshold alarms are triggered based on the preset events 6 5 Configuring the ICMP Test This section describes how to configure an Internet Control Message Protocol ICMP test to check the IP network connectivity 6 5 1 Establishing the Configuration Task Before configuring an ICMP test familiarize yourself with the applicable environment complete...

Page 229: ...nqa test instance admin name test name An NQA test instance is created and the test instance view is displayed Step 3 Run test type icmp The test type is set to ICMP Step 4 Run destination address ipv4 ip address The destination IP address is configured Step 5 Optional Perform the following as required to configure other ICMP test parameters l To configure the VPN instance to be tested run the vpn...

Page 230: ...e command Step 6 Run start The NQA test is started Select the start mode as required because the start command has several forms l To perform the NQA test immediately run the start now end at yyyy mm dd hh mm ss delay seconds second hh mm ss lifetime seconds second hh mm ss command The test instance is started immediately l To perform the NQA test at the specified time run the start at yyyy mm dd ...

Page 231: ...ut number 0 System busy operation number 0 Connection fail number 0 Operation sequence errors number 0 RTT Stats errors number 0 Destination ip address 10 112 58 3 Min Max Average Completion Time 2 5 3 Sum Square Sum Completion Time 9 33 Last Good Probe Time 2010 06 21 15 33 09 2 Lost packet ratio 0 6 6 Configuring the FTP Download Test This section describes how to configure a File Transfer Proto...

Page 232: ...r name and password and the login directory l Configuring routes between the NQA FTP client and the FTP server Data Preparation To configure the FTP download test you need the following data No Data 1 Administrator name and test name 2 IP address of the FTP server 3 Optional Source IP address of the FTP operation and VPN instance name and source and destination port numbers of the FTP operation 4 ...

Page 233: ...port number run the destination port port number command l To configure the NQA test packet to be sent without searching the routing table run the sendpacket passroute command Step 6 Run ftp operation get The FTP operation type is set to Get By default the FTP operation type is Get Step 7 Run ftp username name The FTP user name is configured Step 8 Run ftp password password The FTP password used d...

Page 234: ...t function are complete Context NOTE NQA test results cannot be displayed automatically on a terminal You must run the display nqa results command to view test results By the default the command output contains the records about only the last five tests Procedure Step 1 Run the display nqa results test instance admin name test name command to view the test results on the NQA client End Example Run...

Page 235: ...This can help you complete the configuration task quickly and accurately Applicable Environment In an FTP upload test the local device functions as an FTP client intending to upload the specified file to an FTP server The test result contains the statistics about each FTP phase including the time to set up an FTP control connection and the time to transport the data In an FTP upload test you can s...

Page 236: ... Run destination address ipv4 ip address The destination IP address is configured Step 5 Optional Perform the following as required to configure other parameters for the FTP upload test l To configure the source IP address run the source address ipv4 ip address command l To configure the VPN instance to be tested run the vpn instance vpn instance name command l To configure the source port run the...

Page 237: ...ile with a relatively small size If the file is large the test may fail because of timeout Step 10 Run start The NQA test is started Select the start mode as required because the start command has several forms l To perform the NQA test immediately run the start now end at yyyy mm dd hh mm ss delay seconds second hh mm ss lifetime seconds second hh mm ss command The test instance is started immedi...

Page 238: ... number 0 Drop operation number 0 Disconnect operation number 0 CtrlConnTime Min Max Average 438 438 438 DataConnTime Min Max Average 218 218 218 SumTime Min Max Average 656 656 656 Average RTT 380 Lost packet ratio 0 6 8 Configuring the HTTP Test This section describes how to configure a Hypertext Transfer Protocol HTTP test to check the responding speed of the HTTP service in each phase 6 8 1 Es...

Page 239: ...e time the client sends the Get or Post packets to an HTTP server to the time the Echo packet sent by the client reaches the HTTP server Pre configuration Tasks Before configuring the HTTP test complete the following tasks l Configuring the HTTP server l Configuring routes between the NQA client and the HTTP server Data Preparation To configure the HTTP test you need the following data No Data 1 A...

Page 240: ... the fail percent percent command l To configure the NQA test packet to be sent without searching the routing table run the sendpacket passroute command Step 6 Run http operation get post The HTTP operation type is configured By default the HTTP operation type is Get Step 7 Run http url deststring verstring The web page to be visited and the HTTP version are configured NOTE Run the http url destst...

Page 241: ...ly on a terminal You must run the display nqa results command to view test results By the default the command output contains the records about only the last five tests Procedure Step 1 Run the display nqa results test instance admin name test name command to view the test results on the NQA client End Example Run the display nqa results command If the test is successful the following is displayed...

Page 242: ...ring a DNS test familiarize yourself with the applicable environment complete the pre configuration tasks and obtain the required data This can help you complete the configuration task quickly and accurately Applicable Environment The DNS test is performed to obtain the speed at which the specified domain name is resolved to an IP address Pre configuration Tasks Before configuring the DNS test com...

Page 243: ...lect the start mode as required because the start command has several forms l To perform the NQA test immediately run the start now end at yyyy mm dd hh mm ss delay seconds second hh mm ss lifetime seconds second hh mm ss command The test instance is started immediately l To perform the NQA test at the specified time run the start at yyyy mm dd hh mm ss end at yyyy mm dd hh mm ss delay seconds sec...

Page 244: ...s number 1 Drop operation number 0 Disconnect operation number 0 Operation timeout number 0 System busy operation number 0 Connection fail number 0 Operation sequence errors number 0 RTT Stats errors number 0 Destination ip address 10 82 55 191 Min Max Average Completion Time 4 4 4 Sum Square Sum Completion Time 4 16 Last Good Probe Time 2010 06 21 15 40 12 6 Lost packet ratio 0 6 10 Configuring t...

Page 245: ...een the NQA client and the device to be tested Data Preparation To configure the Traceroute test you need the following data No Data 1 Administrator name and test name 2 Destination IP address 3 Optional VPN instance name maximum hops initial TTL and maximum TTL value of the packet and source IP address and destination port of the packet 4 Start mode and end mode of the test 6 10 2 Configuring Tra...

Page 246: ...packet passroute command Step 6 Run start The NQA test is started Select the start mode as required because the start command has several forms l To perform the NQA test immediately run the start now end at yyyy mm dd hh mm ss delay seconds second hh mm ss lifetime seconds second hh mm ss command The test instance is started immediately l To perform the NQA test at the specified time run the start...

Page 247: ... 0 Last Good Probe Time 2010 06 21 15 41 01 7 Destination ip address 10 112 58 3 Lost packet ratio 0 6 11 Configuring the SNMP Query Test This section describes how to configure a Simple Network Management Protocol SNMP query test to check the communications between the host and SNMP agent 6 11 1 Establishing the Configuration Task Before configuring an SNMP query test familiarize yourself with th...

Page 248: ...terval for sending test packets and percentage of the failed NQA tests 4 Start mode and end mode of the test 6 11 2 Configuring the SNMP Query Test Parameters This part describes how to set SNMP query test parameters Context Do as follows on the NQA client Procedure Step 1 Run system view The system view is displayed Step 2 Run nqa test instance admin name test name An NQA test instance is created...

Page 249: ...art now end at yyyy mm dd hh mm ss delay seconds second hh mm ss lifetime seconds second hh mm ss command The test instance is started immediately l To perform the NQA test at the specified time run the start at yyyy mm dd hh mm ss end at yyyy mm dd hh mm ss delay seconds second hh mm ss lifetime seconds second hh mm ss command The test instance is started at a specified time l To perform the NQA ...

Page 250: ...t 6 12 1 Establishing the Configuration Task Before configuring a TCP test familiarize yourself with the applicable environment complete the pre configuration tasks and obtain the required data This can help you complete the configuration task quickly and accurately 6 12 2 Configuring the TCP Server The IP address and number of the port monitored by the server must be identical with those configur...

Page 251: ... Server The IP address and number of the port monitored by the server must be identical with those configured on the client Context Do as follows on the NQA server TCP server Procedure Step 1 Run system view The system view is displayed Step 2 Run nqa server tcpconnect vpn instance vpn instance name ip address port number The TCP monitoring service is configured NOTE Note that the IP address and p...

Page 252: ...re the interval for sending test packets run the interval seconds interval command l To configure the percentage of the failed NQA tests run the fail percent percentcommand l To configure the NQA test packets to be sent without searching the routing table run the sendpacket passroute command Step 7 Run start The NQA test is started Select the start mode as required because the start command has se...

Page 253: ...s the records about only the last five tests Procedure l Run the display nqa results test instance admin name test name command to view the test results on the NQA client l Run the display nqa server command to view the information about the NQA server End Example Run the display nqa results command If the test is successful the following is displayed Quidway display nqa results NQA entry admin tc...

Page 254: ...e Configuration After configuring the UDP test you can view the test result 6 13 1 Establishing the Configuration Task Before configuring a UDP test familiarize yourself with the applicable environment complete the pre configuration tasks and obtain the required data This can help you complete the configuration task quickly and accurately Applicable Environment To obtain the time for the specified...

Page 255: ... ip address port number The UDP monitoring service is configured Note that the IP address and port number monitored by the server should be consistent with those configured on the client End 6 13 3 Configuring the UDP Client This part describes how to set UDP test parameters Context Do as follows on the NQA client UDP client Procedure Step 1 Run system view The system view is displayed Step 2 Run ...

Page 256: ...lect the start mode as required because the start command has several forms l To perform the NQA test immediately run the start now end at yyyy mm dd hh mm ss delay seconds second hh mm ss lifetime seconds second hh mm ss command The test instance is started immediately l To perform the NQA test at the specified time run the start at yyyy mm dd hh mm ss end at yyyy mm dd hh mm ss delay seconds sec...

Page 257: ...03 16749 Last Good Probe Time 2006 8 5 16 9 21 6 Lost packet ratio 0 Run the display nqa server command If the status of the NQA server is displayed it means that the configuration succeeds Quidway display nqa server NQA Server Max 5000 NQA Server Num 1 NQA Concurrent TCP Server 0 NQA Concurrent UDP Server 1 nqa server udpecho 10 112 58 3 3000 ACTIVE 6 14 Configuring the Jitter Test This section d...

Page 258: ...tter time The maximum minimum and average jitter time calculated based on the information received on the source can clearly show the network status In a Jitter test you can set the number of packets to be sent consecutively Through this setting certain traffic can be simulated within a certain period For example if you set 3000 UDP packets to be sent at an interval of 20 milliseconds Then in one ...

Page 259: ...ew is displayed Step 2 Run nqa server udpecho vpn instance vpn instance name ip address port number The UDP monitoring service is configured Note that the IP address and port number monitored by the Jitter server should be consistent with those configured on the client End 6 14 3 Configuring the Jitter Client This part describes how to configure the client of the jitter test Context NOTE The syste...

Page 260: ...st packets sent each time run the jitter packetnum number command The Jitter test is used to collect statistics and perform analysis of the transmission delay variation of the UDP packets The system sends multiple test packets for each test to make the statistics more accurate The more test packets are sent the more accurate the statistics and analysis are This process however is time consuming NO...

Page 261: ...h mm ss delay seconds second hh mm ss lifetime seconds second hh mm ss command The test instance is started after a certain delay End 6 14 4 Checking the Configuration After configuring the jitter test you can view the test result Prerequisite The configurations of the Jitter Test function are complete Context NOTE NQA test results cannot be displayed automatically on a terminal You must run the d...

Page 262: ... 0 Packet Loss Unknown 0 Average of Jitter 1 Average of Jitter SD 1 Average of Jitter DS 1 jitter out value 0 0062500 jitter in value 0 0020833 NumberOfOWD 60 Packet Loss Ratio 0 OWD SD Sum 0 OWD DS Sum 0 ICPIF value 0 MOS CQ value 0 6 15 Configuring the MAC Ping Test This section describes how to perform the MAC ping test with NQA 6 15 1 Establishing the Configuration Task 6 15 2 Setting Paramete...

Page 263: ...QA test instance is created and the test instance view is displayed Step 4 Run test type macping The test type is set to MAC Ping Step 5 Run destination address mac mac address The destination MAC address of the MAC ping test is configured Step 6 Run md md name ma ma name The MD and the MA are specified Step 7 Optional Run the following commands to set other parameters for the MAC Ping test l Run ...

Page 264: ...al You must run the display nqa results command to view the test results The command output contains only the records about the last five tests After the MAC ping test is successful you can see the following information by running the display nqa results command Quidway display nqa results NQA entry admin test testflag is inactive testtype is macping 1 Test 1 result The test is finished SendProbe ...

Page 265: ... set parameters for the LSP ping test 6 16 3 Configuring the LSP Ping Test Parameters for the MPLS TE Tunnel Before performing the TE LSP ping test you need set parameters for a TE LSP ping test 6 16 4 Configuring the LSP Ping Test Parameters for the CR LSP Hotstandby Tunnel Before performing the LSP ping test you need set LSP ping test parameters for CR LSP tunnels in hot standby mode 6 16 5 Chec...

Page 266: ...he MPLS TE tunnel interface number of the TE tunnel 3 Optional Parameters of the LSP Ping test including the response mode of the Echo packet packet size TTL LSP EXP value padding character timeout period of the packet probe times test interval and percentage of the failed NQA tests 4 Start mode and end mode of the test 6 16 2 Configuring the LSP Ping Test Parameters for the LDP Tunnel Before perf...

Page 267: ...tasize and the size of the packet header should be less than the MTU of the interface otherwise the test may fail l To configure the maximum TTL value of the packet run the ttl number command l To configure the LSP EXP value run the lsp exp exp command l To configure the padding character of the packet run the datafill fillstring command l To configure the interval for sending test packets run the...

Page 268: ...er The TE tunnel interface to be tested is configured Step 6 Optional Perform the following as required to configure other parameters for the LSP Ping test l To configure the response mode of the Echo packet run the lsp replymode no reply udp udp via vpls udp router alert level control channel command NOTE In a uni directional LSP Ping test if the lsp replymode no reply command is configured the t...

Page 269: ...nstance is started immediately l To perform the NQA test at the specified time run the start at yyyy mm dd hh mm ss end at yyyy mm dd hh mm ss delay seconds second hh mm ss lifetime seconds second hh mm ss command The test instance is started at a specified time l To perform the NQA test after a certain delay period run the start delay seconds second hh mm ss end at yyyy mm dd hh mm ss delay secon...

Page 270: ...e packet size run the datasize size command NOTE The sum of the data size and the size of the packet header must be less than the MTU of the interface otherwise the test may fail l To configure the maximum TTL value of the packet run the ttl number command l To configure the LSP EXP value run the lsp exp exp command l To configure the padding character of the packet run the datafill fillstring com...

Page 271: ...llowing is displayed l Statistics about errors Number of unroutable connections Number of wrong sequence numbers Timeout times of the test packets l History statistics of each test packet Timestamp added when each test packet is sent Timestamp added when each test packet is received Packets status displayed on the NQA client l Statistics of results of each test Number of successful tests Sum of th...

Page 272: ...e LSP Jitter Test Parameters for the MPLS TE Tunnel This part describes how to set parameters for a TE LSP jitter test 6 17 4 Checking the Configuration After configuring the LSP jitter test you can view the test result 6 17 1 Establishing the Configuration Task Before configuring an LSP jitter test familiarize yourself with the applicable environment complete the pre configuration tasks and obtai...

Page 273: ...yed Step 2 Run nqa test instance admin name test name An NQA test instance is created and the test instance view is displayed Step 3 Run test type lspjitter The test type is set to LSP Jitter Step 4 Run lsp type ipv4 The tunnel type is set to be the LSP tunnel Step 5 Run destination address ipv4 ip address lsp masklen masklen lsp loopback loopback address The destination IP address of the LSP Jitt...

Page 274: ...ercent percent command Step 7 Run start The NQA test is started Select the start mode as required because the startcommand has several forms l To perform the NQA test immediately run the start now end at yyyy mm dd hh mm ss delay seconds second hh mm ss lifetime seconds second hh mm ss command The test instance is started immediately l To perform the NQA test at the specified time run the start at...

Page 275: ...displays the number of the timeout packets If the test fails the test result displays the number of the discarded packets l To configure the source IP address run the source address ipv4 ip address command l To configure the packet size run the datasize size command l To configure the maximum TTL value of the packet run the ttl number command l To configure the LSP EXP value run the lsp exp exp co...

Page 276: ... LSP Test function are complete Context NOTE NQA test results cannot be displayed automatically on a terminal You must run the display nqa results command to view test results By the default the command output contains the records about only the last five tests Procedure Step 1 Run the display nqa results command to view the test results on the NQA client End Example For the LSP Jitter test run th...

Page 277: ...g Routers LSRs along the LSP 6 18 1 Establishing the Configuration Task Before configuring an LSP traceroute test familiarize yourself with the applicable environment complete the pre configuration tasks and obtain the required data This can help you complete the configuration task quickly and accurately 6 18 2 Configuring the LSP Traceroute Parameters for the LDP Tunnel This part describes how to...

Page 278: ...S Echo Reply packet is returned if the TTL value times out l The sender continues to send Echo Request packets with the gradually increased TTL value When all Label Switching Routers LSRs along the LSP return Echo packets the Traceroute process is completed l The sender collects the test results based on the received Echo packets Pre configuration Tasks Before configuring the LSP Traceroute test y...

Page 279: ...no reply udp udp via vpls udp router alert level control channel command NOTE In a uni directional LSP Traceroute test if the lsp replymode no reply command is configured the test result displays that the test fails regardless of whether the test is successful or fails If the test is successful the test result also displays the number of the timeout packets If the test fails the test result displa...

Page 280: ...etime seconds second hh mm ss command The test instance is started after a certain delay End 6 18 3 Configuring LSP Traceroute Test Parameters for the MPLS TE Tunnel This part describes how to set parameters for a TE LSP traceroute test Context Do as follows on the NQA client Procedure Step 1 Run system view The system view is displayed Step 2 Run nqa test instance admin name test name An NQA test...

Page 281: ...The NQA test is started Select the start mode as required because the start command has several forms l To perform the NQA test immediately run the start now end at yyyy mm dd hh mm ss delay seconds second hh mm ss lifetime seconds second hh mm ss command The test instance is started immediately l To perform the NQA test at the specified time run the start at yyyy mm dd hh mm ss end at yyyy mm dd ...

Page 282: ...r the test actually succeeds or fails If the test succeeds the test result shows the number of timeout packets If the test fails the test result shows the number of discarded packets l To configure the LSP EXP value run the lsp exp exp command l To configure after how many hops a test is considered failed run the tracert hopfailtimes times command l To configure the initial and the maximum TTL val...

Page 283: ...lowing is displayed l Statistics about errors Number of unroutable connections Number of wrong sequence numbers Timeout times of the test packets l History statistics of each test packet Timestamp added when each test packet is sent Timestamp added when each test packet is received Packets status displayed on the NQA client l Statistics of results of each test Number of successful tests Sum of the...

Page 284: ...arameters for the ICMP Jitter Test This part describes how to set ICMP jitter test parameters 6 19 3 Checking the Configuration After configuring the ICMP jitter test you can view the test result 6 19 1 Establishing the Configuration Task Before configuring an ICMP jitter test familiarize yourself with the applicable environment complete the pre configuration tasks and obtain the required data Thi...

Page 285: ... 2 Destination IP address 3 Optional Name of a VPN instance source IP address number of test probes sent each time number of test packets sent each time interval for sending test packets ratio of the failed NQA tests and version number of jitter packets 4 Start mode and end mode 6 19 2 Configuring Parameters for the ICMP Jitter Test This part describes how to set ICMP jitter test parameters Contex...

Page 286: ...sed to configure the number of times for the jitter test and the jitter packetnum command is used to configure the number of test packets to be sent during each test In actual configuration the product of the number of times for the jitter test multiplied by the number of test packets must be less than 3000 l Run interval milliseconds interval seconds interval The interval for sending test packets...

Page 287: ...heck the test results Procedure Step 1 Run the display nqa results test instance admin name test name command to check results on the NQA client End Example If the ICMP jitter test succeeds you can view the following information by running the display nqa results command Quidway display nqa results test instance admin icmpjitter NQA entry admin icmpjitter testFlag is inactive testtype is jitter 1 ...

Page 288: ...h Jitter Test This part describes how to set path jitter test parameters 6 20 3 Checking the Configuration After configuring the path jitter test you can view the test result 6 20 1 Establishing the Configuration Task Before configuring a path jitter test familiarize yourself with the applicable environment complete the pre configuration tasks and obtain the required data This can help you complet...

Page 289: ...d Step 3 Run test type pathjitter The type of the test instance is configured as path jitter Step 4 Run destination address ipv4 ip address The destination IP address is configured Step 5 Optional Run the following commands to configure other parameters for the path jitter test l Run icmp jitter mode icmp echo icmp timestamp The mode of the path jitter test is configured l Run vpn instance vpn ins...

Page 290: ...rm the NQA test immediately run the start now end at yyyy mm dd hh mm ss delay seconds second hh mm ss lifetime seconds second hh mm ss command The test instance is started immediately l To perform the NQA test at the specified time run the start at yyyy mm dd hh mm ss end at yyyy mm dd hh mm ss delay seconds second hh mm ss lifetime seconds second hh mm ss command The test instance is started at ...

Page 291: ... Sum 14 Negative SD Square Sum 29 Negative DS Square Sum 16 Max Delay SD 2 Max Delay DS 1 Average of Jitter 1 NumberOfOWD 60 Average of Jitter SD 1 Average of Jitter DS 1 jitter out value 0 4414088 jitter in value 0 3527651 OWD SD Sum 52 OWD DS Sum 3 2 Hop 2 Destination ip address 110 1 1 1 Jitter Completion Status failed Jitter Finish Status finished SendProbe 60 ResponseProbe 0 Min Max Avg Sum R...

Page 292: ...es how to start the MTrace test instance to perform the MTrace test for the RPF path from the multicast source to the querier 6 21 6 Checking the Configuration After performing the MTrace test for the RPF path from the multicast source to the querier you can view the test result 6 21 1 Establishing the Configuration Task Before configuring an MTrace test for the RPF path from the multicast source ...

Page 293: ...ng the MTrace test for the RPF path from the multicast source to the querier Context Do as follows on the switch that functions as the NQA client Procedure Step 1 Run system view The system view is displayed Step 2 Run nqa test instance admin name test name An NQA test instance is created and the test instance view is displayed Step 3 Run test type mtrace The test type is set to MTrace Step 4 Run ...

Page 294: ...nd 6 21 4 Optional Adjusting the Performance of the NQA MTrace Test This part describes how to set optional MTrace test parameters according to the network operating status Context Do as follows on the switch with the MTrace test being configured NOTE The steps described in this procedure are all optional Procedure Step 1 Run system view The system view is displayed Step 2 Run nqa test instance ad...

Page 295: ...s an MTrace operation if receiving no IGMP Tracert Response packet within the timeout period Step 8 Run quit Exit from the test instance view End 6 21 5 Starting the NQA MTrace Test This part describes how to start the MTrace test instance to perform the MTrace test for the RPF path from the multicast source to the querier Context Do as follows on the switch that functions as the NQA client NOTE T...

Page 296: ... test results on the NQA client l Run the display nqa history command to view the history of the NQA test l Run the display mtrace statistics command to view the statistics of the MTrace packets End Example Run the display nqa agent command If information about the NQA test is displayed it means that the test is successful For example Quidway display nqa agent admin aa verbose nqa test instance aa...

Page 297: ...onfiguring an MTrace test for the multicast path from the multicast source to the querier familiarize yourself with the applicable environment complete the pre configuration tasks and obtain the required data This can help you complete the configuration task quickly and accurately Applicable Environment To check the multicast path from the multicast source to the querier you can perform the NQA MT...

Page 298: ...instance admin name test name An NQA test instance is created and the test instance view is displayed Step 3 Run test type mtrace The test type is set to MTrace Step 4 Run quit Exit from the test instance view End 6 22 3 Configuring the NQA MTrace Test This part describes how to set parameters for the MTrace test for the multicast path from the multicast source to the querier Context Do as follows...

Page 299: ...from the test instance view End 6 22 4 Optional Adjusting the Performance of the NQA MTrace Test This part describes how to set optional MTrace test parameters according to the network operating status Context Do as follows on the switch with the MTrace test being configured NOTE The steps described in this procedure are all optional Procedure Step 1 Run system view The system view is displayed St...

Page 300: ...n MTrace operation if receiving no IGMP Tracert Response packet within the timeout period Step 8 Run quit Exit from the test instance view End 6 22 5 Starting the NQA MTrace Test This part describes how to start the MTrace test instance to perform the MTrace test for the multicast path from the multicast source to the querier Context Do as follows on the switch that functions as the NQA client NOT...

Page 301: ...e NQA client l Run the display nqa history command to view the history of the NQA test l Run the display mtrace statistics command to view the statistics of the MTrace packets End Example Run the display nqa agent command If information about the NQA test is displayed it means that the test is successful For example Quidway display nqa agent admin aa verbose nqa test instance admin aa test type mt...

Page 302: ... unicast IGMP Tracert Query packet 6 23 7 Checking the Configuration After performing the MTrace test for the RPF path from the multicast source to the destination host you can view the test result 6 23 1 Establishing the Configuration Task Before configuring an MTrace test for the RPF path from the multicast source to the destination host familiarize yourself with the applicable environment compl...

Page 303: ...un nqa test instance admin name test name An NQA test instance is created and the test instance view is displayed Step 3 Run test type mtrace The test type is set to MTrace Step 4 Run quit Exit from the test instance view End 6 23 3 Configuring the NQA MTrace Test This part describes how to set parameters for the MTrace test for the RPF path from the multicast source to the destination host Contex...

Page 304: ...igured Step 5 Optional The VPN instance is specified vpn instance vpn instance name Step 6 Run quit Exit from the NQA test instance view End 6 23 4 Optional Adjusting the Performance of the NQA MTrace Test This part describes how to set optional MTrace test parameters according to the network operating status Context Do as follows on the switch with the MTrace test being configured NOTE The steps ...

Page 305: ...st specify the IP address of the last hop switch Step 7 Run mtrace last hop address ipv4 ip address The IP address of the last hop switch is specified If non Huawei devices are deployed in the multicast network this step is mandatory Step 8 Run source address ipv4 ip address The source IP address of the IGMP Tracert Request packet is configured The address must be the address of the local interfac...

Page 306: ...test name The test instance view is displayed Step 3 Run start now The NQA MTrace test is started Step 4 Run quit Exit from the test instance view End 6 23 6 Setting Policies for Filtering Queriers You can set policies to filter queriers only on the last hop that receives the unicast IGMP Tracert Query packet Context Do as follows on the switch connected to the host NOTE The settings in this step ...

Page 307: ...n a terminal You must run the display nqa results command to view test results By the default the command output contains the records about only the last five tests Procedure l Run the display nqa agent admin name test name verbose to view the status of the test instance configured on the NQA client l Run the display nqa results command to view the test results on the NQA client l Run the display ...

Page 308: ...MTrace Test This part describes how to start the MTrace test instance to perform the MTrace test for the multicast path from the multicast source to the destination host 6 24 6 Setting Policies for Filtering Queriers You can set policies to filter queriers only on the last hop that receives the unicast IGMP Tracert Query packet 6 24 7 Checking the Configuration After performing the MTrace test for...

Page 309: ...stance 2 IP address of the multicast source 3 Multicast group address 4 IP address of the destination host 5 Optional VPN instance 6 24 2 Creating an NQA MTrace Test This part describes how to configure an MTrace instance before performing the MTrace test for the multicast path from the multicast source to the destination host Context Do as follows on the switch that functions as the NQA client Pr...

Page 310: ... 1 Run system view The system view is displayed Step 2 Run nqa test instance admin name test name The test instance view is displayed Step 3 Run mtrace source address ipv4 ip address The address of the multicast source is specified Step 4 Run mtrace group address ipv4 ip address The multicast group address is configured The address must be a common group address Step 5 Run destination address ipv4...

Page 311: ...ON If the mtrace command is run on a specified multicast VPN network mtrace query type all router cannot be configured Step 8 Optional Run mtrace last hop address ipv4 ip address The IP address of the last hop switch is specified Step 9 Optional Run source address ipv4 ip address The source address of the IGMP Tracert Query packet which must be the address of the local interface is configured If m...

Page 312: ... 7 Run mtrace response address ipv4 ip address ttl value The destination IP address and TTL of the IGMP Tracert Response packet are set Step 8 Run timeout time The timeout period for waiting for the IGMP Tracert Response packet is set Step 9 Run probe count number The maximum number of times for the querier to initiate MTrace operations in the timeout situations is set The querier re initiates an ...

Page 313: ...ceives the unicast IGMP Tracert Query packet Context Do as follows on the switch connected to the host NOTE The settings in this step take effect only on the last hop switch that receives the unicast IGMP Tracert Request packet Procedure Step 1 Run system view The system view is displayed Step 2 Run mtrace query policy acl number The policy for filtering queriers is configured acl number defines t...

Page 314: ...ured on the NQA client l Run the display nqa results command to view the test results on the NQA client l Run the display nqa history command to view the history of the NQA test l Run the display mtrace statistics command to view the statistics of the MTrace packets End Example Run the display nqa agent command If information about the NQA test is displayed it means that the test is successful For...

Page 315: ...nectivity of the one hop pseudo wire PW using LDP as the signaling protocol you can perform the PWE3 Ping test on the one hop PW Pre configuration Tasks Before configuring the PWE3 Ping test on a one hop PW you must correctly configure the dynamic one hop PW Data Preparation To configure the PWE3 Ping test on a one hop PW you need the following data No Data 1 ID of the PW 2 Type of the PW 3 Type a...

Page 316: ...nfigure the response mode of the Echo packet run the lsp replymode no reply udp udp via vpls udp router alert level control channel command l To configure the LSP EXP value run the lsp exp exp command Step 9 Run start The NQA test is started Select the start mode as required because the startcommand has several forms l To perform the NQA test immediately run the start now end at yyyy mm dd hh mm s...

Page 317: ...the display nqa results command If the test is successful the following is displayed l Statistics about errors Number of unroutable connections Number of wrong sequence numbers Timeout times of the test packets l History statistics of each test packet Timestamp added when each test packet is sent Timestamp added when each test packet is received Packets status displayed on the NQA client l Statist...

Page 318: ...E3 Ping Test on a Multi Hop PW This part describes how to set PWE3 ping test parameters for a multi hop PW 6 26 3 Checking the Configuration After performing the PWE3 ping test for a multi hop PW you can view the test result 6 26 1 Establishing the Configuration Task Before configuring a PWE3 ping test for a multi hop PW familiarize yourself with the applicable environment complete the pre configu...

Page 319: ... displayed Step 2 Run nqa test instance admin name test name An NQA test instance is created and the test instance view is displayed Step 3 Run test type pwe3ping The test type is set to PWE3 Ping Step 4 Optional Run vc type ldp The method of setting up a PW is configured Step 5 Run local pw type local pw type ip interworking The type of the local PW is configured By default the type is Ethernet S...

Page 320: ...ds second hh mm ss command The test instance is started immediately l To perform the NQA test at the specified time run the start at yyyy mm dd hh mm ss end at yyyy mm dd hh mm ss delay seconds second hh mm ss lifetime seconds second hh mm ss command The test instance is started at a specified time l To perform the NQA test after a certain delay period run the start delay seconds second hh mm ss e...

Page 321: ...shed Send operation times 3 Receive response times 3 Completion success RTD OverThresholds number 0 Attempts number 1 Drop operation number 0 Disconnect operation number 0 Operation timeout number 0 System busy operation number 0 Connection fail number 0 Operation sequence errors number 0 RTT Stats errors number 0 Destination ip address 8 1 1 2 Min Max Average Completion Time 4 6 5 Sum Square Sum ...

Page 322: ...iguration Tasks Before configuring the PWE3 Trace test on a one hop PW you must correctly configure the dynamic one hop PW Data Preparation To configure the PWE3 Trace test on a one hop PW you need the following data No Data 1 ID of the PW 2 Type of the PW 3 Type and number of the interface connected with the CE 4 Destination IP address and ID of the L2VC 5 Optional Response mode of the Echo packe...

Page 323: ...nfigure the response mode of the Echo packet run the lsp replymode no reply udp udp via vpls udp router alert level control channel command l To configure the LSP EXP value run the lsp exp exp command l To configure maximum hops of the PWE3 Trace test run the tracert hopfailtimes timescommand l To configure the initial TTL value and maximum TTL value of the packet run the tracert livetime first tt...

Page 324: ...y nqa results command to view test results By the default the command output contains the records about only the last five tests Procedure Step 1 Run the display nqa results command to view the test results on the NQA client End Example Run the display nqa results command If the PWE3 Trace test on the one hop PW is successful the following information is displayed l Statistics about errors Number ...

Page 325: ...ing a PWE3 trace test for a multi hop PW familiarize yourself with the applicable environment complete the pre configuration tasks and obtain the required data This can help you complete the configuration task quickly and accurately 6 28 2 Configuring Parameters for the PWE3 Trace Test on a Multi Hop PW This part describes how to set a PWE3 trace test parameters for a multi hop PW 6 28 3 Checking ...

Page 326: ...E3 trace test parameters for a multi hop PW Context Do as follows on the NQA client Procedure Step 1 Run system view The system view is displayed Step 2 Run nqa test instance admin name test name An NQA test instance is created and the test instance view is displayed Step 3 Run test type pwe3trace The test type is set to PWE3 Trace Step 4 Optional Run vc type ldp The method of setting up a PW is c...

Page 327: ...n the tracert hopfailtimes timescommand l To configure the initial TTL value and maximum TTL value of the packet run the tracert livetime first ttl first ttl max ttl max ttl command Step 9 Run start The NQA test is started Select the start mode as required because the start command has several forms l To perform the NQA test immediately run the start now end at yyyy mm dd hh mm ss delay seconds se...

Page 328: ...client l Statistics of results of each test Number of successful tests Sum of the response time of all tests RTT square sum Minimum RTT and maximum RTT of the packet Destination IP address and the type of the destination IP address Number of the Echo packets and the sent packets Time when the last packet is received Quidway display nqa results NQA entry admin pwe3trace testflag is inactive testtyp...

Page 329: ...each type of test in the group 6 29 1 Establishing the Configuration Task Before configuring an NQA test group familiarize yourself with the applicable environment complete the pre configuration tasks and obtain the required data This can help you complete the configuration task quickly and accurately Applicable Environment To perform ICMP Jitter TCP UDP SNMP LSPPing LSPJitter ICMPJitter and PWE3 ...

Page 330: ...ce is created and the test instance view is displayed Step 3 Run test type icmp jitter tcp udp snmp lspping lspjitter icmpjitter pwe3ping The test type is set Step 4 Run switch to group The current test is switched to a test group Step 5 Run quit Return to the system view Step 6 Run nqa test instance admin name test name The view of the existed NQA test is displayed Step 7 Run join group nqa admin...

Page 331: ...cified time run the start at yyyy mm dd hh mm ss end at yyyy mm dd hh mm ss delay seconds second hh mm ss lifetime seconds second hh mm ss command The test instance is started at a specified time l To perform the NQA test after a certain delay period run the start delay seconds second hh mm ss end at yyyy mm dd hh mm ss delay seconds second hh mm ss lifetime seconds second hh mm ss command The tes...

Page 332: ...bes how to set and use universal parameters for NQA test instances 6 30 1 Establishing the Configuration Task Before setting universal parameters for NQA test instances familiarize yourself with the applicable environment complete the pre configuration tasks and obtain the required data This can help you complete the configuration task quickly and accurately 6 30 2 Configuring Universal Parameters...

Page 333: ...absolute delta falling threshold threshold value1 event entry1 rising threshold threshold value2 event entry2 description Configuration NQA alarms for the NQA test instance NOTE This parameter cannot be configured for Mtrace test instances l Run datafill fillstring The fill string is set for the NQA test instance NOTE This parameter cannot be configured for SNMP TCP FTP HTTP LSPTrace DNS PWE3 Trac...

Page 334: ...Jitter TCP Trace FTP and HTTP test instances l Run dns server ipv4 ip address The DNS server address is configured for the NQA test instance NOTE The DNS server address can be configured only for DNS and HTTP test instances l Run fail percent percent The failure percentage is set for the NQA test instance NOTE This parameter cannot be configured for Trace FTP DNS LSP Trace PWE3 Trace and MTrace te...

Page 335: ...d for the HTTP test instance NOTE The relative file path and version can be configured only for the HTTP test instance l Run interval milliseconds interval seconds interval The interval for sending packets is set for the NQA test instance NOTE The interval for sending packets can be configured only for the ICMP UDP SNMP Jitter ICMP Jitter Path Jitter LSP Jitter TCP LSP Ping PWE3 Ping test instance...

Page 336: ...onfigured only for LSP Ping LSP Jitter and LSP Trace test instances l Run mtrace source address ipv4 ip address The multicast source address is configured for the NQA MTrace test instance NOTE This parameter can be configured only for MTrace test instances l Run mtrace last hop address ipv4 ip address The last hop address is configured for the NQA test instance NOTE This parameter can be configure...

Page 337: ...ce test instances l Run records result number The maximum number of result records is set for the NQA test instance l Run remote pw id remote pw id The PW ID or VC ID is set for the remote device NOTE This parameter can be configured only for PWE3 Ping and PWE3 Trace test instances l Run sendpacket passroute The NQA test is configured to send packets without searching for the routing table NOTE Th...

Page 338: ... NQA test instance NOTE This parameter cannot be configured for Path Jitter and MTrace test instances l Run timeout time The timeout period is set for the NQA test instance l Run ttl number The TTL value in the NQA test packet is set NOTE This parameter cannot be configured for DNS and PWE3 Ping test instances l Run tos value Type of Service TOS is set for the test packet NOTE This parameter canno...

Page 339: ... protocol is LDP End 6 30 3 Checking the Configuration After setting universal parameters for NQA test instances you can view the test result Prerequisite The configurations of the Universal NQA Test Parameters function are complete Procedure Step 1 Run the display nqa agent admin name test name verbose to view the status of the test instance configured on the NQA client End Example Quidway displa...

Page 340: ...iarize yourself with the applicable environment complete the pre configuration tasks and obtain the required data This can help you complete the configuration task quickly and accurately Applicable Environment If the round trip transmission delay threshold is configured for a NQA test instance the NQA test result will contain the statistics on the test packets that exceed the set threshold This pr...

Page 341: ...nction is enabled End 6 31 3 Checking the Configuration After setting the round trip transmission delay threshold you can view the configuration Prerequisite The configurations of the Round Trip Delay Thresholds Test function are complete Procedure Step 1 Run the display nqa agent admin name test name verbose to view the status of the test instance configured on the NQA client End Example Run the ...

Page 342: ...essage is sent to the NMS 6 32 3 Checking the Configuration After setting the one way transmission delay threshold you can view the configuration 6 32 1 Establishing the Configuration Task Before setting a one way transmission delay threshold familiarize yourself with the applicable environment complete the pre configuration tasks and obtain the required data This can help you complete the configu...

Page 343: ...tance view is displayed Step 3 Run threshold owd sd owd sd value The uni directional transmission from the source to the destination delay threshold is configured Step 4 Run threshold owd sd owd sd value The uni directional transmission from the destination to the source delay threshold is configured End 6 32 3 Checking the Configuration After setting the one way transmission delay threshold you c...

Page 344: ... success or transmission failure 6 33 1 Establishing the Configuration Task Before configuring the trap function familiarize yourself with the applicable environment complete the pre configuration tasks and obtain the required data This can help you complete the configuration task quickly and accurately 6 33 2 Sending Trap Messages When Test Failed A trap message is sent to the NMS when the transm...

Page 345: ...ified NM station NQA also supports the sending of trap messages to the NM station when the uni directional transmission delay or the round trip transmission delay exceeds the threshold l For all tests supporting traps if the round trip transmission delay exceeds the threshold and the trap function is enabled trap messages are sent to the NM station with the specified IP address l For all the Jitte...

Page 346: ...st name An NQA test instance is created and the test instance view is displayed Step 3 Run send trap testfailure Sending trap messages when tests fail is enabled By default the trap function is disabled Step 4 Run test failtimes times The number of test failures that trigger sending a trap message is configured By default a trap message is sent for each test failure End 6 33 3 Sending Trap Message...

Page 347: ...complete Context Do as follows on the NQA client Procedure Step 1 Run system view The system view is displayed Step 2 Run nqa test instance admin name test name An NQA test instance is created and the test instance view is displayed Step 3 Run send trap testcomplete Sending trap messages when tests are completed is enabled By default the trap function is disabled End 6 33 5 Sending Trap Messages W...

Page 348: ...ssages is displayed it means that the configuration succeeds For example Quidway display trapbuffer size 2 Trapping Buffer Configuration and contents enabled allowed max buffer size 1024 actual buffer size 256 channel number 3 channel name trapbuffer dropped messages 0 overwritten messages 0 current messages 11 May 6 2009 12 54 17 CBB6 PE3 SINDEX 4 INDEXMAP OID 1 3 6 1 4 1 2011 5 25 110 2 0 1 Shor...

Page 349: ...nterrupted a new file is created on the FTP server for the test results sent each time 6 34 6 Optional Enabling Alarms to Be Sent to the NM Station After the FTP Transmission Succeeds After test results are successfully saved on the FTP server a trap message is sent to the NMS for notification 6 34 7 Starting the Test Instance After you start a test instance test results are field periodically 6 3...

Page 350: ... FTP Server This part describes how to set parameters for accessing the FTP server that receives the test results such as address of the FTP server and user name and password for accessing the FTP server Context Do as follows on the NQA client Procedure Step 1 Run system view The system view is displayed Step 2 Run nqa ftp record ip address ip address or nqa ftp record vpn instance vpn instance Th...

Page 351: ...n nqa ftp record enable The FTP server is enabled to save test results End 6 34 4 Optional Configuring the Number of Test Results Saved Through FTP This part describes how to configure the number of test results that an FTP server can save Context Do as follows on the NQA client Procedure Step 1 Run system view The system view is displayed Step 2 Run nqa ftp record item num item number The number ...

Page 352: ...tional Enabling Alarms to Be Sent to the NM Station After the FTP Transmission Succeeds After test results are successfully saved on the FTP server a trap message is sent to the NMS for notification Context Do as follows on the NQA client Procedure Step 1 Run system view The system view is displayed Step 2 Run nqa ftp record trap enable Alarms are configured to be sent to the NM station after the ...

Page 353: ...ied time l To perform the NQA test after a certain delay period run the start delay seconds second hh mm ss end at yyyy mm dd hh mm ss delay seconds second hh mm ss lifetime seconds second hh mm ss command The test instance is started after a certain delay End 6 34 8 Checking the Configuration After configuring the system to send test results to the FTP server you can view the configuration Prereq...

Page 354: ...ts triggered when the number of test results exceeds the threshold 6 35 4 Starting the Test Instance You can start a test instance When the number of test results exceeds the threshold corresponding action is taken 6 35 5 Checking the Configuration After the alarm threshold for test results is set you can view the configuration 6 35 1 Establishing the Configuration Task Before setting an alarm thr...

Page 355: ... as follows on the NQA client Procedure Step 1 Run system view The system view is displayed Step 2 Run nqa event event entry log trap log trap none description The event number and the corresponding event are configured End 6 35 3 Configuring the Alarm Threshold This part describes how to configure the events triggered when the number of test results exceeds the threshold Context Do as follows on ...

Page 356: ...ew is displayed Step 3 Run start The NQA test is started Select the start mode as required because the start command has several forms l To perform the NQA test immediately run the start now end at yyyy mm dd hh mm ss delay seconds second hh mm ss lifetime seconds second hh mm ss command The test instance is started immediately l To perform the NQA test at the specified time run the start at yyyy ...

Page 357: ...nd to check the maximum number of alarms that can be configured and the number of alarms that are configured Quidway nqa admin icmp display nqa alarm NQA alarm information NQA Alarm Max 5 NQA Alarm Number 2 Run the display nqa agent command to check the status of the test instance configured on the NQA client Quidway display nqa agent NQA Tests Max 2000 NQA Tests Number 1 NQA Flow Max 1000 NQA Flo...

Page 358: ...nning of tests Procedure Step 1 Run the system view command enter the system view Step 2 Run the nqa test instance admin name test name command enter the NQA test instance view Step 3 Run the restart command in the NQA instance view to restart an NQA test instance End 6 36 2 Clearing NQA Statistics When the statistics on the current test instance are saved to the FTP server you can clear test resu...

Page 359: ...ly Procedure Step 1 Run the debugging nqa all command in the NQA view to enable NQA debugging End 6 37 Configuration Examples This section provides several configuration examples of NQA 6 37 1 Example for Configuring the ICMP Test 6 37 2 Example for Configuring the FTP Download Test 6 37 3 Example for Configuring the FTP Upload Test 6 37 4 Example for Configuring the HTTP Test 6 37 5 Example for C...

Page 360: ...ion Host Through the MTrace Test 6 37 21 Example for Checking the Multicast Path from the Source to Destination Host Through the MTrace Test 6 37 22 Example for Configuring the PWE3 Ping Test on a Single Hop PW 6 37 23 Example for Configuring the PWE3 Ping Test on a Multi Hop PW 6 37 24 Example for Configuring the PWE3 Trace Test on a Single Hop PW 6 37 25 Example for Configuring the PWE3 Trace Te...

Page 361: ...ou need the following data l Host address of Switch B Procedure Step 1 Create a VLAN and add interfaces to the VLAN Configure Switch A Quidway system view Quidway sysname SwitchA SwitchA vlan 10 SwitchA Vlan10 quit SwitchA interface gigabitethernet 1 0 0 SwitchA GigabitEthernet1 0 0 port hybrid pvid vlan 10 SwitchA GigabitEthernet1 0 0 port hybrid untagged vlan 10 SwitchA GigabitEthernet1 0 0 quit...

Page 362: ...esholds number 0 Attempts number 1 Drop operation number 0 Disconnect operation number 0 Operation timeout number 0 System busy operation number 0 Connection fail number 0 Operation sequence errors number 0 RTT Stats errors number 0 Destination ip address 10 1 1 2 Min Max Average Completion Time 1 30 17 Sum Square Sum Completion Time 51 1301 Last Good Probe Time 2010 06 09 19 27 48 1 Lost packet r...

Page 363: ... the NQA client 2 Create and perform the FTP test on Switch A to check whether a connection between Switch A and the FTP server can be set up and to check the time for downloading a file from the FTP server Data Preparation To complete the configuration you need the following data l IP address of the FTP server l Source IP address for the test l FTP user name and password l Operation file of the F...

Page 364: ...nseProb 1 Completion success RTD OverThresholds number 0 MessageBodyOctetsSum 448 Stats errors number 0 Operation timeout number 0 System busy operation number 0 Drop operation number 0 Disconnect operation number 0 CtrlConnTime Min Max Average 438 438 438 DataConnTime Min Max Average 218 218 218 SumTime Min Max Average 656 656 656 Average RTT 0 Lost packet ratio 0 End Configuration Files l Config...

Page 365: ...0 1 1 2 24 GE1 0 0 VLANIF20 10 2 1 2 24 FTP Server Configuration Roadmap The configuration roadmap is as follows 1 Configure Switch A as the NQA client and the FTP client Create and perform the FTP test on Switch A to check whether a connection between Switch A and the FTP server can be set up and to test the time for uploading a file to the FTP server 2 A user with the name user1 and the password...

Page 366: ...qa admin ftp ftp password hello SwitchA nqa admin ftp ftp filename nqa ftp test txt SwitchA nqa admin ftp ftp filesize 10 Step 4 Perform the test SwitchA nqa admin ftp start now Step 5 Verify the test result Verify the NQA test result on Switch A On Switch C you can see that a file named nqa ftp test txt is added SwitchC dir Directory of cfcard 0 rw 331 Feb 06 2009 18 34 34 private data txt 1 rw 1...

Page 367: ...TP server enable vlan batch 20 interface Vlanif20 ip address 10 2 1 2 255 255 255 0 interface GigabitEthernet1 0 0 port hybrid pvid vlan 20 port hybrid untagged vlan 20 aaa local user user1 password cipher 3MQ TZ O3KCQ Q MAF4 1 local user user1 service type ftp local user user1 ftp directory cfcard ip route static 10 1 1 0 255 255 255 0 10 2 1 1 return 6 37 4 Example for Configuring the HTTP Test ...

Page 368: ... Quidway nqa test instance admin http Quidway nqa admin http test type http Quidway nqa admin http destination address ipv4 10 2 1 1 Quidway nqa admin http http operation get Quidway nqa admin http http url www huawei com Step 3 Perform the test Quidway nqa admin http start now Step 4 Verify the test result Quidway nqa admin http display nqa results test instance admin http NQA entry admin http te...

Page 369: ...huawei com ip route static 10 2 1 0 255 255 255 0 10 1 1 2 return 6 37 5 Example for Configuring the DNS Test Networking Requirements As shown in Figure 6 7 Switch functions as the DNS client to access the host whose IP address is 10 2 1 1 24 through a domain named server com Figure 6 7 Networking diagram for configuring the DNS test Switch GE1 0 0 VLANIF100 10 1 1 1 24 server com 10 2 1 1 24 IP N...

Page 370: ...4 10 3 1 1 Quidway nqa admin dns destination address url server com Step 3 Perform the test Quidway nqa admin dns start now Step 4 Verify the test result Quidway display nqa results test instance admin dns NQA entry admin dns testflag is inactive testtype is dns 1 Test 1 result The test is finished Send operation times 1 Receive response times 1 Completion failed RTD OverThresholds number 0 Attemp...

Page 371: ...F110 10 2 1 1 24 GE1 0 0 GE1 0 0 GE2 0 0 SwitchC SwitchB Configuration Roadmap The configuration roadmap is as follows 1 Configure Switch A as the NQA client 2 Create and perform the traceroute test on Switch A to check the statistics on each hop from Switch A to Switch C Data Preparation To complete the configuration you need the following data l Destination address for the traceroute test Proced...

Page 372: ... Sum Completion Time 125 5349 RTD OverThresholds number 0 Last Good Probe Time 2006 8 5 14 38 58 3 Destination ip address 10 1 1 2 Lost packet ratio 0 2 Hop 2 Send operation times 3 Receive response times 3 Min Max Average Completion Time 31 79 62 Sum Square Sum Completion Time 188 13286 RTD OverThresholds number 0 Last Good Probe Time 2006 8 5 14 38 58 5 Destination ip address 10 2 1 2 Lost packe...

Page 373: ...st Networking Requirements As shown in Figure 6 9 SNMP agent is enabled on Switch C The NQA SNMP query test is used to measure the time from sending an SNMP query packet to receiving an Echo packet Figure 6 9 Networking diagram for configuring the SNMP query test SwitchA GE1 0 0 VLANIF100 10 1 1 1 24 VLANIF100 10 1 1 2 24 VLANIF110 10 2 1 2 24 VLANIF110 10 2 1 1 24 GE1 0 0 GE1 0 0 GE2 0 0 SwitchC ...

Page 374: ...ration times 3 Receive response times 3 Completion success RTD OverThresholds number 0 Attempts number 1 Drop operation number 0 Disconnect operation number 0 Operation timeout number 0 System busy operation number 0 Connection fail number 0 Operation sequence errors number 0 RTT Stats errors number 0 Destination ip address 10 2 1 2 Min Max Average Completion Time 63 172 109 Sum Square Sum Complet...

Page 375: ...d untagged vlan 110 ip route static 10 1 1 0 255 255 255 0 10 2 1 1 snmp agent snmp agent local engineid 000007DB7F00000100006294 return 6 37 8 Example for Configuring the TCP Test Networking Requirements As shown in Figure 6 10 the NQA TCP Private test is used to obtain the time for setting up a TCP connection between Switch A and Switch B Figure 6 10 Networking diagram for configuring the TCP te...

Page 376: ...n tcp SwitchA nqa admin tcp test type tcp SwitchA nqa admin tcp destination address ipv4 10 2 1 2 SwitchA nqa admin tcp destination port 9000 Step 4 Perform the test SwitchA nqa admin tcp start now Step 5 Verify the test result SwitchA nqa admin tcp display nqa results test instance admin tcp NQA entry admin tcp testFlag is inactive testtype is tcp 1 Test 1 result The test is finished Send operati...

Page 377: ... 100 interface GigabitEthernet2 0 0 port hybrid pvid vlan 110 port hybrid untagged vlan 110 return l Configuration file of Switch C sysname SwitchC vlan batch 110 interface Vlanif110 ip address 10 2 1 2 255 255 255 0 interface GigabitEthernet1 0 0 port hybrid pvid vlan 110 port hybrid untagged vlan 110 nqa server tcpconnect 10 2 1 2 9000 ip route static 10 1 1 0 255 255 255 0 10 2 1 1 return 6 37 ...

Page 378: ...ystem view SwitchC nqa server udpecho 10 2 1 2 6000 Step 3 Configure Switch A Enable the NQA client and create a UDP Public test SwitchA system view SwitchA nqa test instance admin udp SwitchA nqa admin udp test type udp SwitchA nqa admin udp destination address ipv4 10 2 1 2 SwitchA nqa admin udp destination port 6000 Step 4 Perform the test SwitchA nqa admin udp start now Step 5 Verify the test ...

Page 379: ...an batch 100 110 interface Vlanif100 ip address 10 1 1 2 255 255 255 0 interface Vlanif110 ip address 10 2 1 1 255 255 255 0 interface GigabitEthernet1 0 0 port hybrid pvid vlan 100 port hybrid untagged vlan 100 interface GigabitEthernet2 0 0 port hybrid pvid vlan 110 port hybrid untagged vlan 110 return l Configuration file of Switch C sysname SwitchC vlan batch 110 interface Vlanif110 ip address...

Page 380: ... Switch B as the NTP server 2 Configure Switch A as the NQA client and configure Switch C as the NQA server 3 Configure the service type and port number monitored by the NQA server 4 Create and perform the NQA Jitter test on the NQA client Data Preparation To complete the configuration you need the following data l Host address of the server l Port number used to monitor the UDP service on the ser...

Page 381: ...ositive DS Sum 18 Positive SD Square Sum 9868 Positive DS Square Sum 86 Min Negative SD 1 Min Negative DS 1 Max Negative SD 20 Max Negative DS 10 Negative SD Number 18 Negative DS Number 8 Negative SD Sum 163 Negative DS Sum 28 Negative SD Square Sum 2519 Negative DS Square Sum 194 Max Delay SD 49 Max Delay DS 48 Min Delay SD 0 Min Delay DS 0 Avg Delay SD 3 Avg Delay DS 3 Packet Loss SD 0 Packet L...

Page 382: ... port hybrid untagged vlan 110 nqa server udpecho 10 2 1 2 9000 ip route static 10 1 1 0 255 255 255 0 10 2 1 1 return 6 37 11 Example for Configuring the MAC Ping Test Networking Requirements As shown in Figure 6 13 l CFM is enabled on Switch A and Switch B l MAs and MDs are configured on Switch A and Switch B The NQA MAC Ping test is used to test the connectivity between Switch A and Switch B Fi...

Page 383: ...te a MAC Ping test for a common tunnel on Switch A SwitchA nqa test instance admin macping SwitchA nqa admin macping test type macping SwitchA nqa admin macping md test ma test SwitchA nqa admin macping destination address mac 00e0 fc88 aaaa Step 3 Perform the test SwitchA nqa admin macping start now Step 4 Verify the test result SwitchA nqa admin macping display nqa results test instance admin ma...

Page 384: ...me SwitchA vlan batch 11 interface GigabitEthernet2 0 1 port hybrid pvid vlan 11 port hybrid untagged vlan 11 cfm enable cfm md test ma test map vlan 11 mep mep id 11 interface GigabitEthernet2 0 1 outward remote mep mep id 12 mac 00e0 fc88 aaaa nqa test instance admin macping test type macping destination mac 00e0 fc01 aaaa md test ma test return l Configuration file of Switch B sysname SwitchB v...

Page 385: ...C Figure 6 14 Networking diagram for configuring the LSP Ping test VLANIF110 10 2 1 1 24 GE2 0 0 SwitchA GE1 0 0 VLANIF100 10 1 1 1 24 GE1 0 0 VLANIF100 10 1 1 2 24 area 0 Loopback1 1 1 1 9 32 Loopback1 2 2 2 9 32 Loopback1 3 3 3 9 32 GE1 0 0 VLANIF110 10 2 1 2 24 SwitchB SwitchC Configuration Roadmap The configuration roadmap is as follows 1 Configure Switch A as the NQA client 2 Configure Switch...

Page 386: ...t 1 result The test is finished Send operation times 3 Receive response times 3 Completion success RTD OverThresholds number 0 Attempts number 1 Drop operation number 0 Disconnect operation number 0 Operation timeout number 0 System busy operation number 0 Connection fail number 0 Operation sequence errors number 0 RTT Stats errors number 0 Min Positive Jitter 0 Min Negative Jitter 0 Max Positive ...

Page 387: ...anif110 ip address 10 2 1 1 255 255 255 0 mpls mpls ldp interface GigabitEthernet1 0 0 port hybrid pvid vlan 100 port hybrid untagged vlan 100 interface GigabitEthernet2 0 0 port hybrid pvid vlan 110 port hybrid untagged vlan 110 interface LoopBack1 ip address 2 2 2 9 255 255 255 255 ospf 1 area 0 0 0 0 network 2 2 2 9 0 0 0 0 network 10 1 1 0 0 0 0 255 network 10 2 1 0 0 0 0 255 return l Configur...

Page 388: ...abled on Switch A Switch B and Switch C l MPLS and MPLS LDP are enabled on VLANIF interfaces connected to Switch A Switch B and Switch C to trigger the establishment of an LDP LSP The NQA LSP Ping test is used to check the connectivity of the LSP between Switch A and Switch C Figure 6 15 Networking diagram for configuring the LSP Jitter test VLANIF110 10 2 1 1 24 GE2 0 0 SwitchA GE1 0 0 VLANIF100 ...

Page 389: ...in lspjitter lsp type ipv4 SwitchA nqa admin lspjitter destination address ipv4 3 3 3 9 lsp masklen 32 lsp loopback 127 0 0 1 Step 4 Perform the test SwitchA nqa admin lspjitter start now Step 5 Verify the test result SwitchA nqa admin lspjitter display nqa results test instance admin lspjitter SendProbe 60 ResponseProbe 60 Completion success RTD OverThresholds number 0 Min Max Avg Sum RTT 1 1 1 6...

Page 390: ...chB vlan batch 100 mpls lsr id 1 1 1 9 mpls mpls ldp interface Vlanif100 ip address 10 1 1 2 255 255 255 0 mpls mpls ldp interface Vlanif110 ip address 10 2 1 1 255 255 255 0 mpls mpls ldp interface GigabitEthernet1 0 0 port hybrid pvid vlan 100 port hybrid untagged vlan 100 interface GigabitEthernet2 0 0 port hybrid pvid vlan 110 port hybrid untagged vlan 110 interface LoopBack1 ip address 2 2 2 ...

Page 391: ... LSP during the packet transmission Networking Requirements As shown in Figure 6 16 l Run OSPF on Switch A Switch B and Switch C and enable the three Switchs to advertise host routes of loopback interfaces to each other l Enable MPLS MPLS TE and MPLS RSVP TE on Switch A Switch B and Switch C l Enable MPLS MPLS TE and MPLS RSVP TE on the VLANIF interfaces connecting Switch A Switch B and Switch C t...

Page 392: ...igure MPLS RSVP TE on Switch A Switch B and Switch C The detailed procedure is not mentioned here For the configuration of MPLS RSVP TE refer to the Quidway S9300 Terabit Routing Switch Configuration Guide MPLS Step 3 Set up a TE tunnel from Switch A to Switch C The detailed procedure is not mentioned here Step 4 Create an NQA test on Switch A Enable the NQA client and create an LSP Jitter test fo...

Page 393: ...sysname SwitchA vlan batch 100 mpls lsr id 1 1 1 9 mpls mpls te mpls rsvp te mpls te cspf interface Vlanif100 ip address 10 1 1 1 255 255 255 0 mpls mpls te mpls te bandwidth max reservable bandwidth 10000 mpls te bandwidth bc0 5000 mpls rsvp te interface GigabitEthernet1 0 0 port hybrid pvid vlan 100 port hybrid untagged vlan 100 interface LoopBack1 ip address 1 1 1 9 255 255 255 255 interface Tu...

Page 394: ...gabitEthernet2 0 0 port hybrid pvid vlan 110 port hybrid untagged vlan 110 interface LoopBack1 ip address 2 2 2 9 255 255 255 255 ospf 1 opaque capability enable area 0 0 0 0 network 2 2 2 9 0 0 0 0 network 10 1 1 0 0 0 0 255 network 10 2 1 0 0 0 0 255 mpls te enable return l Configuration file of Switch C sysname SwitchC vlan batch 110 mpls lsr id 3 3 3 9 mpls mpls te mpls rsvp te interface Vlani...

Page 395: ...tch B and Switch C l MPLS MPLS TE and MPLS RSVP TE are enabled on the VLANIF interfaces connected toSwitch A Switch B and Switch C to set up a TE tunnel from Switch A to Switch C The NQA LSP traceroute test is used to test the TE tunnel Figure 6 17 Networking diagram for configuring the LSP traceroute test VLANIF110 10 2 1 1 24 GE2 0 0 SwitchA GE1 0 0 VLANIF100 10 1 1 1 24 GE1 0 0 VLANIF100 10 1 1...

Page 396: ...l tunnel 1 0 0 Step 5 Perform the test SwitchA nqa admin lspjitter start now Step 6 Verify the test result SwitchA nqa admin lspjitter display nqa results test instance admin lspjitter NQA entry admin lsptrace testFlag is inactive testtype is lsptrace 1 Test 1 result The test is finished Completion success Attempts number 1 Disconnect operation number 0 Operation timeout number 0 System busy opera...

Page 397: ... 3 3 9 mpls te tunnel id 100 mpls te bandwidth bc0 3000 mpls te commit ospf 1 opaque capability enable area 0 0 0 0 network 10 1 1 0 0 0 0 255 network 1 1 1 9 0 0 0 0 mpls te enable nqa test instance admin lspjitter test type lspjitter lsp type te lsp tetunnel Tunnel1 0 0 return l Configuration file of Switch B sysname SwitchB vlan batch 100 110 mpls lsr id 2 2 2 9 mpls mpls te mpls rsvp te interf...

Page 398: ...eturn l Configuration file of Switch C sysname SwitchC vlan batch 110 mpls lsr id 3 3 3 9 mpls mpls te mpls rsvp te interface Vlanif110 ip address 10 2 1 2 255 255 255 0 mpls mpls te mpls te max link bandwidth 10000 mpls te max reservable bandwidth 5000 mpls rsvp te interface GigabitEthernet1 0 0 port hybrid pvid vlan 110 port hybrid untagged vlan 110 interface LoopBack1 ip address 3 3 3 9 255 255...

Page 399: ...r test instance on Switch A 2 Configure Switch B as the NQA server Data Preparation To complete the configuration you need the following data l IP address of Switch B Procedure Step 1 Configure a reachable route between Switch A and Switch B The configuration details are not mentioned here Step 2 Configure an NQA test instance for Switch A Enable the NQA client and configure the ICMP jitter test i...

Page 400: ...SD Square Sum 24 Negative DS Square Sum 14 Min Delay SD 0 Min Delay DS 0 Max Delay SD 1 Max Delay DS 1 Delay SD Square Sum 4 Delay DS Square Sum 1 Packet Loss SD 0 Packet Loss DS 0 Packet Loss Unknown 0 Average of Jitter 1 Average of Jitter SD 1 Average of Jitter DS 1 jitter out value 0 5599658 jitter in value 0 3574005 NumberOfOWD 60 Packet Loss Ratio 0 OWD SD Sum 4 OWD DS Sum 1 ICPIF value 0 MOS...

Page 401: ...lowing data l IP addresses of Switch A Switch B and Switch C Procedure Step 1 Configure a reachable route between Switch A and Switch C The configuration details are not mentioned here Step 2 Configure an NQA test instance for Switch A Enable the NQA client and configure the path jitter test instance SwitchA system view SwitchA nqa test instance admin pathjitter SwitchA nqa admin pathjitter test t...

Page 402: ...s Jitter Finish Status finished SendProbe 60 ResponseProbe 60 Min Max Avg Sum RTT 2 14 3 170 RTT Square Sum 634 NumOfRTT 60 Drop operation number 0 Operation sequence errors number 0 RTT Stats errors number 0 System busy operation number 0 Operation timeout number 0 Min Positive SD 1 Min Positive DS 1 Max Positive SD 6 Max Positive DS 6 Positive SD Number 4 Positive DS Number 18 Positive SD Sum 9 ...

Page 403: ...h 110 interface Vlanif110 ip address 11 1 1 2 255 255 255 0 interface GigabitEthernet1 0 0 port hybrid pvid vlan 110 port hybrid untagged vlan 110 ospf 1 area 0 0 0 0 network 11 1 1 0 0 0 0 255 return 6 37 18 Example for Checking the RPF Path from the Source to the switch Through the MTrace Test Networking Requirements As shown in Figure 6 20 on the PIM SM multicast network implement the NTP proto...

Page 404: ...r GE2 0 0 VLANIF120 11 1 4 2 24 Loopback0 1 1 1 1 32 SwitchE SwitchC SwitchD SwitchB SwitchA GE3 0 0 VLANIF170 11 1 6 2 24 GE2 0 0 VLANIF120 11 1 4 1 24 Configuration Roadmap The configuration roadmap is as follows 1 Configure Switch B as the NQA client and create an MTrace test on it 2 Perform the test and view the test result Data Preparation To complete the configuration you need the following ...

Page 405: ... Path Ttl 4 SG Packet Count 13316240 Hop Time Delay ms 0xffffffff Input Packet Count 0 Output Packet Count 0 Input Rate pps 0xffffffff Output Rate pps 0xffffffff Input Loss Rate 0xffffffff SG Loss Rate 0xffffffff 2 Hop 2 Outgoing Interface Address 11 1 4 2 Incoming Interface Address 11 1 2 1 Prehop Router Address 11 1 2 2 Protocol PIM assert Forward Code NO_ERROR Forward Ttl 1 Current Path Ttl 3 S...

Page 406: ...11 1 4 1 255 255 255 0 pim sm interface Vlanif160 ip address 11 1 3 1 255 255 255 0 pim sm interface Vlanif170 ip address 11 1 6 2 255 255 255 0 igmp enable pim sm interface GigabitEthernet1 0 0 port hybrid pvid vlan 160 port hybrid untagged vlan 160 interface GigabitEthernet2 0 0 port hybrid pvid vlan 120 port hybrid untagged vlan 120 interface GigabitEthernet3 0 0 port hybrid pvid vlan 170 port ...

Page 407: ...im sm pim c bsr LoopBack0 c rp LoopBack0 ospf 1 area 0 0 0 0 network 1 1 1 1 0 0 0 0 network 11 1 1 0 0 0 0 255 network 11 1 3 0 0 0 0 255 return l Configuration file of Switch D sysname SwitchD multicast routing enable vlan batch 110 120 130 interface Vlanif110 ip address 11 1 5 2 255 255 255 0 pim sm interface Vlanif120 ip address 11 1 4 2 255 255 255 0 pim sm interface Vlanif130 ip address 11 1...

Page 408: ...140 ip address 11 1 0 1 255 255 255 0 pim sm interface Vlanif150 ip address 11 1 1 2 255 255 255 0 pim sm interface GigabitEthernet1 0 0 port hybrid pvid vlan 140 port hybrid untagged vlan 140 interface GigabitEthernet2 0 0 port hybrid pvid vlan 150 port hybrid untagged vlan 150 interface GigabitEthernet3 0 0 port hybrid pvid vlan 130 port hybrid untagged vlan 130 ospf 1 area 0 0 0 0 network 11 1 ...

Page 409: ...path from the multicast source to the local Switch GE1 0 0 VLANIF160 11 1 3 2 24 11 1 0 2 24 Source GE1 0 0 VLANIF140 11 1 0 1 24 GE2 0 0 VLANIF150 11 1 1 1 24 GE1 0 0 VLANIF110 11 1 5 1 24 GE2 0 0 VLANIF150 11 1 1 2 24 GE1 0 0 VLANIF110 11 1 5 2 24 GE3 0 0 VLANIF130 11 1 2 1 24 GE3 0 0 VLANIF130 11 1 2 2 24 GE1 0 0 VLANIF160 11 1 3 1 24 GE3 0 0 VLANIF170 11 1 6 3 24 11 1 6 4 24 Receiver GE2 0 0 V...

Page 410: ...me 2009 2 7 17 9 11 1 Last Good Path Time 2009 2 7 17 9 11 1 1 Hop 1 Outgoing Interface Address 0 0 0 0 Incoming Interface Address 11 1 4 1 Prehop Router Address 11 1 4 2 Protocol PIM Forward Code NO_ERROR Forward Ttl 1 Current Path Ttl 4 SG Packet Count 62 Hop Time Delay ms 1 Input Packet Count 8845 Output Packet Count 0xffffffff Input Rate pps 0xffffffff Output Rate pps 0xffffffff Input Loss Rat...

Page 411: ...lan 170 ospf 1 area 0 0 0 0 network 11 1 5 0 0 0 0 255 network 11 1 6 0 0 0 0 255 pim return l Configuration file of Switch B sysname SwitchB multicast routing enable vlan batch 120 160 170 interface Vlanif120 ip address 11 1 4 1 255 255 255 0 pim sm interface Vlanif160 ip address 11 1 3 1 255 255 255 0 pim sm interface Vlanif170 ip address 11 1 6 2 255 255 255 0 igmp enable pim sm interface Gigab...

Page 412: ... 2 255 255 255 0 pim sm interface GigabitEthernet1 0 0 port hybrid pvid vlan 160 port hybrid untagged vlan 160 interface GigabitEthernet2 0 0 port hybrid pvid vlan 150 port hybrid untagged vlan 150 interface Loopback0 ip address 1 1 1 1 255 255 255 255 igmp enable pim sm pim c bsr LoopBack0 c rp LoopBack0 ospf 1 area 0 0 0 0 network 1 1 1 1 0 0 0 0 network 11 1 1 0 0 0 0 255 network 11 1 3 0 0 0 0...

Page 413: ...f Switch E sysname SwitchE multicast routing enable vlan batch 130 140 150 interface Vlanif130 ip address 11 1 2 2 255 255 255 0 igmp enable pim sm interface Vlanif140 ip address 11 1 0 1 255 255 255 0 pim sm interface Vlanif150 ip address 11 1 1 2 255 255 255 0 pim sm interface GigabitEthernet1 0 0 port hybrid pvid vlan 140 port hybrid untagged vlan 140 interface GigabitEthernet2 0 0 port hybrid ...

Page 414: ...n check the RPF path from the multicast source to the destination host Figure 6 22 Networking diagram for checking the multicast path from the multicast source to the local Switch GE1 0 0 VLANIF160 11 1 3 2 24 11 1 0 2 24 Source GE1 0 0 VLANIF140 11 1 0 1 24 GE2 0 0 VLANIF150 11 1 1 1 24 GE1 0 0 VLANIF110 11 1 5 1 24 GE2 0 0 VLANIF150 11 1 1 2 24 GE1 0 0 VLANIF110 11 1 5 2 24 GE3 0 0 VLANIF130 11 ...

Page 415: ...y nqa results test instance admin mtrace NQA entry admin mtrace testFlag is inactive testtype is mtrace 1 Test 1 result The test is finished Completions success Query Mode max hop Current Hop 3 Current Probe 1 SendProbe 1 ResponseProb 1 Timeout Count 0 Busy Count 0 Drop Count 0 Max Path Ttl 4 Responser 11 1 0 2 Response Rtt 62 mtrace start time 2009 2 7 17 36 18 1 Last Good Probe Time 2009 2 7 17 ...

Page 416: ...g enable vlan batch 110 170 interface Vlanif110 ip address 11 1 5 1 255 255 255 0 pim sm interface Vlanif170 ip address 11 1 6 3 255 255 255 0 igmp enable pim sm interface GigabitEthernet1 0 0 port hybrid pvid vlan 110 port hybrid untagged vlan 110 interface GigabitEthernet3 0 0 port hybrid pvid vlan 170 port hybrid untagged vlan 170 ospf 1 area 0 0 0 0 network 11 1 5 0 0 0 0 255 network 11 1 6 0 ...

Page 417: ...m interface Vlanif160 ip address 11 1 3 2 255 255 255 0 pim sm interface GigabitEthernet1 0 0 port hybrid pvid vlan 160 port hybrid untagged vlan 160 interface GigabitEthernet2 0 0 port hybrid pvid vlan 150 port hybrid untagged vlan 150 interface LoopBack0 ip address 1 1 1 1 255 255 255 255 pim sm ospf 1 area 0 0 0 0 network 11 1 3 0 0 0 0 255 network 11 1 1 0 0 0 0 255 network 1 1 1 1 0 0 0 0 pim...

Page 418: ...vlan 130 port hybrid untagged vlan 130 ospf 1 area 0 0 0 0 network 11 1 2 0 0 0 0 255 network 11 1 4 0 0 0 0 255 network 11 1 5 0 0 0 0 255 pim return l Configuration file of Switch E sysname SwitchE multicast routing enable vlan batch 130 140 150 interface Vlanif130 ip address 11 1 2 2 255 255 255 0 igmp enable pim sm interface Vlanif140 ip address 11 1 0 1 255 255 255 0 pim sm interface Vlanif15...

Page 419: ...SM multicast network implement the NTP protocal on all Switches to make Switches work synchronously Receiver is added to the multicast group 225 1 1 1 and receives multicast data from Source normally This test is performed to check how the multicast traffic is transmitted to Receiver from Source You can configure an NQA MTrace test on Switch C to implement the MTrace function You can check the mul...

Page 420: ...24 GE2 0 0 VLANIF120 11 1 4 1 24 Configuration Roadmap The configuration roadmap is as follows 1 Configure Switch C as the NQA client and create an MTrace test on it 2 Perform the test and view the test result Data Preparation To complete the configuration you need the following data l Test instance name admin mtrace l IP address of the multicast source 11 1 0 2 l IP address of the multicast group...

Page 421: ...ard Ttl 1 Current Path Ttl 4 SG Packet Count 255 Hop Time Delay ms 0xffffffff Input Packet Count 9207 Output Packet Count 9596 Input Rate pps 0xffffffff Output Rate pps 0xffffffff Input Loss Rate 0xffffffff SG Loss Rate 0xffffffff 2 Hop 2 Outgoing Interface Address 11 1 4 2 Incoming Interface Address 11 1 2 1 Prehop Router Address 11 1 2 2 Protocol PIM Forward Code NO_ERROR Forward Ttl 1 Current P...

Page 422: ...m sm interface Vlanif160 ip address 11 1 3 1 255 255 255 0 pim sm interface Vlanif170 ip address 11 1 6 2 255 255 255 0 igmp enable pim sm interface GigabitEthernet1 0 0 port hybrid pvid vlan 160 port hybrid untagged vlan 160 interface GigabitEthernet2 0 0 port hybrid pvid vlan 120 port hybrid untagged vlan 120 interface GigabitEthernet3 0 0 port hybrid pvid vlan 170 port hybrid untagged vlan 170 ...

Page 423: ...min mtrace test type mtrace destination address ipv4 11 1 6 4 mtrace query type destination mtrace source address ipv4 11 1 0 2 mtrace group address ipv4 225 1 1 1 Return l Configuration file of Switch D sysname SwitchD multicast routing enable vlan batch 110 120 130 interface Vlanif110 ip address 11 1 5 2 255 255 255 0 pim sm interface Vlanif120 ip address 11 1 4 2 255 255 255 0 pim sm interface ...

Page 424: ...140 ip address 11 1 0 1 255 255 255 0 pim sm interface Vlanif150 ip address 11 1 1 2 255 255 255 0 pim sm interface GigabitEthernet1 0 0 port hybrid pvid vlan 140 port hybrid untagged vlan 140 interface GigabitEthernet2 0 0 port hybrid pvid vlan 150 port hybrid untagged vlan 150 interface GigabitEthernet3 0 0 port hybrid pvid vlan 130 port hybrid untagged vlan 130 ospf 1 area 0 0 0 0 network 11 1 ...

Page 425: ...IF140 GE1 0 0 VLANIF140 100 1 1 2 24 PW Loopback0 192 4 4 4 32 Loopback0 192 3 3 3 32 PE A P MPLS Backbone Configuration Roadmap The configuration roadmap is as follows 1 Run the IGP protocol on the backbone network to make the routes between Switches on the backbone network reachable 2 Configure the basic MPLS functions on the backbone network and set up an LSP tunnel Set up the MPLS LDP peer rel...

Page 426: ...ion times 3 Receive response times 3 Completion success OverThresholds number 0 Attempts number 1 Drop operation number 0 Disconnect operation number 0 Operation timeout number 0 System busy operation number 0 Connection fail number 0 Operation sequence errors number 0 RTT Stats errors number 0 Min Positive Jitter 0 Min Negative Jitter 0 Max Positive Jitter 0 Max Negative Jitter 0 Positive Jitter ...

Page 427: ...2 0 0 port hybrid pvid vlan 120 port hybrid untagged vlan 120 interface LoopBack0 ip address 192 2 2 2 0 0 0 0 nqa test instance test pwe3ping test type pwe3ping local pw id 100 local pw type vlan remote pw id 100 ospf 1 area 0 0 0 0 network 192 2 2 2 0 0 0 0 network 10 1 1 0 0 0 0 255 return l Configuration file of P sysname P mpls lsr id 192 4 4 4 mpls mpls ldp vlan batch 120 130 interface Vlani...

Page 428: ...eer 192 2 2 2 remote ip 192 2 2 2 vlan batch 130 140 interface Vlanif130 ip address 10 2 2 2 255 255 255 0 mpls mpls ldp interface Vlanif140 mpls l2vc 192 2 2 2 100 mpls mpls ldp interface GigabitEthernet1 0 0 port hybrid pvid vlan 140 port hybrid untagged vlan 140 interface GigabitEthernet2 0 0 port hybrid pvid vlan 130 port hybrid untagged vlan 130 interface LoopBack0 ip address 192 3 3 3 255 25...

Page 429: ...between U PE1 and U PE2 Figure 6 25 Networking diagram for configuring the PWE3 Ping test on a multi hop PW CE A CE B U PE1 GE1 0 0 VLANIF110 100 1 1 1 24 GE1 0 0 GE1 0 0 VLANIF160 100 1 1 2 24 U PE2 S PE GE2 0 0 VLANIF130 20 1 1 1 24 GE1 0 0 VLANIF130 20 1 1 2 24 GE1 0 0 VLANIF150 VLANIF120 10 1 1 2 24 GE1 0 0 VLANIF120 10 1 1 1 24 Loopback0 3 3 3 9 32 Loopback0 2 2 2 9 32 4 4 4 9 32 Loopback0 1 ...

Page 430: ...e a PWE3 Ping test on a multi hop PW Configure U PE1 U PE1 system view U PE1 nqa test instance test pwe3ping U PE1 nqa test pwe3ping test type pwe3ping U PE1 nqa test pwe3ping local pw id 100 U PE1 nqa test pwe3ping local pw type ppp U PE1 nqa test pwe3ping label type control word U PE1 nqa test pwe3ping remote pw id 200 Step 3 Perform the test U PE1 nqa test pwe3ping start now Step 4 Verify the t...

Page 431: ...d vlan 110 port hybrid untagged vlan 110 return l Configuration file of U PE1 sysname U PE1 mpls lsr id 1 1 1 9 mpls mpls l2vpn mpls ldp mpls ldp remote peer 3 3 3 9 remote ip 3 3 3 9 vlan batch 110 120 interface Vlanif110 mpls l2vc 3 3 3 9 100 interface Vlanif120 ip address 10 1 1 1 255 255 255 0 mpls mpls ldp interface GigabitEthernet1 0 0 port hybrid pvid vlan 110 port hybrid untagged vlan 110 ...

Page 432: ...port hybrid pvid vlan 130 port hybrid untagged vlan 130 interface LoopBack0 ip address 2 2 2 9 255 255 255 255 ospf 1 area 0 0 0 0 network 2 2 2 9 0 0 0 0 network 10 1 1 0 0 0 0 255 network 20 1 1 0 0 0 0 255 return l Configuration file of S PE sysname S PE mpls lsr id 3 3 3 9 mpls mpls l2vpn mpls switch l2vc 5 5 5 9 200 between 1 1 1 9 100 mpls ldp mpls ldp remote peer 1 1 1 9 remote ip 1 1 1 9 m...

Page 433: ... 4 9 mpls mpls ldp vlan batch 140 150 interface Vlanif140 ip address 30 1 1 2 255 255 255 0 mpls mpls ldp interface Vlanif150 ip address 40 1 1 1 255 255 255 0 mpls mpls ldp interface GigabitEthernet1 0 0 port hybrid pvid vlan 140 port hybrid untagged vlan 140 interface GigabitEthernet2 0 0 port hybrid pvid vlan 150 port hybrid untagged vlan 140 interface LoopBack0 ip address 4 4 4 9 255 255 255 2...

Page 434: ... return l Configuration file of CE B sysname CE B vlan batch 160 interface Vlanif160 ip address 100 1 1 2 255 255 255 0 interface GigabitEthernet1 0 0 port hybrid pvid vlan 160 port hybrid untagged vlan 160 return 6 37 24 Example for Configuring the PWE3 Trace Test on a Single Hop PW Networking Requirements As shown in Figure 6 26 CE A and CE B are respectively connected to PE A and PE B through V...

Page 435: ...e the basic MPLS functions on the backbone network and set up an LSP tunnel Set up the MPLS LDP peer relation between the two PE devices on the two ends of the PW 3 Create an MPLS L2VC connection between the two PE devices 4 Configure a PWE3 Trace test on a single hop PW on PE A Data Preparation To complete the configuration you need the following data l L2VC IDs of the two ends of the PW which mu...

Page 436: ... results NQA entry test pwe3trace testFlag is inactive testtype is pwe3trace 1 Test 1 result The test is finished Completion success Attempts number 1 Disconnect operation number 0 Operation timeout number 0 System busy operation number 0 Connection fail number 0 Operation sequence errors number 0 RTT Stats errors number 0 Drop operation number 0 Last good path Time 2006 9 24 11 22 21 2 1 Hop 1 Se...

Page 437: ...tagged vlan 110 interface GigabitEthernet2 0 0 port hybrid pvid vlan 120 port hybrid untagged vlan 120 interface LoopBack0 ip address 192 2 2 2 0 0 0 0 nqa test instance test pwe3trace test type pwe3trace local pw type vlan local pw id 100 ospf 1 area 0 0 0 0 network 192 2 2 2 0 0 0 0 network 10 1 1 0 0 0 0 255 return l Configuration file of P sysname P mpls lsr id 192 4 4 4 mpls mpls ldp vlan bat...

Page 438: ...peer 192 2 2 2 remote ip 192 2 2 2 vlan batch 130 140 interface Vlanif130 ip address 10 2 2 2 255 255 255 0 mpls mpls ldp interface Vlanif140 mpls l2vc 192 2 2 2 100 interface GigabitEthernet1 0 0 port hybrid pvid vlan 140 port hybrid untagged vlan 140 interface GigabitEthernet2 0 0 port hybrid pvid vlan 130 port hybrid untagged vlan 130 interface LoopBack0 ip address 192 3 3 3 255 255 255 255 osp...

Page 439: ...n U PE1 and U PE2 Figure 6 27 Networking diagram for configuring the PWE3 Trace test on a multi hop PW CE A CE B U PE1 GE1 0 0 VLANIF110 100 1 1 1 24 GE1 0 0 GE1 0 0 VLANIF160 100 1 1 2 24 U PE2 S PE GE2 0 0 VLANIF130 20 1 1 1 24 GE1 0 0 VLANIF130 20 1 1 2 24 GE1 0 0 VLANIF150 VLANIF120 10 1 1 2 24 GE1 0 0 VLANIF120 10 1 1 1 24 Loopback0 3 3 3 9 32 Loopback0 2 2 2 9 32 4 4 4 9 32 Loopback0 1 1 1 9...

Page 440: ... Configuration Guide VPN Step 2 Configure a PWE3 Trace test of the multi hop PW Configure U PE1 U PE1 system view U PE1 nqa test instance test pwe3trace U PE1 nqa test pwe3trace test type pwe3trace U PE1 nqa test pwe3trace local pw id 100 U PE1 nqa test pwe3trace local pw type ppp U PE1 nqa test pwe3trace label type control word U PE1 nqa test pwe3trace remote pw id 200 Step 3 Perform the test U P...

Page 441: ...estination ip address 10 1 1 2 2 Hop 2 Send operation times 3 Receive response times 3 Min Max Average Completion Time 1050 1490 1323 Sum Square Sum Completion Time 3970 5367500 RTD OverThresholds number 0 Last Good Probe Time 2006 8 24 11 22 21 2 Destination ip address 20 1 1 2 3 Hop 3 Send operation times 3 Receive response times 3 Min Max Average Completion Time 1050 1490 1323 Sum Square Sum Co...

Page 442: ...255 nqa test instance test pwe3trace test type pwe3trace local pw id 100 local pw type ppp label type control word remote pw id 200 ospf 1 area 0 0 0 0 network 10 1 1 0 0 0 0 255 network 1 1 1 9 0 0 0 0 return l Configuration file of P1 sysname P1 mpls lsr id 2 2 2 9 mpls mpls ldp vlan batch 120 130 interface Vlanif120 ip address 10 1 1 2 255 255 255 0 mpls mpls ldp interface Vlanif130 ip address ...

Page 443: ... 9 remote ip 5 5 5 9 vlan batch 130 140 interface Vlanif130 ip address 20 1 1 2 255 255 255 0 mpls mpls ldp interface Vlanif140 ip address 30 1 1 1 255 255 255 0 mpls mpls ldp interface GigabitEthernet1 0 0 port hybrid pvid vlan 130 port hybrid untagged vlan 130 interface GigabitEthernet2 0 0 port hybrid pvid vlan 140 port hybrid untagged vlan 140 interface LoopBack0 ip address 3 3 3 9 255 255 255...

Page 444: ...k 30 1 1 0 0 0 0 255 network 40 1 1 0 0 0 0 255 l Configuration file of U PE2 sysname U PE2 mpls lsr id 5 5 5 9 mpls mpls l2vpn mpls ldp mpls ldp remote peer 3 3 3 9 remote ip 3 3 3 9 vlan batch 150 160 interface Vlanif150 ip address 40 1 1 2 255 255 255 0 mpls mpls ldp interface Vlanif160 mpls l2vc 3 3 3 9 200 interface GigabitEthernet1 0 0 port hybrid pvid vlan 150 port hybrid untagged vlan 150 ...

Page 445: ...itch C are reachable Figure 6 28 Networking diagram for configuring an NQA test group SwitchC SwitchB test2 GE1 0 0 VLANIF110 10 1 1 1 24 GE1 0 0 VLANIF110 10 1 1 2 24 GE1 0 0 VLANIF120 10 2 1 2 24 GE2 0 0 VLANIF120 10 2 1 1 24 test1 SwitchA Configuration Roadmap The configuration roadmap is as follows 1 Configure Switch A as the NQA client 2 Create an NQA test group that consists of two tests to ...

Page 446: ... 4 Return to the test group view and set the test to be performed after 10 seconds SwitchA nqa test instance group icmp SwitchA nqa group icmp start delay seconds 10 After running the display nqa agent command you can view the status of the test group and the test members on the client SwitchA nqa group icmp display nqa agent nqa test instance group icmp test type icmp switch to group nqa status g...

Page 447: ...itive Jitter 0 Min Negative Jitter 0 Max Positive Jitter 0 Max Negative Jitter 0 Positive Jitter Num 0 Negative Jitter Num 0 Positive Jitter Sum 0 Negative Jitter Sum 0 Positive Jitter Square Sum 0 Negative Jitter Square Sum 0 Packet Loss 0 Packet Loss Ratio 0 Destination ip address 10 2 1 2 Min Max Average Completion Time 50 60 53 Sum Square Sum Completion Time 160 8600 Average Single Way Complet...

Page 448: ...iguring the Test of Sending NQA Threshold Traps to the NMS Networking Requirements As shown in Figure 6 29 the trap threshold are configured and the function of sending trap messages is enabled when a Jitter test is configured After the Jitter test is complete Switch A sends a trap message to the NMS when the interval for transmitting the test packet from Switch A to Switch C or from Switch C to S...

Page 449: ...ing data l IP address and port number of the server side host l Type of the monitored service and monitoring port number l RTD threshold and OWD threshold l IP address of the NMS Procedure Step 1 Configure reachable routes between Switch A and Switch B between Switch A and Switch C and between Switch B and Switch C The configuration details are not mentioned here Step 2 Configure a Jitter test Con...

Page 450: ...ation times 3000 Receive response times 3000 Completion success RTD RTD OverThresholds number 25 OWD OverThresholds SD number 7 OWD OverThresholds DS number 7 Min Max Avg Sum RTT 1 26 1 3143 RTT Square Sum 5665 NumOfRTT 3000 Drop operation number 0 Operation sequence errors number 0 RTT Stats errors number 0 System busy operation number 0 Operation timeout number 0 Min Positive SD 1 Min Positive D...

Page 451: ...onfiguration file of Switch A sysname SwitchA vlan batch 110 120 interface Vlanif110 ip address 20 1 1 1 255 255 255 0 interface Vlanif120 ip address 10 1 1 1 255 255 255 0 interface GigabitEthernet1 0 0 port hybrid pvid vlan 120 port hybrid untagged vlan 120 interface GigabitEthernet2 0 0 port hybrid pvid vlan 110 port hybrid untagged vlan 110 ospf 1 area 0 0 0 0 network 10 1 1 0 0 0 0 0 nqa test...

Page 452: ... 1 2 255 255 255 0 interface GigabitEthernet1 0 0 port hybrid pvid vlan 130 port hybrid untagged vlan 130 nqa server udpecho 30 1 1 2 9000 ospf 1 area 0 0 0 1 network 30 1 1 0 0 0 0 255 return 6 37 28 Example for Configuring Test Results to Be Sent to the FTP Server This part provides examples for sending send test results to the FTP server to save test results to the most extent Networking Requir...

Page 453: ...and password used for logging into the FTP server l Number of test results saved through FTP l Duration of saving test results through FTP Procedure Step 1 Configure parameters for connecting the FTP server Configure the IP address of the client that is connected to the FTP server SwitchA system view SwitchA nqa ftp record ip address 11 1 2 8 Configure the user name for logging into the FTP server...

Page 454: ...NCE USERNAME ftp PASSWORD ftp FILENAME icmp ITEM NUM 10010 TIME 2 LAST FINISHED FILENAME icmp20080605 150350 txt End Configuration Files l Configuration file of Switch A sysname SwitchA vlan batch 10 20 interface Vlanif10 ip address 11 1 1 11 255 255 255 0 interface Vlanif20 ip address 11 1 2 1 255 255 255 0 interface GigabitEthernet1 0 0 port hybrid pvid vlan 10 port hybrid untagged vlan 10 inter...

Page 455: ...ile of Switch B sysname SwitchB vlan batch 10 interface Vlanif10 ip address 11 1 1 10 255 255 255 0 interface GigabitEthernet1 0 0 port hybrid pvid vlan 10 port hybrid untagged vlan 10 return 6 37 29 Example for Configuring a Threshold for the NQA Alarm This part provides examples for configuring the actions that the system needs to perform in response to the threshold exceeding such as generating...

Page 456: ...ation Procedure Step 1 Configure Switch A as the client of the ICMP jitter test The configuration details are not mentioned here Step 2 Configure the event corresponding to the alarm on Switch A SwitchA system view SwitchA nqa event 10 log trap Step 3 Configure the alarm threshold SwitchA nqa test instance admin icmpjitter SwitchA icmpjitter test type icmpjitter SwitchA icmpjitter destination addr...

Page 457: ... Max 1000 NQA Flow Remained 1000 nqa test instance admin icmpjitter test type icmpjitter destination address ipv4 11 1 1 20 frequency 5 alarm 20 lost packet ratio 2 rising threshold 100 10 falling threshold 10 10 nqa status normal End Configuration Files l Configuration file of Switch A sysname SwitchA vlan batch 10 20 interface Vlanif10 ip address 11 1 1 1 255 255 255 0 interface Vlanif20 ip addr...

Page 458: ...1 20 255 255 255 0 interface GigabitEthernet1 0 0 port hybrid pvid vlan 10 port hybrid untagged vlan 10 return 6 37 30 Example for Configuring NQA Upper Lower Alarm Threshold and Test Instance Linkage This part provides examples for configuring the association of NQA test instances to dynamically monitor faults on the network Networking Requirements As shown in Figure 6 32 an NQA Jitter is require...

Page 459: ...ion address ipv4 11 1 1 2 SwitchA nqa admin icmp quit Step 2 On Router A configure the event that triggers test instance linkage and create a linked test instance admin icmp SwitchA nqa event 10 linkage admin icmp Step 3 On Router A create an NQA ICMP Jitter test instance SwitchA nqa test instance admin icmpjitter SwitchA nqa admin icmpjitter test type icmpjitter SwitchA nqa admin icmpjitter desti...

Page 460: ... 0 0 0 0 0 Lost packet ratio 100 NQA entry admin icmpjitter testflag is inactive testtype is icmpjitter 1 Test 1 result The test is finished SendProbe 60 ResponseProbe 0 Completion failed RTD OverThresholds number 0 OWD OverThresholds SD number 0 OWD OverThresholds DS number 0 Min Max Avg Sum RTT 0 0 0 0 RTT Square Sum 0 NumOfRTT 0 Drop operation number 60 Operation sequence errors number 0 RTT St...

Page 461: ...icmpjitter destination address ipv4 11 1 1 2 nqa event 10 linkage admin icmp nqa test instance admin icmpjitter alarm 10 lost packet ratio absolute rising threshold 80 10 falling threshold 10 10 return l Configuration file of Switch B sysname SwitchB vlan batch 10 interface Vlanif10 ip address 11 1 1 2 255 255 255 0 interface GigabitEthernet1 0 0 port hybrid pvid vlan 10 port hybrid untagged vlan ...

Page 462: ......

Page 463: ...ace 7 4 Collecting IPv6 Traffic Statistics This section describes how to collect statistics about IPv6 traffic passing through an interface 7 5 Configuring the Aggregation Statistics About IPv4 Traffic This section describes how to configure the statistics about IPv4 aggregation traffic passing an interface 7 6 Configuring the Flexible NetStream Feature This section describes how to configure the ...

Page 464: ...onfiguration examples of NetStream 7 NetStream Configuration Quidway S9300 Terabit Routing Switch Configuration Guide Network Management 7 2 Huawei Proprietary and Confidential Copyright Huawei Technologies Co Ltd Issue 03 2010 09 20 ...

Page 465: ... communications among different types of services are realized by the transmission of IP packets from one terminal to another Such IP packets constitute a data stream of a particular service on the network Most data streams on the network are ephemeral and bidirectional Based on the destination IP address source IP address destination port number source port number protocol number Type of Service ...

Page 466: ...nd prefix tos Aging Types The S9300 supports the following aging types l Aging depending on the inactive time of the original traffic After the inactive aging time is set the traffic is aged if the S9300 does not receive any packet of the traffic in a certain period Then the statistics collection is ended and the result is sent to the NSC l Aging depending on the FIN flag in the TCP streams If the...

Page 467: ...pectively The statistics result is sent to the Network Management System NMS By analyzing the traffic statistics the NMS can obtain the traffic situation on the network and thus performs effective network management Pre configuration Tasks Before configuring the statistics about the original traffic complete the following tasks l Setting physical parameters on an interface l Setting the link layer...

Page 468: ...rfaces is 1000 The suppression ratio is used for packet sampling After the suppression ratio is set the S9300 does not sample the packets that are filtered out in the suppression Step 5 Optional Run ip netstream sampler fix packets packet interval inbound outbound The fixed packets sampling ratio is set on the interface By default the fixed packets sampling ratio on an interface is 1000 1 End 7 3 ...

Page 469: ...ted statistics that is the IP address of the NSC is configured You can configure up to 2 destination addresses to implement the backup between 2 NSCs End 7 3 5 Optional Aging the TCP Traffic According to Its FIN Flag Context The TCP traffic can be aged according to the FIN flag If the traffic received by the S9300 contains the TCP FIN flag the traffic is aged Then the statistics collection is ende...

Page 470: ...nterval The inactive aging time of the original traffic is set By default the inactive aging time of the original traffic is 30s NOTE If the reset ip netstream cache slot slot number command is run before the inactive aging timer expires the statistics are not sent to the NSC End 7 3 7 Checking the Configuration Prerequisite The configurations of the NetStream function are complete Procedure Step ...

Page 471: ...n on the network and thus performs effective network management Pre configuration Tasks Before configuring the statistics about the original traffic complete the following tasks l Setting physical parameters on an interface l Setting the link layer parameters of the interface Data Preparation To configure NetStream you need the following data No Data 1 Name and number of the interface on which tra...

Page 472: ... sampler fix packets packet interval inbound outbound The fixed packets sampling ratio is set on the interface By default the fixed packets sampling ratio on an interface is 1000 1 End 7 4 3 Optional Configuring the Format of Exported Packets IPv6 original traffic can be exported only in the v9 format Therefore the output format must be configured to v9 for IPv6 traffic Procedure Step 1 Run system...

Page 473: ...CP traffic can be aged according to the FIN flag If the traffic received by the S9300 contains the TCP FIN flag the traffic is aged Then the statistics collection is ended and the result is sent to the NSC Procedure Step 1 Run system view The system view is displayed Step 2 Run ip netstream tcp flag enable The TCP traffic will be aged according to its FIN flag in the TCP packet header By default t...

Page 474: ...command is run before the inactive aging timer expires the statistics are not sent to the NSC End 7 4 7 Checking the Configuration Prerequisite The configurations of the NetStream function are complete Procedure Step 1 Run the display netstream all command to view the NetStream configuration End 7 5 Configuring the Aggregation Statistics About IPv4 Traffic This section describes how to configure t...

Page 475: ...d number of the interface on which traffic statistics need to be collected 2 Version number of exported packets of the NetStream traffic statistics 3 IP addresses and port numbers of the NSC 7 5 2 Configuring the NetStream Function on an Interface Procedure Step 1 Run system view The system view is displayed Step 2 Run interface ethernet gigabitethernet xgigabitethernet interface number The interf...

Page 476: ...ported Packets Procedure Step 1 Run system view The system view is displayed Step 2 Run ip netstream aggregation as as tos destination prefix destination prefix tos prefix prefix tos protocol port protocol port tos source prefix source prefix tos The NetStream aggregation view is displayed Step 3 Optional Run export version version The version of the exported packets is configured By default the v...

Page 477: ...gation traffic is sent to the destination NSC address configured in the NetStream aggregation view If no destination NSC address is configured in the NetStream aggregation view aggregation traffic is sent to the destination NSC address configured in the system view End 7 5 5 Configuring the Aggregation Function Procedure Step 1 Run system view The system view is displayed Step 2 Run ip netstream a...

Page 478: ...1 Establishing the Configuration Task Applicable Environment To collect statistics on packets based on the protocol type DSCP field source IP address destination IP address source port number destination port number or traffic label on the IP network you can configure Flexible NetStream Pre configuration Tasks Before configuring Flexible NetStream complete the following task l Setting physical par...

Page 479: ...m record record name The record view is displayed Step 3 Run match ip destination address destination port dscp flow label protocol source address source port The aggregation key words of records are configured NOTE The flow label parameter is applicable to only the IPv6 traffic End 7 6 4 Optional Configuring the Exported Traffic Statistics Procedure Step 1 Run system view The system view is displ...

Page 480: ...nterface To enable the interface to collect statistics about inbound and outbound IPv6 unicast traffic run the ipv6 netstream inbound outbound command By default the NetStream function is disabled in inbound and outbound directions In this case statistics about IPv4 and IPv6 unicast traffic cannot be collected The Netstream can collect statistics about inbound and outbound packets separately Step ...

Page 481: ...xisting configuration by running the undo port ip netstream record command End 7 6 7 Checking the Configuration Prerequisite All configurations are complete Procedure Step 1 Run the display netstream all command to view the NetStream configuration End 7 7 Configuring the Mapping of NetStream Interface Indexes This section describes how to configure the mapping of NetStream interface indexes 7 7 1 ...

Page 482: ...nterfaces work normally l Setting the IP address of the interface l Enabling the NetStream function on the S9300 l Setting the version of the exported packets of NetStream original traffic to v9 l Setting the version of the enabled aggregation traffic to v9 Data Preparation To complete the configuration you need the following data No Data 1 Version of exported packets v9 2 Value of the interface i...

Page 483: ...d Example Check the configuration of the NetStream interface indexes Quidway display netstream global ip netstream export version 9 ip netstream export index switch 32 ipv6 netstream export index switch 32 ip netstream aggregation as enable export version 9 7 8 Maintaining NetStream This section describes how to clear NetStream statistics and debug NetStream 7 8 1 Debugging NetStream 7 8 1 Debuggi...

Page 484: ...ts traffic statistics on the packets sent and received by GE1 0 0 of Switch B The traffic statistics serve as the basis for network accounting Figure 7 2 Networking diagram for configuring NetStream GE1 0 0 VLANIF 100 10 1 1 1 24 GE1 0 0 VLANIF 100 10 1 1 2 24 GE2 0 0 VLANIF 200 10 2 1 1 24 User Network NSC NDA 10 2 1 2 24 SwitchB SwitchA Configuration Roadmap The configuration roadmap is as follo...

Page 485: ... export traffic statistics to the NSC SwitchB ip netstream export host 10 2 1 2 6000 Set the source address of the traffic statistics exported by SwitchB SwitchB ip netstream export source 10 2 1 1 Step 4 Set the aging mode and aging time of the original traffic Set the inactive aging time of the original traffic to 100 seconds SwitchB ip netstream timeout inactive 100 NOTE Do not run the reset ip...

Page 486: ...ggre entries 4 Handle PreTos aggre entries 1 End Configuration Files Configuration file of Switch A sysname SwitchA vlan 100 interface Vlanif 100 ip address 10 1 1 1 255 255 255 0 interface GigabitEthernet1 0 0 port hybrid pvid vlan 100 port hybrid untagged vlan 100 return Configuration file of Switch B sysname SwitchB vlan batch 100 200 ip netstream export source 10 2 1 1 ip netstream export host...

Page 487: ...User Network NSC NDA 10 4 1 2 24 ISP1 ISP2 GE1 0 0 GE3 0 0 GE2 0 0 GE1 0 0 GE1 0 0 GE2 0 0 GE1 0 1 SwitchA SwitchB SwitchC SwitchD Switch Physical interface VLANIF interface IP address Switch A GigabitEthernet1 0 0 VLANIF30 10 1 1 1 24 Switch B GigabitEthernet1 0 0 VLANIF10 10 2 1 1 24 GigabitEthernet2 0 0 VLANIF20 10 3 1 1 24 GigabitEthernet3 0 0 VLANIF30 10 1 1 2 24 GigabitEthernet1 0 1 VLANIF40...

Page 488: ...SwitchA ospf 1 area 0 0 0 0 network 10 1 1 1 0 0 0 255 Configure the dynamic route on Switch B Quidway system view Quidway sysname SwitchB SwitchB ospf router id 2 2 2 2 SwitchB ospf 1 area 0 SwitchB ospf 1 area 0 0 0 0 network 10 1 1 2 0 0 0 255 SwitchB ospf 1 area 0 0 0 0 network 10 2 1 1 0 0 0 255 SwitchB ospf 1 area 0 0 0 0 network 10 3 1 1 0 0 0 255 SwitchB ospf 1 area 0 0 0 0 quit SwitchB os...

Page 489: ...packets 100 outbound SwitchB GigabitEthernet1 0 0 quit SwitchB quit Step 5 Verify the configuration After successful configurations run the display netstream all command in the user view of Switch B to check the configurations SwitchB display netstream all ip netstream aggregation as ip netstream export source 10 4 1 1 ip netstream export host 10 4 1 2 6000 enable export version 9 slot 0 GigabitEt...

Page 490: ...ess 10 3 1 1 255 255 255 0 interface Vlanif30 ip address 10 1 1 2 255 255 255 0 interface Vlanif40 ip address 10 4 1 1 255 255 255 0 interface GigabitEthernet1 0 0 port hybrid pvid vlan 10 port hybrid untagged vlan 10 ip netstream inbound ip netstream outbound ip netstream sampler fix packets 100 inbound ip netstream sampler fix packets 100 outbound interface GigabitEthernet2 0 0 port hybrid pvid ...

Page 491: ... 255 255 0 interface GigabitEthernet1 0 0 port hybrid pvid vlan 10 port hybrid untagged vlan 10 bgp 65002 router id 3 3 3 3 peer 10 2 1 1 as number 65001 ipv4 family unicast undo synchronization peer 10 2 1 1 enable return Configuration file of Switch D sysname SwitchD vlan batch 20 interface Vlanif20 ip address 10 3 1 2 255 255 255 0 interface GigabitEthernet2 0 0 port hybrid pvid vlan 20 port hy...

Page 492: ... on Switch A and Switch B 2 Specify the version of the exported packets 3 Configure the source address destination address and destination port number for exporting packets 4 Configure the Flexible NetStream feature on GE 1 0 0 of Switch B Data Preparation To complete the configuration you need the following data l IP address of each interface l Version of the exported packets l Address and port n...

Page 493: ...ter packets SwitchB record test quit Step 5 Configure the Flexible NetStream feature on GE 1 0 0 Enable the NetStream function for the inbound and outbound traffic on GE 1 0 0 SwitchB interface gigabitethernet 1 0 0 SwitchB GigabitEthernet1 0 0 ip netstream inbound SwitchB GigabitEthernet1 0 0 ip netstream outbound Set the fixed packets sampling ratio for the inbound and outbound traffic on GE 1 0...

Page 494: ...ndle DstPreTos aggre entries 4 Handle PreTos aggre entries 1 Record test handle entries 0 End Configuration Files Configuration file of Switch A sysname SwitchA vlan 100 interface Vlanif 100 ip address 10 1 1 1 255 255 255 0 interface GigabitEthernet1 0 0 port hybrid pvid vlan 100 port hybrid untagged vlan 100 return Configuration file of Switch B sysname SwitchB vlan batch 100 200 ip netstream ex...

Page 495: ...hybrid untagged vlan 200 ip netstream record test match ip destination address match ip destination port collect counter packets collect counter bytes collect interface input collect interface output return Quidway S9300 Terabit Routing Switch Configuration Guide Network Management 7 NetStream Configuration Issue 03 2010 09 20 Huawei Proprietary and Confidential Copyright Huawei Technologies Co Lt...

Page 496: ......

Page 497: ...Functions This section describes how to configure basic HGMP functions to create or manage a cluster 8 3 Configuring Advanced HGMP Functions This section describes how to configure advanced HGMP functions to simplify the management and maintenance of a basic cluster 8 4 Maintaining HGMP This section describes how to clear the statistics on NDP monitor the operation status of the HGMP cluster and d...

Page 498: ...orks In this situation you have to maintain and manage a great number of devices individually and assign IP addresses for them one by one This leads to the waste of IP addresses The Huawei Group Management Protocol HGMP is developed to manage a group of Ethernet switches By running HGMP you can appoint a switch as the administrator in a cluster to perform integrated management and configurations o...

Page 499: ...outer Administrator Member1 Member2 Member3 Member4 Host DSLAM Cluster1 Administrator administrator switch Member member switch Quidway S9300 Terabit Routing Switch Configuration Guide Network Management 8 HGMP Configuration Issue 03 2010 09 20 Huawei Proprietary and Confidential Copyright Huawei Technologies Co Ltd 8 3 ...

Page 500: ...rotocol NDP packets are used to collect information about the directly connected neighbors including the device model software version hardware version connection interface member number private IP address used for communication within a cluster and hardware platform NOTE Any device that supports HGMP does not forward NDP packets An NDP table is created to store information about neighbors 8 HGMP ...

Page 501: ...a public IP address to the administrator switch l A member switches is the member device in a cluster The member switch is managed by the administrator switch that acts as an agent Therefore the public IP address is not required for a member switch l A candidate switch is a device that has the cluster function but does not join any cluster l A standby switch is the backup administrator switch in a...

Page 502: ...kinds of IP address user name and password are configured the command cannot be performed l Member switches download specified files from the FTP server and then set them as the default files for the next startup l To avoid congestion you can set the maximum number of member switches that concurrently download files from the FTP server Batch Restart HGMP can perform batch restart over a specified ...

Page 503: ...you need to disable NDP or NTDP on unrelated interfaces As a result less packets are transmitted and the topology of the cluster is stable l On the administrator switch disable NDP or NDTP on unrelated interfaces in the cluster l After you disable NDP on unrelated interfaces in the cluster NDP packets of the interfaces are not sent to the administrator switch l After you disable NTDP on unrelated ...

Page 504: ...u must first add the switch to the cluster 8 2 6 Optional Deleting or Quitting a Cluster 8 2 7 Optional Deleting a Member Switch If you do not need to use a cluster to manage a switch in a management domain you can delete the switch from the cluster 8 2 8 Checking the Configuration After configuring basic HGMP functions you can view the configuration 8 2 1 Establishing the Configuration Task Befor...

Page 505: ...bes how to configure the Neighbor Discovery Protocol NDP to collect information about directly connected neighbors Procedure l Enabling NDP in the system view Do as follows on the administrator switch and member switches 1 Run system view The system view is displayed 2 Run ndp enable By default NDP is not enabled in the system view l Enabling NDP on an interface Do as follows on the administrator ...

Page 506: ...ch and member switches 1 Run system view The system view is displayed 2 Run ndp timer hello interval The interval for sending NDP packets is set By default the interval for sending NDP packets is set to 60 seconds The interval for sending NDP packets must be shorter than the aging time of NDP packets End 8 2 3 Configuring NTDP This section describes how to configure the Network Topology Discovery ...

Page 507: ...d 2 Run ntdp timer hop delay hop delay time The hop delay in forwarding NTDP packets is set 3 Run ntdp timer port delay port delay time The interface delay in forwarding NTDP packets is set By default the hop delay is 200 ms and the interface delay is 20 ms l Optional Setting the interval for collecting topology information 1 Run system view The system view is displayed 2 Run ntdp timer interval T...

Page 508: ... VLAN on the device is 1 which should be created manually If you do not need to change the default ID of the management VLAN you can skip Step 6 and Step 7 The VLAN ID in Step 2 is 1 If you need to change the ID of the management VLAN VLAN IDs in Step 2 Step 4 and Step 7 must be the same 3 Run quit The VLAN view is quit 4 Run interface vlanif vlan id A VLANIF interface is created and the VLANIF in...

Page 509: ...ed into the cluster In such a situation numbering of these member switches may be changed Creating a cluster manually These steps need to be configured only on the administrator switch or on the switch which will be the administrator in a created HGMP cluster In this mode you need to manually add member switches to the cluster 1 Run system view The system view is displayed 2 Run cluster The cluste...

Page 510: ...e range of private IP addresses used in the cluster 4 Run auto build recover A cluster is created automatically The auto build command can also be used to add member switches automatically For configuration details see Adding a Member Switch End 8 2 5 Adding a Member Switch To perform unified management over a switch that is not a member of a cluster you must first add the switch to the cluster Co...

Page 511: ...ically For configuration details see Creating a Cluster recover indicates that all member switches including the member switches missing on the administrator switch should re join the HGMP cluster NOTE If the administrator switch of HGMP cluster A considers that switch N does not belong to cluster A but switch N considers that it belongs to cluster A switch N is called the missing member switch on...

Page 512: ...eted all member switches automatically quit the cluster After the command is run on a member switch the member switch automatically quits the cluster without affecting the administrator switch and other member switches l Quitting a cluster Do as follows on a member switch 1 Run system view The system view is displayed 2 Run cluster The cluster view is displayed 3 Run undo administrator address The...

Page 513: ...un the display ndp to check the NDP configuration in the system view l Run the display ndp interface interface type interface number to interface type interface number 1 10 to check the neighbor information detected through NDP on a specified interface l Run the display ntdp to check the global NTDP settings l Run the display ntdp device list verbose to check the device information collected throu...

Page 514: ...bitEthernet1 0 1 Status Enabled Packets Sent 116 Packets Received 110 Packets Error 0 Neighbor 1 Aging Time 174 s MAC Address 0018 8203 39d8 Port Name GigabitEthernet1 0 1 Software Version VRP 5 70 V100R003C00B051 Device Name S9300 Port Duplex FULL Product Ver S9300 If the NTDP neighbor is normally established you can run the display ntdp command to check the NTDP settings Quidway display ntdp Net...

Page 515: ...Status Device Name 0 S9300 00e0 fcb8 d6b6 Admin HUAWEI_0 Administrator 1 1 S9300 0018 8267 7f7d Up HUAWEI_1 Member 1 2 S9300 00e0 0003 0003 Up HUAWEI_2 Member 2 8 3 Configuring Advanced HGMP Functions This section describes how to configure advanced HGMP functions to simplify the management and maintenance of a basic cluster 8 3 1 Establishing the Configuration Task Before configuring advanced HGM...

Page 516: ...tasks l Ensuring that the device is correctly powered on and operates normally l Configuring basic attributes of interfaces on the device l Configuring Basic HGMP Functions Data Preparation To configure advanced HGMP functions you need the following data No Data 1 Interval for sending handshake packets 2 Aging time of the device status 3 Aging time of member switches 4 Multicast MAC address of the...

Page 517: ...holdtime of the status for the member switch Do as follows on the administrator switch 1 Run system view The system view is displayed 2 Run cluster The cluster view is displayed 3 Run holdtime hold time The holdtime of the status of the member switch is set By default the holdtime is 60 seconds The holdtime must be at least three times the interval for sending handshake packets l Enable candidate ...

Page 518: ...e cluster is 01 80 C2 00 00 0A For details of the range of the multicast MAC addresses refer to the Command Reference Before setting up a cluster you need to assign a multicast MAC address to the cluster or use the default multicast MAC address To enhance the network security or if the default multicast MAC address is already used by other services on the network you can reassign a multicast MAC a...

Page 519: ...e cluster view to enable the FTP NAT function on the administrator switch The NAT rules are automatically generated on the administrator switch and the member switches obtain the NAT mapped ports The FTP NAT function on the administrator switch is disabled by default That is the member switches communicate with the FTP server in non NAT mode After the FTP server for the cluster is configured succe...

Page 520: ...ault no public server and host is configured for a cluster End 8 3 3 Managing Switches in a Cluster Through HGMP You can use commands to configure the following features for member switches of an HGMP cluster in batches batch distribution batch restart incremental configuration configuration synchronization and security features Procedure l Configuring the batch distribution function Do as follows...

Page 521: ...addresses used in batch distribution are private IP addresses used in the cluster l Configuring the batch restart function Do as follows on the administrator switch 1 Run system view The system view is displayed 2 Run cluster The cluster view is displayed 3 Optional Run cluster member reboot timeout time The timeout period for member switches to reboot is configured 4 Run cluster member reboot gro...

Page 522: ...Configuring Communication Between Huawei Devices and Non Huawei Devices Do as follows on the administrator switch 1 Run system view The system view is displayed 2 Run cluster The cluster view is displayed 3 Run cluster packet extend enable Communication Between Huawei Devices and Non Huawei Devices is enabled To configure the management VLAN for the interface of the administrator switch you should...

Page 523: ...on commands that is currently edited run the display increment command command l Synchronizing configuration files Do as follows on the administrator switch 1 Run system view The system view is displayed 2 Run cluster The cluster view is displayed 3 Run increment config synchronization group by device type device type ip ip address to ip address 1 10 member number member number to member number 1 ...

Page 524: ...hether configuration files of member switches are synchronized to the FTP server l Run the display member getfile stat to check whether member switches successfully obtain configuration files version files or patch files l Run the display member interface state ndp ntdp to check the status of NDP or NTDP on unrelated interfaces of member switches l Run the display member reboot stat to check wheth...

Page 525: ...Ethernet1 0 1 GigabitEthernet1 0 2 HUAWEI_4 Member 4 00e0 9f7e 0b00 Run the display increment command command and you can check the incremental configuration of the cluster including the number and contents of the incremental configuration Quidway display increment command The content of increment commands SN Content 10 vlan batch 10 to 20 20 ip route static 2 0 0 0 8 10 0 0 1 If the configuration...

Page 526: ...ice MacAddress IPAddress Result 1 S9300 0002 0002 0002 10 0 0 2 success 2 S9300 0003 0003 0003 10 0 0 3 success If the current configurations are successfully saved on member switches run the display member save stat command and you can view that success is displayed Quidway display member save stat The result of member switches saving SN Device MacAddress IPAddress Result 1 S9300 0002 0002 0002 1...

Page 527: ... interface type interface number 1 10 command in the user view to clear the NDP statistics End 8 4 2 Monitoring the Operation Status of the HGMP Cluster This part describes how to use the display commands to monitor the operating status of the HGMP cluster Context In routine maintenance you can run the following commands in any view to display the operation stauts of HGMP Procedure l Run the displ...

Page 528: ...d to enable NDP debugging l Run the debugging ntdp all data error message packet verbose to enable NTDP debugging l Run the debugging cluster all event handshake member mrc nat packet state command or debugging cluster packet handshake mrc verbose command to enable cluster debugging End 8 5 HGMP Configuration Examples This section provides several configuration examples of HGMP 8 5 1 Example for C...

Page 529: ... up a Layer 2 network through Layer 2 devices Too many Layer 2 devices are hard to be maintained and managed on the site In addition to save public IP addresses you cannot assign a public IP address to each device To effectively manage the Layer 2 network you can create a cluster for the Layer 2 network and manage the cluster through HGMP In this example Administrator 1 is nearest to the network a...

Page 530: ...follows 1 Create a management VLAN on all devices Enable NDP and NTDP to ensure that each device can detect the topology structure of the network through NTDP 2 Choose the administrator switch and then create a cluster named HUAWEI on the administrator switch 3 Add all the devices that support HGMP in the Layer 2 network to the cluster 4 Assign an IP address to VLANIF 10 to facilitate the communic...

Page 531: ...s vlan 10 Administrator 1 GigabitEthernet1 0 2 quit Administrator 1 interface gigabitethernet 1 0 3 Administrator 1 GigabitEthernet1 0 3 port link type trunk Administrator 1 GigabitEthernet1 0 3 port trunk allow pass vlan 10 Administrator 1 GigabitEthernet1 0 3 quit Administrator 1 interface vlanif 10 Administrator 1 Vlanif10 quit Configure member switch 1 Quidway system view Quidway sysname Membe...

Page 532: ...abitEthernet1 0 1 quit Member 1 interface gigabitethernet 1 0 2 Member 1 GigabitEthernet1 0 2 ndp enable Member 1 GigabitEthernet1 0 2 quit Configure member switch 3 Member 2 ndp enable Member 2 interface gigabitethernet 1 0 1 Member 2 GigabitEthernet1 0 1 ndp enable Member 2 GigabitEthernet1 0 1 quit Configure member switch 4 Member 3 ndp enable Member 3 interface gigabitethernet 1 0 1 Member 3 G...

Page 533: ... hop 3 Member 1 interface gigabitethernet 1 0 1 Member 1 GigabitEthernet1 0 1 ntdp enable Member 1 GigabitEthernet1 0 1 quit Member 1 interface gigabitethernet 1 0 2 Member 1 GigabitEthernet1 0 2 ntdp enable Member 1 GigabitEthernet1 0 2 quit Configure member switch 3 Member 2 ntdp enable Member 2 ntdp timer 10 Member 2 ntdp hop 3 Member 2 interface gigabitethernet 1 0 1 Member 2 GigabitEthernet1 ...

Page 534: ...DP and you can find the MAC address and types of related devices Administrator 1 ntdp explore Administrator 1 system view Administrator 1 display ntdp device list The device list of NTDP MAC HOP IP PLATFORM 0004 0004 0004 2 S9300 0003 0003 0003 1 S9300 0002 0002 0002 1 S9300 0001 0001 0001 0 S9300 Step 5 Create a cluster NOTE Following steps can be performed only on the administrator switch On the...

Page 535: ...rator switch l Take the mode of automatically adding member switches as an example To add member switches manually see Adding a Member Switch Add all candidate switches to the cluster HUAWEI_0 Administrator 1 cluster auto build Collecting candidate list please wait Candidate list Name Hop MAC Address DeviceType Member 1 1 0002 0002 0002 S9300 Member 2 1 0003 0003 0003 S9300 Member 3 2 0004 0004 00...

Page 536: ... 8 Configure a static route on the administrator switch This operation is to ensure that a reachable route exists between switches in the cluster and servers or hosts HUAWEI_0 Administrator 1 ip route static 0 0 0 0 0 1 0 0 2 NOTE You can also run a routing protocol Step 9 Configure public servers and hosts of the cluster Configure an FTP server HUAWEI_0 Administrator 1 cluster HUAWEI_0 Administra...

Page 537: ...e interface Vlanif10 ip address 1 0 0 1 255 0 0 0 interface gigabitethernet1 0 1 port link type trunk port trunk allow pass vlan 10 ntdp enable ndp enable interface gigabitethernet1 0 2 port link type trunk port trunk allow pass vlan 10 ntdp enable ndp enable cluster mngvlanid 10 ip pool 10 0 0 1 255 0 0 0 build HUAWEI cluster ftp nat enable ftp server 2 0 0 1 sftp server 2 0 0 2 logging host 4 0 ...

Page 538: ...le interface Vlanif10 interface gigabitethernet1 0 1 port link type trunk port trunk allow pass vlan 10 ntdp enable ndp enable cluster mngvlanid 10 administrator address 0001 0001 0001 name HUAWEI return l Configuration file of Member 3 sysname Member 3 vlan batch 10 cluster enable ntdp enable ntdp hop 3 ntdp timer 10 ndp enable interface Vlanif10 interface gigabitethernet1 0 2 port link type trun...

Page 539: ...mber 2 is 2 and the member ID of Member 3 is 3 To upload files to Member 1 Member 2 and Member 3 or download files from them you can set up an FTP connection between the devices out of the cluster and member switches in NAT or non NAT mode NOTE In this configuration example where the NAT mode is adopted Member 3 accesses the FTP server 2 0 0 1 8 out of the cluster and devices out of the cluster ac...

Page 540: ... Create a cluster and configure basic HGMP functions for the cluster according to the steps described in the section Example for Configuring Basic HGMP Functions for a Cluster 2 For the situation that Member 3 accesses the FTP server 2 0 0 1 8 out of the cluster l Run the cluster ftp command on the member switch to set up a connection with the public FTP server of the cluster 3 For the situation t...

Page 541: ...tethernet 1 0 2 Administrator 1 GigabitEthernet1 0 2 port link type trunk Administrator 1 GigabitEthernet1 0 2 port trunk allow pass vlan 10 Administrator 1 GigabitEthernet1 0 2 quit Administrator 1 interface gigabitethernet 1 0 3 Administrator 1 GigabitEthernet1 0 3 port link type trunk Administrator 1 GigabitEthernet1 0 3 port trunk allow pass vlan 10 Administrator 1 GigabitEthernet1 0 3 quit Ad...

Page 542: ...switch 2 Member 1 ndp enable Member 1 interface gigabitethernet 1 0 1 Member 1 GigabitEthernet1 0 1 ndp enable Member 1 GigabitEthernet1 0 1 quit Member 1 interface gigabitethernet 1 0 2 Member 1 GigabitEthernet1 0 2 ndp enable Member 1 GigabitEthernet1 0 2 quit Configure member switch 3 Member 2 ndp enable Member 2 interface gigabitethernet 1 0 1 Member 2 GigabitEthernet1 0 1 ndp enable Member 2 ...

Page 543: ...ember switch 2 Member 1 ntdp enable Member 1 ntdp timer 10 Member 1 ntdp hop 3 Member 1 interface gigabitethernet 1 0 1 Member 1 GigabitEthernet1 0 1 ntdp enable Member 1 GigabitEthernet1 0 1 quit Member 1 interface gigabitethernet 1 0 2 Member 1 GigabitEthernet1 0 2 ntdp enable Member 1 GigabitEthernet1 0 2 quit Configure member switch 3 Member 2 ntdp enable Member 2 ntdp timer 10 Member 2 ntdp h...

Page 544: ...cted through NTDP and you can find the MAC address and types of related devices Administrator 1 ntdp explore Administrator 1 system view Administrator 1 display ntdp device list The device list of NTDP MAC HOP IP PLATFORM 0004 0004 0004 2 S9300 0003 0003 0003 1 S9300 0002 0002 0002 1 S9300 0001 0001 0001 0 S9300 Step 5 Create a cluster NOTE Following steps can be performed only on the administrato...

Page 545: ...rator switch l Take the mode of automatically adding member switches as an example To add member switches manually see Adding a Member Switch Add all candidate switches to the cluster HUAWEI_0 Administrator 1 cluster auto build Collecting candidate list please wait Candidate list Name Hop MAC Address DeviceType Member 1 1 0002 0002 0002 S9300 Member 2 1 0003 0003 0003 S9300 Member 3 2 0004 0004 00...

Page 546: ... 8 Configure a static route on the administrator switch This operation is to ensure that a reachable route exists between switches in the cluster and servers or hosts HUAWEI_0 Administrator 1 ip route static 0 0 0 0 0 1 0 0 2 NOTE You can also run a routing protocol Step 9 Configure public servers and hosts of the cluster Configure an FTP server HUAWEI_0 Administrator 1 cluster HUAWEI_0 Administra...

Page 547: ...ember switch in the cluster The member ID of Member 2 is 2 Using the formula for computing port numbers reserved for a cluster Interface number reserved for a cluster Base interface number Member number 2 you can obtain that the reserved port number which is used by Member 2 to enable the FTP server is 53248 2 2 53252 Run the FTP client program on the PC and set up an FTP connection with Member 2 ...

Page 548: ... 0 0 1 0 0 2 return l Configuration file of Member 1 sysname Member 1 vlan batch 10 cluster enable ntdp enable ntdp hop 5 ntdp timer 10 ndp enable interface Vlanif10 interface gigabitethernet1 0 1 port link type trunk port trunk allow pass vlan 10 ntdp enable ndp enable interface gigabitethernet1 0 2 port link type trunk port trunk allow pass vlan 10 ntdp enable ndp enable cluster mngvlanid 10 adm...

Page 549: ...001 0001 name HUAWEI return 8 5 3 Example for Configuring the Interconnection of FTP Servers and Devices in and out of the HGMP Cluster in Non NAT Mode Networking Requirements As shown in Figure 8 5 all the Layer 2 switches belong to the same cluster Administrator 1 is the administrator switch of the cluster and other switches are member switches The member ID of Member 2 is 2 and the member ID of...

Page 550: ... 2 GE1 0 1 GE1 0 2 GE1 0 1 GE1 0 1 Cluster GE1 0 3 GE1 0 1 1 0 0 2 8 Device MAC Address Device MAC Address Administrator 1 0001 0001 0001 Member 1 0002 0002 0002 Member 2 0003 0003 0003 Member 3 0004 0004 0004 Configuration Roadmap The configuration roadmap is as follows 1 Create a cluster and configure basic HGMP functions for the cluster according to the steps described in the section Example fo...

Page 551: ...d interfaces of the administrator switch and member switches to VLAN 10 Configure the administrator switch Quidway system view Quidway sysname Administrator 1 Administrator 1 vlan 10 Administrator 1 vlan10 quit Administrator 1 interface gigabitethernet 1 0 1 Administrator 1 GigabitEthernet1 0 1 port link type trunk Administrator 1 GigabitEthernet1 0 1 port trunk allow pass vlan 10 Administrator 1 ...

Page 552: ... interface vlanif 10 Member 3 Vlanif10 quit Step 2 Configure NDP On switches enable NDP in the system view and on an interface Configure the administrator switch Administrator 1 ndp enable Administrator 1 interface gigabitethernet 1 0 1 Administrator 1 GigabitEthernet1 0 1 ndp enable Administrator 1 GigabitEthernet1 0 1 quit Administrator 1 interface gigabitethernet 1 0 2 Administrator 1 GigabitEt...

Page 553: ...terval and range for NTDP to collect topologies to 10 minutes and 3 hops respectively Configure the administrator switch Administrator 1 ntdp enable Administrator 1 ntdp timer 10 Administrator 1 ntdp hop 3 Administrator 1 interface gigabitethernet 1 0 1 Administrator 1 GigabitEthernet1 0 1 ntdp enable Administrator 1 GigabitEthernet1 0 1 quit Administrator 1 interface gigabitethernet 1 0 2 Adminis...

Page 554: ... 1 cluster mngvlanid 10 Member 1 cluster quit Configure member switch 2 Member 2 cluster enable Member 2 cluster Member 2 cluster mngvlanid 10 Member 2 cluster quit Configure member switch 3 Member 3 cluster enable Member 3 cluster Member 3 cluster mngvlanid 10 Member 3 cluster quit After the topology collection function is enabled manually on the administrator switch check the device information ...

Page 555: ...itch check information about candidate switches you can find all the candidate switches and their types HUAWEI_0 Administrator 1 cluster display cluster candidates MAC HOP IP PLATFORM 0004 0004 0004 2 S9300 0003 0003 0003 1 S9300 0002 0002 0002 1 S9300 Step 6 Add member switches NOTE l Following steps can be performed only on the administrator switch l Take the mode of automatically adding member ...

Page 556: ...is 1500 Internet Address is 1 0 0 1 8 Internet Address is 10 0 0 1 8 Cluster IP Sending Frames Format is PKTFMT_ETHNT_2 Hardware address is 0001 0001 0001 Last 300 seconds input rate 0 bits sec 0 packets sec Last 300 seconds output rate 0 bits sec 0 packets sec Input 0 packets 0 bytes Output 0 packets 0 bytes Input bandwidth utilization Output bandwidth utilization Step 8 Configure a static route ...

Page 557: ... with Member 2 in non NAT mode NOTE Devices out of the cluster access the FTP server in the cluster in non NAT mode The IP address of the FTP server is that of the management VLANIF interface on the member switch The FTP server uses a port number reserved in the cluster instead of the commonly used 21 ftp open 10 0 0 2 Connected to 10 0 0 2 220 FTP service ready User 10 0 0 2 none hgmp 331 Passwor...

Page 558: ...le ndp enable interface gigabitethernet1 0 2 port link type trunk port trunk allow pass vlan 10 ntdp enable ndp enable cluster mngvlanid 10 administrator address 0001 0001 0001 name HUAWEI ip route static 2 0 0 0 255 0 0 0 10 0 0 1 return l Configuration file of Member 2 sysname Member 2 FTP server enable vlan batch 10 cluster enable ntdp enable ntdp hop 5 ntdp timer 10 ndp enable interface Vlanif...

Page 559: ...ide SNMP Host in NAT Mode Networking Requirements As shown in Figure 8 6 all the Layer 2 switches belong to the same cluster Administrator 1 is the administrator switch of the cluster and other switches are member switches The member ID of Member 2 is 2 and the member ID of Member 3 is 3 When Member 1 Member 2 and Member 3 are required to send packets to the SNMP host a connection can be set up be...

Page 560: ...Configuration Roadmap The configuration roadmap is as follows 1 Create a cluster and configure basic HGMP functions for the cluster according to the steps described in Example for Configuring Basic HGMP Functions for a Cluster 2 Enable SNMP NAT on the administrator switch The function is enabled by default NOTE Related configurations of cluster NAT must be performed on the administrator switch 3 A...

Page 561: ...trator 1 GigabitEthernet1 0 3 port link type trunk Administrator 1 GigabitEthernet1 0 3 port trunk allow pass vlan 10 Administrator 1 GigabitEthernet1 0 3 quit Administrator 1 interface vlanif 10 Administrator 1 Vlanif10 quit Configure member switch 1 Quidway system view Quidway sysname Member 1 Member 1 vlan 10 Member 1 vlan10 quit Member 1 interface gigabitethernet 1 0 1 Member 1 GigabitEthernet...

Page 562: ...switch 3 Member 2 ndp enable Member 2 interface gigabitethernet 1 0 1 Member 2 GigabitEthernet1 0 1 ndp enable Member 2 GigabitEthernet1 0 1 quit Configure member switch 4 Member 3 ndp enable Member 3 interface gigabitethernet 1 0 1 Member 3 GigabitEthernet1 0 1 ndp enable Member 3 GigabitEthernet1 0 1 quit After the previous configuration you can find that NDP on the administrator is in the Enabl...

Page 563: ...1 0 2 Member 1 GigabitEthernet1 0 2 ntdp enable Member 1 GigabitEthernet1 0 2 quit Configure member switch 3 Member 2 ntdp enable Member 2 ntdp timer 10 Member 2 ntdp hop 3 Member 2 interface gigabitethernet 1 0 1 Member 2 GigabitEthernet1 0 1 ntdp enable Member 2 GigabitEthernet1 0 1 quit Configure member switch 4 Member 3 ntdp enable Member 3 ntdp timer 10 Member 3 ntdp hop 3 Member 3 interface ...

Page 564: ...2 0002 1 S9300 0001 0001 0001 0 S9300 Step 5 Create a cluster NOTE Following steps can be performed only on the administrator switch On the administrator switch set the range of IP addresses that can be assigned to the cluster to 10 0 0 0 8 in which the IP address assigned to the administrator switch is 10 0 0 1 8 Administrator 1 cluster Administrator 1 cluster ip pool 10 0 0 1 8 Create a cluster ...

Page 565: ...0003 0003 0003 S9300 Member 3 2 0004 0004 0004 S9300 Warning Add all to cluster Y N y Info Cluster auto build is complete Added 3 member s into the cluster successfully After the previous configuration check information about the administrator switch and member switches in the cluster on the administrator switch You can find that all the member switches are added to the cluster and in the Up state...

Page 566: ...ts of the cluster Configure an FTP server HUAWEI_0 Administrator 1 cluster HUAWEI_0 Administrator 1 cluster cluster ftp nat enable HUAWEI_0 Administrator 1 cluster ftp server 2 0 0 1 Configure a SFTP server HUAWEI_0 Administrator 1 cluster sftp server 2 0 0 2 Configure a Simple Network Management Protocol SNMP host HUAWEI_0 Administrator 1 cluster snmp host 3 0 0 1 Configure a log host HUAWEI_0 Ad...

Page 567: ... snmp snmp agent target host trap address udp domain 10 0 0 1 params securityname clu ster End Configuration Files l Configuration file of Administrator 1 sysname Administrator 1 vlan batch 10 cluster enable ntdp enable ntdp hop 5 ntdp timer 10 ndp enable interface Vlanif10 ip address 1 0 0 1 255 0 0 0 interface gigabitethernet1 0 1 port link type trunk port trunk allow pass vlan 10 ntdp enable nd...

Page 568: ...TP server enable vlan batch 10 cluster enable ntdp enable ntdp hop 5 ntdp timer 10 ndp enable interface Vlanif10 interface gigabitethernet1 0 1 port link type trunk port trunk allow pass vlan 10 ntdp enable ndp enable cluster mngvlanid 10 administrator address 0001 0001 0001 name HUAWEI return l Configuration file of Member 3 sysname Member 3 vlan batch 10 cluster enable ntdp enable ntdp hop 5 ntd...

Page 569: ...switch of the cluster and other switches are member switches The member ID of Member 2 is 2 and the member ID of Member 3 is 3 When Member 1 Member 2 and Member 3 are required to send packets to the SNMP host out of the cluster a connection can be set up between the SNMP host and member switches in NAT or non NAT mode NOTE In this configuration example where the non NAT mode is adopted Member 3 ac...

Page 570: ... roadmap is as follows 1 Create a cluster and configure basic HGMP functions for the cluster according to the steps described in Example for Configuring Basic HGMP Functions for a Cluster 2 Disable SNMP NAT on the administrator switch The function is enabled by default NOTE Related configurations of cluster NAT must be performed on the administrator switch 3 Configure routes on the administrator s...

Page 571: ... pass vlan 10 Administrator 1 GigabitEthernet1 0 2 quit Administrator 1 interface gigabitethernet 1 0 3 Administrator 1 GigabitEthernet1 0 3 port link type trunk Administrator 1 GigabitEthernet1 0 3 port trunk allow pass vlan 10 Administrator 1 GigabitEthernet1 0 3 quit Administrator 1 interface vlanif 10 Administrator 1 Vlanif10 quit Configure member switch 1 Quidway system view Quidway sysname M...

Page 572: ...abitEthernet1 0 1 quit Member 1 interface gigabitethernet 1 0 2 Member 1 GigabitEthernet1 0 2 ndp enable Member 1 GigabitEthernet1 0 2 quit Configure member switch 3 Member 2 ndp enable Member 2 interface gigabitethernet 1 0 1 Member 2 GigabitEthernet1 0 1 ndp enable Member 2 GigabitEthernet1 0 1 quit Configure member switch 4 Member 3 ndp enable Member 3 interface gigabitethernet 1 0 1 Member 3 G...

Page 573: ... hop 3 Member 1 interface gigabitethernet 1 0 1 Member 1 GigabitEthernet1 0 1 ntdp enable Member 1 GigabitEthernet1 0 1 quit Member 1 interface gigabitethernet 1 0 2 Member 1 GigabitEthernet1 0 2 ntdp enable Member 1 GigabitEthernet1 0 2 quit Configure member switch 3 Member 2 ntdp enable Member 2 ntdp timer 10 Member 2 ntdp hop 3 Member 2 interface gigabitethernet 1 0 1 Member 2 GigabitEthernet1 ...

Page 574: ...DP and you can find the MAC address and types of related devices Administrator 1 ntdp explore Administrator 1 system view Administrator 1 display ntdp device list The device list of NTDP MAC HOP IP PLATFORM 0004 0004 0004 2 S9300 0003 0003 0003 1 S9300 0002 0002 0002 1 S9300 0001 0001 0001 0 S9300 Step 5 Create a cluster NOTE Following steps can be performed only on the administrator switch On the...

Page 575: ...rator switch l Take the mode of automatically adding member switches as an example To add member switches manually see Adding a Member Switch Add all candidate switches to the cluster HUAWEI_0 Administrator 1 cluster auto build Collecting candidate list please wait Candidate list Name Hop MAC Address DeviceType Member 1 1 0002 0002 0002 S9300 Member 2 1 0003 0003 0003 S9300 Member 3 2 0004 0004 00...

Page 576: ... 8 Configure a static route on the administrator switch This operation is to ensure that a reachable route exists between switches in the cluster and servers or hosts HUAWEI_0 Administrator 1 ip route static 0 0 0 0 0 1 0 0 2 NOTE You can also run a routing protocol Step 9 Configure public servers and hosts of the cluster Configure an FTP server HUAWEI_0 Administrator 1 cluster HUAWEI_0 Administra...

Page 577: ...nfiguring the Incremental Configuration Function for an HGMP Cluster Step 12 Configure the SNMP agent function on member switches Configure member switch 1 HUAWEI_1 Member 1 snmp agent target host trap address udp domain 3 0 0 1 params securityname cluster Configure member switch 2 HUAWEI_2 Member 2 snmp agent target host trap address udp domain 3 0 0 1 params securityname cluster Configure member...

Page 578: ...ss vlan 10 ntdp enable ndp enable interface gigabitethernet1 0 2 port link type trunk port trunk allow pass vlan 10 ntdp enable ndp enable cluster mngvlanid 10 ip pool 10 0 0 1 255 0 0 0 build HUAWEI undo cluster snmp nat enable sftp server 2 0 0 2 logging host 4 0 0 1 snmp host 3 0 0 1 ip route static 0 0 0 0 0 0 0 0 1 0 0 2 return l Configuration file of Member 1 sysname Member 1 vlan batch 10 c...

Page 579: ... 1 port link type trunk port trunk allow pass vlan 10 ntdp enable ndp enable cluster mngvlanid 10 administrator address 0001 0001 0001 name HUAWEI ip route static 3 0 0 0 255 0 0 0 10 0 0 1 snmp agent snmp agent target host trap address udp domain 3 0 0 1 params securityname cluster return l Configuration file of Member 3 sysname Member 3 vlan batch 10 cluster enable ntdp enable ntdp hop 5 ntdp ti...

Page 580: ...ements As shown in Figure 8 8 all the Layer 2 switches belong to the same cluster Administrator 1 is the administrator switch of the cluster and other switches are member switches The member ID of Member 2 is 2 and the member ID of Member 3 is 3 Member 2 and Member 3 are required to download configuration files in batches from the FTP server 8 HGMP Configuration Quidway S9300 Terabit Routing Switc...

Page 581: ...to the steps described in 8 5 1 Example for Configuring Basic HGMP Functions for a Cluster 2 8 5 1 Example for Configuring Basic HGMP Functions for a Cluster NOTE l Configure the interconnection of FTP servers and devices in and out of the HGMP cluster in NAT or non NAT mode The following takes the configuration in NAT mode as an example l If the system software patch files or configuration files ...

Page 582: ...runk allow pass vlan 10 Administrator 1 GigabitEthernet1 0 2 quit Administrator 1 interface gigabitethernet 1 0 3 Administrator 1 GigabitEthernet1 0 3 port link type trunk Administrator 1 GigabitEthernet1 0 3 port trunk allow pass vlan 10 Administrator 1 GigabitEthernet1 0 3 quit Administrator 1 interface vlanif 10 Administrator 1 Vlanif10 quit Configure member switch 1 Quidway system view Quidway...

Page 583: ...abitEthernet1 0 1 quit Member 1 interface gigabitethernet 1 0 2 Member 1 GigabitEthernet1 0 2 ndp enable Member 1 GigabitEthernet1 0 2 quit Configure member switch 3 Member 2 ndp enable Member 2 interface gigabitethernet 1 0 1 Member 2 GigabitEthernet1 0 1 ndp enable Member 2 GigabitEthernet1 0 1 quit Configure member switch 4 Member 3 ndp enable Member 3 interface gigabitethernet 1 0 1 Member 3 G...

Page 584: ... hop 3 Member 1 interface gigabitethernet 1 0 1 Member 1 GigabitEthernet1 0 1 ntdp enable Member 1 GigabitEthernet1 0 1 quit Member 1 interface gigabitethernet 1 0 2 Member 1 GigabitEthernet1 0 2 ntdp enable Member 1 GigabitEthernet1 0 2 quit Configure member switch 3 Member 2 ntdp enable Member 2 ntdp timer 10 Member 2 ntdp hop 3 Member 2 interface gigabitethernet 1 0 1 Member 2 GigabitEthernet1 ...

Page 585: ...DP and you can find the MAC address and types of related devices Administrator 1 ntdp explore Administrator 1 system view Administrator 1 display ntdp device list The device list of NTDP MAC HOP IP PLATFORM 0004 0004 0004 2 S9300 0003 0003 0003 1 S9300 0002 0002 0002 1 S9300 0001 0001 0001 0 S9300 Step 5 Create a cluster NOTE Following steps can be performed only on the administrator switch On the...

Page 586: ...rator switch l Take the mode of automatically adding member switches as an example To add member switches manually see Adding a Member Switch Add all candidate switches to the cluster HUAWEI_0 Administrator 1 cluster auto build Collecting candidate list please wait Candidate list Name Hop MAC Address DeviceType Member 1 1 0002 0002 0002 S9300 Member 2 1 0003 0003 0003 S9300 Member 3 2 0004 0004 00...

Page 587: ... 8 Configure a static route on the administrator switch This operation is to ensure that a reachable route exists between switches in the cluster and servers or hosts HUAWEI_0 Administrator 1 ip route static 0 0 0 0 0 1 0 0 2 NOTE You can also run a routing protocol Step 9 Configure public servers and hosts of the cluster Configure an FTP server HUAWEI_0 Administrator 1 cluster HUAWEI_0 Administra...

Page 588: ...tatus of member switchs getting file SN Device MacAddress IPAddress Result 2 S9300 0003 0003 0003 10 0 0 3 success 3 S9300 0004 0004 0004 10 0 0 4 success Run the dir command on member switches and you can find that member switches successfully download the specified configuration files Take Member 2 as an example HUAWEi_2 Member 2 dir zip Directory of cfcard Idx Attr Size Byte Date Time FileName ...

Page 589: ...igabitethernet1 0 2 port link type trunk port trunk allow pass vlan 10 ntdp enable ndp enable cluster mngvlanid 10 ip pool 10 0 0 1 255 0 0 0 build HUAWEI cluster ftp nat enable ftp server 2 0 0 1 sftp server 2 0 0 2 logging host 4 0 0 1 snmp host 3 0 0 1 ip route static 0 0 0 0 0 0 0 0 1 0 0 2 return l Configuration file of Member 1 sysname Member 1 vlan batch 10 cluster enable ntdp enable ntdp h...

Page 590: ...port trunk allow pass vlan 10 ntdp enable ndp enable cluster mngvlanid 10 administrator address 0001 0001 0001 name HUAWEI return l Configuration file of Member 3 sysname Member 3 vlan batch 10 cluster enable ntdp enable ntdp hop 5 ntdp timer 10 ndp enable interface Vlanif10 interface gigabitethernet1 0 2 port link type trunk port trunk allow pass vlan 10 ntdp enable ndp enable cluster mngvlanid 1...

Page 591: ...function for an HGMP cluster IP MPLS core FTP Server 2 0 0 1 8 SFTP Server 2 0 0 2 8 NM station 3 0 0 1 8 Log station 4 0 0 1 8 Administrator 1 10 0 0 1 8 Member 1 Member 2 Member 3 10 0 0 4 8 GE1 0 1 GE1 0 2 GE1 0 1 GE1 0 2 GE1 0 1 GE1 0 1 Cluster GE1 0 3 GE1 0 1 1 0 0 2 8 Device MAC Address Device MAC Address Administrator 1 0001 0001 0001 Member 1 0002 0002 0002 Member 2 0003 0003 0003 Member 3...

Page 592: ...r 1 interface gigabitethernet 1 0 2 Administrator 1 GigabitEthernet1 0 2 port link type trunk Administrator 1 GigabitEthernet1 0 2 port trunk allow pass vlan 10 Administrator 1 GigabitEthernet1 0 2 quit Administrator 1 interface gigabitethernet 1 0 3 Administrator 1 GigabitEthernet1 0 3 port link type trunk Administrator 1 GigabitEthernet1 0 3 port trunk allow pass vlan 10 Administrator 1 GigabitE...

Page 593: ...0 2 quit Configure member switch 2 Member 1 ndp enable Member 1 interface gigabitethernet 1 0 1 Member 1 GigabitEthernet1 0 1 ndp enable Member 1 GigabitEthernet1 0 1 quit Member 1 interface gigabitethernet 1 0 2 Member 1 GigabitEthernet1 0 2 ndp enable Member 1 GigabitEthernet1 0 2 quit Configure member switch 3 Member 2 ndp enable Member 2 interface gigabitethernet 1 0 1 Member 2 GigabitEthernet...

Page 594: ... quit Configure member switch 2 Member 1 ntdp enable Member 1 ntdp timer 10 Member 1 ntdp hop 3 Member 1 interface gigabitethernet 1 0 1 Member 1 GigabitEthernet1 0 1 ntdp enable Member 1 GigabitEthernet1 0 1 quit Member 1 interface gigabitethernet 1 0 2 Member 1 GigabitEthernet1 0 2 ntdp enable Member 1 GigabitEthernet1 0 2 quit Configure member switch 3 Member 2 ntdp enable Member 2 ntdp timer 1...

Page 595: ...ollected through NTDP and you can find the MAC address and types of related devices Administrator 1 ntdp explore Administrator 1 system view Administrator 1 display ntdp device list The device list of NTDP MAC HOP IP PLATFORM 0004 0004 0004 2 S9300 0003 0003 0003 1 S9300 0002 0002 0002 1 S9300 0001 0001 0001 0 S9300 Step 5 Create a cluster NOTE Following steps can be performed only on the administ...

Page 596: ...rator switch l Take the mode of automatically adding member switches as an example To add member switches manually see Adding a Member Switch Add all candidate switches to the cluster HUAWEI_0 Administrator 1 cluster auto build Collecting candidate list please wait Candidate list Name Hop MAC Address DeviceType Member 1 1 0002 0002 0002 S9300 Member 2 1 0003 0003 0003 S9300 Member 3 2 0004 0004 00...

Page 597: ...8 Configure a static route on the administrator switch This operation is to ensure that a reachable route exists between switches in the cluster and servers or hosts HUAWEI_0 Administrator 1 ip route static 0 0 0 0 0 1 0 0 2 NOTE You can also run a routing protocol Step 9 Configure public servers and hosts of the cluster Configure an FTP server HUAWEI_0 Administrator 1 cluster HUAWEI_0 Administrat...

Page 598: ...eboot stat command on administrator switch to check the restart status of the member switches and you can view that success is displayed which indicates that the specified member switches are restarted successfully HUAWEi_0 Member 2 display member reboot stat The result of member switchs rebooting SN Device MacAddress IPAddress Result 1 S9300 0003 0003 0003 10 0 0 3 success 2 S9300 0004 0004 0004 ...

Page 599: ... ntdp enable ndp enable interface gigabitethernet1 0 2 port link type trunk port trunk allow pass vlan 10 ntdp enable ndp enable cluster mngvlanid 10 administrator address 0001 0001 0001 name HUAWEI return l Configuration file of Member 2 sysname Member 2 vlan batch 10 cluster enable ntdp enable ntdp hop 3 ntdp timer 10 ndp enable interface Vlanif10 interface gigabitethernet1 0 1 port link type tr...

Page 600: ...MP Cluster Networking Requirements As shown in Figure 8 10 all the Layer 2 switches belong to the same cluster Administrator 1 is the administrator switch of the cluster and other switches are member switches The member ID of Member 2 is 2 and the member ID of Member 3 is 3 To configure VLAN 100 to VLAN 200 on Member 2 and Member 3 and a static route with its next hop address being the administrat...

Page 601: ...4 0004 0004 Configuration Roadmap The configuration roadmap is as follows 1 Create a cluster according to the steps described in 8 5 1 Example for Configuring Basic HGMP Functions for a Cluster 2 Edit the list of incremental configurations command on the administrator switch 3 Deliver the list of incremental configuration commands to the specified member switch Data Preparation To complete the con...

Page 602: ...1 GigabitEthernet1 0 3 port trunk allow pass vlan 10 Administrator 1 GigabitEthernet1 0 3 quit Administrator 1 interface vlanif 10 Administrator 1 Vlanif10 quit Configure member switch 1 Quidway system view Quidway sysname Member 1 Member 1 vlan 10 Member 1 vlan10 quit Member 1 interface gigabitethernet 1 0 1 Member 1 GigabitEthernet1 0 1 port link type trunk Member 1 GigabitEthernet1 0 1 port tru...

Page 603: ...ber 2 GigabitEthernet1 0 1 ndp enable Member 2 GigabitEthernet1 0 1 quit Configure member switch 4 Member 3 ndp enable Member 3 interface gigabitethernet 1 0 1 Member 3 GigabitEthernet1 0 1 ndp enable Member 3 GigabitEthernet1 0 1 quit After the previous configuration you can find that NDP on the administrator is in the Enable state the host name of the neighboring node is Device Name and the name...

Page 604: ...mber switch 3 Member 2 ntdp enable Member 2 ntdp timer 10 Member 2 ntdp hop 3 Member 2 interface gigabitethernet 1 0 1 Member 2 GigabitEthernet1 0 1 ntdp enable Member 2 GigabitEthernet1 0 1 quit Configure member switch 4 Member 3 ntdp enable Member 3 ntdp timer 10 Member 3 ntdp hop 3 Member 3 interface gigabitethernet 1 0 1 Member 3 GigabitEthernet1 0 1 ntdp enable Member 3 GigabitEthernet1 0 1 q...

Page 605: ...n be performed only on the administrator switch On the administrator switch set the range of IP addresses that can be assigned to the cluster to 10 0 0 0 8 in which the IP address assigned to the administrator switch is 10 0 0 1 8 Administrator 1 cluster Administrator 1 cluster ip pool 10 0 0 1 8 Create a cluster named HUAWEI on the administrator switch Administrator 1 cluster build HUAWEI HUAWEI_...

Page 606: ...ter auto build is complete Added 3 member s into the cluster successfully After the previous configuration check information about the administrator switch and member switches in the cluster on the administrator switch You can find that all the member switches are added to the cluster and in the Up state HUAWEI_0 Administrator 1 cluster display cluster members The list of cluster member SN Device ...

Page 607: ...at enable HUAWEI_0 Administrator 1 cluster ftp server 2 0 0 1 Configure a SFTP server HUAWEI_0 Administrator 1 cluster sftp server 2 0 0 2 Configure a Simple Network Management Protocol SNMP host HUAWEI_0 Administrator 1 cluster snmp host 3 0 0 1 Configure a log host HUAWEI_0 Administrator 1 cluster logging host 4 0 0 1 After the previous configuration check information about the cluster to which ...

Page 608: ...to 3 Step 12 Verify the configuration Run the display cluster increment result command on administrator switch to check whether the list of incremental configuration commands is delivered to the specified member switch and you can view that success is displayed HUAWEI_0 Administrator 1 display cluster increment result The result of member switchs executing increment commands SN Device MacAddress I...

Page 609: ... ntdp enable ndp enable interface gigabitethernet1 0 2 port link type trunk port trunk allow pass vlan 10 ntdp enable ndp enable cluster mngvlanid 10 administrator address 0001 0001 0001 name HUAWEI return l Configuration file of Member 2 sysname Member 2 vlan batch 10 cluster enable ntdp enable ntdp hop 3 ntdp timer 10 ndp enable interface Vlanif10 interface gigabitethernet1 0 1 port link type tr...

Page 610: ...Function for an HGMP Cluster Networking Requirements As shown in Figure 8 11 all the Layer 2 switches belong to the same cluster Administrator 1 is the administrator switch of the cluster and other switches are member switches The member ID of Member 2 is 2 and the member ID of Member 3 is 3 To synchronize the configuration files of all member switches to the FTP server as required you can configu...

Page 611: ...te a cluster according to the steps described in 8 5 1 Example for Configuring Basic HGMP Functions for a Cluster 2 8 5 2 Example for Configuring the Interconnection of FTP Servers and Devices in and out of the HGMP Cluster in NAT Mode NOTE l Configure the interconnection of FTP servers and devices in and out of the HGMP cluster in NAT or non NAT mode The following takes the configuration in NAT m...

Page 612: ... 1 GigabitEthernet1 0 2 port trunk allow pass vlan 10 Administrator 1 GigabitEthernet1 0 2 quit Administrator 1 interface gigabitethernet 1 0 3 Administrator 1 GigabitEthernet1 0 3 port link type trunk Administrator 1 GigabitEthernet1 0 3 port trunk allow pass vlan 10 Administrator 1 GigabitEthernet1 0 3 quit Administrator 1 interface vlanif 10 Administrator 1 Vlanif10 quit Configure member switch...

Page 613: ...ernet1 0 1 ndp enable Member 1 GigabitEthernet1 0 1 quit Member 1 interface gigabitethernet 1 0 2 Member 1 GigabitEthernet1 0 2 ndp enable Member 1 GigabitEthernet1 0 2 quit Configure member switch 3 Member 2 ndp enable Member 2 interface gigabitethernet 1 0 1 Member 2 GigabitEthernet1 0 1 ndp enable Member 2 GigabitEthernet1 0 1 quit Configure member switch 4 Member 3 ndp enable Member 3 interfac...

Page 614: ...r 1 ntdp hop 3 Member 1 interface gigabitethernet 1 0 1 Member 1 GigabitEthernet1 0 1 ntdp enable Member 1 GigabitEthernet1 0 1 quit Member 1 interface gigabitethernet 1 0 2 Member 1 GigabitEthernet1 0 2 ntdp enable Member 1 GigabitEthernet1 0 2 quit Configure member switch 3 Member 2 ntdp enable Member 2 ntdp timer 10 Member 2 ntdp hop 3 Member 2 interface gigabitethernet 1 0 1 Member 2 GigabitEt...

Page 615: ...DP and you can find the MAC address and types of related devices Administrator 1 ntdp explore Administrator 1 system view Administrator 1 display ntdp device list The device list of NTDP MAC HOP IP PLATFORM 0004 0004 0004 2 S9300 0003 0003 0003 1 S9300 0002 0002 0002 1 S9300 0001 0001 0001 0 S9300 Step 5 Create a cluster NOTE Following steps can be performed only on the administrator switch On the...

Page 616: ...rator switch l Take the mode of automatically adding member switches as an example To add member switches manually see Adding a Member Switch Add all candidate switches to the cluster HUAWEI_0 Administrator 1 cluster auto build Collecting candidate list please wait Candidate list Name Hop MAC Address DeviceType Member 1 1 0002 0002 0002 S9300 Member 2 1 0003 0003 0003 S9300 Member 3 2 0004 0004 00...

Page 617: ...8 Configure a static route on the administrator switch This operation is to ensure that a reachable route exists between switches in the cluster and servers or hosts HUAWEI_0 Administrator 1 ip route static 0 0 0 0 0 1 0 0 2 NOTE You can also run a routing protocol Step 9 Configure public servers and hosts of the cluster Configure an FTP server HUAWEI_0 Administrator 1 cluster HUAWEI_0 Administrat...

Page 618: ...result command on administrator switch to check whether configuration files are synchronized to the FTP server and you can view that success is displayed HUAWEi_0 Administrator 1 display increment synchronization result The result of member switchs synchronization SN Device MacAddress IpAddress result 1 S9300 0002 0002 0002 10 0 0 2 success 2 S9300 0003 0003 0003 10 0 0 3 success 3 S9300 0004 0004...

Page 619: ...thernet1 0 1 port link type trunk port trunk allow pass vlan 10 ntdp enable ndp enable interface gigabitethernet1 0 2 port link type trunk port trunk allow pass vlan 10 ntdp enable ndp enable cluster mngvlanid 10 administrator address 0001 0001 0001 name HUAWEI return l Configuration file of Member 2 sysname Member 2 FTP server enable vlan batch 10 cluster enable ntdp enable ntdp hop 5 ntdp timer ...

Page 620: ...ng to the same cluster Administrator 1 is the administrator switch of the cluster and other switches are member switches The member ID of Member 2 is 2 and the member ID of Member 3 is 3 Disable NDP and NTDP on the interfaces of all the member switches that do not need NDP or NTDP To perform the action and improve the security of the cluster you can configure security features for the HGMP cluster...

Page 621: ... 0003 0003 0003 Member 3 0004 0004 0004 Configuration Roadmap The configuration roadmap is as follows 1 Create a cluster according to the steps described in 8 5 1 Example for Configuring Basic HGMP Functions for a Cluster 2 On the administrator switch disable NDP and NTDP on unrelated interfaces of member switches Data Preparation To complete the configuration you need the following data l Managem...

Page 622: ...abitEthernet1 0 3 port trunk allow pass vlan 10 Administrator 1 GigabitEthernet1 0 3 quit Administrator 1 interface vlanif 10 Administrator 1 Vlanif10 quit Configure member switch 1 Quidway system view Quidway sysname Member 1 Member 1 vlan 10 Member 1 vlan10 quit Member 1 interface gigabitethernet 1 0 1 Member 1 GigabitEthernet1 0 1 port link type trunk Member 1 GigabitEthernet1 0 1 port trunk al...

Page 623: ...ber 2 GigabitEthernet1 0 1 ndp enable Member 2 GigabitEthernet1 0 1 quit Configure member switch 4 Member 3 ndp enable Member 3 interface gigabitethernet 1 0 1 Member 3 GigabitEthernet1 0 1 ndp enable Member 3 GigabitEthernet1 0 1 quit After the previous configuration you can find that NDP on the administrator is in the Enable state the host name of the neighboring node is Device Name and the name...

Page 624: ...mber switch 3 Member 2 ntdp enable Member 2 ntdp timer 10 Member 2 ntdp hop 3 Member 2 interface gigabitethernet 1 0 1 Member 2 GigabitEthernet1 0 1 ntdp enable Member 2 GigabitEthernet1 0 1 quit Configure member switch 4 Member 3 ntdp enable Member 3 ntdp timer 10 Member 3 ntdp hop 3 Member 3 interface gigabitethernet 1 0 1 Member 3 GigabitEthernet1 0 1 ntdp enable Member 3 GigabitEthernet1 0 1 q...

Page 625: ...n be performed only on the administrator switch On the administrator switch set the range of IP addresses that can be assigned to the cluster to 10 0 0 0 8 in which the IP address assigned to the administrator switch is 10 0 0 1 8 Administrator 1 cluster Administrator 1 cluster ip pool 10 0 0 1 8 Create a cluster named HUAWEI on the administrator switch Administrator 1 cluster build HUAWEI HUAWEI_...

Page 626: ...ter auto build is complete Added 3 member s into the cluster successfully After the previous configuration check information about the administrator switch and member switches in the cluster on the administrator switch You can find that all the member switches are added to the cluster and in the Up state HUAWEI_0 Administrator 1 cluster display cluster members The list of cluster member SN Device ...

Page 627: ...at enable HUAWEI_0 Administrator 1 cluster ftp server 2 0 0 1 Configure a SFTP server HUAWEI_0 Administrator 1 cluster sftp server 2 0 0 2 Configure a Simple Network Management Protocol SNMP host HUAWEI_0 Administrator 1 cluster snmp host 3 0 0 1 Configure a log host HUAWEI_0 Administrator 1 cluster logging host 4 0 0 1 After the previous configuration check information about the cluster to which ...

Page 628: ...acAddress IpAddress result 3 S9300 0004 0004 0004 10 0 0 4 success 2 S9300 0003 0003 0003 10 0 0 3 success 1 S9300 0002 0002 0002 10 0 0 2 success HUAWEI_0 Administrator 1 display member interface state ntdp The result of member switches executed disable member interface command SN Device MacAddress IpAddress result 3 S9300 0004 0004 0004 10 0 0 4 success 2 S9300 0003 0003 0003 10 0 0 3 success 1 ...

Page 629: ...net1 0 2 port link type trunk port trunk allow pass vlan 10 ntdp enable ndp enable cluster mngvlanid 10 administrator address 0001 0001 0001 name HUAWEI return l Configuration file of Member 2 sysname Member 2 vlan batch 10 cluster enable ntdp enable ntdp hop 3 ntdp timer 10 ndp enable interface Vlanif10 interface gigabitethernet1 0 1 port link type trunk port trunk allow pass vlan 10 ntdp enable ...

Page 630: ...igabitethernet1 0 2 port link type trunk port trunk allow pass vlan 10 ntdp enable ndp enable cluster mngvlanid 10 administrator address 0001 0001 0001 name HUAWEI return 8 HGMP Configuration Quidway S9300 Terabit Routing Switch Configuration Guide Network Management 8 134 Huawei Proprietary and Confidential Copyright Huawei Technologies Co Ltd Issue 03 2010 09 20 ...

Reviews:

No comments

Brands by name

0 1 2 3 4 5 6 7 8 9 A B C D E F G H I J K L M N O P Q R S T U V W X Y Z

Popular brands

Load more brands